DrochaidHorizon3.ai
Pricing

Three tiers. Pick the coverage you need.

Unlimited tests on every tier — run them as often as you like.

250

Flat rate up to 100 assets. Per asset from 101 to 500. Quoted beyond 500.

Choose platform tier

Web application pentesting

New

Core, Pro and Elite ask whether someone can break into your infrastructure, or move around once they are in. Web application pentesting tests whether someone can misuse the application itself.

Not included in the Core, Pro or Elite prices above.

See what it tests

Enquire for pricing
3Essential Eight controls evidenced

These are the Essential Eight controls autonomous testing can prove. Other obligations — policy, logging, governance — need documentation, not a pentest.

See exactly which in the coverage map

AUD, per year. Pricing reviewed quarterly against USD reference rates.

NodeZero Flex

Not ready for continuous? Start with a single test.

NodeZero Flex runs one full autonomous pentest — the same platform, the same proof, no recurring schedule. See what an attacker could reach, fix it, verify the fix, then decide whether to go continuous. Priced per test for your environment.

Compare platform tiers
FeatureCoreProElite
Autonomous pentesting
Internal pentests
External pentests
External asset discovery
Cloud pentests (Azure, AWS)
Kubernetes pentest
AD password audit
Phishing integration
Scheduled recurring tests
Threat Informed Perspectives (pentesting campaigns)
Operations
Vulnerability Management Hub
Fix actions with Quick Verify
Reports
MCP server
Endpoint (EDR) effectiveness
Threat detection
Tripwires threat detection
Rapid response N-day alerting
Risk-based vulnerability management
Vulnerability Risk Intelligence
High-Value Targeting
Threat Actor Intelligence
Advanced Data Pilfering
Insights — org-wide posture
Pricing metric

What counts as an asset?

NodeZero identifies unique assets by matching across IP address, host name, MAC address and cloud identifiers (such as AWS ARN).

The algorithm accounts for ephemeral IP addresses that occur via DHCP, Kubernetes containers, virtual machines and similar — so transient hosts don't inflate your count.

Examples of assets
  • Servers
  • Laptops, desktops and mobile devices
  • Virtual machines
  • Printers
  • IoT devices
  • Switches, routers, access points, endpoints
  • Public static IPs
  • Lambdas and serverless architecture
  • Kubernetes workloads
Pricing FAQ

Common questions

Can we run a single test before committing to a tier?
Yes. NodeZero Flex runs one full autonomous pentest — the same platform and the same proof as the annual tiers, without a recurring schedule. It suits organisations replacing a point-in-time penetration test, or wanting evidence in hand before moving to continuous testing. Flex is priced per test for your environment — talk to us.
How is an asset counted?
An asset is any networked entity (system, host, or machine) with an IP address that NodeZero discovers during a scan. The asset algorithm matches across IP, host name, MAC address and cloud identifiers (such as AWS ARN) to identify unique assets, and accounts for ephemeral IPs from DHCP, Kubernetes containers and virtual machines.
Is pricing billed annually?
Yes. All listed prices are AUD per year.
What happens if I exceed my asset count?
We will reach out before the next billing cycle to discuss moving to the next tier. We never throttle or stop testing mid-cycle.
How are the AUD prices set?
AUD pricing is set against a USD reference rate and reviewed quarterly to stay aligned with the global Horizon3.ai pricing.
Where is my data stored?
NodeZero runs from regional cloud infrastructure. For Australian and New Zealand customers we can deploy from local regions on request — confirm specifics with your account team.
How do I get a quote for more than 500 assets?
Talk to sales. Above 500 assets we price for your environment.

Ready to see NodeZero in action?

Book a demo with our team and we'll walk you through pricing options for your environment.

Book a demo