Horizon3, an autonomous security validation platform, announced a $250 million Series E on August 3 at a valuation of $2 billion, tripling its Series D valuation of $650 million in just over a year. The oversubscribed round was co-led by existing investors NightDragon (whose founder Dave DeWalt is joining the board) and NEA, with participation from seven new strategic investors including Singapore's EDBI, defense contractor SAIC, and Sapphire Ventures.
Horizon3's NodeZero platform autonomously executes penetration tests in production environments using AI to find vulnerabilities, prioritize them, instantly verify fixes, and create a continuous hack-fix-verify loop. The company has executed 310,000 production security tests with zero disruptions. The shift from annual pentests (human-driven, sample-based) to continuous validation (machine-driven, comprehensive) is driving 120% year-over-year ARR growth; the company approached $100 million ARR last year and protects 7,000+ organizations including four Fortune 10 enterprises, the NSA, and CISA.
Horizon3's differentiation is proprietary training data collected from customer firewalls and six years of production deployment experience that competitors cannot replicate with generic AI models. The company invests ~$100 million in R&D on deterministic safety constraints and governance to keep autonomous agents predictable and controlled. With FedRAMP High authorization, Horizon3 serves highly regulated sectors: banks, healthcare, defense, and government agencies compliant with DORA, NIS 2, NIST CSF 2.0, HIPAA, and GDPR.
For architects, this signals a seismic shift in cybersecurity: as AI-driven attacks accelerate, organizations are abandoning assumption-of-prevention (fix every flaw) for assumption-of-breach (contain fast, prioritize exploitable paths). Continuous AI-vs-AI validation replaces annual human pentests because machine speed now matches attacker speed. The $2B valuation and board seats from FireEye/McAfee veterans reflect investor conviction that autonomous security testing is now table-stakes infrastructure. Next-gen roadmap: autonomous remediation agents that close findings directly.