What do Horizon3.ai and Prime Security sell?

Horizon3.ai sells NodeZero and Endpoint Security Effectiveness. Prime Security sells Autonomous Design Reviews.

Are Horizon3.ai and Prime Security in the same category?

They share Breach simulation and automated pen-testing. Horizon3.ai's primary category is Breach simulation and automated pen-testing and Prime Security's is Application security posture management.

Where are Horizon3.ai and Prime Security headquartered?

Horizon3.ai is headquartered in San Francisco, United States.

Who are Horizon3.ai and Prime Security sold to?

From its own pages, Horizon3.ai sells mainly to security teams that want to test their defenses with real attacks in production.

What have Horizon3.ai and Prime Security announced recently?

November 5, 2026: Horizon3 appointed Chris Wood as Director of Sales for Australia and New Zealand and Vivienne Horsfall as Growth Marketing Director for Asia Pacific and Japan. December 9, 2025: Prime Security said it raised $20 million in early-stage funding to fuel go-to-market expansion and its Agentic Product Security Platform.

Vendor comparison · 2 companies

Horizon3.ai vs Prime Security

Horizon3.ai sells NodeZero, a platform that autonomously executes real attack techniques in production environments so organizations can find exploitable weaknesses, fix them and verify the fixes. Prime Security sells an AI security review platform designed for software development lifecycles. CISO Tribune files both under Breach simulation and automated pen-testing. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

Horizon3.ai
Prime Security

Add a company

Horizon3.ai vs Prime Security: Products, Customers and Funding Compared
What it sells
	Horizon3.aiHorizon3.ai sells NodeZero, a platform that autonomously executes real attack techniques in production environments so organizations can find exploitable weaknesses, fix them and verify the fixes.horizon3.ai	Prime SecurityPrime Security sells an AI security review platform designed for software development lifecycles.primesec.ai
What it sells	NodeZero^{[2][3][5][6][7][8][9][10][14]}An autonomous platform that executes real attack techniques in production. Endpoint Security Effectiveness^[3][7]Tests how endpoint protections respond to real attack behavior.	Autonomous Design Reviews^[1][4]AI agents review specs, architecture and data flows to uncover security risks before code is written.
Categories
Categories	Breach simulation and automated pen-testing (primary category)	Application security posture management (primary category) Static application security testing Software supply chain security Breach simulation and automated pen-testing
Headquarters
Headquarters	San Francisco, United States^[1][11]	Not stated on its pages
Founded
Founded	2019^[1][11]	Not stated on its pages
Ownership and funding
Ownership and funding	Privately held^[2][3]	Not stated on its pages
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	November 5, 2026Horizon3 appointed Chris Wood as Director of Sales for Australia and New Zealand and Vivienne Horsfall as Growth Marketing Director for Asia Pacific and Japan.^[13] July 29, 2026Horizon3 announced an expansion of its NodeZero platform to include AI-powered web application pentesting capabilities.^[14] July 15, 2026Horizon3 announced it is taking part in Anthropic's Project Glasswing, an initiative focused on securing critical infrastructure.^[12]	December 9, 2025Prime Security said it raised $20 million in early-stage funding to fuel go-to-market expansion and its Agentic Product Security Platform.^[11]
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	From its own pages, Horizon3.ai sells mainly to security teams that want to test their defenses with real attacks in production. It names banks, healthcare systems, energy providers, manufacturers, governments and defense contractors as organizations that rely on NodeZero. Its pages describe customers ranging from the Global 100 to a local hospital.	Not written yet
Last verified
Last verified	September 27, 2026	November 9, 2026

Where they overlap

Horizon3.ai and Prime Security are both filed under Breach simulation and automated pen-testing.

Where they differ, field by field

Horizon3.ai's primary category is Breach simulation and automated pen-testing; Prime Security's is Application security posture management.
Prime Security is also filed under Static application security testing and Software supply chain security.
Horizon3.ai lists NodeZero and Endpoint Security Effectiveness. Prime Security lists Autonomous Design Reviews.
Horizon3.ai is headquartered in San Francisco, United States.
Horizon3.ai was founded in 2019.
Horizon3.ai is privately held.

What it sells: Horizon3.ai

What NodeZero does^{[2][3][5][6][7][8][9][10][14]}: NodeZero is described as an autonomous platform capable of executing self-directed actions to achieve an objective. Horizon3.ai says it executes real attack techniques without agents or disruption. It is delivered via multi-tenant SaaS.
What Endpoint Security Effectiveness does^[3][7]: NodeZero checks for EDR presence on each host. It then executes techniques ranging from credential theft to privilege escalation and lateral movement. Every action is mapped to a MITRE ATT&CK TTP and labeled blocked or permitted.

What it sells: Prime Security

What Autonomous Design Reviews does^[1][4]: Prime checks every design, scores every risk and validates every fix in code. Prime can produce a threat model and combines design-level analysis with actual code.

