Horizon3, Pax8 Expand EU MSP Access to NodeZero Proactive Security Platform for Autonomous Pen Testing

Horizon3 announced on 16 October 2026 that it is extending its partnership with Pax8 to European managed service providers. The expansion makes the NodeZero Proactive Security Platform available to these partners through the Pax8 Marketplace. This move allows managed service providers to offer autonomous security testing and remediation verification services to their customers across the region.

What capabilities does the platform provide to partners?

The NodeZero platform allows partners to conduct autonomous offensive security testing within defined scopes. It identifies exploitable attack paths across internal and external infrastructure, cloud environments, and web applications. According to Horizon3, the system chains individual weaknesses to demonstrate attainable attacker impacts, providing evidence of successful exploitation rather than just listing vulnerabilities.

How does this change service delivery for European MSPs?

Previously, partners in North America could access these tools via the marketplace. Now, European managed service providers can use NodeZero to deliver initial assessments and support remediation engagements without manual testing for every engagement. The platform supports multi-tenant environments and white-labeled reporting, enabling partners to incorporate findings directly into their existing service offerings for small and midsized businesses.

What specific technical areas does the testing cover?

NodeZero WebApp extends the testing approach to custom business-critical web applications using authenticated testing. This helps uncover exploitable application weaknesses such as broken access controls and business logic flaws that traditional scanning might miss. The platform also evaluates exposure to vulnerabilities listed in CISA’s Known Exploited Vulnerabilities Catalog, helping teams prioritize corrective actions based on demonstrated risk.

Questions to ask your suppliers

Organisations should verify whether their managed service providers are using automated tools to validate security controls or relying solely on vulnerability scans. Ask your supplier how they distinguish between theoretical risks and actively exploitable attack paths within your environment. Ensure that remediation efforts are verified through retesting to confirm that previous vulnerabilities are truly closed. Internal security teams and executive leadership should be informed about the methodology used to assess their organisation’s exposure, ensuring transparency in how risks are prioritised and managed.

What to do and how to stay safe: Horizon3

• Review current managed service provider contracts to determine if autonomous penetration testing and fix verification are included in the scope of work.
• Request evidence from suppliers that they validate remediation efforts by retesting previously identified vulnerabilities to ensure they remain closed.
• Verify that security assessments cover custom web applications and cloud infrastructure, not just standard network perimeter devices.
• Establish a process for regular security validation after major infrastructure changes or application releases to identify new exposure quickly.

Step-by-step guide: Browser Security Settings for Small Business Teams

General security guidance from the TechSec Feed newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Is NodeZero available to managed service providers in Europe now?

Yes, Horizon3 announced on 16 October 2026 that NodeZero is available to Pax8 partners across Europe through the Pax8 Marketplace.

Does the platform test web applications automatically?

Yes, NodeZero WebApp supports authenticated testing for custom web applications to find exploitable weaknesses like broken access controls.

Can partners verify that fixes actually worked?

Yes, the platform includes fix verification capabilities that retest remediated weaknesses to determine if previous exploitation remains possible.