Horizon3 tripled to a $2 billion valuation in 14 months selling AI that hacks your network before attackers do

Horizon3 turned a $650 million valuation into more than $2 billion in 14 months by selling a proposition that sounds dangerous until you consider the alternative: AI that hacks your own network to find vulnerabilities before an attacker's AI does.

The cybersecurity company raised $250 million in a Series E at a valuation exceeding $2 billion, more than tripling from roughly $650 million since June 2025 1. The oversubscribed round was co-led by returning investors NightDragon and NEA 1. Strategic backers now include defense contractor SAIC, Qualcomm, and EDBI, the investment arm of Singapore's Economic Development Board 2. When a defense contractor, a semiconductor company, and a Singaporean economic development body all back an autonomous hacking platform, the bet is not on current revenue. It is on which category of security tooling will exist in ten years.

Horizon3's NodeZero platform deploys AI agents inside a customer's live production network to probe for exploitable paths the way a real attacker would, then produces a report showing where defenses failed and how to close each gap 3. The company says it has run 310,000 production security tests with zero disruptions to live systems 2.

What a 20x revenue multiple means in a funding pullback

Horizon3 says it approached $100 million in annual recurring revenue last year, growing 120% year-over-year 2. Divide a $2 billion valuation by roughly $100 million in revenue and the result is a 20x multiple, the kind of premium investors assign only when they expect growth to compound for years.

That multiple arrives during a cybersecurity funding contraction. In the second quarter of 2026, funding to cybersecurity and privacy startups fell roughly 30% from both the prior quarter and year-ago levels, with round counts falling by a similar margin 4. Capital is not flowing broadly into security tooling. It is concentrating in the specific category that automates offensive testing at machine speed.

The market Horizon3 targets is narrow relative to overall security spending. The global penetration testing market was valued at approximately $2.36 billion in 2025 5. The broader cybersecurity market was valued at $271.9 billion the same year 2. That puts traditional penetration testing, where companies hire human firms to probe their networks annually, at less than 1% of total enterprise security spend. Horizon3's roughly $100 million in revenue represents about 4% of the penetration testing market alone. Investors are paying a 20x multiple for a company that has captured roughly 4% of a niche that represents less than 1% of the security industry.

Horizon3's chief revenue officer, Matt Hartley, says the shift is visible in what clients demand after signing up. Instead of sampling roughly 5% of their infrastructure once a year, they now want monthly or weekly scanning of everything, tracking whether they are actually getting safer over time 2.

The 77-second problem

The reason that shift is happening now is quantifiable. Horizon3 CEO Snehal Antani has described how the time for an AI-driven attack to take full control of a network has collapsed:

• Roughly 7 minutes and 19 seconds three years ago (439 seconds)
• 4 minutes and 12 seconds last year (252 seconds)
• 77 seconds today
• Antani projects as little as 30 seconds at current rates of compression 1

The reduction itself is accelerating. The year-over-year drop was 69% (252 down to 77). If the trend holds, the bottleneck will shift from how fast an attacker can move to whether a human security team can detect and respond within a 30-second window. No human-led process operates at that latency.

Antani demonstrated the stakes at a Black Hat keynote in 2025 alongside the National Security Agency, where Horizon3's autonomous AI compromised a bank's network in 77 seconds 1. Horizon3's research also found that leading AI models fell for decoy credentials roughly 90% of the time, compared with 37% for human hackers, suggesting that today's AI attackers are fast but naive 1. That window, where AI attackers move in seconds but still make mistakes a human would catch, is closing as models improve.

The gap between AI attackers that complete in 77 seconds and human defenders who respond in minutes is the structural shift driving the valuation. When attacks finish in under two minutes, the annual penetration test is obsolete. The tools that matter are the ones that run at machine speed, inside live production environments, without breaking anything.

Horizon3 says it has roughly 7,200 customers including four Fortune 10 enterprises, the NSA, and CISA 12. The company was founded in 2019 by Snehal Antani and Anthony Pillitiere, who met while serving at Joint Special Operations Command 2. The Series E funds will accelerate international expansion into Amsterdam, Australia, and Singapore 2.

The security industry is splitting into organizations that deploy autonomous offense against their own networks and organizations that wait to find out what an attacker's AI discovered first. Horizon3's $2 billion valuation is the price investors put on knowing which side of that line will still be operating in a decade.