Horizon3 secures state-backed investment for Singapore AI security hub

Horizon3, a provider of AI-native proactive security tools, announced a strategic expansion in Singapore on 19 October 2026. The company is establishing its ASEAN headquarters and a Regional Centre of Excellence to support operations across Southeast Asia, Australia, and Japan. This expansion is backed by new investments from EDBI and its parent organisation, SG Growth Capital.

Root cause

The expansion responds to increasing demand for continuous security validation as AI-driven cyberattacks grow in speed and sophistication. Singapore’s Cyber Security Agency reported that infected infrastructure in the country rose by 142% in 2025, reaching 284,300 systems. Threat actors are increasingly using artificial intelligence to conduct attacks with greater scale, according to the agency’s 2025/2026 Singapore Cyber Landscape report.

Attack path

Horizon3’s technology, NodeZero, autonomously validates attack paths within digital environments. It identifies which vulnerabilities can actually be exploited and determines what an attacker can reach. The system provides remediation guidance and retests systems to verify that fixes have reduced real-world exposure. This approach offers security teams continuous, evidence-based visibility into their actual risk posture.

Affected versions

This announcement concerns Horizon3’s operational expansion rather than a software vulnerability or specific product version update. The company is increasing its local headcount to scale sales, customer, and partner operations. The expansion follows a US$250 million Series E funding round in August 2026, which valued the company at more than US$2 billion.

Mitigation

• Adopt continuous security validation methods instead of relying solely on periodic assessments.
• Use automated tools to verify that remediation efforts effectively close exploitable attack paths.
• Align security strategies with national regulatory priorities and cyber resilience frameworks.
• Focus on measuring actual exploitable risk rather than just documenting compliance checklists.

What it means for organisations

Security leaders should assess whether their current validation methods provide continuous proof of resilience. Boards need to understand if their security investments are closing actual attack paths. Teams usually benefit from shifting from tick-box compliance to outcomes-based security. CISOs should ensure their strategies align with forward-looking cyber resilience expectations. Internal stakeholders must be briefed on the move towards measurable, evidence-based security validation. This helps demonstrate preparedness for AI-enabled threats and ensures that remediation efforts genuinely reduce business risk.

What to do and how to stay safe: Horizon3

• Review current security validation processes to ensure they provide continuous, not just periodic, insights.
• Identify which vulnerabilities in your environment are actually exploitable by attackers.
• Verify that remediation efforts successfully close identified attack paths through automated retesting.
• Align your security strategy with regional regulatory expectations and cyber resilience frameworks.

Step-by-step guide: Prevent Prompt Injection Attacks: Practical Defences for AI Systems

General security guidance from the TechSec Observer newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Who invested in Horizon3’s Singapore expansion?

EDBI and its parent organisation, SG Growth Capital, provided strategic investments to support the expansion.

What is NodeZero?

NodeZero is Horizon3’s AI-native tool that autonomously validates attack paths and provides remediation guidance.

Why is Horizon3 expanding in Singapore?

The company cites accelerating demand for continuous security validation and Singapore’s focus on cyber resilience.