No more typing reviews! Try our Samantha, our new voice AI agent.

Picus Security vs The NodeZero Platform by Horizon3.ai comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Picus Security
Ranking in Breach and Attack Simulation (BAS)
4th
Average Rating
9.0
Reviews Sentiment
7.9
Number of Reviews
6
Ranking in other categories
No ranking in other categories
The NodeZero Platform by Ho...
Ranking in Breach and Attack Simulation (BAS)
1st
Average Rating
8.6
Reviews Sentiment
5.9
Number of Reviews
18
Ranking in other categories
Vulnerability Management (16th), Advanced Threat Protection (ATP) (11th), Penetration Testing Services (1st), Risk-Based Vulnerability Management (5th)
 

Mindshare comparison

As of April 2026, in the Breach and Attack Simulation (BAS) category, the mindshare of Picus Security is 12.8%, down from 18.6% compared to the previous year. The mindshare of The NodeZero Platform by Horizon3.ai is 13.9%, up from 7.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Breach and Attack Simulation (BAS) Mindshare Distribution
ProductMindshare (%)
The NodeZero Platform by Horizon3.ai13.9%
Picus Security12.8%
Other73.3%
Breach and Attack Simulation (BAS)
 

Featured Reviews

erdemerdag - PeerSpot reviewer
Cybersecurity Operations Engineer at a tech services company with 201-500 employees
Breach and attack simulation software that provides network, endpoint, and email vectors
According to the attack vectors, you cannot specify which product is failing or which product is working well because there's no agent. The best case scenario is to add an agent solution where an agent would have the ability to actually detect which programs aren't working. For the attack software, you put a peer on the cloud site, and you have another peer internal network. There is IPS, firewall, WAF, and DBS amongst these peers. The cloud's peer is trying to send the attack file to the internal network. Maybe the firewall is blocking it, maybe the IP, maybe the WAF, but you cannot see the details. You can say, "Yes, my security product is blocking that attack scenario," or, "I cannot block this attack."
Hussain Z - PeerSpot reviewer
Senior Manager | Manager Security Services at RISK ASSOCIATES
Automated testing has transformed how we deliver fast, consistent security assessments
The key capabilities of the NodeZero platform by Horizon3.ai that I have found most valuable are its speed, scalability, and consistency. It is able to cover a broad scope in a relatively short period of time, which delivers significant efficiency gains when compared with traditional manual testing. It also provides a more consistent outcome, as the process is not influenced by human bias or variability. One of the most valuable features is the ability for security teams to remediate and retest vulnerabilities immediately. The one-click verification capability is particularly effective, as it allows fixes to be validated quickly without the need to rerun the entire assessment. This streamlines the remediation cycle and supports faster confirmation of security improvements. The platform’s real attack capabilities have also helped reduce false positives in the identification of vulnerabilities across our on-premises systems. Because the findings are evidence-based and validated prior to reporting, the results are more reliable and actionable. This enables us to focus our efforts on confirmed security issues that genuinely require attention, rather than spending time investigating theoretical or unverified exposures. The NodeZero platform also strengthens my understanding of potential security threats through its continuously updated capabilities. With new vulnerabilities emerging and being exploited in the wild on a regular basis, it is valuable to have a platform backed by a strong research and development function that continuously updates attack content to reflect the current threat landscape. This makes the platform effective not only as a point-in-time validation tool, but as part of an ongoing and continuous security assurance programme.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"You have the liberty of physically executing a specific set of rules in your environment."
"The most valuable feature of Picus Security is its threat intelligence, providing suggestions to block and prevent attacks by identifying malicious files and providing threat IDs."
"One of the most valuable features would be the detection capability, specifically the ability to detect alarms and logs collected from SIEM tools."
"Picus Security has improved and is still improving the security level of my organization."
"It's very useful software because the customer mostly configures their IPS and manages their firewalls, WAF, and the DBS according to the latest update, latest news, or according to the situation."
"The list of vulnerabilities that get detected is the most valuable feature."
"The most valuable feature of the solution is its integration capabilities with the other security tools."
"It provides good reports and offers signature-based solutions."
"The NodeZero Platform by Horizon3.ai is better than manual penetration test scans, definitely worth trying if you are considering using it because it reduces the time and cost associated with manual scans and presents the data in a very clear way that even non-technical people can understand."
"Otherwise, the solution itself is very fine and I would recommend it as an MSP partner or as a user of the tool to pretty much any company."
"Honestly, it's one of the most transformational technologies we've implemented in our company."
"We experienced a threat that could have severely crippled us, but we were able to shut it down before it escalated, thanks to internal vulnerability testing and addressing critical vulnerabilities using their tool."
"The best feature of The NodeZero Platform by Horizon3.ai is that it is an autonomous pen testing tool that knows how to penetrate into the system automatically and perform lateral movement inside the network without the need for scripting."
"For us, The NodeZero Platform is literally the single best security solution we have because the way that it works is we're able to scan every part of our network, both internally and externally, and then get completely actionable feedback that doesn't matter if it's for an application developer or a network admin."
"If someone was looking into this product, I would absolutely recommend it."
"What I appreciate the most about The NodeZero Platform by Horizon3.ai is its distinctive competitive advantage, which is the ability to bundle multiple security solutions into one single tool."
 

