In this episode, Joshua Knox, Principal Cybersecurity Strategist and AI Lab Tech Lead at Horizon3, explains how the company's NodeZero platform runs continuous, autonomous offensive assessments that surface exploitable attack chains and dangerous misconfigurations, not just vulnerabilities, so teams can prioritize and validate fixes on a repeatable basis. Joining him are Jesse Webb, CISO and SVP of Information Systems at Avalon Healthcare Solutions, and Ryan Brown, Director and Head of Cybersecurity Operations at Children's National Hospital.
Want to know:
- Why are vulnerability scanners disrupting security programs, and is it really disruption or a prioritization problem?
- How does NodeZero scope an assessment so it doesn't put patient-connected medical devices at risk?
- Can NodeZero identify the criticality of a specific device, like a PACS machine, once it's discovered on the network?
- How does Horizon3 keep HIPAA data "production safe" when NodeZero is actively assessing a healthcare network?
- Why does running attacks through code-bound modules, rather than a freeform agent, make autonomous pentesting more reliable?
- How do autonomous pentest reports hold up as an audit artifact next to a traditional, human-led penetration test?
- What happens when a legacy contract requires a human-proctored external pentest?
- How does Horizon3 train its models without using data from customer environments?
- What's the one thing about NodeZero that surprises CISOs most once they start using it?
Huge thanks to our sponsor, Horizon3
Horizon3 is the AI-native proactive security company behind NodeZero®, an autonomous pentesting platform that helps organizations prove their defenses work. NodeZero safely identifies exploitable attack paths, verifies fixes, and enables continuous security validation at machine speed so teams can stay ahead of AI-powered threats.
