Opens in a new tab

PHP2Shell: Critical RCE Vulnerability

Get the latest guidance →

NodeZero® Packaging

List prices in US dollars, per asset. Core, Pro, and Elite are annual subscriptions with unlimited testing: each asset counts once a year, however often you test it. Flex is for occasional testing: each asset counts every time it’s tested

NodeZero Flex

Episodic Autonomous Penetration Testing

$15

per asset,
per test

An asset is any server, workstation, network device, cloud resource, or internet-facing service that NodeZero identifies in your environment. NodeZero matches on hostnames, IP addresses, domains, certificates, and other identifiers. A machine that shows up under several names or addresses counts as one asset.

See Terms for more information.

Assets count each time they are tested. 12-month term. No add-ons.

Autonomous Pentesting

Internal, external, cloud (AWS and Azure) and Kubernetes pentests, plus Active Directory password audits, insider threat and phishing impact testing. Every weakness comes with Fix Actions and 1-click Verify.

Where most teams start

NodeZero Core

Continuous Autonomous Penetration Testing

$50

per asset,
unlimited

An asset is any server, workstation, network device, cloud resource, or internet-facing service that NodeZero identifies in your environment. NodeZero matches on hostnames, IP addresses, domains, certificates, and other identifiers. A machine that shows up under several names or addresses counts as one asset.

See Terms for more information.

Unlimited pentests. Each asset counts once per 12 months.

Autonomous Pentesting

Internal, external, cloud (AWS and Azure) and Kubernetes pentests, plus Active Directory password audits, insider threat and phishing impact testing. Every weakness comes with Fix Actions and 1-click Verify.

Continuous Testing

Schedule recurring pentests, and track trends in impacts, weaknesses and time to remediate with Threat Informed Perspectives.

NodeZero Pro

Precision Threat Detection and Emerging Threat Intel

$65

per asset,
unlimited

An asset is any server, workstation, network device, cloud resource, or internet-facing service that NodeZero identifies in your environment. NodeZero matches on hostnames, IP addresses, domains, certificates, and other identifiers. A machine that shows up under several names or addresses counts as one asset.

See Terms for more information.

Everything in Core, plus Tripwires and Rapid Response.

Autonomous Pentesting

Internal, external, cloud (AWS and Azure) and Kubernetes pentests, plus Active Directory password audits, insider threat and phishing impact testing. Every weakness comes with Fix Actions and 1-click Verify.

Continuous Testing

Schedule recurring pentests, and track trends in impacts, weaknesses and time to remediate with Threat Informed Perspectives.

Rapid Response

Actionable intelligence on the riskiest emerging threats, discovered or vetted by the Horizon3 expert offensive security team, so you can find and fix your exposure before attackers exploit it.

Tripwires™

Deception deployed automatically in attack paths to secure the exploitable vulnerabilities NodeZero discovers and proves. Real-time alerts give you the details of any access attempt.

NodeZero Elite

Risk-Based Exposure Management

$85

per asset,
unlimited

An asset is any server, workstation, network device, cloud resource, or internet-facing service that NodeZero identifies in your environment. NodeZero matches on hostnames, IP addresses, domains, certificates, and other identifiers. A machine that shows up under several names or addresses counts as one asset.

See Terms for more information.

Everything in Pro, plus RBEM and Vulnerability Prioritization.

Autonomous Pentesting

Internal, external, cloud (AWS and Azure) and Kubernetes pentests, plus Active Directory password audits, insider threat and phishing impact testing. Every weakness comes with Fix Actions and 1-click Verify.

Continuous Testing

Schedule recurring pentests, and track trends in impacts, weaknesses and time to remediate with Threat Informed Perspectives.

Rapid Response

Actionable intelligence on the riskiest emerging threats, discovered or vetted by the Horizon3 expert offensive security team, so you can find and fix your exposure before attackers exploit it.

Tripwires™

Deception deployed automatically in attack paths to secure the exploitable vulnerabilities NodeZero discovers and proves. Real-time alerts give you the details of any access attempt.

High Value Targeting™

Assesses your high-value targets (hosts, identities, data), prioritizes pentests against them, and uses LLMs to surface the business risk in the results.

Advanced Data Pilfering™

Uncovers credentials in overlooked sources using LLM-driven pattern recognition, file analysis and reasoning.

