CISO Tribune

Vendor comparison · 2 companies

AttackIQ vs Horizon3.ai

AttackIQ sells a platform that connects exposure signals, attack paths, and controls into a single decision layer. Horizon3.ai sells NodeZero, a platform that autonomously executes real attack techniques in production environments so organizations can find exploitable weaknesses, fix them and verify the fixes. CISO Tribune files both under Breach simulation and automated pen-testing. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • AttackIQ
  • Horizon3.ai
AttackIQ vs Horizon3.ai: Products, Customers and Funding Compared
AttackIQAttackIQ sells a platform that connects exposure signals, attack paths, and controls into a single decision layer.attackiq.comHorizon3.aiHorizon3.ai sells NodeZero, a platform that autonomously executes real attack techniques in production environments so organizations can find exploitable weaknesses, fix them and verify the fixes.horizon3.ai
What it sells
  • AVA OS[4]The operating system for CTEM, orchestrating specialized AI agents.
  • AttackIQ Enterprise[4][9]Continuous defense validation with custom adversary scenarios and program-level reporting.
  • AttackIQ Command Center[10]Centralizes exposure validation across teams, clients, and partners.
  • NodeZero[2][3][5][6][7][8][9][10][14]An autonomous platform that executes real attack techniques in production.
  • Endpoint Security Effectiveness[3][7]Tests how endpoint protections respond to real attack behavior.
Categories
Headquarters
Los Altos, United States[3]San Francisco, United States[1][11]
Founded
Not stated on its pages2019[1][11]
Ownership and funding
Not stated on its pagesPrivately held[2][3]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • July 30, 2026AttackIQ announced AVA Agentic OS, an agentic operating system intended to operationalize Continuous Threat Exposure Management.[16]
  • May 29, 2026AttackIQ announced a strategic partnership with Acumen Cyber, a cyber security service provider.[2]
  • November 5, 2026Horizon3 appointed Chris Wood as Director of Sales for Australia and New Zealand and Vivienne Horsfall as Growth Marketing Director for Asia Pacific and Japan.[13]
  • July 29, 2026Horizon3 announced an expansion of its NodeZero platform to include AI-powered web application pentesting capabilities.[14]
  • July 15, 2026Horizon3 announced it is taking part in Anthropic's Project Glasswing, an initiative focused on securing critical infrastructure.[12]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, AttackIQ sells mainly to security teams in enterprises, from Fortune 500 companies to mid-sized enterprises across industries. Its detection engineering pages describe a large healthcare system and a global financial institution as customers with detection validation needs. Its compliance pages target teams that test controls against frameworks such as NIST, CMMC, and PCI-DSS.From its own pages, Horizon3.ai sells mainly to security teams that want to test their defenses with real attacks in production. It names banks, healthcare systems, energy providers, manufacturers, governments and defense contractors as organizations that rely on NodeZero. Its pages describe customers ranging from the Global 100 to a local hospital.
Last verified
September 27, 2026September 27, 2026

Where they overlap

  • AttackIQ and Horizon3.ai are both filed under Breach simulation and automated pen-testing.
  • Both are headquartered in the United States.

Where they differ, field by field

  • AttackIQ's primary category is Exposure prioritisation and CTEM; Horizon3.ai's is Breach simulation and automated pen-testing.
  • AttackIQ lists AVA OS, AttackIQ Enterprise and AttackIQ Command Center. Horizon3.ai lists NodeZero and Endpoint Security Effectiveness.
  • AttackIQ is headquartered in Los Altos, United States. Horizon3.ai is headquartered in San Francisco, United States.
  • Horizon3.ai was founded in 2019.
  • Horizon3.ai is privately held.

What it sells: AttackIQ

What AVA OS does[4]
AVA OS orchestrates specialized AI agents that execute autonomous cybersecurity missions. The missions continuously validate defenses, break attack paths, and reduce threat debt.
What AttackIQ Enterprise does[4][9]
AttackIQ Enterprise offers custom adversary scenarios, automated workflows, and program-level reporting. AttackIQ describes it as a prescriptive service for selecting adversary tactics, techniques and procedures to run against cloud and on-premises security controls.
What AttackIQ Command Center does[10]
AttackIQ Command Center centralizes exposure validation across teams, clients, and partners. It manages deployments, users, agents, and integrations from a single control center. It supports the operating models of enterprises, MSSPs, and strategic partners.

