Horizon3 Raises $250M at $2B Valuation as ARR Nears $100M

A cybersecurity company that tells enterprises to let its software attack their live production systems continuously just tripled its valuation in a little over a year, which is worth pausing on because of what it says about where security budgets are drifting. TechCrunch reports that Horizon3 has raised a $250 million Series E at a $2 billion valuation, with returning investors NightDragon and NEA leading and Singapore's EDBI, defense contractor SAIC, and Qualcomm joining as strategic backers.

The traction under the round is the interesting part. Horizon3 approached $100 million in annual recurring revenue last year and grew 120% year over year across roughly 7,200 to 7,300 customers, a base that stretches from managed service providers serving small businesses to Fortune 10 enterprises. Its NodeZero platform scans an entire infrastructure continuously rather than once a year, examining the full network rather than just 2 to 3 percent, and the company says it has run 310,000 production security tests with zero disruptions. Horizon3 says it has spent roughly $100 million in R&D building automated systems designed to stay predictable and controllable on live networks.

Why this matters if you are not in the pen testing market: the traditional model was a human consulting team examining 2 to 3 percent of the network once a year and handing over a PDF. If a piece of software can run against everything continuously without knocking anything over, the economics of that entire category change, and the annual audit line starts to look like an expensive snapshot of a network that has already moved on.

The honest caveat is that the zero disruptions figure is Horizon3's own accounting, and one bad outage on a Fortune 10 customer would reset the whole trust equation the business is built on. What the reporting does not give you is retention, net expansion, or how much of the round is primary capital versus secondary, all of which matter more than the headline valuation for judging the underlying business. The larger read is who bought in: EDBI, SAIC, and Qualcomm alongside new offices in Amsterdam, Australia, and Singapore suggests the next leg of growth is defense-adjacent and international, not just more US enterprise SaaS.