Threat Actor Intelligence™

Maps findings to known threat actors, so you can see which groups are most likely to exploit your environment.

Vulnerability Prioritization

Correlates findings from scanners like Tenable, Rapid7 and Qualys with the NodeZero attack graph to show which ones are actually exploitable.

Capability Comparison

Capability NodeZero Flex NodeZero Core NodeZero Pro NodeZero Elite
Internal Pentesting
External Pentesting
External Asset Discovery
Cloud Pentesting
Kubernetes Pentesting
Active Directory Audit
Phishing Impact Testing
Fix Actions With 1-click Verify
Comprehensive Reports
NodeZero MCP Server
Vulnerability Management Hub
Endpoint Security Effectiveness
Scheduling  
Threat Informed Perspectives  
Tripwires    
Rapid Response    
NodeZero Insights      
High-Value Targeting      
Advanced Data Pilfering      
Threat Actor Intelligence      
Vulnerability Prioritization      
View less

Capability Comparison

  • Internal Pentesting

  • External Pentesting

  • External Asset Discovery

  • Cloud Pentesting

  • Kubernetes Pentesting

  • Active Directory Audit

  • Phishing Impact Testing

  • Fix Actions with 1-click verify

  • Comprehensive Reports

  • NodeZero MCP Server 

  • Vulnerability Management Hub

  • Endpoint Security Effectiveness

  • Internal Pentesting

  • External Pentesting

  • External Asset Discovery

  • Cloud Pentesting

  • Kubernetes Pentesting

  • Active Directory Audit

  • Phishing Impact Testing

  • Fix Actions with 1-click verify

  • Comprehensive Reports

  • NodeZero MCP Server 

  • Vulnerability Management Hub

  • Endpoint Security Effectiveness

  • Scheduling

  • Threat Informed Perspectives

  • Internal Pentesting

  • External Pentesting

  • External Asset Discovery

  • Cloud Pentesting

  • Kubernetes Pentesting

  • Active Directory Audit

  • Phishing Impact Testing

  • Fix Actions with 1-click verify

  • Comprehensive Reports

  • NodeZero MCP Server 

  • Vulnerability Management Hub

  • Endpoint Security Effectiveness

  • Scheduling

  • Threat Informed Perspectives

  • Tripwires
  • Rapid Response

  • Internal Pentesting

  • External Pentesting

  • External Asset Discovery

  • Cloud Pentesting

  • Kubernetes Pentesting

  • Active Directory Audit

  • Phishing Impact Testing

  • Fix Actions with 1-click verify

  • Comprehensive Reports

  • NodeZero MCP Server 

  • Vulnerability Management Hub

  • Endpoint Security Effectiveness

  • Scheduling

  • Threat Informed Perspectives

  • Tripwires
  • Rapid Response
  • NodeZero Insights
  • High-Value Targeting
  • Advanced Data Pilfering
  • Threat Actor Intelligence
  • Vulnerability Risk Intelligence
View less

NodeZero WebApp Pentesting

Continuously validate which web application weaknesses are exploitable into business impact by crawling, authenticating, attacking, and proving consequence the way real attackers operate.

NodeZero WebApp Flex

Episodic Autonomous WebApp Pentesting

$10,000 

per asset,
per test

Apps count each time they are tested. 12-month term.

Autonomous Web Application Pentesting

Add-on to any Package, or standalone

NodeZero WebApp Continuous

Continuous Autonomous Web Application Pentesting

Custom pricing

Priced per app. Volume pricing when you cover more of your estate.

Autonomous Web Application Pentesting

Unlimited Testing of Each Licensed App

Add-on to any Package, or standalone

Premium Support

Support is included with every NodeZero subscription, with premium options available to provide greater responsiveness, more proactive engagement, and a higher-touch partnership as your security program grows.

Standard

Self-service-led model

Included

with every subscription.

Included support

Customer community access

Foundational education

Enhanced

Higher responsiveness + more proactive guidance

10%

of your annual subscription

$7,500 per year minimum.

Faster support

Quarterly engagement

Live-agent chat

Remediation advisory

Assigned CSM

Premier

For larger, more strategic + more complex programs

20%

of your annual subscription

$25,000 per year minimum.

Highest-priority support

Monthly engagement

Strategic planning

Architecture guidance

Optional designated Support Engineer, $50,000 per year

Let our experts walk you through a demonstration of NodeZero, so you can see how to put it to work for your organization.