Signals Inbox·August 22, 2026·Cybersecurity

Horizon3 or Pentera: who's ahead today?

Horizon3 is ahead of Pentera today, despite Pentera’s stronger disclosed revenue scale and broader finished platform. The difference is momentum: Horizon3 is growing faster, distributing through partners more aggressively and turning a huge base of production attack data into a wider AI-native security system.

Q1Why are Horizon3 and Pentera compared so directly?

Horizon3 and Pentera are chasing the same security budget: replacing periodic penetration tests with software that continuously proves which attack paths actually work.

Gartner groups both companies in Adversarial Exposure Validation, or AEV. Their products overlap unusually closely. Horizon3's NodeZero and Pentera both attack production environments, chain weaknesses into realistic attack paths, rank exposures by proven exploitability, check whether defenses stop the attack and let customers test again after fixing the problem.

Their roadmaps have converged too. Both moved from networks and identity into cloud environments, exposure management and AI-assisted security workflows. Then, within days of each other, both announced AI-native web application pentesting. Horizon3 had already run its WebApp product with 95 early-access customers across hundreds of production applications. Pentera opened its AI Web App attacker to selected beta customers, with general availability planned later in 2026.

So the rivalry has become very direct. Horizon3 and Pentera increasingly sell different versions of the same promise: let software behave like a real attacker often enough that security teams stop relying on annual pentests and thousands of theoretical vulnerability alerts.

Q2Why is it still hard to say whether Horizon3 or Pentera is ahead?

Pentera has the cleaner proof of commercial scale, but Horizon3 is growing so much faster that Pentera's old size advantage may already be disappearing.

Pentera crossed $100 million in annual recurring revenue after building a customer base of more than 1,200 enterprises. It has spent years selling large contracts to companies such as Wyndham Hotels & Resorts, Telefónica, Casey's and Blackstone, and its platform now extends from automated attacks into remediation workflows and human offensive-security services.

Horizon3 gives us a different picture. Its latest disclosures show very rapid ARR growth, a much larger number of organizations using NodeZero, strong retention and a partner model that is suddenly scaling across thousands of environments. TechCrunch also reported that Horizon3 had already approached $100 million in ARR in its previous year.

That leaves us with a genuine measurement problem. Pentera gives us the better absolute revenue number. Horizon3 gives us stronger evidence about what is happening right now.

The useful question is whether Pentera is still pulling away commercially, holding roughly steady against Horizon3, or starting to lose ground. The recent evidence points toward the third scenario.

Q3Is Pentera still bigger than Horizon3 in revenue?

Pentera is still ahead on disclosed ARR, although public data no longer proves that Pentera is actually the larger company today.

Pentera confirmed that it had passed $100 million in ARR after becoming the first AEV vendor to publicly announce the milestone. The figure is clean, company-confirmed and directly tied to the recurring software business we are comparing.

Horizon3 has never published an equally precise current ARR number. In coverage of its latest financing, however, TechCrunch quoted Horizon3's chief revenue officer saying that the company had approached $100 million in ARR in the previous year and expected growth to accelerate further.

That creates a much narrower gap than the companies' histories might suggest. A year or two ago, Pentera was plainly the larger commercial business. Today, we can confidently say that both operate around the nine-figure ARR level, while only Pentera has publicly confirmed that it crossed $100 million.

The absence of a current Horizon3 number is important. We should resist reverse-engineering ARR from growth percentages because we do not know the exact starting period or internal definition being used. For now, Pentera keeps this point on disclosure quality rather than evidence of a large remaining revenue lead.

Horizon3 vs Pentera revenue evidence

Q4Is Horizon3 growing faster than Pentera right now?

Horizon3 is growing much faster than Pentera based on every recent comparable operating number we could find.

Horizon3 has now reported triple-digit ARR growth across several updates rather than producing one exceptional quarter. The company disclosed 137% year-over-year ARR growth in one earlier update, 102% for its following fiscal year and 120% in its latest financing announcement. The periods differ, so we should avoid drawing a perfect trend line through them. The useful observation is simpler: Horizon3 has remained around or above 100% growth while becoming a much larger company.

