XBOW
A Seattle autonomous AI pentesting platform that topped HackerOne's public leaderboard in 2025.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
XBOW, founded in 2024 and based in Seattle, runs an autonomous AI offensive-security platform that discovers and validates real, exploitable vulnerabilities the way a human penetration tester would, letting security teams run continuous pentests instead of periodic manual engagements.
Its AI system reached number one on HackerOne’s public leaderboard in 2025, the first time an automated system outperformed all human researchers there, a third-party-verifiable performance signal. It has raised through a Series C.
Innovation Matrix Assessment
Raised a $120M Series C (2026-03) at a $1B+ valuation, then added a further $35M extension (2026-05-06) from strategic investors including NVentures and SentinelOne S Ventures -- rapid capital velocity since a 2024 founding.
Strategic investors are also customers/ecosystem partners (Accenture Ventures, SentinelOne S Ventures), suggesting real operational integration, though broad enterprise deployment scale is not fully disclosed.
Series C extension closed 2026-05-06 bringing total funding to $237M, following the $120M round in March 2026 led by DFJ Growth and Northzone.
Automates penetration testing end-to-end with AI agents, a substantive shift from human-led or tool-assisted manual pentesting.
Reaching #1 on HackerOne's global leaderboard in 2025 is an independently observable, third-party performance result rather than a purely vendor-reported claim.
Continuous, scalable vulnerability discovery is highly relevant as attack surfaces and AI-assisted attacker tooling both expand.
Why CISOs Should Care
XBOW runs an autonomous AI offensive-security platform that discovers and validates real, exploitable vulnerabilities the way a human penetration tester would, letting security teams run continuous, AI-driven pentests instead of periodic manual engagements.
What Makes It Different
Its AI system reached #1 on HackerOne's public leaderboard in 2025, the first time an automated system outperformed all human researchers on the platform -- a concrete, third-party-verifiable performance signal rather than a vendor claim alone.
The Matrix Verdict
60/100 — INCREMENTAL INNOVATOR
Category-leading autonomous pentesting vendor with unusually strong, independently observable proof of capability (HackerOne leaderboard) and rapid, large-scale funding; one of the more substantiated AI security claims in the market.
Editorial Note: Claims vs. Verified Findings
HackerOne leaderboard result, funding rounds, and valuation independently corroborated across SecurityWeek, GeekWire, and BankInfoSecurity. Founded by GitHub Copilot creator Oege de Moor.
Sources
Alternatives to XBOW
CybelAngel
External attack surface management and digital risk protection platform that scans the open, deep, and dark web for…
watchTowr
Singapore-based platform combining external attack surface management with continuous automated red teaming to validate whether exposures are actually…
CyCognito
Agentless attack surface management platform that maps organizations' entire external footprint, including subsidiaries and shadow assets, using graph-based…
Armis (a ServiceNow company)
Agentless asset intelligence platform discovering and assessing every connected IT, OT, IoT and medical device, now part of…
Axonius
New York-based CAASM pioneer that aggregates data from hundreds of existing tools to build a unified, agentless asset…
Zafran Security
New York and Tel Aviv-founded exposure management company that maps attack paths across existing security tools to focus…