No more typing reviews! Try our Samantha, our new voice AI agent.

Picus Security vs The NodeZero Platform by Horizon3.ai comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Picus Security
Ranking in Breach and Attack Simulation (BAS)
5th
Average Rating
9.0
Reviews Sentiment
7.9
Number of Reviews
6
Ranking in other categories
No ranking in other categories
The NodeZero Platform by Ho...
Ranking in Breach and Attack Simulation (BAS)
1st
Average Rating
8.8
Reviews Sentiment
6.1
Number of Reviews
24
Ranking in other categories
Vulnerability Management (8th), Advanced Threat Protection (ATP) (13th), Penetration Testing Services (1st), Risk-Based Vulnerability Management (2nd)
 

Mindshare comparison

As of June 2026, in the Breach and Attack Simulation (BAS) category, the mindshare of Picus Security is 10.6%, down from 18.1% compared to the previous year. The mindshare of The NodeZero Platform by Horizon3.ai is 14.2%, up from 8.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Breach and Attack Simulation (BAS) Mindshare Distribution
ProductMindshare (%)
The NodeZero Platform by Horizon3.ai14.2%
Picus Security10.6%
Other75.2%
Breach and Attack Simulation (BAS)
 

Featured Reviews

KA
Information Security System Manager at CS-Consulting
A tool with great integration capabilities and a good support team
Picus Security has been implemented in our organization to enhance threat detection by allowing us to test some of the other security tools in our company. I recommend the product to others who plan to use it. The tool has not had an impact on our company's overall security posture since the time of implementation since we just used it for some testing purposes, during which it did show some interesting results. I rate the overall tool a nine out of ten.
Brent Hamlin - PeerSpot reviewer
Infrastructure Manager at a construction company with 501-1,000 employees
Continuous threat scanning has improved remediation time and strengthened executive reporting
The best features that The NodeZero Platform by Horizon3.ai offers include the automated scans, which are great to use; you set it, scope it, and let it go, which works really well. The executive reporting feature is impactful for me as a manager, providing a strong foundation to give quarterly and yearly reports to our executives and board to see the state of our infrastructure from a security standpoint. The level of detail and clarity in the executive reports from The NodeZero Platform by Horizon3.ai absolutely helps me communicate effectively with leadership. They are detailed enough for me to extract the necessary information tailored for the executives and to provide a broader perspective on our mitigation efforts or accepted risk stance and where additional controls exist. The NodeZero Platform by Horizon3.ai has positively impacted my organization by giving us a better continuous picture of our security posture, what's exploitable, and what can be used against the organization. It allows us to run scans whenever needed, unlike a single third-party system that only provides a snapshot in time; our processes must be ongoing as the security landscape is dynamic. NodeZero's endpoint security effectiveness feature impacts my understanding of potential security threats by providing a clear picture of both the external and internal landscapes within my organization, enabling me to prioritize and adjust as needed for vulnerabilities such as WordPress plugin issues or user enumerations and software code version assessments. I have built The NodeZero Platform by Horizon3.ai into our weekly and monthly workflows for security CI/CD, and we scan our externally accessible assets every week to address anything quickly if it comes up. That includes our firewalls, websites, and anything that is an external web server, which we scan weekly, while the monthly scans are for internal systems that feed our security CI/CD pipeline, enabling us to action across and prioritize any vulnerabilities caught by The NodeZero Platform by Horizon3.ai.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"One of the most valuable features would be the detection capability, specifically the ability to detect alarms and logs collected from SIEM tools."
"The most valuable feature of Picus Security is its threat intelligence, providing suggestions to block and prevent attacks by identifying malicious files and providing threat IDs."
"It provides good reports and offers signature-based solutions."
"The most valuable feature of the solution is its integration capabilities with the other security tools."
"Picus Security has improved and is still improving the security level of my organization."
"The list of vulnerabilities that get detected is the most valuable feature."
"You have the liberty of physically executing a specific set of rules in your environment."
"It's very useful software because the customer mostly configures their IPS and manages their firewalls, WAF, and the DBS according to the latest update, latest news, or according to the situation."
"The return on investment from The NodeZero Platform by Horizon3.ai is almost one hundred percent."
"The NodeZero Platform's real attack capabilities help in identifying vulnerabilities on our on-prem systems because it provides actual vulnerabilities by attacking our systems."
"After the third party conducts the pen test, The NodeZero Platform is run, and it finds the same things they found and sometimes a few other things that they did not even identify."
"Penetration testing and scans are useful features."
"The NodeZero Platform by Horizon3.ai has positively impacted my organization by allowing my security team to be more efficient and focus on the most valuable work at the highest criticality."
"We experienced a threat that could have severely crippled us, but we were able to shut it down before it escalated, thanks to internal vulnerability testing and addressing critical vulnerabilities using their tool."
"My favorite feature about The NodeZero Platform is that it's autonomous, and it truly delivers on that promise—it can be set and forgotten while it performs its tasks, and it does exactly what it claims to do."
"The NodeZero Platform's real attack capabilities help identify vulnerabilities on my on-premise systems by adding an element of validation and offensive security testing on top of known vulnerabilities. The feature that allows security teams to fix and retest vulnerabilities instantly is very useful, even though it may not happen literally 'instantly.' It's a necessary tool for any organization to understand whether vulnerabilities are genuinely exploitable by attackers. With its near-real-time testing capabilities, it's an essential part of any security portfolio."
 

