In short: NodeZero Core is Horizon3.ai's continuous edition of its autonomous pentesting platform. It includes everything in NodeZero Flex plus scheduled testing and Threat Informed Perspectives, with unlimited tests and each asset counted once a year. Forever Systems runs it for you as a managed service on a 12-month commitment, testing your networks and cloud and verifying fixes.
What NodeZero Core is
NodeZero Core turns penetration testing from an annual event into a routine. Networks change every week: new servers, firewall rule changes, a forgotten test account, a cloud resource left open. A yearly test only shows how things looked on the day. With Core, NodeZero tests as often as you need, on a schedule, so a new attack path can be found soon after it appears rather than at next year's test.
Forever Systems delivers Core as a managed service. We run the tests across your environments, review the attack paths, tell you which fixes matter most and verify them once made. You get the reports and the conversation without operating the platform yourself.
What is included
| Capability | NodeZero Flex | NodeZero Core |
|---|---|---|
| Internal and external pentests | Yes | Yes |
| Cloud (AWS and Azure) and Kubernetes pentests | Yes | Yes |
| Active Directory password audit | Yes | Yes |
| Insider threat and phishing impact testing | Yes | Yes |
| Attack paths with proof of exploitation | Yes | Yes |
| Fix actions with one-click verify | Yes | Yes |
| Scheduled, recurring tests | - | Yes |
| Threat Informed Perspectives | - | Yes |
| Unlimited testing per asset | - | Yes |
Threat Informed Perspectives track trends over time in the impacts NodeZero achieves, the weaknesses it finds and how long remediation takes, which is what shows whether your security is actually improving between tests. Reports can be co-branded and are written for both technical teams and leadership. Horizon3.ai's higher Pro and Elite packages add Tripwires, Rapid Response and risk-based exposure management features; ask us if you need those.
How it is licensed
| Option | How it works |
|---|---|
| Unit | Assets: servers, workstations, network devices, cloud resources and internet-facing services |
| Counting | Each asset counts once a year, however often it is tested |
| Testing | Unlimited |
| Term | 12-month commitment, billed monthly |
| Delivery | Run for you by Forever Systems as a managed service |
We agree your asset count during scoping and review it at renewal, so growth in your estate is planned rather than a surprise. If you only need a few tests a year, NodeZero Flex may be better value. Prices depend on assets and term, so ask us for a quote. For more on renewals, see software renewals.
Requirements and deployment
Core uses the same technology as Flex. External testing runs from Horizon3.ai's cloud against the domains and IP ranges you authorise. Internal testing runs from a NodeZero host in each network segment you want to start from: Horizon3.ai's preconfigured virtual machine image, or a Linux machine (Ubuntu 20.04 LTS or later, or RHEL 9 or later) with Docker or Podman and at least 2 CPU cores, 8 GB RAM and 40 GB free disk. The host needs internet access and should not run EDR, which can stop the tests running.
Cloud and Kubernetes testing need access you grant to the tenant or cluster. There is nothing to install on your devices. We agree testing windows, exclusions and notification rules with you before the first scheduled test.
Who it suits and how we help
NodeZero Core suits organisations with changing estates or pressure to show continuous assurance: multi-site businesses, education trusts, financial and professional services firms, and suppliers subject to customer audits. It suits those without an in-house red team who still want frequent, evidence-based testing.
Forever Systems scopes the service, sets up NodeZero hosts, runs the schedule, triages findings into a short list of fixes, helps your team close them and verifies the results. Reporting fits alongside your cyber security services and supports Cyber Essentials Plus preparation. Licences and renewals are on your single Forever Systems account.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
What does NodeZero Core add over NodeZero Flex?
Core allows unlimited testing with each asset counted once a year, and adds scheduled tests and Threat Informed Perspectives for tracking trends. Flex counts each asset every time it is tested.
How often can NodeZero Core run tests?
As often as you need. Testing is unlimited, so we agree a schedule with you, such as monthly or after each significant change, and run extra tests when required.
Do I have to run NodeZero Core myself?
No. Forever Systems runs it as a managed service: we schedule the tests, review the results, explain the fixes and verify them.
Does NodeZero Core replace a manual penetration test?
It covers much of the same ground continuously, but some contracts and standards still require a manual test by an accredited tester. Many organisations use both.