Horizon3.ai NodeZero (autonomous pentesting) alternatives
Horizon3.ai NodeZero (autonomous pentesting) is listed under Security. These 53 agents share at least one category with it, ranked by the number of shared framework tags, then by same primary category.
| # | Agent | Category | Shared framework tags | Compare |
|---|---|---|---|---|
| 1 | Andesite Human-AI SOC (Azimuth for Government) Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Andesite Human-AI SOC (Azimuth for Government) |
| 2 | CloudSEK AI Agents Predictive attack-path platform whose AI agents correlate digital-risk, attack-surface and threat signals into validated paths, plus AIVigil for exposed AI and agentic workflows. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs CloudSEK AI Agents |
| 3 | Conveyor Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Conveyor |
| 4 | Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR) Palo Alto Networks' agentic layer for Cortex: prebuilt and custom security agents that investigate and resolve cloud and SOC issues across Cortex Cloud, XSIAM and XDR, with configurable autonomy and approvals. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR) |
| 5 | CrowdStrike Charlotte AI Agentic AI analyst for cybersecurity within the CrowdStrike Falcon platform, assisting detection, investigation and response workflows. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs CrowdStrike Charlotte AI |
| 6 | Cyble Blaze AI Multi-agent cybersecurity engine across Cyble's threat-intelligence, endpoint and cloud products: agents hunt, correlate IOCs, isolate endpoints, block domains and draft reports, with human-in-the-loop guardrails. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Cyble Blaze AI |
| 7 | Darktrace Cyber AI Analyst Purpose-built agentic AI that autonomously investigates security alerts, tests hypotheses and produces natural-language incident reports for SOC teams. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Darktrace Cyber AI Analyst |
| 8 | Dropzone AI SOC Analyst AI agents for the SOC: an AI SOC Analyst that investigates alerts end to end and shows its reasoning, plus an AI Threat Hunter and AI Threat Intel Analyst. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Dropzone AI SOC Analyst |
| 9 | Equixly Agentic AI Hacker (continuous API pentesting) Italian offensive-security platform whose agentic AI hacker continuously maps APIs and applications, chains API interactions to find exploitable flaws, and validates findings for remediation. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Equixly Agentic AI Hacker (continuous API pentesting) |
| 10 | Ethiack Hackian (agentic AI pentesting) Portuguese autonomous pentesting platform: the Hackian agentic AI maps the attack surface, runs exploitation routines, chains attack paths and delivers proof-of-exploit with compliance-ready reports. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Ethiack Hackian (agentic AI pentesting) |
| 11 | Exaforce Exabots (agentic SOC) Four role-based AI agents (Detect, Triage, Investigate, Respond) on Exaforce's own security data platform, covering detection engineering, tier-3 triage, threat hunting and playbook-driven response with approval gates. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Exaforce Exabots (agentic SOC) |
| 12 | Hadrian Nova (agentic pentesting) On-demand penetration testing run by a fleet of AI hacker agents, paired with Hadrian Atlas for continuous external exposure management. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Hadrian Nova (agentic pentesting) |
| 13 | Intruder AI Pentesting On-demand, code-aware web-app pentesting by AI agents built by Intruder's CREST-certified testers, with audit-ready reports in hours and issue-level 'micro pentests' to triage scanner findings. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Intruder AI Pentesting |
| 14 | Lumos Albus (identity governance agent) AI agent built into the Lumos identity governance platform that designs roles, completes access reviews (approve/flag with peer and usage analysis) and investigates identity risk, explaining every decision. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Lumos Albus (identity governance agent) |
| 15 | Microsoft Entra Conditional Access Optimization Agent Security Copilot agent in Microsoft Entra that scans a tenant for users, apps and agent identities not covered by Conditional Access, recommends or updates policies and applies one-click remediation. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Microsoft Entra Conditional Access Optimization Agent |