Usage is moving in the same direction. NodeZero was used by more than 5,200 organizations in March 2026, more than 5,500 by June and more than 7,000 in the latest disclosure. Moving from 5,200 to 7,000 means the reported footprint grew by roughly 35% in only a few months.

Pentera's customer base has grown more slowly. TechCrunch reported 1,100 organizations in March 2025, while Pentera later reported more than 1,200 enterprises. That is under 10% growth in the disclosed customer count across that interval.

Pentera deserves one qualification here. Its model leans toward larger enterprise contracts, so customer growth can understate revenue growth. TechCrunch reported in 2025 that Pentera's average contract had risen to roughly $100,000 after quadrupling over several years. A new Pentera customer can therefore be worth much more than another organization reached through a Horizon3 MSSP.

Even after allowing for that difference, the current pace is hard to miss. Horizon3 is adding organizations quickly while ARR is still doubling. Pentera has provided no recent growth figure in the same range. Pretty hard to ignore.

Q5Who has the better customer base, Horizon3 or Pentera?

Pentera has the stronger set of publicly documented large-enterprise deployments, while Horizon3 reaches far more organizations and increasingly lands the same tier of customer.

The raw counts initially look overwhelming: more than 7,000 organizations for Horizon3 versus more than 1,200 enterprises for Pentera. The ratio is around 5.8 to one. It would be misleading to read that as a 5.8x market-share advantage.

Horizon3 reaches a large share of its customers through MSSPs, which can deploy NodeZero across many client environments. Pentera's count is centered more heavily on direct enterprise relationships. Its reported contract economics fit that profile.

Pentera also gives us unusually concrete examples of customers deepening their use. Wyndham Hotels & Resorts expanded Pentera from on-premise validation into cloud infrastructure supporting more than 9,200 hotels. Telefónica has described using automated validation across multiple services. Casey's and Blackstone add further evidence that Pentera has become part of the operating security stack inside large organizations.

Horizon3's named proof is improving. A recent TTEC case study described NodeZero being used across a complex global enterprise to uncover attack paths and produce audit-ready evidence. Another recent customer story described a major transportation company repeatedly testing AWS attack paths, fixing exploitable IAM weaknesses and rerunning NodeZero to verify the result. Horizon3 also says four Fortune 10 companies use its platform.

The distinction is fairly specific. Pentera still has better public evidence of large enterprises building deep workflows around its product. Horizon3 has created a much wider funnel and is now showing that NodeZero can travel from smaller MSSP-served environments all the way into Fortune 10 companies.

Q6Is NodeZero actually better than the Pentera platform today?

Pentera currently offers the broader finished platform, while NodeZero has a stronger case at the core job of autonomous production pentesting.

Independent customer feedback barely separates them. Gartner Peer Insights currently gives Pentera a 4.8/5 rating from roughly 300 reviews and NodeZero 4.7/5 from roughly 150. Pentera has twice the review volume, which supports its maturity, but the actual satisfaction gap is tiny.

Pentera's breadth is easier to see. Pentera Core covers internal environments, Surface handles external exposure, Cloud extends testing into cloud infrastructure, and Resolve connects validated findings to remediation through more than 100 integrations. Pentera also acquired EVA Information Security, giving customers access to human red teams when automated testing reaches areas such as complex business logic or AI systems that still benefit from expert work.

NodeZero stays closer to a software-first model. It now covers internal and external infrastructure, Active Directory, cloud, Kubernetes and web applications, alongside Rapid Response for newly disclosed vulnerabilities, vulnerability prioritization, security-control validation and Tripwires.

The freshest direct comparison is web application testing. Horizon3 released NodeZero WebApp after an early-access program covering 95 customers and hundreds of production applications. Pentera announced its own AI-native Web App attacker at almost the same time, but the product remains in selected-customer beta with broader availability planned later.

For a security team that wants one broad validation and remediation platform, Pentera currently gives it more pieces in one place. For a team primarily buying autonomous pentesting that can run repeatedly in production, we would choose NodeZero today.

Q7Which company is better at turning security findings into actual fixes?

Pentera is currently ahead of Horizon3 at carrying a validated exposure all the way into the remediation workflow.

Finding another vulnerability has limited value when security teams already have scanners producing huge queues of them. The harder job is proving which weaknesses can actually be exploited, getting the right owner to fix them and checking that the fix really closed the attack path.

