Snapshot 95284
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content NodeZero, our autonomous pentesting solution, is a true self-service SaaS that is safe to run in production and requires no persistent or credentialed agents. See your enterprise through the eyes of the attacker, identify your ineffective security controls, and ensure your limited resources are spent fixing problems that can actually be exploited. Privacy Policy - https://www.horizon3.ai/privacy-policy/Opens in new tab Terms and Conditions - https://www.horizon3.ai/terms-of-service/Opens in new tab Support - https://support.horizon3.ai/Opens in new tab Contact - grc@horizon3.ai Compliance SOC 2 Type II GDPR CMMC 2.0 Resources View all Compliance Reports FY26 - SOC 2 Type II FY26 - SOC2 Type II Bridge Letter FY26 - Business Continuity Test Result Horizon3 EU Cyber Resilience Act Statement.pdf View 1 more Policies Information Security Policy (AUP) Access Control Policy Risk Management Policy Code of Conduct View 11 more Penetration Tests 2025 - Penetration Test 2024 - Penetration Test.pdf 2025 - Penetration Test - Remediation Summary Financials FY26-W9.pdf JPM Chase Bank Details Confirmation Letter Horizon3 Banking Details Privacy Standard Contractual Clauses (SCC) - FINAL.pdf Horizon3 NodeZero RoPA (Customer Facing) Insurance FY27 - Certificate of Insurance H3 Insurance Summary.pdf AI Governance NodeZero EU AI Act Adherence Statement NodeZero NIST AI RMF Adherence Statement Other resources Node Zero Accessibility Conformance Report - VPAT 2.4INT - 08.25 Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Production application access restricted View 10 more Infrastructure security controls Organizational security Production inventory maintained Confidentiality Agreement acknowledged by contractors Confidentiality Agreement acknowledged by employees View 2 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 23 more Internal security procedures controls Data and privacy Customer data deleted upon leaving Data collected Customer personally identifiable information Employee personally identifiable information Credit card information Personal health information Subprocessors View all Amazon Web Services • Cloud Service Provider US or EU Purpose: Cloud Service Provider on which the NodeZero platform for APTaaS is ran on. PII: Email IP Address Name Cookies Salesforce • CRM Platform US Purpose: CRM platform for enabling our Go-To-Market teams with Sales information and conversations, contracts, NDA's, and contact details for customers and prospects. PII: Name Email Phone Company Address Google Workspace • SaaS Collaboration Toolset US Purpose: SaaS Collaboration toolset for storing business information as well as email, but no actual user data flows through Google Workspace. PII: Name Email Potential other PII disclosed by customer via email ZenDesk • Customer Support Services US Purpose: Provides customer support services via Customer Chat, Support Ticketing System, and Knowledge Base Platform PII: Name Email Potential other PII disclosed by customer during chat session FAQ View all Updates View all Compliance Horizon3.ai Advances AI Governance: NIST AI RMF Alignment, EU AI Act Alignment, and Customer-Facing RoPA Now Available Published July 28, 2026 We are pleased to announce that we are now aligned with two of the most important frameworks shaping responsible AI and data governance today: the EU AI Act and the NIST AI Risk Management Framework (RMF). As part of this milestone, we have published the following resources in our Trust Center: EU AI Act Adherence Statement — describing how our practices, processes, and controls map to the requirements of the EU AI Act. NIST RMF Adherence Statement — describing how our practices, processes, and controls map to the requirements of NIST AI RMF. Record of Processing Activities (RoPA) — a customer focused document describing how personal data is processed across within Horizon3 systems, which supports our customer's compliance obligations. These publications reflect our ongoing commitment to transparency, accountability, responsible AI practices and privacy. We believe our customers deserve clear, accessible documentation of how we manage risk and protect data. Privacy Notice of New Sub-Processor: Elastic Security (elastic.co) Published July 25, 2025 As part of our ongoing commitment to transparency and GDPR compliance, we are providing notice of an upcoming change to our sub-processor list. Effective Date: July 25, 2025 Sub-Processor Added: Name: Elastic Security (elastic.co) Location: United States Purpose: Elastic Security is used as our Security Information and Event Management (SIEM) solution to collect, analyze, and respond to security events across our infrastructure. This supports our efforts to detect threats, monitor anomalies, and enhance overall security posture. Data Categories: System event metadata, access logs, security audit trails, and infrastructure telemetry data. Data may include pseudonymized user identifiers for security monitoring