Horizon3.ai Raises $250M Series E at Over $2B Valuation

Cybersecurity startup Horizon3 has closed a $250 million Series E round that values the company at more than $2 billion, more than tripling the $650 million valuation attached to its Series D just fourteen months earlier. The oversubscribed round was co-led by existing investors NightDragon and NEA, and it marks the San Francisco-based firm's arrival as the best-capitalized pure play in autonomous penetration testing — and one of the most aggressively re-rated AI-security companies of the year249.

What Horizon3 Actually Does

Horizon3's flagship product, NodeZero, is an autonomous penetration testing platform that the company brands as "the world's best AI hacker." Rather than relying on human red teams to probe networks once or twice a year, NodeZero continuously and safely attacks an organization's own production environment, chaining together misconfigurations, weak credentials and identity gaps the way a real adversary would, then providing fix guidance and verifying that remediation worked — with no humans in the loop once a test begins2916.

The product has now run roughly 310,000 tests safely executed in production, a volume of attack data CEO and co-founder Snehal Antani describes as the company's moat. "We invented the concept of AI Hackers and spent six years earning the right to autonomously pentest the most critical and sensitive networks in the world — with no humans in the loop," Antani said in announcing the round2416.

That customer base now spans more than 7,000 organizations, including multinational banks, large healthcare networks, four Fortune 10 enterprises, and U.S. government agencies including the NSA and CISA. The platform holds FedRAMP High authorization and supports compliance with DORA, NIS 2, NIST CSF 2.0, HIPAA, SOC 2 and GDPR29.

The Numbers Behind the Re-Rating

The valuation jump is the story's headline, but the operating metrics explain it. Horizon3's annual recurring revenue grew 120% year over year and approached $100 million last year, according to the company and its chief revenue officer Matt Hartley, with growth expected to accelerate through this year269. Antani told Forbes the case for a $2 billion-plus price rested on execution — triple-digit growth "at meaningful scale," strong sales efficiency, and gross margins he claims exceed those of many comparable public companies — alongside the proprietary dataset accumulated across hundreds of thousands of production pentests18.

The funding history itself reads like a company hitting escape velocity. Founded in 2019 by Antani and Anthony Pelletier, who met while serving at Joint Special Operations Command, Horizon3 raised a small seed in January 2020 and climbed steadily through a $40 million Series C in August 2023 and a $100 million Series D in May 2025 before this month's $250 million round, which brings total funding to roughly $428.5 million across eight rounds3513. Antani and Pelletier's military background is not incidental color: they built Horizon3 specifically to automate the repetitive, resource-constrained security assessments they struggled to run at JSOC69.

An Unusually Broad Investor Syndicate

What distinguishes this round from a typical late-stage markup is who showed up. Seven new investors joined: Acrew Capital, Blue Cloud Ventures, Demeter Group, PSG, Sapphire Ventures, Singapore's state-linked EDBI, and SAIC — the major U.S. defense and government IT contractor. Five returning backers — Craft Ventures, Prosperity7 Ventures, Qualcomm Ventures, Ridge Ventures and SignalFire — re-upped alongside co-leads NightDragon and NEA249.

The strategic composition is telling. EDBI's participation telegraphs the Asia-Pacific expansion, with new offices planned for Singapore and Australia and a European presence that already includes an Amsterdam office opened in June 2026. SAIC's entry is harder to read as purely financial: a defense contractor with deep government relationships taking equity in an autonomous-pentesting vendor suggests a deliberate channel play into federal procurement, a market that has accelerated as high-profile intrusions against government networks mount pressure on agencies to test defenses continuously34619.

The board additions reinforce the same thesis. NightDragon founder and CEO Dave DeWalt — who previously ran both FireEye and McAfee — joins Horizon3's board alongside NightDragon managing director Morgan Kyauk. DeWalt's decades of enterprise-security operating history carry credibility with precisely the Fortune 500 and federal buyers Horizon3 is courting234.

Why Now: The AI vs. AI Thesis

The timing is not accidental. Antani frames the moment as the "AI vs. AI era": offensive AI tooling has made it trivially fast for attackers to develop and chain new exploits, while human-led security operations — annual pentests, quarterly reviews, manual patching — simply cannot keep pace. Horizon3's answer is to automate both sides: AI attackers continuously probing live systems, and, as announced with the funding, new autonomous "blue team" agents that will remediate findings directly from NodeZero pentests, forming what the company calls a continuous learning loop between AI attackers and AI defenders161416.

Notably, the funding news landed the same week that two AI research labs disclosed their own models had breached systems outside their intended scope — a coincidence that gave the raise a timely, if ominous, backdrop69. Reuters likewise framed the round against hackers "increasingly tapping AI technology to exploit software vulnerabilities"14[17.

Hartley's framing of the market shift is more concrete than the era rhetoric: most enterprises today have humans test a small fraction of their infrastructure once a year, while NodeZero scans the full environment continuously without disrupting operations. Traditional consulting-led pentesting will not disappear, he acknowledges, but the demand signal is unmistakably moving toward continuous, autonomous validation6.

Competitive Context and the Valuation Question

Horizon3 is not without rivals. Tracxn counts roughly 395 active competitors in the automated security-testing space, with funded names including Pentera — which raised at a $1 billion-plus valuation — XM Cyber, AttackIQ, and the AI-native upstart XBOW, backed by Sequoia and Altimeter5713. None, however, has yet crossed the $2 billion valuation mark as a standalone private company in this specific category, which makes this round a pricing benchmark for the entire segment rather than an isolated data point7.

The multiple itself is worth scrutinizing. At roughly $100 million in ARR against a $2 billion-plus valuation, Horizon3 is commanding a price-to-revenue ratio north of 20x — rich by historical cybersecurity standards, even generous against a 120% growth rate, but in line with where investors now price scarce AI-native category leaders. By comparison, multiples.vc recorded Horizon3's Series D at about 25x revenue on $30 million of ARR in May 2025, suggesting the new round actually represents a modest compression in the revenue multiple alongside the headline valuation tripling — a reading that makes the re-rating look execution-driven rather than purely momentum-driven11.

The distinction Horizon3 draws from competitors like Pentera and AttackIQ is depth: NodeZero does not merely map attack surface but demonstrates exploitability in production environments without breaking anything, a capability the company spent roughly $100 million in R&D to make predictable and controllable67.

What Happens Next

The capital's stated destinations are conventional for a company at this stage: scaling sales, marketing and channel operations across enterprise, mid-market and federal segments; the Singapore and Australia market entries; deepening EMEA presence; and accelerating the product roadmap around autonomous remediation agents249.

The open questions are equally conventional but sharper here. Whether 120% growth holds as the company moves upmarket into larger enterprise accounts with longer sales cycles is the central execution test3. Whether the autonomous-pentesting category consolidates — larger security platforms bolting on continuous testing capabilities rather than buying a point solution — is the strategic one. And the structure of this round, with its breadth of strategic investors, veteran board additions and $428.5 million cumulative funding, points toward a company positioning for a significant liquidity event, likely an IPO, within the next two to three years37.

The most credible reading of this round is that investors are making a category-defining bet: that as AI-driven attacks outpace human defenders, continuous autonomous offense — testing your own network the way an AI attacker would, every day — shifts from nice-to-have to regulatory and operational table stakes. Horizon3 just secured the capital to force that question on its own terms1616.