Both companies handle the proof-and-retest part well. Pentera has gone further on the workflow between those two moments.

The DevOcean acquisition became Pentera Resolve, which consolidates validated exposures, adds context and sends prioritized remediation work into more than 100 integrations. That gives Pentera a direct path into the systems where engineering and security teams already manage work.

Horizon3 provides remediation guidance and immediate verification inside NodeZero, while integrations and partners handle more of the surrounding workflow. Its partnership with Brinqa is a good example: NodeZero supplies attacker-validated evidence and Brinqa helps operationalize exposure management and remediation.

Horizon3 is now working on autonomous blue-team agents that would remediate findings coming directly from NodeZero pentests. That could eventually shrink Pentera's advantage. Today, however, Pentera Resolve is already a commercial product while Horizon3's more autonomous remediation vision remains part of the next product cycle.

Q8Is Horizon3 or Pentera further ahead with AI cybersecurity?

Horizon3 is further ahead in building an AI attacker-and-defender system, while Pentera currently uses AI effectively across a more conventional security-validation workflow.

Pentera already has meaningful AI products. Pentera Peer lets practitioners interrogate findings and attack history conversationally. Its MCP server allows AI assistants and agents to trigger validation tests and use Pentera evidence inside SecOps workflows. Its web application product uses AI to discover application structure, reason through business logic and adapt attacks while deterministic validation confirms the result.

Horizon3 is aiming at a deeper automation loop. Earlier this year, the company published research using attack data accumulated from roughly 250,000 real pentests. It then tested an autonomous defensive architecture across 161 organizations and more than 250 enterprise attack graphs.

The reported results were unusual enough to pay attention to: expected attacker success fell 59% against the company's deterministic baseline, every tested defensive policy change improved the defender's position, and more than 420 deployments produced zero actions outside the system's approved catalog.

Those figures come from Horizon3's own research, so we treat them as evidence of technical direction rather than an independent benchmark. The design is still interesting. The AI chooses strategy, while every action must pass through deterministic, pre-approved tools. That directly tackles the reason companies hesitate to let AI agents make security changes in production: unpredictable actions can create a second security problem.

Pentera is weaving AI into testing, analysis and workflow. Horizon3 is trying to make autonomous attackers and autonomous defenders learn from the same real-world attack evidence. The second architecture has greater upside, provided Horizon3 can turn the research into dependable commercial products.

Q9Who has the better distribution model, Horizon3 or Pentera?

Horizon3 has the stronger distribution model right now, and its recent channel push makes this one of the clearest gaps between the two companies.

Horizon3 says 90% of its business now flows through partners. Earlier in 2026, it also disclosed that around 70% of customers were serviced through MSSPs. The company has since committed another $20 million specifically to partner leadership, enablement, alliances and joint go-to-market programs.

The incentives line up well. Horizon3 lets partners use NodeZero as the testing engine while keeping remediation, incident response, vCISO work and other service revenue for themselves. MSSPs can therefore earn recurring services revenue around every software deployment instead of earning only a reseller margin.

The model also explains part of Horizon3's unusually fast customer expansion. One direct salesperson can close only so many organizations. An MSSP can deploy NodeZero across dozens or hundreds of clients, and the same platform increasingly supports internal, external, cloud and web application testing.

Pentera also takes its channel seriously. It has described itself as channel-first, expanded through regional partners and recently made the platform available through AWS Marketplace. Its GM Sectec partnership generated dozens of opportunities within eight months across the Americas.

Horizon3 gives us much stronger numbers on how central the channel has become to actual revenue. When nine dollars out of every ten already flow through partners, distribution is part of the business model rather than another sales program.

Q10Are Horizon3 customers actually sticking around and spending more?

Horizon3 has unusually strong public retention data today, while Pentera gives us too little comparable information to claim the same thing quantitatively.

Horizon3 reported 125% net dollar retention and 94% gross dollar retention earlier this year. A 125% NDR means the recurring revenue from an existing customer cohort grows by roughly 25% after churn, contraction and expansion are combined.

The combination of those two numbers is more useful than either alone. A company can post high NDR while losing many smaller customers if a few large customers expand aggressively. Horizon3's 94% gross retention shows that customer losses remain relatively contained at the same time existing accounts are spending more.

