Revisado 5 October 2026
XBOW: precio, funciones y alternativas (2026)
XBOW parte de Not published. Debajo va la ficha del producto, con el precio tal como lo publica el proveedor.
Autonomous offensive security that proves exploitability.
Resumen
XBOW is an autonomous offensive security platform that explores applications and APIs, chains vulnerabilities into working attacks, and proves exploitability before a finding reaches the team. The company says more than 150 security teams use it, and that it was the first autonomous system to rank number one on HackerOne in June 2025.
Precio
- Precio desde
- Not published
- Modelo de precio
- Usage
- Plan gratis
- No
- Prueba
- No
The pricing page says pricing is scoped to the environment and is usage-based, scaling with coverage rather than a fixed annual engagement. No dollar amount is listed. XBOW says it is also sold through AWS, Google, Oracle, and Microsoft marketplaces. Last checked 5 October 2026.
Vídeo de demostración
XBOW Product Demo | How to Run an Autonomous Penetration Test · XBOW
Funciones
- Sold to run the job rather than wait for a prompt on every step. Keep a way to stop it before it reaches a customer, a candidate, or a filing.
- Integrations: None named on the pages we opened.
- Not sold as one named foundation model on the pages we opened.
Autonomía: Autonomous. Tamaño del equipo: Small team, Mid-market.
Ventajas
- Published starting price: Not published.
- Connects to None named on the pages we opened.
- Security teams that want continuous, proof-of-exploit testing of web apps and APIs.
Límites
- No public self-serve price.
- Sold to operate the motion. Plan on supervising the first sends.
Qué dicen los usuarios
En r/Pentesting, un comentario agrupa XBOW con las herramientas que atacan la aplicación en ejecución, lo que prefiere a los escáneres de código vendidos como pentesting.
Ese hilo desconfía de la categoría. No describe un fallo concreto de XBOW.
“You should be choosing a tool that actually tests in runtime. Aka software like xbow, mindfort, etc.”
Reddit · u/danielrabinovich
Para quién es
Security teams that want continuous, proof-of-exploit testing of web apps and APIs.
Alternativas
Otros productos que aparecen en las mismas categorías.
- AikidoFree
- Dropzone AINot published
- Horizon3.ai NodeZeroFrom $25,000 / 12 months on AWS Marketplace
- IntezerNot published
- PenteraNot published