purposes. We have reviewed Elastic’s security, privacy, and compliance frameworks and confirmed they meet our data protection requirements under applicable laws and regulations. If you are a customer and have any questions or concerns regarding this change, please contact us at [info@horizon3.ai]. You can view our full list of sub-processors at any time [https://trust.horizon3.ai/subprocessors\Opens in new tab]. Privacy Notice of New Sub-Processor: Gainsight Published April 21, 2025 As part of our ongoing commitment to transparency and GDPR compliance, we are providing notice of an upcoming change to our sub-processor list. Effective Date: - April 21, 2025 Sub-Processor Added: Name: Gainsight, Inc. Location: United States Purpose: Gainsight is used to support our customer success initiatives, including customer engagement, onboarding, health monitoring, and support experience optimization. Data Categories: Business contact information Account usage data Support history Customer feedback We have reviewed Gainsight’s security, privacy, and compliance measures and confirmed they meet our data protection requirements. If you are a customer and have any questions or concerns regarding this change, please contact us at [info@horizon3.ai]. You can view our full list of sub-processors at any time [https://trust.horizon3.ai/subprocessorsOpens in new tab]. Media View all NodeZero Overview Opens in new tab NodeZero scales offensive security with autonomous penetration testing. See how production exploits and proven impact drives priority, unlocks precision threat deception and detection, and delivers a gold mine of trend data for exposure management and executive reporting. Read more about Notice of New Sub-Processor: Elastic Security (elastic.co) NodeZero, our autonomous pentesting solution, is a true self-service SaaS that is safe to run in production and requires no persistent or credentialed agents. See your enterprise through the eyes of the attacker, identify your ineffective security controls, and ensure your limited resources are spent fixing problems that can actually be exploited. Privacy Policy - https://www.horizon3.ai/privacy-policy/Opens in new tab Terms and Conditions - https://www.horizon3.ai/terms-of-service/Opens in new tab Support - https://support.horizon3.ai/Opens in new tab Contact - grc@horizon3.ai Compliance SOC 2 Type II GDPR CMMC 2.0 Resources View all Compliance Reports FY26 - SOC 2 Type II FY26 - SOC2 Type II Bridge Letter FY26 - Business Continuity Test Result Horizon3 EU Cyber Resilience Act Statement.pdf View 1 more Policies Information Security Policy (AUP) Access Control Policy Risk Management Policy Code of Conduct View 11 more Penetration Tests 2025 - Penetration Test 2024 - Penetration Test.pdf 2025 - Penetration Test - Remediation Summary Financials FY26-W9.pdf JPM Chase Bank Details Confirmation Letter Horizon3 Banking Details Privacy Standard Contractual Clauses (SCC) - FINAL.pdf Horizon3 NodeZero RoPA (Customer Facing) Insurance FY27 - Certificate of Insurance H3 Insurance Summary.pdf AI Governance NodeZero EU AI Act Adherence Statement NodeZero NIST AI RMF Adherence Statement Other resources Node Zero Accessibility Conformance Report - VPAT 2.4INT - 08.25 Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Production application access restricted View 10 more Infrastructure security controls Organizational security Production inventory maintained Confidentiality Agreement acknowledged by contractors Confidentiality Agreement acknowledged by employees View 2 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 23 more Internal security procedures controls Data and privacy Customer data deleted upon leaving Data collected Customer personally identifiable information Employee personally identifiable information Credit card information Personal health information Subprocessors View all Amazon Web Services • Cloud Service Provider US or EU Purpose: Cloud Service Provider on which the NodeZero platform for APTaaS is ran on. PII: Email IP Address Name Cookies Salesforce • CRM Platform US Purpose: CRM platform for enabling our Go-To-Market teams with Sales information and conversations, contracts, NDA's, and contact details for customers and prospects. PII: Name Email Phone Company Address Google Workspace • SaaS Collaboration Toolset US Purpose: SaaS Collaboration toolset for storing business information as well as email, but no actual user data flows through Google Workspace. PII: Name Email Potential other PII disclosed by customer via email ZenDesk • Customer Support Services US Purpose: Provides customer support services via Customer Chat, Support Ticketing System, and Knowledge Base Platform PII: Name Email Potential other PII disclosed by customer during chat session FAQ View all Updates View all Compliance Horizon3.ai Advances AI Governance: NIST AI RMF Alignment, EU AI Act Alignment, and Customer-Facing RoPA Now Available Published July 28, 2026 We are pleased to announce that we are now aligned with two of the most important