Cons

"Let's say if a customer's environment has 10 security devices and they need to know that there is an attack that has bypassed their devices, they cannot go and inspect every device and every rule in their security devices."
"The amount of integrations that the product can handle is an area of concern, making it one of the aspects where improvements are required."
"According to the attack vectors, you cannot specify which product is failing or which product is working well because there's no agent."
"There are a lot of other products which are performing better; as far as Picus is concerned, we have been aggressively trying to reach out to customers to try to sell it, but have not been successful."
"The reporting and data analysis could be improved. Specifically, the analysis of the results."
"To improve, Picus Security could consider establishing a data center in India to address trust issues and increase interest from Indian customers."
"There is room for improvement in the response rate provided by customer support."
"Occasionally, I will get one that does not offer a lot in the way of specific steps because the device on which it found the vulnerability is not a standard device that it recognizes."
"I would like to see an improvement in the notification management."
"The NodeZero Platform by Horizon3.ai could be improved by speeding up the time from initializing a test to actually starting the test, as the deployment of the underlying infrastructure can take several minutes, sometimes over 10 minutes."
"If we have had problems, that is with the actual licensing style they are using."
"The NodeZero Platform by Horizon3.ai can be improved in some ways, particularly regarding the test scan sometimes."
"When it comes to the stability of The NodeZero Platform by Horizon3.ai, I would rate it around seven to eight because the stability is not that high initially due to the need for daily updates and modifications as new vulnerabilities appear."
"We did hundreds of tests, so that is why we did not continue, as it was very expensive for a very low yield."
"They've added a chatbot which isn't particularly useful, but when it can't answer questions, it forwards messages to human support."
 

Pricing and Cost Advice

"There is a yearly license according to the number of vectors. The pricing is moderate."
"They have certain price ranges for their products, depending upon the use cases, and the number of applications the customer wants to try."
Information not available
report
Use our free recommendation engine to learn which Breach and Attack Simulation (BAS) solutions are best for your needs.
900,644 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Manufacturing Company
9%
Government
7%
Computer Software Company
7%
Comms Service Provider
9%
Manufacturing Company
8%
Government
8%
Educational Organization
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business5
Midsize Enterprise2
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise4
Large Enterprise8
 

Questions from the Community

What is your experience regarding pricing and costs for Picus Security?
The pricing of Picus Security is average, and it offers a good value for money.
What needs improvement with Picus Security?
There is room for improvement in the response rate provided by customer support. Picus Security could improve the response time.
What is your primary use case for Picus Security?
I can simulate an attack into a live environment and test whether my controls are working properly. It checks if the controls can stop and mitigate the attacks.
What needs improvement with Horizon3.ai?
The NodeZero Platform by Horizon3.ai could be improved by reducing the elapsed time from identifying a zero-day vulnerability from their QA environment to their production environment.
What is your primary use case for Horizon3.ai?
My main use case for The NodeZero Platform by Horizon3.ai includes pen testing and vulnerability management. I use The NodeZero Platform by Horizon3.ai to run weekly external and internal scans to ...
What advice do you have for others considering Horizon3.ai?
My advice to others looking into using The NodeZero Platform by Horizon3.ai is to do yourself a favor and see what the product will find. The platform's real attack capabilities have helped in iden...
 

Also Known As

No data available
Horizon3.ai
 

Overview

 

Sample Customers

Akbank, Exclusive Networks, Garanti, ING Bank, QNB Finansbank, Turkcell, Vodafone, Yapı Kredi
Government agencies, Defense Industrial Base organizations, and enterprises in regulated industries such as finance, healthcare, manufacturing, and criticalinfrastructure rely on NodeZero to meet rigorous security and compliance requirements with continuous, scheduled, and on-demand testing.
Find out what your peers are saying about Picus Security vs. The NodeZero Platform by Horizon3.ai and other solutions. Updated: June 2026.
900,644 professionals have used our research since 2012.