Horizon3.ai, a San Francisco-based provider of autonomous penetration testing, has raised $250 million in Series E funding co-led by NightDragon and NEA. The NodeZero platform executes real-world attack techniques across infrastructure, cloud, identity, and web applications to identify exploitable paths without agents or disruption. The capital will accelerate go-to-market efforts through MSP and telco partnerships while expanding R&D to counter AI-driven threats.
NightDragon and NEA Double Down on AI Defense
The round values Horizon3.ai above $2 billion, more than tripling the valuation from roughly a year prior. This comes as enterprises face escalating risks from frontier AI models capable of rogue hacks. Pentera raised $250 million as a unicorn with a $60 million Series D in March 2025, while Picus Security secured $80 million total including a $45 million Series C in September 2024. Horizon3.ai's fully autonomous, self-directed approach differentiates it from broader exposure validation platforms.
Manual Pentesting Collapses Under Scale
Security teams confront 49,000-plus CVEs disclosed in 2025 alone, with roughly 40 percent rated critical or high. A global shortage of 4 million cybersecurity professionals leaves organizations unable to perform continuous testing. Traditional manual pentests occur too infrequently to address dynamic attack surfaces in cloud and identity systems, while static scanners generate excessive noise without proving exploitability.
NodeZero Executes Real Exploits Autonomously
NodeZero learns from 250,000-plus production-safe pentests to decide its own attack paths, including lateral movement and privilege escalation. Unlike breach and attack simulation tools that follow pre-scripted playbooks, it performs live exploitation in customer environments with zero human intervention during tests. The platform closes the loop by verifying that remediations actually block attacker movement.
"AI will allow attacks at a speed and scale that will render human-centric defenses inadequate – cybersecurity will inevitably evolve into machines fighting machines at machine speed." — CRO Matt Hartley
Existing Investors Signal Category Conviction
NightDragon and NEA, both prior backers, co-led the round with participation from seven new investors and five returning ones. NightDragon's focus on SecureTech companies that close the offense-defense gap aligns directly with Horizon3.ai's autonomous validation thesis. The $2 billion-plus valuation reflects institutional belief that real exploitation data collected over six years creates a durable moat against newer entrants.
Adversarial Exposure Validation Market Accelerates
The penetration testing market stands at $2.72 billion and is projected to reach $5.54 billion by 2031 at a 15.3 percent CAGR, according to Mordor Intelligence. Automated breach and attack simulation is forecast to grow from $1.18 billion to $8.26 billion by 2034 at 27.5 percent CAGR per Fortune Business Insights. Gartner formalized the Adversarial Exposure Validation category in 2025, naming Horizon3.ai, Pentera, Cymulate, and Picus as representative vendors.
Veteran Leadership Drives Execution
Founder and CEO Snehal Antani previously served as CTO of Joint Special Operations Command and holds 18 U.S. patents in data processing and cloud computing. The team blends former U.S. Special Operations cyber operators with cybersecurity practitioners. Horizon3.ai ranks number one in its category on the 2025 Inc. 5000 list with 2,962 percent growth.
Channel Expansion and WebApp Drive Next Phase
Horizon3.ai opened a new EMEA headquarters in Amsterdam and is hiring aggressively across sales, product, and engineering roles. The recent NodeZero WebApp launch extends autonomous testing to production web applications, with early beta results showing 88 percent true positive findings. Funds will prioritize MSP and telco channel scaling alongside continued R&D to match AI threat velocity.