XBOW

XBOW is an autonomous offensive security company that provides AI-powered penetration testing for applications and APIs. Its platform is designed to discover and validate vulnerabilities through scoped security testing, helping organizations assess how exposed systems could be attacked. The company describes its approach as continuous or on-demand testing intended to keep pace with software development.

The platform uses AI agents to explore applications, combine vulnerabilities into attack paths, and validate whether suspected issues can be exploited. XBOW emphasizes evidence-backed findings rather than unverified alerts: reports include exploit proof and reproduction details, alongside remediation guidance for development teams. Customers can set testing scope and windows, and the platform can retest fixes after they are deployed.

XBOW serves security and engineering teams responsible for protecting web applications and APIs. Its website says the platform can be used across an organization’s exposed applications, with integrations for ticketing and development workflows. The company also presents its product as a complement to traditional penetration testing and security scanning, offering testing that can run on demand or continuously.

XBOW says customers define what the platform may test, including protected URLs, rate limits, and testing windows. The company describes operational safeguards such as logged actions, reviewable attack paths, and checks intended to prevent destructive actions. Its materials also refer to enterprise deployment and compliance needs, including data separation and residency requirements.

XBOW was founded in 2024 by Oege de Moor, according to company materials and its LinkedIn profile. The company identifies Seattle, Washington, as its headquarters. XBOW says its founding team includes people behind GitHub Copilot and GitHub Advanced Security, and presents its work as applying AI to offensive security testing.

The company describes its mission as redefining offensive security through AI-powered penetration testing. Its stated values include owning outcomes, working collaboratively, moving quickly, focusing on consequential work, and practicing transparency and candor. XBOW also describes its team as globally distributed and lists remote work among its employment benefits.