| 16 | Mindflow AI Agents (agentic SecOps/ITOps automation) No-code agentic automation platform for SecOps, ITOps and CloudOps: mission-oriented AI agents that reason and act across 4,000+ integrations, with RBAC, approval steps and full audit logs. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Mindflow AI Agents (agentic SecOps/ITOps automation) |
| 17 | Mondoo Agentic vulnerability management that finds, prioritizes, remediates and verifies fixes with policy-as-code and approval gates. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Mondoo |
| 18 | Orca Security AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Orca Security |
| 19 | Plerion Pleri (AI security engineer) Sydney-based cloud and AI security platform with Pleri, an agent that investigates findings, checks real exploitability, raises fix PRs and Jira tickets, and follows each change through to merge. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Plerion Pleri (AI security engineer) |
| 20 | Qevlar AI Autonomous AI SOC platform that triages, enriches and investigates security alerts across SIEM/XDR, EDR and other tools and returns a documented verdict for analysts. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Qevlar AI |
| 21 | SafeBase Trust Center and AI Questionnaire Assistance for customer security reviews, now part of Drata (SafeBase brand being unified into Drata). | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs SafeBase |
| 22 | Sekoia Elevate (AI SOC agents) Agentic AI SOC analyst inside the Sekoia SOC platform: agents autonomously investigate every alert and case, show their reasoning and produce audit-ready reports for analyst validation. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Sekoia Elevate (AI SOC agents) |
| 23 | Snyk Developer-first application security platform; Snyk Agent Fix (formerly DeepCode AI Fix) generates and validates AI-suggested remediations for Snyk Code findings. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Snyk |
| 24 | Sophos MDR AI Agents (Triage and Case Investigation) Sophos's managed detection and response service uses in-house AI agents for alert triage and case investigation, with Sophos analysts supervising and owning response decisions. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Sophos MDR AI Agents (Triage and Case Investigation) |
| 25 | Sysdig Agentic AI (Sysdig Secure AI agents) Outcome-driven AI agents inside Sysdig Secure for cloud and container security: Vuln, SOC, Posture, Risk and Response agents that investigate, prioritise and drive remediation on Falco-based runtime data. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Sysdig Agentic AI (Sysdig Secure AI agents) |
| 26 | Tenable One (Hexa AI) Exposure management platform with Tenable Hexa AI agentic orchestration for vulnerability triage and remediation workflows. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Tenable One (Hexa AI) |
| 27 | Torq AI SOC Platform (Socrates and HyperAgents) Agentic SOC platform where the Socrates orchestrator plans and delegates to specialised HyperAgents for alert triage, investigation and response automation. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Torq AI SOC Platform (Socrates and HyperAgents) |
| 28 | TrendAI Vision One Agentic SIEM and Companion Trend Micro's SOC stack (now under the TrendAI brand) pairing an Agentic SIEM and Agentic SOAR with purpose-built agents and the Trend Companion AI assistant. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs TrendAI Vision One Agentic SIEM and Companion |
| 29 | Wiz Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments. | Security | — | Horizon3.ai NodeZero (autonomous pentesting) vs Wiz |
| 30 | Aikido AI AutoFix Aikido AutoFix turns SAST, SCA, IaC, container, pentest and AI code-audit findings into reviewable pull requests or IDE patches. Vendor is Belgium-founded with a Ghent European HQ. | Code security | — | — |
| 31 | Amazon Q Developer security scanning Amazon Q Developer code reviews that scan for SAST issues, secrets, IaC misconfigurations, quality issues, deployment risks and SCA, with some in-IDE suggested fixes. | Code security | — | — |
| 32 | BigID Enterprise data security and DSPM platform for discovering, classifying and governing sensitive data including AI data risk use cases. | Risk | — | — |
