There’s a certain irony in paying a company to hack your own network, but that’s exactly the business that just tripled in value. On August 3, 2026, Horizon3.ai closed a $250 million Series E at a valuation above $2 billion — up from $650 million a year earlier. What makes the raise more than a line on a term sheet is the timing: it landed in the same week that AI-driven hacking stopped being a thought experiment and became something researchers demonstrated for real.
The product at the center of it all is NodeZero, an autonomous penetration testing platform. Traditional security audits tend to be annual affairs — expensive, disruptive and stale the moment the report is filed. NodeZero flips the model. It runs live attacks against your production network without knocking it offline, then does what a good human red-teamer does: it chains together small, individually harmless weaknesses into a single path that leads all the way to sensitive data.
Crucially, it doesn’t just flag a theoretical risk. NodeZero proves the break — it actually reaches the target — and then verifies that your fix actually closed the hole. And instead of a once-a-year snapshot, it runs continuously across the entire network, which is the whole point when attackers (increasingly automated ones) never take a day off.
The appetite for this is not hypothetical either. Horizon3.ai says it now serves somewhere in the region of 7,200 to 7,300 customers, which is a substantial footprint for a platform that essentially automates one of the most specialized and labor-intensive corners of cybersecurity.
Pricing, as tends to be the case in enterprise security, is not published. NodeZero is sold through a quote-based model built around four cumulative tiers — Flex, Core, Pro and Elite — with a demo required before you get numbers. Third-party estimates put the median annual cost somewhere in the region of $18,600 to $59,720, though that’s a rough guide rather than a menu, and your figure will depend on scale and tier.
What’s genuinely interesting here is the shape of the arms race. If AI can now autonomously find and exploit weaknesses at machine speed, the defense has to run at machine speed too. You can’t manually patch faster than an automated adversary can probe. NodeZero’s pitch is essentially to put an AI attacker on your side of the fence, running the same playbook the bad actors are starting to run — only it reports back instead of stealing.
Investors clearly bought the argument. Tripling a valuation in twelve months is the market saying that continuous, autonomous offense-as-defense isn’t a niche any more — it’s the direction the whole industry is heading. In a world where the attackers are getting AI, the case for defenders getting it first writes itself.
