Horizon3 has raised $250 million in a Series E round that pushed its valuation above $2 billion, a sharp reset for a cybersecurity company betting that AI attackers now require AI defenders. The financing gives security teams, investors, and enterprise buyers a clearer signal: autonomous penetration testing is moving deeper into production environments, not sitting in lab demos.
The round more than tripled Horizon3’s valuation from the $650 million mark it reached about a year ago in its Series D, according to PYMNTS. The company said the new capital will help expand NodeZero, its platform for safely attacking a customer’s own production environment to expose exploitable weaknesses, guide fixes, and verify remediation.
Security teams get a bigger Horizon3 Series E bet on AI-versus-AI defense
The Horizon3 Series E was co-led by NightDragon and NEA, with the company positioning the raise around a direct thesis: AI-driven attacks are forcing defenders to test and respond faster.
NodeZero autonomously probes live environments to reveal attack paths. Horizon3 says the platform can also help detect AI attackers and prove they are already inside an environment.
The most important buyer question is blunt: can a tool attack production systems without creating the damage it is supposed to prevent?
Horizon3’s answer is that NodeZero is built to test “autonomously and safely” inside production, then confirm whether fixes actually worked. That turns pentesting from a periodic assessment into a repeated proof loop.
“We’re about to see an explosion of vulnerabilities, most of which won’t matter, but a small percentage will be immediately exploitable,” Horizon3 Co-Founder and CEO Snehal Antani said in the release. “The goal of running pentests isn’t to find problems, it’s to quickly fix exploitable problems that matter. We started with pentesting, evolved to be a proactive security platform, and will now accelerate remediation by creating AI learning loops between attackers and defenders.”
Horizon3 said it has posted 120% year-over-year growth in annual recurring revenue and now protects more than 7,000 organizations globally, including four Fortune 10 enterprises.
For readers tracking the same financing through a cybersecurity valuation lens, see XOOMAR’s related coverage, Horizon3 Series E Slaps $2B Price on Pentest Panic.
Builders of NodeZero now have to turn funding into faster remediation
For Horizon3’s product team, the new money is tied to a specific roadmap. The company said it will scale go-to-market operations, expand internationally into Singapore and Australia, deepen its presence across Europe, Middle East and Africa, and accelerate product development.
That puts pressure on NodeZero to do more than find weak spots. The company’s pitch centers on closing the loop: hack, fix, verify, repeat.
| Buyer concern | Horizon3’s stated NodeZero response |
|---|---|
| Too many vulnerabilities | Identify which weaknesses are actually exploitable |
| Slow manual testing cycles | Run autonomous testing inside production environments |
| Unverified fixes | Instantly verify that remediation worked |
| AI-driven intrusions | Help detect AI attackers and prove they are inside |
The product distinction matters because Horizon3 is not selling a simple vulnerability scanner. It is selling evidence that an attacker can move through a specific environment, and evidence that a fix changed that path.
Can that evidence stay reliable as environments change daily?
That is the technical bar the company has set for itself. XOOMAR analysis: the valuation suggests investors are not just paying for AI branding. They are paying for a security workflow that ties AI to measurable remediation, which is harder to fake than a dashboard full of alerts.
NightDragon Founder and CEO Dave DeWalt framed the category shift in direct terms.
Horizon3 “coined the concept of cyber warfare being AI vs. AI, and that future has arrived.”
Enterprise buyers are being sold proof, not another alert queue
The clearest commercial message from Horizon3 is prioritization. Antani’s quote draws a line between finding every problem and fixing the exploitable problems that matter.
That distinction is central to the Horizon3 Series E story. Security teams already face noisy backlogs. Horizon3 is arguing that autonomous pentesting can shrink the decision window by proving which flaws can be used in real attack paths.
The source material does not provide customer contract sizes, retention rates, or deployment depth. It does say Horizon3 protects more than 7,000 organizations globally, including four Fortune 10 enterprises, which gives the company a broader adoption claim than a niche startup pilot.
What should buyers verify before trusting autonomous testing in production?
They should press on safety controls, remediation accuracy, repeat testing frequency, and evidence quality. Horizon3’s stated value depends on proving not only that NodeZero can find attack paths, but that it can confirm fixes without disrupting live systems.
The FBI’s Internet Crime Complaint Center said in April that it received 22,364 internet crime complaints containing references to AI in 2025, according to the supplied PYMNTS source. That figure does not prove all those complaints involved AI-led attacks, but it does show why AI is now showing up inside cybercrime reporting at scale.
For adjacent XOOMAR coverage on how AI capital is flowing into other parts of enterprise technology, see Nvidia Risks $250B on OpenAI Data Center Funding Bet and $200 Billion Sales Let Amazon AI Agents Invade Workflows.
Investors have priced Horizon3 for execution, not experimentation
A valuation above $2 billion changes the assignment. Horizon3 now has to keep revenue growth strong, expand into new regions, and show that NodeZero can remain differentiated as more security vendors attach AI features to existing platforms.
The company’s stated expansion plan is concrete: Singapore, Australia, and deeper coverage across EMEA. Those moves should make customer growth easier to track over the next few quarters.
The investor question is whether autonomous pentesting becomes a budget line that grows inside large enterprises, federal customers, and regulated industries, or whether it remains a specialized layer bought by the most security-mature organizations.
Horizon3 has momentum on paper: 120% ARR growth, more than 7,000 organizations, and a valuation that tripled in roughly a year. But the source material does not disclose revenue dollars, profitability, cash burn, or the size of the Series E investor syndicate beyond the co-leads.
That leaves the next test straightforward. Watch whether Horizon3 turns this raise into more production deployments, stronger AI attacker detection, and product updates that shorten the gap between exploit discovery and verified remediation. The AI-versus-AI thesis has funding now. The proof has to show up in customer environments.
The Bottom Line
- Horizon3’s $250 million raise signals strong investor confidence in autonomous cybersecurity tools.
- The valuation jump from $650 million to above $2 billion shows rising demand for AI-driven defense platforms.
- NodeZero’s production-environment testing reflects a shift from periodic pentests to continuous validation.
Originally published on XOOMAR. For more news and analysis, visit XOOMAR.
Top comments (0)