Vérifié 5 October 2026
XBOW : tarif, fonctions et alternatives (2026)
XBOW commence à Not published. La fiche ci-dessous reprend le prix tel que l'éditeur le publie.
Autonomous offensive security that proves exploitability.
Aperçu
XBOW is an autonomous offensive security platform that explores applications and APIs, chains vulnerabilities into working attacks, and proves exploitability before a finding reaches the team. The company says more than 150 security teams use it, and that it was the first autonomous system to rank number one on HackerOne in June 2025.
Tarif
- Prix à partir de
- Not published
- Modèle de prix
- Usage
- Offre gratuite
- Non
- Essai
- Non
The pricing page says pricing is scoped to the environment and is usage-based, scaling with coverage rather than a fixed annual engagement. No dollar amount is listed. XBOW says it is also sold through AWS, Google, Oracle, and Microsoft marketplaces. Last checked 5 October 2026.
Vidéo de démonstration
XBOW Product Demo | How to Run an Autonomous Penetration Test · XBOW
Fonctions
- Sold to run the job rather than wait for a prompt on every step. Keep a way to stop it before it reaches a customer, a candidate, or a filing.
- Integrations: None named on the pages we opened.
- Not sold as one named foundation model on the pages we opened.
Autonomie: Autonomous. Taille d'équipe: Small team, Mid-market.
Atouts
- Published starting price: Not published.
- Connects to None named on the pages we opened.
- Security teams that want continuous, proof-of-exploit testing of web apps and APIs.
Limites
- No public self-serve price.
- Sold to operate the motion. Plan on supervising the first sends.
Ce que disent les utilisateurs
Sur r/Pentesting, un commentaire range XBOW avec les outils qui attaquent l’application en cours d’exécution, ce qu’il préfère aux scanners de code vendus comme pentest.
Ce fil est sceptique sur la catégorie. Il ne décrit pas un raté nommé de XBOW.
“You should be choosing a tool that actually tests in runtime. Aka software like xbow, mindfort, etc.”
Reddit · u/danielrabinovich
Pour qui
Security teams that want continuous, proof-of-exploit testing of web apps and APIs.
Alternatives
D'autres produits présents dans les mêmes catégories.
- AikidoFree
- Dropzone AINot published
- Horizon3.ai NodeZeroFrom $25,000 / 12 months on AWS Marketplace
- IntezerNot published
- PenteraNot published