Horizon3 and Pax8 expanded their partnership to make autonomous security testing available to managed service providers across Europe.
Key points
- Horizon3 and Pax8 expanded their partnership to Europe on October 16, 2026.
- The NodeZero Proactive Security Platform is now available through the Pax8 Marketplace.
- The tool helps MSPs provide autonomous penetration testing and fix verification to clients.
Horizon3 and Pax8 have expanded their partnership to bring autonomous security testing to managed service providers across Europe. This move makes the NodeZero Proactive Security Platform available through the Pax8 Marketplace for partners in the region.
What happened
Horizon3 announced the expansion of its partnership with Pax8 on October 16, 2026. The deal brings the NodeZero Proactive Security Platform to managed service providers in Europe via the Pax8 Marketplace. This follows a similar launch in North America, according to Horizon3.ai. The expansion allows partners to offer recurring security services to small and mid-sized businesses. These services help clients understand how attackers might compromise their environments.
Partners can use the platform to deliver initial assessments and support remediation efforts. The tool enables ongoing testing programs without requiring manual penetration tests for every engagement. Keith Poyser, General Manager and SVP EMEA at Horizon3, noted that vulnerability lists do not show actual exploitability. He stated that NodeZero provides partners with information on what is exploitable and how to verify fixes. The platform helps MSPs build services around measurable reductions in customer exposure.
Why it matters
Understanding this story requires knowing the difference between finding a vulnerability and proving it can be exploited. A vulnerability is a weakness in software or configuration that could potentially be abused. However, not all vulnerabilities are exploitable in a specific environment due to compensating controls or network segmentation. Autonomous security testing tools like NodeZero simulate real attack techniques to chain these weaknesses together. This process demonstrates actual attacker impact, such as unauthorized access or data exposure, rather than just listing theoretical risks.
For MSPs, this means they can prioritize remediation based on proven attack paths instead of generic severity scores. It also allows them to verify that corrective actions actually close the attack path. This approach shifts security from a static checklist to a continuous validation process. Teams usually focus on the most critical paths first to reduce immediate risk. This method helps organizations understand their true exposure level and the effectiveness of their security investments.
The fix
- Check if your MSP offers autonomous security testing services.
- Ask for reports that show actual attack paths, not just vulnerability lists.
- Request verification that previous fixes have closed the demonstrated risks.
- Ensure testing covers infrastructure, identity, cloud, and web applications.
Why it matters
When evaluating security services, look for providers who can demonstrate actual exploitability. Many organizations struggle with alert fatigue because they receive lists of vulnerabilities without context. Autonomous testing addresses this by simulating real-world attacks within safe boundaries. This helps teams understand which weaknesses actually lead to unauthorized access or data exposure.
MSPs can use these insights to guide clients toward the most impactful remediation steps. The ability to verify fixes is crucial for maintaining trust and ensuring security investments yield results. Continuous testing allows organizations to adapt to changes in their environment. This approach supports a proactive security posture rather than a reactive one. Readers should consider how their current security assessments measure actual risk reduction.
What to do and how to stay safe: Horizon3
- Ask your MSP if they offer autonomous penetration testing services.
- Request evidence of actual attack paths rather than just vulnerability lists.
- Verify that remediation efforts have been tested and confirmed effective.
- Ensure testing includes web applications and cloud infrastructure.
Step-by-step guide: What is password policies and how they protect systems
General security guidance from the Crypt Weekly newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
When did Horizon3 and Pax8 expand their partnership to Europe?
The expansion was announced on October 16, 2026, according to Horizon3.ai.
What platform is being made available to European MSPs?
The NodeZero Proactive Security Platform is available through the Pax8 Marketplace.
How does NodeZero help MSPs with security testing?
It provides autonomous penetration testing, prioritized remediation, and fix verification.
