Horizon3 Expands NodeZero Availability to European MSPs via Pax8 Marketplace
The autonomous security testing platform is now accessible to managed service providers across Europe through the Pax8 distribution channel.
Key points
- Horizon3 and Pax8 expanded their partnership to bring NodeZero to European managed service providers.
- The platform allows MSPs to offer autonomous penetration testing and verified remediation services.
- NodeZero chains individual vulnerabilities into proven attack paths to prioritize corrective actions.
Horizon3 announced on October 16, 2026, that it has expanded its partnership with Pax8 to make the NodeZero Proactive Security Platform available to managed service providers across Europe. This expansion allows MSPs to purchase and resell the autonomous security testing tool through the Pax8 Marketplace, extending a distribution model that previously launched in North America.
The partnership enables European partners to deliver recurring security services that identify exploitable attack paths, guide remediation efforts, and verify that fixes are effective. According to Horizon3, this approach helps small and midsize businesses understand their actual exposure levels rather than relying on static lists of vulnerabilities that do not indicate real-world risk.
Autonomous Testing Capabilities
NodeZero autonomously tests production environments using real attack techniques within defined safety controls and scope. The platform covers internal and external infrastructure, cloud environments, and web applications. Instead of treating findings in isolation, the system chains weaknesses together to demonstrate attainable attacker impacts, such as unauthorized access or privilege escalation.
Keith Poyser, General Manager and SVP EMEA at Horizon3, stated that MSPs are accountable for customer security but often lack visibility into what is actually exploitable. He noted that NodeZero provides partners with the information needed to fix issues and verify remediation, enabling them to build services around measurable reductions in customer exposure.
Service Model for Partners
The platform supports multi-tenant management, MSP-friendly licensing, and white-labeled reporting, allowing partners to incorporate findings into their own service offerings. NodeZero WebApp extends testing to custom business-critical web applications, supporting authenticated testing to uncover exploitable weaknesses like broken access controls and business logic flaws that standard scanning might miss.
MSPs can use the tool to deliver initial assessments, support remediation engagements, and establish ongoing testing programs without conducting every penetration test manually. The service model connects demonstrated risks to corrective actions and verified results, helping customers understand the impact of their security investments. Horizon3 supports these operations through its EMEA headquarters in Amsterdam.
What should you do?
Managed service providers should evaluate whether their current offerings include verified remediation and continuous testing capabilities. Security leaders at small and midsize businesses should ask their providers how they determine which vulnerabilities are actually exploitable. Organizations should review their contracts to ensure they receive evidence of successful exploitation and documented attack paths.
What to do and how to stay safe: Horizon3
- Ask your managed service provider if they use autonomous tools to chain vulnerabilities into proven attack paths.
- Request evidence that remediation efforts have been verified through retesting rather than just patch installation.
- Ensure your security assessments include authenticated testing of custom web applications to find logic flaws.
- Review service level agreements to confirm they include ongoing security validation after infrastructure changes.
Step-by-step guide: Mobile Device Security: How to Protect Data Beyond Passwords
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
How does NodeZero differ from traditional vulnerability scanning?
NodeZero chains individual weaknesses to demonstrate attainable attacker impacts, providing evidence of successful exploitation rather than just listing vulnerabilities.
Which regions can now access NodeZero through Pax8?
The partnership expansion makes the platform available to managed service providers across Europe through the Pax8 Marketplace.
Does NodeZero support testing of web applications?
Yes, NodeZero WebApp supports authenticated testing of custom web applications to uncover exploitable weaknesses like broken access controls.
