XBOW

Bringing AI to offensive security by autonomously finding and exploiting web vulnerabilities.

[XBOW @Xbow]

Expert-level pentesting. On demand. Starting today.

→ Launch in minutes
→ Results in 5 days
→ Validated, reproducible, compliance-ready

🗓️ Live demo walkthrough tomorrow: https://t.co/G8bNGITXgz

[XBOW @Xbow]

"When I heard of XBOW for the first time, I thought: is pentesting dead?" says @fede_k, head of security labs at XBOW, in a recent Security Conversations episode. "Actually, I think more companies than ever will be able to conduct pentesting. Who can afford pentesting today? Only the top 10% of the biggest companies in the world. But if we can scale that, more people will be interested in understanding how they can get breached."

Watch the full episode here: https://t.co/vkoTSmrnAc

[XBOW @Xbow]

GPT-5.5 is now part of XBOW.

In our testing, GPT-5.5 delivered significant improvements in vulnerability discovery, exploit reasoning, application interaction, and autonomous testing workflows.

But models alone don’t create autonomous security.

GPT-5.5 supplies the intelligence. XBOW operationalizes it into autonomous application security.

Read more: https://t.co/UHA1HF9trb

[XBOW @Xbow]

Are you ready for day 2 of #Infosec2026? 🏹

Find us at booth F-135, and let’s connect about autonomous offensive security, why it’s critical for modern cybersecurity strategies, and how XBOW can work for your team.

[XBOW @Xbow]

XBOW is harnessing the power of AI to transform offensive security. Curious how autonomous offensive security is changing the game?

It’s day two of the Gartner Security & Risk Management Summit, and we’re ready to talk all things autonomous offensive security. Find us at booth 1028!

Huge thank you to everyone who tuned in to Farzan Karimi and Troy West of Moderna's session on day one to learn how they're building an autonomous offensive security program with XBOW—it was a full house!

#GartnerSEC

[XBOW @Xbow]

Today at #Infosec2026, attendees will get a chance to put offensive security to the test during our hands-on workshop: Offensive AI in Practice.

Ready to see firsthand how AI is amplifying attackers’ capabilities and how offensive security tools find, exploit, validate, and remediate them?

Register here: https://t.co/bnLMXlUhOH

📍 June 2nd, 2pm BST
South Gallery Room 18 @ ExCeL London

[XBOW @Xbow]

Our team is at #Infosec2026 today through Thursday!

Stop by booth F-135 to say hi to the team 👋 and learn how your organization can scale offensive security with XBOW. 🏹 https://t.co/N3w3NTU6JJ

[XBOW @Xbow]

If you’re at Gartner Security & Risk Management Summit today, find the XBOW team at booth 1028 📍 to learn about autonomous offensive security and how it’s enabling teams to defend against complex and evolving cyberthreats faster, better, and at scale: https://t.co/nXC5fEUbKp

#GartnerSEC

[XBOW @Xbow]

Attending Gartner Security & Risk Management Summit? Tune in as Moderna’s Farzan Karimi, Deputy CISO, and Troy West, Associate Director, Cybersecurity, take the stage to highlight how they’re leveraging XBOW to adapt to, meet the demands of, and succeed in today’s AI-driven cybersecurity landscape.

🔔 TODAY at 02:05 PM EDT: https://t.co/cON1NQ1yAQ

#GartnerSEC

[XBOW @Xbow]

Mythos Preview highlights how AI models are getting faster and more effective at identifying vulnerabilities.

But cybersecurity doesn’t stop at detection. The real challenge is turning findings into fixes.

@CyberScoopNews covers the early results on Mythos Preview, including XBOW’s evaluation: https://t.co/D3OL5UjSJ1

[XBOW @Xbow]

The biggest risk in pentesting is often the time between tests.

On June 16 at 11AM EDT, XBOW Lead Solutions Architect Bill Reyor will break down why security leaders are moving beyond periodic assessments toward continuous offensive security testing, and how to evaluate AI pentesting platforms.