Horizon3 said some of that expansion comes from customers moving beyond pentesting into broader exposure-management use cases and testing more frequently. That is exactly the behavior we would want to see if NodeZero is becoming an operating security tool rather than a periodic assessment product.

Pentera has credible qualitative evidence. Its CEO says some customers have stayed for more than seven years, and cases such as Wyndham show accounts expanding into additional environments. Pentera, however, has released no recent NDR or gross-retention figure that lets us make a clean comparison.

Horizon3 gets this point on evidence. Pentera may have equally healthy retention internally, but we cannot award it credit for a number it has never published.

Q11Is Pentera or Horizon3 stronger internationally and with governments?

Pentera owns the broader international footprint today, while Horizon3 has built the stronger position in sensitive US federal environments.

Pentera serves more than 1,200 enterprises across more than 60 countries. Its organization has long been spread across North America, Europe, the Middle East and Asia-Pacific, and the company added offices in Colorado and Madrid during its latest expansion cycle.

Horizon3 is catching up geographically. It recently opened Amsterdam as its EMEA headquarters and is using partners to expand beyond the United States. The global network is still younger than Pentera's.

The comparison flips when we look at US federal work. NodeZero is FedRAMP High authorized, which gives Horizon3 access to workloads with demanding federal security requirements. Horizon3 publicly names the NSA and CISA among organizations using NodeZero, and NodeZero has also been assessed as "Awardable" through the Department of War's Tradewinds Solutions Marketplace.

Pentera works with governments and heavily regulated enterprises, and recent reporting in Israel describes it as an approved government supplier. That still leaves Horizon3 with the more valuable credential for the US federal market.

This split makes strategic sense. Pentera commercialized internationally earlier. Horizon3's founders and early team came heavily from US national-security and military cyber backgrounds, and the company turned that heritage into a concrete procurement advantage.

Q12Which company has the harder moat to copy, Horizon3 or Pentera?

Horizon3 has the stronger long-term moat because its production attack data, autonomous engine and partner distribution can reinforce one another as usage grows.

Horizon3 now says NodeZero has completed more than 310,000 production-safe autonomous security tests. The useful part of that number is the accumulated attack evidence: real credential paths, configurations, exploitable combinations, remediation outcomes and examples of how attacks behave across many types of production environment.

The rate of accumulation is accelerating too. Horizon3 reported roughly 225,000 tests in March and more than 250,000 by June before passing 310,000 in its latest disclosure. That means a meaningful share of the entire dataset was produced recently.

As seen above, this data is already feeding Horizon3's work on autonomous defense. If better attack evidence improves the attacker, the defender and the remediation recommendations at the same time, each additional deployment can make several parts of NodeZero more useful.

Pentera has built a different kind of defensibility. Resolve's integration layer puts the platform inside existing remediation workflows. Long-lived enterprise accounts create trust and switching costs. The acquisitions of DevOcean and EVA added capabilities that make Pentera harder to replace with a basic autonomous pentesting product.

Both companies face aggressive competition, so neither moat looks permanent. Cybersecurity techniques spread quickly, foundation models are widely available and large platform vendors can bundle adjacent functionality.

Horizon3 has the better position because proprietary production data plus rapidly expanding distribution has the better chance of compounding. Pentera's workflow depth is valuable, but integrations and service breadth are generally easier for well-funded competitors to reproduce.

Q13Who has more financial room to keep pushing, Horizon3 or Pentera?

Horizon3 has much more room to spend right now, and Pentera's second layoff round this year makes the contrast more relevant than it was a few months ago.

Horizon3 recently raised $250 million in a Series E at a valuation above $2 billion. The round more than tripled its previous $650 million valuation and brought in seven new investors alongside returning backers. Horizon3 followed that financing almost immediately with a $20 million commitment to expanding its partner ecosystem.

Pentera's last major round was a $60 million Series D at a valuation above $1 billion. TechCrunch reported that the company had raised roughly $250 million in total after that financing.

The freshest development is Pentera's workforce reset. N12 reported days ago that Pentera is cutting around 60 employees, roughly 14% of its 430-person workforce at the time of the announcement. An earlier round in April had already removed about 40 roles, mainly from marketing and headquarters functions.