frameworks shaping responsible AI and data governance today: the EU AI Act and the NIST AI Risk Management Framework (RMF). As part of this milestone, we have published the following resources in our Trust Center: EU AI Act Adherence Statement — describing how our practices, processes, and controls map to the requirements of the EU AI Act. NIST RMF Adherence Statement — describing how our practices, processes, and controls map to the requirements of NIST AI RMF. Record of Processing Activities (RoPA) — a customer focused document describing how personal data is processed across within Horizon3 systems, which supports our customer's compliance obligations. These publications reflect our ongoing commitment to transparency, accountability, responsible AI practices and privacy. We believe our customers deserve clear, accessible documentation of how we manage risk and protect data. Privacy Notice of New Sub-Processor: Elastic Security (elastic.co) Published July 25, 2025 As part of our ongoing commitment to transparency and GDPR compliance, we are providing notice of an upcoming change to our sub-processor list. Effective Date: July 25, 2025 Sub-Processor Added: Name: Elastic Security (elastic.co) Location: United States Purpose: Elastic Security is used as our Security Information and Event Management (SIEM) solution to collect, analyze, and respond to security events across our infrastructure. This supports our efforts to detect threats, monitor anomalies, and enhance overall security posture. Data Categories: System event metadata, access logs, security audit trails, and infrastructure telemetry data. Data may include pseudonymized user identifiers for security monitoring purposes. We have reviewed Elastic’s security, privacy, and compliance frameworks and confirmed they meet our data protection requirements under applicable laws and regulations. If you are a customer and have any questions or concerns regarding this change, please contact us at [info@horizon3.ai]. You can view our full list of sub-processors at any time [https://trust.horizon3.ai/subprocessors\Opens in new tab]. Privacy Notice of New Sub-Processor: Gainsight Published April 21, 2025 As part of our ongoing commitment to transparency and GDPR compliance, we are providing notice of an upcoming change to our sub-processor list. Effective Date: - April 21, 2025 Sub-Processor Added: Name: Gainsight, Inc. Location: United States Purpose: Gainsight is used to support our customer success initiatives, including customer engagement, onboarding, health monitoring, and support experience optimization. Data Categories: Business contact information Account usage data Support history Customer feedback We have reviewed Gainsight’s security, privacy, and compliance measures and confirmed they meet our data protection requirements. If you are a customer and have any questions or concerns regarding this change, please contact us at [info@horizon3.ai]. You can view our full list of sub-processors at any time [https://trust.horizon3.ai/subprocessorsOpens in new tab]. Media View all NodeZero Overview Opens in new tab NodeZero scales offensive security with autonomous penetration testing. See how production exploits and proven impact drives priority, unlocks precision threat deception and detection, and delivers a gold mine of trend data for exposure management and executive reporting. Read more about Notice of New Sub-Processor: Gainsight NodeZero, our autonomous pentesting solution, is a true self-service SaaS that is safe to run in production and requires no persistent or credentialed agents. See your enterprise through the eyes of the attacker, identify your ineffective security controls, and ensure your limited resources are spent fixing problems that can actually be exploited. Privacy Policy - https://www.horizon3.ai/privacy-policy/Opens in new tab Terms and Conditions - https://www.horizon3.ai/terms-of-service/Opens in new tab Support - https://support.horizon3.ai/Opens in new tab Contact - grc@horizon3.ai Compliance SOC 2 Type II GDPR CMMC 2.0 Resources View all Compliance Reports FY26 - SOC 2 Type II FY26 - SOC2 Type II Bridge Letter FY26 - Business Continuity Test Result Horizon3 EU Cyber Resilience Act Statement.pdf View 1 more Policies Information Security Policy (AUP) Access Control Policy Risk Management Policy Code of Conduct View 11 more Penetration Tests 2025 - Penetration Test 2024 - Penetration Test.pdf 2025 - Penetration Test - Remediation Summary Financials FY26-W9.pdf JPM Chase Bank Details Confirmation Letter Horizon3 Banking Details Privacy Standard Contractual Clauses (SCC) - FINAL.pdf Horizon3 NodeZero RoPA (Customer Facing) Insurance FY27 - Certificate of Insurance H3 Insurance Summary.pdf AI Governance NodeZero EU AI Act Adherence Statement NodeZero NIST AI RMF Adherence Statement Other resources Node Zero Accessibility Conformance Report - VPAT 2.4INT - 08.25 Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Production application access restricted View 10 more Infrastructure security controls