If your exposure changes daily, your testing strategy should too.
Register now: https://t.co/nVxH9cN6AZ

[XBOW @Xbow]

Finding IDORs with automation is hard. Most tools stop at "Can I access this?". XBOW had to answer, "Should I be able to?" Here’s how we did it. https://t.co/ihnS3HOGkS

[XBOW @Xbow]

“For us, the most important part isn't just finding the bug; it's that you understand why we found it, how we found it, and how we exploit it,” says XBOW head of security labs @fede_k in a recent episode of Security Conversations with @ryanaraine @juanandres_gs.

Hear more in the clip below.

Watch the full episode here: https://t.co/vkoTSmrnAc

[XBOW @Xbow]

Meet with XBOW at the Gartner Security & Risk Management Summit next week!

Stop by Booth 1028 to connect with the team and learn more about autonomous offensive security.

And don’t miss this session on Monday! Farzan Karimi, Deputy CISO, and Troy West, Associate Director, Cybersecurity at Moderna, will discuss how they are working with XBOW to dramatically increase the speed, scale, and continuity of testing in their session: Adapting Security For AI-Driven Threats: How to Scale, Evolve, and Stay Ahead

Date: June 1
Time: 2:05pm
Room: Theater 4

🔗 https://t.co/nXC5fEUbKp

[XBOW @Xbow]

The Future of Pen Testing Is Continuous Security Testing

@Gartner® research on why point-in-time testing can no longer keep pace and what security leaders are doing instead.

Download the report now: https://t.co/mdUls9CJzH

[XBOW @Xbow]

Don’t miss XBOW AI Researcher @moyix's conversation with Graham Cluley on the Smashing Security podcast.

Brendan and Graham discuss:

° Details of some of the vulnerabilities XBOW has uncovered
° Where AI is strong for pentesting, where it needs more support
° How vulnerability discovery and disclosure will change with AI in the mix
° And more

Listen here: https://t.co/9P1Kfj7V4E

[XBOW @Xbow]

In less than two weeks at @Infosecurity Europe 2026, XBOW will lead a hands-on workshop: Offensive AI in Practice.

Participants will use Docker, open-source offensive tooling, and Anthropic models to safely exploit vulnerable applications in a controlled environment.

📍 June 2nd, 2pm BST
South Gallery Room 18 @ ExCeL London

Secure your spot: https://t.co/bnLMXlUhOH

[XBOW @Xbow]

Finding vulnerabilities is becoming easier. Validating what actually matters is the hard part.

@SecurityWeek’s @kevtownsend highlighted XBOW’s benchmarking of Anthropic’s Mythos Preview across vulnerability discovery, reverse engineering, and exploit validation tasks.

Here are the findings: https://t.co/SpEyN0ofpK

[Ryan Naraine @ryanaraine]

NEW POD ALERT! Federico Kirschbaum, founder of Ekoparty and now head of Security Lab at XBOW, talks about what happens to offensive security when an autonomous AI hacker can find and exploit real vulnerabilities.

Fede walks through XBOW's "Tales from the Trace," the surreal experience of watching a non-human adversary reason its way to an ASLR bypass, and why he believes pen-testing isn't dying but finally becoming accessible to far more than the world's biggest companies.

@fede_k @juanandres_gs @ekoparty @wearetlpblack @craiu

WATCH https://t.co/gav6cCoBSI

[XBOW @Xbow]

What will the next six months of offensive security look like? Or what should it look like?

Our recent panel discussion at RSAC with @nicowaisman, XBOW CISO; @Jhaddix, Arcanum CEO; @daveaitel, Technical Staff, OpenAI examined this question.

See highlights of their advice below; get all their insights in our new whitepaper, The Next Six Months of Offensive Security: What CISOs Need to Change Now: https://t.co/o5OwiWy0NV

[XBOW @Xbow]

XBOW found CVE-2026-45185, reported it responsibly, then used the disclosure window to test a harder question:

How far can autonomous exploit development go against real-world native code?

Full write-up here: https://t.co/20lF5Ilk5d