What it sells: Horizon3.ai

What NodeZero does[2][3][5][6][7][8][9][10][14]
NodeZero is described as an autonomous platform capable of executing self-directed actions to achieve an objective. Horizon3.ai says it executes real attack techniques without agents or disruption. It is delivered via multi-tenant SaaS.
What Endpoint Security Effectiveness does[3][7]
NodeZero checks for EDR presence on each host. It then executes techniques ranging from credential theft to privilege escalation and lateral movement. Every action is mapped to a MITRE ATT&CK TTP and labeled blocked or permitted.

Questions about AttackIQ and Horizon3.ai

What do AttackIQ and Horizon3.ai sell?
AttackIQ sells AVA OS, AttackIQ Enterprise and AttackIQ Command Center. Horizon3.ai sells NodeZero and Endpoint Security Effectiveness.
Are AttackIQ and Horizon3.ai in the same category?
They share Breach simulation and automated pen-testing. AttackIQ's primary category is Exposure prioritisation and CTEM and Horizon3.ai's is Breach simulation and automated pen-testing.
Where are AttackIQ and Horizon3.ai headquartered?
AttackIQ is headquartered in Los Altos, United States. Horizon3.ai is headquartered in San Francisco, United States.
When were AttackIQ and Horizon3.ai founded?
Horizon3.ai was founded in 2019.
Who owns AttackIQ and Horizon3.ai?
Horizon3.ai is privately held.
Who are AttackIQ and Horizon3.ai sold to?
From its own pages, AttackIQ sells mainly to security teams in enterprises, from Fortune 500 companies to mid-sized enterprises across industries. From its own pages, Horizon3.ai sells mainly to security teams that want to test their defenses with real attacks in production.
What have AttackIQ and Horizon3.ai announced recently?
July 30, 2026: AttackIQ announced AVA Agentic OS, an agentic operating system intended to operationalize Continuous Threat Exposure Management. November 5, 2026: Horizon3 appointed Chris Wood as Director of Sales for Australia and New Zealand and Vivienne Horsfall as Growth Marketing Director for Asia Pacific and Japan.

About AttackIQ

AttackIQ sells a platform that connects exposure signals, attack paths, and controls into a single decision layer. AttackIQ says the layer lets teams know what to fix, in what order, and prove that threat debt is going down.[1][4][6]

AttackIQ describes AVA OS as the operating system for CTEM. AVA OS orchestrates specialized AI agents that execute autonomous cybersecurity missions to continuously validate defenses, break attack paths, and reduce threat debt.[4]

The platform gives each role its own workspace. Role-specific workspaces surface the right signal, action, and proof for each operator, all backed by the same validated truth. AttackIQ Professional Services help customers stand up, operate, and scale a CTEM program that proves defense is improving.[6]

It works with Splunk, Microsoft Sentinel, Google Chronicle, Elastic Security, and QRadar, with more available via API. AttackIQ platform exposure features map the attack surface, model paths to critical assets, and prioritize by exploitability, reachability, and business value.[6][7]

Ready uses lightweight agents or test points that customers deploy and control. AttackIQ experts handle all testing and analysis based on the customer's priorities.[4][8]

AttackIQ Enterprise is aimed at continuous validation across the entire stack. AttackIQ Enterprise offers custom adversary scenarios, automated workflows, and program-level reporting. AttackIQ describes Enterprise as a prescriptive service that helps customers select adversary tactics, techniques and procedures to proactively run for cloud and on-premises security controls.[4][9]

AttackIQ Command Center centralizes exposure validation across teams, clients, and partners. Command Center supports the operating models of enterprises, MSSPs, and strategic partners. Its unified console manages deployments, users, agents, and integrations from a single control center. For third-party risk, AttackIQ sends lightweight, agentless emulation packages to vendors by email or API.[4][10][11]