Questions about Horizon3.ai and Prime Security

What do Horizon3.ai and Prime Security sell?: Horizon3.ai sells NodeZero and Endpoint Security Effectiveness. Prime Security sells Autonomous Design Reviews.
Are Horizon3.ai and Prime Security in the same category?: They share Breach simulation and automated pen-testing. Horizon3.ai's primary category is Breach simulation and automated pen-testing and Prime Security's is Application security posture management.
Where are Horizon3.ai and Prime Security headquartered?: Horizon3.ai is headquartered in San Francisco, United States.
When were Horizon3.ai and Prime Security founded?: Horizon3.ai was founded in 2019.
Who owns Horizon3.ai and Prime Security?: Horizon3.ai is privately held.
Who are Horizon3.ai and Prime Security sold to?: From its own pages, Horizon3.ai sells mainly to security teams that want to test their defenses with real attacks in production.
What have Horizon3.ai and Prime Security announced recently?: November 5, 2026: Horizon3 appointed Chris Wood as Director of Sales for Australia and New Zealand and Vivienne Horsfall as Growth Marketing Director for Asia Pacific and Japan. December 9, 2025: Prime Security said it raised $20 million in early-stage funding to fuel go-to-market expansion and its Agentic Product Security Platform.

About Horizon3.ai

Horizon3.ai sells NodeZero, a platform that autonomously executes real attack techniques in production environments so organizations can find exploitable weaknesses, fix them and verify the fixes.

Horizon3.ai describes the problem as one of effectiveness. Its pages say that security teams do not have a tools problem, and that many siloed security tools are not designed to work together. The company says the seams between those tools are blind spots that attackers exploit. Horizon3.ai says knowing a vulnerability exists is not enough and that teams need to know whether it is actually exploitable.^[5]

NodeZero is described as an autonomous platform capable of executing self-directed actions to achieve an objective. In pentesting, those objectives include becoming Domain Admin, compromising sensitive data and gaining access to critical systems. Horizon3.ai says NodeZero executes real attack techniques without agents or disruption. Horizon3.ai says its autonomous approach is delivered via multi-tenant SaaS.^[5]

Horizon3.ai describes a loop of hack, fix, verify and repeat. Its pages say teams should re-test to confirm a threat is gone after a fix. The company also describes a one-click verify tool in NodeZero that starts a targeted retest.^[6]

Endpoint Security Effectiveness shows how endpoint protections respond to real attack behavior, and NodeZero checks for EDR presence on each host. Horizon3.ai also sells pentesting for compliance, delivered by OSCP pentesters together with the NodeZero platform.^[6][7]

The service delivers a Penetration Test Report and a Fix Action Report.^[6]

Horizon3.ai says NodeZero serves customers from the Global 100 to a local hospital. Its pages also name banks, healthcare systems, energy providers, manufacturers, governments and defense contractors as organizations that rely on NodeZero.^[5][9]

Horizon3.ai was founded in 2019 and is headquartered in San Francisco, CA. Snehal Antani is its Co-Founder and CEO. The company describes its team as a mix of US Special Operations, US National Security and cybersecurity industry veterans.^{[4][6][7][8][10]}

Horizon3.ai on the record

About Prime Security

Prime Security sells an AI security review platform designed for software development lifecycles. Prime Agents learn an organisation's architecture, code and risk history. Prime Security describes one platform covering the SDLC before the code, in the code and after the code. Prime agents work autonomously inside the customer environment, mapping every application, policy, resource and data flow. Prime agents live inside the development lifecycle and understand designs, code, cloud and policies.^[1][2][3][4]

Prime Security says AI agents, multiple stacks and complex development processes have created an attack surface that no existing security tool was built to handle. Prime Security states its aim as connecting architecture, code and cloud to find every exploitable attack vector before attackers do. Prime tracks every asset as it moves from design to deployment. Prime learns an organisation's architecture, past decisions and risk profile, and each review builds on the last one.^[3][4][5]

Autonomous design reviews use AI agents to review specs, architecture and data flows to uncover security risks before code is written. Prime checks every design, scores every risk and validates every fix in code. Prime can produce a threat model, and Prime combines design-level analysis with actual code. Prime Security covers architecture reviews, threat modeling, documentation analysis, and security analysis tied to tickets and code changes. Prime finds vulnerabilities and logic flaws in AI-generated and human-written code. Prime checks every PR the moment it opens, whether a developer or an agent wrote it. Prime checks each pull request for approved auth flows, encryption methods, architecture patterns and framework requirements. Prime reviews every PR against the policies that apply to that repo, validates each finding and hands the agent the context to fix it. Prime logs every review, finding, validation and fix.^{[1][2][3][4][6]}

Prime sets security guardrails for agents like Cursor and Claude Code, catching insecure code at the PR before it merges. Prime Security embeds security policies directly into AI coding workflows. Prime inventories every package in the dependency graph, direct and transitive, and matches it against known CVEs and the license policy. Prime identifies vulnerable packages accessible to attackers with proven attack paths. Exploitable findings arrive with the full attack path, and unreachable ones arrive marked as noise, with the reasoning attached. Prime checks every dependency against the license policy in the same scan. Prime runs continuous attack path analysis with source, architecture and controls. Prime maps how services talk, where data flows and how an attacker would chain it all together. Prime evaluates multi-step attacks the way an attacker plans them.^[1][3][4][7]

