Provider profile
XBOW
XBOW is an autonomous testing platform that runs many AI agents in parallel against web applications and APIs and validates findings with exploits. Buyers set scope, impact level and testing windows.
Last checked 9 November 2026. Facts come from XBOW's own public pages, linked below.
At a glance
| Type | Autonomous testing platform |
|---|---|
| Delivery | automated The vendor says no human drives the attack: autonomous AI agents test and findings are reviewed before delivery (who reviews is not stated). |
| Scope | Web apps: yes APIs: yes Cloud: not published Network: not published Mobile: not published AI apps: not published |
| Pricing model | custom quote |
| Turnaround | First validated findings arrive in hours; testing is continuous or on demand. Time to first findings, not a full report. source |
| Retesting | Retests after a fix are described as free and unlimited. source |
| Sample report | not published |
| Compliance mentioned | SOC 2, ISO 27001, ISO 42001, PCI DSS, NIS 2 |
| Integrations | CI/CD API |
Pricing
Prices are not published. You need to ask for a quote.
Pricing is described as usage-based and scoped to your environment; no unit or amount is published. A $50,000 AWS Marketplace credit package noted on 2026-11-08 was not re-verified today, so it is not listed.
Credentials
No credentials with public evidence found.
Our assessment
Editorial judgment by Excession Labs, based on the facts above. Not a rating.
Good fit when
Engineering-led teams that want continuous automated testing of many web apps and APIs, with controls over scope, rate limits and test windows.
Tradeoffs
No price is published and the compliance list on the page does not make clear whether XBOW holds these certifications or supports the frameworks. Scope is web apps and APIs only on the page checked.
Sources
- XBOW homepage (checked 9 November 2026)
- XBOW pricing (checked 9 November 2026)
See something wrong or out of date? Send a correction.