Controllato 5 October 2026
XBOW: prezzo, funzioni e alternative (2026)
XBOW parte da Not published. Sotto c'è la scheda del prodotto, con il prezzo come lo pubblica il fornitore.
Autonomous offensive security that proves exploitability.
Panoramica
XBOW is an autonomous offensive security platform that explores applications and APIs, chains vulnerabilities into working attacks, and proves exploitability before a finding reaches the team. The company says more than 150 security teams use it, and that it was the first autonomous system to rank number one on HackerOne in June 2025.
Prezzo
- Prezzo da
- Not published
- Modello di prezzo
- Usage
- Piano gratuito
- No
- Prova
- No
The pricing page says pricing is scoped to the environment and is usage-based, scaling with coverage rather than a fixed annual engagement. No dollar amount is listed. XBOW says it is also sold through AWS, Google, Oracle, and Microsoft marketplaces. Last checked 5 October 2026.
Video dimostrativo
XBOW Product Demo | How to Run an Autonomous Penetration Test · XBOW
Funzioni
- Sold to run the job rather than wait for a prompt on every step. Keep a way to stop it before it reaches a customer, a candidate, or a filing.
- Integrations: None named on the pages we opened.
- Not sold as one named foundation model on the pages we opened.
Autonomia: Autonomous. Dimensione del team: Small team, Mid-market.
Punti di forza
- Published starting price: Not published.
- Connects to None named on the pages we opened.
- Security teams that want continuous, proof-of-exploit testing of web apps and APIs.
Limiti
- No public self-serve price.
- Sold to operate the motion. Plan on supervising the first sends.
Cosa dicono gli utenti
Su r/Pentesting, un commento mette XBOW tra gli strumenti che attaccano l’applicazione in esecuzione, cosa che preferisce agli scanner di codice venduti come pentest.
Quel thread è scettico sulla categoria. Non descrive un errore nominato di XBOW.
“You should be choosing a tool that actually tests in runtime. Aka software like xbow, mindfort, etc.”
Reddit · u/danielrabinovich
Per chi è
Security teams that want continuous, proof-of-exploit testing of web apps and APIs.
Alternative
Altri prodotti presenti nelle stesse categorie.
- AikidoFree
- Dropzone AINot published
- Horizon3.ai NodeZeroFrom $25,000 / 12 months on AWS Marketplace
- IntezerNot published
- PenteraNot published