| 33 | Black Kite AI Agent Third-party cyber risk agent made of sub-agents (Assessment, Incident Response, Threat Actor Intelligence, Investigation, Prioritization, Procurement) that assess vendors, investigate exposures, trigger rescans and draft outreach. | Risk | — | — |
| 34 | Checkmarx One Assist Family of agentic AppSec agents on Checkmarx One (Developer Assist in the IDE, plus triage/remediation). Checkmarx Ltd’s registered office is Ramat Gan, Israel. | Code security | — | — |
| 35 | Claude Code security review Anthropic automated security review in Claude Code: the /security-review command and the anthropics/claude-code-security-review GitHub Action for pull-request comments. | Code security | — | — |
| 36 | Codacy AI Reviewer Hybrid AI pull-request reviewer from Codacy (Lisbon). Combines static analysis with LLM context; vendor pages include security-vulnerability feedback and suggested fixes. | Code security | — | — |
| 37 | Cursor Bugbot Cursor’s AI pull-request reviewer. Official docs say it identifies bugs, security issues and code-quality problems and comments with explanations and suggested fixes. | Code security | — | — |
| 38 | Escape (AI pentesting and DAST) Offensive security platform using AI agents for attack surface discovery, business-logic DAST and multi-agent pentesting (Cascade) of APIs and web apps. | Code security | — | — |
| 39 | GitHub Copilot Autofix LLM-generated suggested fixes for GitHub code-scanning alerts (CodeQL). Part of GitHub Code Security / Advanced Security; no separate Copilot subscription is required. | Code security | — | — |
| 40 | GitLab Duo Vulnerability Resolution GitLab Duo features that explain SAST vulnerabilities and open merge requests with proposed AI remediations, including an agentic resolution flow. | Code security | — | — |
| 41 | Pixee (automated triage and fix) Security 'harness' that triages SAST/SCA/DAST/secrets findings for exploitability, opens fix pull requests with the analysis attached, works inside coding agents, and builds design-stage threat models. | Code security | — | — |
| 42 | Rippling Automated Compliance Compliance automation built into Rippling's HR and IT platform, with AI framework setup, evidence collection, in-platform AI remediation, an audit portal and Trust Centers. | Compliance | — | — |
| 43 | Scytale AI-powered security and compliance platform combining agentic GRC automation with optional in-house GRC expert consulting bundles. | Compliance | — | — |
| 44 | Secureframe Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages. | Compliance | — | — |
| 45 | SecurityScorecard Third-party cyber risk platform with security ratings and TITAN AI agents running TPRM intake, assessment, monitoring and remediation. | Risk | — | — |
| 46 | Semgrep Multimodal Semgrep’s AI layer (successor branding to Semgrep Assistant) for detection, triage, remediation guidance and optional autofix on the Semgrep AppSec Platform. | Code security | — | — |
| 47 | SonarQube AI CodeFix Sonar LLM-generated fix suggestions for a documented subset of SonarQube issues, in Cloud Team/Enterprise and Server Enterprise/Data Center editions. | Code security | — | — |
| 48 | UpGuard Cyber risk and third-party risk management platform with published CRPM pricing page. | Risk | — | — |
| 49 | Vanta Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses. | Compliance | — | — |
| 50 | Veracode Fix Veracode’s AI-assisted remediation for SAST flaws and SCA dependency vulnerabilities, with suggested patches in IDE, CLI and SCM workflows. | Code security | — | — |
| 51 | Xygeni DevAI and CoreAI (agentic AppSec) Agentic AppSec from Valladolid-based Xygeni: DevAI scans code in the IDE and generates validated fixes (including for AI-generated code), while CoreAI prioritises risk and orchestrates remediation PRs across the platform. | Code security | — | — |
| 52 | Zania Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability. | Compliance | — | — |
| 53 | ZeroPath (AI-native SAST and autofix) AI-native AppSec platform that finds business-logic and auth flaws, validates findings from existing SAST tools, runs PR security reviews and generates one-click patches refined in natural language. | Code security | — | — |
Ranking is mechanical (shared dataset tags), not a quality judgement. Framework tags indicate relevance, not certification.