AttackIQ organizes its solutions around specific jobs. For compliance, AttackIQ offers ongoing testing mapped to NIST, CMMC, PCI-DSS, and more. For control validation, AttackIQ says the aim is to validate that every control blocks, detects, and responds as it should. For exposure reduction, AttackIQ AEV validates which exposures actually matter so teams can prioritize what puts the business at real risk. For detection engineering, AttackIQ integrates validation into GitOps, CI/CD, and SOAR pipelines to automate rule testing.[4][12][13][14][15]

AttackIQ says it serves organizations from Fortune 500 companies to mid-sized enterprises across industries.[4][7][8][15]

AttackIQ on the record

Sources

AttackIQ full record

  1. [1]attackiq.comAttackIQ · attackiq.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Acumen Cyber and AttackIQ Partner to Continuously Validate Cyber Defences Against Real-World ThreatsAttackIQ · published May 29, 2026 · Tier A
  3. [3]ContactAttackIQ · attackiq.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]The Agentic Operating System for CTEM - AttackIQAttackIQ · undated page, accessed October 23, 2026 · Tier A
  5. [5]AttackIQ Platform Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 23, 2026 · Tier C
  6. [6]CTEM Platform - Continuous Threat Exposure Management - AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  7. [7]AttackIQ Detection Rule Manager | AI Detection EngineeringAttackIQ · undated page, accessed November 3, 2026 · Tier A
  8. [8]Ready - AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  9. [9]Enterprise - AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  10. [10]Command Center - AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  11. [11]Third Party Risk - AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  12. [12]Compliance Optimization - AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  13. [13]Security Control Validation - AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  14. [14]Reduce Exposure - AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  15. [15]Detection Engineering: Validate & Strengthen Security Controls | AttackIQAttackIQ · undated page, accessed November 3, 2026 · Tier A
  16. [16]AttackIQ Launches AVA Agentic OSAttackIQ · published July 30, 2026 · Tier A
  17. [17]AttackIQ Reviews, Ratings & Features 2026Gartner Peer Insights · undated page, accessed November 3, 2026 · Tier C

Horizon3.ai full record

  1. [1]About usHorizon3.ai · horizon3.ai · undated page, accessed September 27, 2026 · Tier A
  2. [2]Horizon3 raises 250m series e at 2b valuation to lead the ai vs ai cybersecurity eraHorizon3.ai · horizon3.ai · published August 3, 2026 · Tier A
  3. [3]Home | Horizon3.aiHorizon3.ai · undated page, accessed October 25, 2026 · Tier A
  4. [4]Why Continuous Exposure Management Matters for Financial ServicesHorizon3.ai · undated page, accessed October 25, 2026 · Tier A
  5. [5]The Future of Security: Our Vision | Horizon3Horizon3.ai · undated page, accessed November 5, 2026 · Tier A
  6. [6]Compliance Solutions for Cybersecurity | Horizon3Horizon3.ai · undated page, accessed November 5, 2026 · Tier A
  7. [7]Endpoint Security Effectiveness | Horizon3Horizon3.ai · undated page, accessed November 5, 2026 · Tier A
  8. [8]Identity Security Validation | Horizon3Horizon3.ai · undated page, accessed November 5, 2026 · Tier A
  9. [9]Why Our Platform Wins | Horizon3Horizon3.ai · undated page, accessed November 5, 2026 · Tier A
  10. [10]HomeECB AI Cybersecurity Mandate | NodeZero® | Horizon3Horizon3.ai · undated page, accessed November 5, 2026 · Tier A
  11. [11]The Team | Horizon3Horizon3.ai · undated page, accessed November 5, 2026 · Tier A
  12. [12]Horizon3 Joins Anthropic’s Project Glasswing to Help Defend Critical Infrastructure with the Attacker’s PerspectiveHorizon3 · published July 15, 2026 · Tier A
  13. [13]Horizon3 Expands Australia and New Zealand Team, Strengthens APJ InvestmentHorizon3 · published November 5, 2026 · Tier A
  14. [14]Horizon3’s NodeZero® AI Hacker Extends Production-Safe Autonomous Pentesting to Web ApplicationsHorizon3 · published July 29, 2026 · Tier A

Spot a factual error? Request a correction.