Cons

"The amount of integrations that the product can handle is an area of concern, making it one of the aspects where improvements are required."
"According to the attack vectors, you cannot specify which product is failing or which product is working well because there's no agent."
"The reporting and data analysis could be improved. Specifically, the analysis of the results."
"There is room for improvement in the response rate provided by customer support."
"According to the attack vectors, you cannot specify which product is failing or which product is working well because there's no agent."
"To improve, Picus Security could consider establishing a data center in India to address trust issues and increase interest from Indian customers."
"There are a lot of other products which are performing better; as far as Picus is concerned, we have been aggressively trying to reach out to customers to try to sell it, but have not been successful."
"Let's say if a customer's environment has 10 security devices and they need to know that there is an attack that has bypassed their devices, they cannot go and inspect every device and every rule in their security devices."
"Sometimes even their support doesn't know why we're seeing certain issues."
"When it comes to the stability of The NodeZero Platform by Horizon3.ai, I would rate it around seven to eight because the stability is not that high initially due to the need for daily updates and modifications as new vulnerabilities appear."
"I think The NodeZero Platform could improve by leveraging GPUs for password cracking, which would be pretty good."
"The reports are quite useless."
"You need to be cautious about what it scans, as it could potentially cause issues."
"One of the areas where improvement is needed is in the visibility and reporting for large enterprises."
"I would like to see an improvement in the notification management."
"I encountered challenges with patch management, as we struggled to test and implement patches due to time constraints. This led to our patch management process being ineffective."
 

Pricing and Cost Advice

"There is a yearly license according to the number of vectors. The pricing is moderate."
"They have certain price ranges for their products, depending upon the use cases, and the number of applications the customer wants to try."
Information not available
report
Use our free recommendation engine to learn which Breach and Attack Simulation (BAS) solutions are best for your needs.
885,789 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Manufacturing Company
8%
Government
7%
Computer Software Company
7%
Comms Service Provider
10%
Computer Software Company
8%
Manufacturing Company
8%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise2
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise2
Large Enterprise7
 

Questions from the Community

What do you like most about Picus Security?
The most valuable feature of Picus Security is its threat intelligence, providing suggestions to block and prevent attacks by identifying malicious files and providing threat IDs.
What is your experience regarding pricing and costs for Picus Security?
The pricing of Picus Security is average, and it offers a good value for money.
What needs improvement with Picus Security?
There is room for improvement in the response rate provided by customer support. Picus Security could improve the response time.
What needs improvement with Horizon3.ai?
Improvements with The NodeZero Platform by Horizon3.ai are already underway; many people mention infrastructure testing is well-handled, but they seek better web application testing, which is curre...
What is your primary use case for Horizon3.ai?
My main use case for The NodeZero Platform by Horizon3.ai is to demo the platform to our channel partners and any end-user customers that they bring us, and also for my own benefit, as we look at o...
What advice do you have for others considering Horizon3.ai?
The way you find a vulnerability with The NodeZero Platform by Horizon3.ai, you can also fix and then verify if that vulnerability has been solved, which is the selling point itself, emphasizing ex...
 

Also Known As

No data available
Horizon3.ai
 

Overview

 

Sample Customers

Akbank, Exclusive Networks, Garanti, ING Bank, QNB Finansbank, Turkcell, Vodafone, Yapı Kredi
Government agencies, Defense Industrial Base organizations, and enterprises in regulated industries such as finance, healthcare, manufacturing, and criticalinfrastructure rely on NodeZero to meet rigorous security and compliance requirements with continuous, scheduled, and on-demand testing.
Find out what your peers are saying about Picus Security vs. The NodeZero Platform by Horizon3.ai and other solutions. Updated: March 2026.
885,789 professionals have used our research since 2012.