Horizon3 is strengthening its European data sovereignty positioning by securing Cyber Essentials Plus certification for its NodeZero AWS EU network. This certification, issued to Horizon3.ai, Inc. on September 22, 2026, validates the security baseline of the infrastructure supporting its German data sovereignty site. The move aims to provide verified assurance to customers regarding the foundational controls protecting their testing environments.
Cyber Essentials Plus Certification Scope
The certification specifically covers the NodeZero AWS EU network and employee home networks, providing an independently assessed verification of information security controls. Developed by the UK’s National Cyber Security Centre, the framework evaluates five foundational areas: firewalls, secure configuration, security updates, user access control, and malware protection. It is important to note that the scope is partial; other NodeZero deployments and customer-deployed NodeZero Host nodes remain outside this specific certification. The certificate is valid through September 22, 2027. By meeting these standards, Horizon3 is attempting to demonstrate proactive protection against common attack vectors within the specific infrastructure that hosts its autonomous security testing platform for European clients.
Strengthening European Data Sovereignty
Horizon3 is positioning this certification as a critical milestone in its sovereign cyber strategy, particularly for supporting sensitive workloads within the UK and EU. The NodeZero platform allows organizations to autonomously test production environments to identify exploitable weaknesses and attack paths. By securing the AWS EU network in Germany, the company is addressing a specific requirement for enterprise customers who must vet the security standards of the third-party infrastructure hosting their security tools. This certification serves as a mechanism for Horizon3 to assist customers in meeting their own security obligations by providing a verified baseline for the service provider's environment. This development highlights the increasing necessity for security vendors to prove the resilience of their own cloud-based delivery models.
Key Takeaways
- Horizon3 earned Cyber Essentials Plus certification for its NodeZero AWS EU network, valid until September 22, 2027.
- The certification covers five foundational controls: firewalls, secure configuration, security updates, user access control, and malware protection.
- The scope is limited to the AWS EU network and employee home networks, excluding other NodeZero deployments.
TechInsyte's Take
In our view, this move is less about general security and more about removing procurement friction in highly regulated markets. By securing Cyber Essentials Plus for its German-based EU data sovereignty site, Horizon3 is signaling to European enterprise and government entities that its infrastructure meets recognized baseline standards. This is a strategic attempt to build trust in its "hack, fix, verify" loop by ensuring the platform itself does not become a liability. It underscores that for AI-native security tools, infrastructure provenance is becoming a primary buyer requirement.
Questions & Answers
How does this certification impact the broader NodeZero deployment?
The certification is limited in scope to the NodeZero AWS EU network and employee home networks. It does not cover other NodeZero deployments or customer-deployed NodeZero Host nodes.
What specific security controls were verified by the certification?
The certification, based on UK National Cyber Security Centre standards, verifies five foundational controls: firewalls, secure configuration, security updates, user access control, and malware protection.
Why is this certification relevant to European enterprise customers?
It provides a verified security baseline for the infrastructure supporting Horizon3’s EU data sovereignty site in Germany, helping customers meet their own security and compliance obligations when using the platform.
What is the strategic intent behind targeting Cyber Essentials Plus?
Horizon3 is positioning this as a key component of its sovereign cyber strategy, aiming to meet the standards required to support sensitive workloads in the UK and EU.
Source: Horizon3