Prime delivers a tailored fix wherever the work happens, with the PR, Slack or a Jira ticket for developers. For dev agents, Prime delivers context over MCP, so mitigation runs with no human in the loop. Prime proposes mitigations built for the codebase, delivers them to developers and agents and validates the fix landed in code. Agents run continuously across planning and development workflows without requiring custom engineering from the customer team. Prime integrates with Github, Gitlab, Claude Code, Cursor, Jira, Confluence, Google Drive, Azure DevOps, Linear, and Git Issues.^[2][3][4]

Prime Security supports Product Security Engineers and Security Architects. MX adopted Prime Security. MX is a financial data platform that powers secure data access, analytics, and personalized money experiences for banks, fintechs, and financial institutions. Oscar Health adopted Agentic Security Architect from Prime to automate security reviews and proactively identify risk across all engineering work. Oscar Health is a healthcare technology company that combines digital experiences with health insurance services. ThoughtSpot adopted Agentic Security Architect from Prime to scale security reviews and threat modeling across its expanding engineering surface area. ThoughtSpot is an analytics platform that enables organizations to explore, analyze, and act on data at scale.^{[1][4][8][9][10]}

Prime Security on the record

Sources

Horizon3.ai full record

[1]About usHorizon3.ai · horizon3.ai · undated page, accessed September 27, 2026 · Tier A
[2]Horizon3 raises 250m series e at 2b valuation to lead the ai vs ai cybersecurity eraHorizon3.ai · horizon3.ai · published August 3, 2026 · Tier A
[3]Home | Horizon3.aiHorizon3.ai · undated page, accessed October 25, 2026 · Tier A
[4]Why Continuous Exposure Management Matters for Financial ServicesHorizon3.ai · undated page, accessed October 25, 2026 · Tier A
[5]The Future of Security: Our Vision | Horizon3Horizon3.ai · undated page, accessed November 5, 2026 · Tier A
[6]Compliance Solutions for Cybersecurity | Horizon3Horizon3.ai · undated page, accessed November 5, 2026 · Tier A
[7]Endpoint Security Effectiveness | Horizon3Horizon3.ai · undated page, accessed November 5, 2026 · Tier A
[8]Identity Security Validation | Horizon3Horizon3.ai · undated page, accessed November 5, 2026 · Tier A
[9]Why Our Platform Wins | Horizon3Horizon3.ai · undated page, accessed November 5, 2026 · Tier A
[10]HomeECB AI Cybersecurity Mandate | NodeZero® | Horizon3Horizon3.ai · undated page, accessed November 5, 2026 · Tier A
[11]The Team | Horizon3Horizon3.ai · undated page, accessed November 5, 2026 · Tier A
[12]Horizon3 Joins Anthropic’s Project Glasswing to Help Defend Critical Infrastructure with the Attacker’s PerspectiveHorizon3 · published July 15, 2026 · Tier A
[13]Horizon3 Expands Australia and New Zealand Team, Strengthens APJ InvestmentHorizon3 · published November 5, 2026 · Tier A
[14]Horizon3’s NodeZero® AI Hacker Extends Production-Safe Autonomous Pentesting to Web ApplicationsHorizon3 · published July 29, 2026 · Tier A

Prime Security full record

[1]primesec.aiPrimeSec Inc. · primesec.ai · undated page, accessed November 9, 2026 · Tier A
[2]Build vs Buy: Automating Security Design Reviews at Scale | Prime SecurityPrime Security · undated page, accessed November 10, 2026 · Tier A
[3]Prime Security | Agentic Product Security PlatformPrime Security · undated page, accessed November 10, 2026 · Tier A
[4]Prime Security Platform | AI Agents for Product SecurityPrime Security · undated page, accessed November 10, 2026 · Tier A
[5]About Prime Security | Agentic AI Security CompanyPrime Security · undated page, accessed November 10, 2026 · Tier A
[6]AI Security Code Reviews | Prime SecurityPrime Security · undated page, accessed November 10, 2026 · Tier A
[7]Supply Chain Security | Prime SecurityPrime Security · undated page, accessed November 10, 2026 · Tier A
[8]How MX Used Prime to Scale Product Security Without Adding HeadcountPrime Security · undated page, accessed November 10, 2026 · Tier A
[9]How Oscar Health Scaled Secure Development and Risk Prioritization Across EngineeringPrime Security · undated page, accessed November 10, 2026 · Tier A
[10]How ThoughtSpot Scaled Security Coverage and Confidence in a High-Velocity Engineering EnvironmentPrime Security · undated page, accessed November 10, 2026 · Tier A
[11]Prime Security raises $20M early-stage funding to scale its agentic product security platform - SiliconANGLESiliconANGLE · published December 9, 2025 · Tier B

Spot a factual error? Request a correction.