Conferido 5 October 2026
XBOW: preço, recursos e alternativas (2026)
XBOW começa em Not published. Abaixo está a ficha do produto, com o preço como o fornecedor publica.
Autonomous offensive security that proves exploitability.
Visão geral
XBOW is an autonomous offensive security platform that explores applications and APIs, chains vulnerabilities into working attacks, and proves exploitability before a finding reaches the team. The company says more than 150 security teams use it, and that it was the first autonomous system to rank number one on HackerOne in June 2025.
Preço
- Preço a partir de
- Not published
- Modelo de preço
- Usage
- Plano grátis
- Não
- Teste
- Não
The pricing page says pricing is scoped to the environment and is usage-based, scaling with coverage rather than a fixed annual engagement. No dollar amount is listed. XBOW says it is also sold through AWS, Google, Oracle, and Microsoft marketplaces. Last checked 5 October 2026.
Vídeo de demonstração
XBOW Product Demo | How to Run an Autonomous Penetration Test · XBOW
Recursos
- Sold to run the job rather than wait for a prompt on every step. Keep a way to stop it before it reaches a customer, a candidate, or a filing.
- Integrations: None named on the pages we opened.
- Not sold as one named foundation model on the pages we opened.
Autonomia: Autonomous. Tamanho da equipe: Small team, Mid-market.
Pontos fortes
- Published starting price: Not published.
- Connects to None named on the pages we opened.
- Security teams that want continuous, proof-of-exploit testing of web apps and APIs.
Limites
- No public self-serve price.
- Sold to operate the motion. Plan on supervising the first sends.
O que os usuários dizem
No r/Pentesting, um comentário junta o XBOW às ferramentas que atacam a aplicação em execução, o que prefere a scanners de código vendidos como pentest.
Esse tópico desconfia da categoria. Não descreve um erro nomeado do XBOW.
“You should be choosing a tool that actually tests in runtime. Aka software like xbow, mindfort, etc.”
Reddit · u/danielrabinovich
Para quem é
Security teams that want continuous, proof-of-exploit testing of web apps and APIs.
Alternativas
Outros produtos que aparecem nas mesmas categorias.
- AikidoFree
- Dropzone AINot published
- Horizon3.ai NodeZeroFrom $25,000 / 12 months on AWS Marketplace
- IntezerNot published
- PenteraNot published