Organizational security Production inventory maintained Confidentiality Agreement acknowledged by contractors Confidentiality Agreement acknowledged by employees View 2 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 23 more Internal security procedures controls Data and privacy Customer data deleted upon leaving Data collected Customer personally identifiable information Employee personally identifiable information Credit card information Personal health information Subprocessors View all Amazon Web Services • Cloud Service Provider US or EU Purpose: Cloud Service Provider on which the NodeZero platform for APTaaS is ran on. PII: Email IP Address Name Cookies Salesforce • CRM Platform US Purpose: CRM platform for enabling our Go-To-Market teams with Sales information and conversations, contracts, NDA's, and contact details for customers and prospects. PII: Name Email Phone Company Address Google Workspace • SaaS Collaboration Toolset US Purpose: SaaS Collaboration toolset for storing business information as well as email, but no actual user data flows through Google Workspace. PII: Name Email Potential other PII disclosed by customer via email ZenDesk • Customer Support Services US Purpose: Provides customer support services via Customer Chat, Support Ticketing System, and Knowledge Base Platform PII: Name Email Potential other PII disclosed by customer during chat session FAQ View all Updates View all Compliance Horizon3.ai Advances AI Governance: NIST AI RMF Alignment, EU AI Act Alignment, and Customer-Facing RoPA Now Available Published July 28, 2026 We are pleased to announce that we are now aligned with two of the most important frameworks shaping responsible AI and data governance today: the EU AI Act and the NIST AI Risk Management Framework (RMF). As part of this milestone, we have published the following resources in our Trust Center: EU AI Act Adherence Statement — describing how our practices, processes, and controls map to the requirements of the EU AI Act. NIST RMF Adherence Statement — describing how our practices, processes, and controls map to the requirements of NIST AI RMF. Record of Processing Activities (RoPA) — a customer focused document describing how personal data is processed across within Horizon3 systems, which supports our customer's compliance obligations. These publications reflect our ongoing commitment to transparency, accountability, responsible AI practices and privacy. We believe our customers deserve clear, accessible documentation of how we manage risk and protect data. Privacy Notice of New Sub-Processor: Elastic Security (elastic.co) Published July 25, 2025 As part of our ongoing commitment to transparency and GDPR compliance, we are providing notice of an upcoming change to our sub-processor list. Effective Date: July 25, 2025 Sub-Processor Added: Name: Elastic Security (elastic.co) Location: United States Purpose: Elastic Security is used as our Security Information and Event Management (SIEM) solution to collect, analyze, and respond to security events across our infrastructure. This supports our efforts to detect threats, monitor anomalies, and enhance overall security posture. Data Categories: System event metadata, access logs, security audit trails, and infrastructure telemetry data. Data may include pseudonymized user identifiers for security monitoring purposes. We have reviewed Elastic’s security, privacy, and compliance frameworks and confirmed they meet our data protection requirements under applicable laws and regulations. If you are a customer and have any questions or concerns regarding this change, please contact us at [info@horizon3.ai]. You can view our full list of sub-processors at any time [https://trust.horizon3.ai/subprocessors\Opens in new tab]. Privacy Notice of New Sub-Processor: Gainsight Published April 21, 2025 As part of our ongoing commitment to transparency and GDPR compliance, we are providing notice of an upcoming change to our sub-processor list. Effective Date: - April 21, 2025 Sub-Processor Added: Name: Gainsight, Inc. Location: United States Purpose: Gainsight is used to support our customer success initiatives, including customer engagement, onboarding, health monitoring, and support experience optimization. Data Categories: Business contact information Account usage data Support history Customer feedback We have reviewed Gainsight’s security, privacy, and compliance measures and confirmed they meet our data protection requirements. If you are a customer and have any questions or concerns regarding this change, please contact us at [info@horizon3.ai]. You can view our full list of sub-processors at any time [https://trust.horizon3.ai/subprocessorsOpens in new tab]. Media View all NodeZero Overview Opens in new tab NodeZero scales offensive security with autonomous penetration testing. See how production exploits and proven impact drives priority, unlocks precision threat deception and detection, and delivers a gold mine of trend data for exposure management and executive reporting.