Across the two rounds, Pentera has therefore announced roughly 100 job cuts in less than four months. The latest cuts extend across more functions as the company says it is completing its transformation toward an AI-native platform and continues recruiting people with AI expertise.

This looks more like a serious strategic reset than a cash emergency. Pentera already has a nine-figure recurring-revenue business and is still investing in product. Yet the contrast with Horizon3 is sharp: one company is reducing headcount while reorganizing around AI, and the other has just raised a quarter-billion dollars to accelerate an already fast-growing business.

For the next several quarters, Horizon3 can afford to attack multiple fronts at once: international expansion, web applications, channel distribution, autonomous remediation and AI-defense research. Pentera has become more selective about where it places people and capital.

Q14Is Horizon3 or Pentera leading the wider AEV market?

Pentera still has the stronger claim to being an established AEV category leader, while Horizon3 currently looks like the company changing the competitive order fastest.

Pentera has years of category-building behind it. It was the first AEV company to announce more than $100 million ARR, has a large direct enterprise base and was recognized as a leader in Frost & Sullivan's 2026 Automated Security Validation Radar.

Gartner's current user data also supports Pentera's maturity. Pentera has around twice as many verified Peer Insights reviews as NodeZero and a slightly higher current rating. That is hardly a technical benchmark, but it shows a larger body of customers willing to review the product.

Horizon3 has its own independent validation. Gartner named NodeZero a Customers' Choice in its 2025 Voice of the Customer report for AEV. More importantly for our comparison, Horizon3's recent operating trajectory is now much stronger than the image of an emerging automated-pentesting challenger would suggest.

The wider market remains crowded. Cymulate, Picus, XM Cyber, AttackIQ and other vendors compete for overlapping validation and exposure-management budgets. Large security platforms can also bundle pieces of the workflow.

That broader field makes Horizon3's momentum more important. Pentera has already shown that it can become a major AEV vendor. Horizon3 is now showing signs that it could move beyond being one of several challengers and become the company others have to catch.

Q15Who is winning right now, Horizon3 or Pentera?

Horizon3 is ahead today, and the lead now looks more convincing than it did only a few months ago.

Pentera still wins several serious categories. It has the best confirmed ARR disclosure, a broader finished platform, deeper remediation orchestration, a more mature international presence and a larger body of verified Gartner reviews. Those are the reasons we still call the overall gap moderate rather than overwhelming.

The evidence that carries more weight right now points toward Horizon3.

Horizon3 has sustained triple-digit ARR growth instead of producing a single short growth spike. Its customer footprint is expanding quickly enough to be visible within a few months rather than years. Existing customers are also expanding their spending, with 125% net dollar retention.

Distribution makes that growth easier to sustain. Horizon3 already routes 90% of its business through partners and is putting fresh capital behind that model. The company can sell the software layer while MSSPs make money from the services that sit around it.

Horizon3 also has the financial freedom to keep pressing. A fresh $250 million round gives it room to expand geographically and fund several product bets simultaneously. Pentera, meanwhile, has now announced two workforce reductions this year while reorganizing around an AI-native strategy. Layoffs alone do not decide this competition, but the timing adds to a wider pattern: Horizon3 is currently accelerating while Pentera is restructuring.

Pentera has a credible path back in front. The company would need to show that its relatively slow customer-count growth is hiding much stronger expansion inside large accounts, push ARR materially beyond the level it disclosed previously, get its AI Web App product into broad production and turn Resolve into a major expansion engine. Publishing retention figures would also make its commercial position easier to judge.

Horizon3 has its own tests ahead. It needs to convert rapid organization growth into durable revenue without weakening retention, prove that its web application push can compete with specialist AppSec products, and turn the autonomous blue-team work into something customers actually deploy. A precise current ARR disclosure would remove the biggest uncertainty in this comparison.

For now, we choose Horizon3. Pentera remains a larger and more mature platform by several traditional measures, but the race these days is increasingly about who can scale autonomous validation fastest, distribute it most efficiently and turn real attack data into a broader AI-native security system. Horizon3 currently has the better position on all three.

Horizon3 vs Pentera by criterion