In short: Horizon3.ai makes NodeZero, an autonomous penetration testing platform: it chains real weaknesses and misused credentials across your network, cloud and identity systems, proves what an attacker could reach and lets you verify fixes. Forever Systems supplies NodeZero Flex for occasional tests and runs NodeZero Core as a continuous testing service, both licensed per asset.
What Horizon3.ai does
Horizon3.ai builds NodeZero, an autonomous penetration testing platform. A traditional penetration test is a snapshot: a tester spends a few days on your network and writes a report that starts ageing straight away. NodeZero runs the same kind of attack on demand and without agents, moving through your environment by chaining together misconfigurations, weak and reused credentials and exploitable vulnerabilities, then showing how it got from a foothold to your critical systems.
Each test produces diagrammed attack paths with step-by-step summaries and proof of exploitation, fix actions for each weakness, and a quick verify so you can confirm a fix worked without waiting for the next full test. Internal tests run from a NodeZero host inside your network; external tests run from Horizon3.ai's cloud, using dedicated short-lived infrastructure for each test. NodeZero's defaults are designed for safe execution, and it can test with or without credentials.
The Horizon3.ai products we supply
| Product | Best for | Licensing |
|---|---|---|
| NodeZero Flex | Occasional tests: quarterly, before an audit or after a major change | Per asset, each asset counted every time it is tested |
| NodeZero Core | Continuous testing run by Forever Systems across your estate | Per asset, unlimited testing, 12-month commitment |
Both cover internal and external network pentests, cloud pentests (AWS and Azure, including Microsoft Entra ID), Kubernetes pentests, Active Directory password audits and phishing impact testing. The difference is how often you test and who runs the schedule.
Horizon3.ai also sells higher NodeZero Pro and Elite packages, which add features such as Tripwires and Rapid Response, and a separate NodeZero WebApp product for web application testing. These are not part of our standard range, so ask us if you need them. Browse other vulnerability management and penetration testing tools.
How Horizon3.ai NodeZero is licensed
NodeZero is licensed on assets: the servers, workstations, network devices, cloud resources and internet-facing services NodeZero finds and tests. Horizon3.ai matches assets using hostnames, IP addresses, domains, certificates and other identifiers, so a single machine seen under several identifiers counts as one asset.
- NodeZero Flex: each asset counts every time it is tested, which suits occasional testing. A minimum asset quantity applies.
- NodeZero Core: testing is unlimited and each asset counts once a year, however often it is tested. It is a 12-month commitment, billed monthly.
- Support: Horizon3.ai's standard support is included with every subscription.
We size your asset count with you before you order, so you are not surprised by a test that finds more devices than expected. Prices depend on assets, product and term, so ask us for a quote.
Buying NodeZero through Forever Systems
- Scope: we agree which networks, cloud tenants and external ranges to test, and when.
- Host: for internal tests we help you set up a NodeZero host, either Horizon3.ai's preconfigured virtual machine or a Linux machine running Docker or Podman, in the right network segment.
- Test: NodeZero runs the attack and maps the attack paths it finds.
- Fix: we walk you through the findings in plain English and help prioritise the fixes that close the most paths.
- Verify and repeat: we re-run checks to confirm fixes, then schedule the next test.
Licences, renewals and any move between Flex and Core are handled on your single Forever Systems account.
Who Horizon3.ai suits
NodeZero suits organisations that need regular evidence their defences work, not just a yearly report: those working towards ISO 27001 or PCI DSS, suppliers answering customer security questionnaires, schools and trusts with large flat networks, and firms with hybrid Active Directory and Microsoft Entra ID. It complements rather than replaces a manual test by an accredited tester where a contract or standard requires one. If you are preparing for Cyber Essentials Plus, a NodeZero test beforehand can show weak spots worth fixing first.
Explore Horizon3.ai
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What is NodeZero?
NodeZero is Horizon3.ai's autonomous penetration testing platform. It safely attacks your network, cloud and identity systems the way an attacker would, then shows the attack paths with proof and how to fix them.
How is Horizon3.ai licensed?
Per asset. NodeZero Flex counts each asset every time it is tested, while NodeZero Core allows unlimited testing with each asset counted once a year.
Does NodeZero need agents on my devices?
No. NodeZero is agentless. Internal tests run from a NodeZero host in your network and external tests run from Horizon3.ai's cloud.
Is autonomous pentesting safe on a live network?
NodeZero's defaults are designed for safe execution, and external tests use dedicated infrastructure for each test. We still agree the scope, timing and any exclusions with you before every test.