XBOW

Expert-level pentesting. On demand. Starting today. → Launch in minutes → Results in 5 days → Validated, reproducible, compliance-ready 🗓️ Live demo walkthrough tomorrow: xbow.com/pentest-webinar

@bwgscrapb @moyix @Jhaddix Yes! You'll be able to access a recording of the discussion on the LinkedIn Live event page post-event: bit.ly/4mHo3Te

@Xbow @moyix @Jhaddix Will there be a recording?

If a vulnerability storm is coming, how do you prioritize and fix the ones that matter? Detection isn’t the bottleneck anymore. Validation is. 🗓️ On April 27 at 12 pm ET, @moyix and @Jhaddix break down how offensive security shifts when AI moves from surfacing findings to validating real impact. What gets automated. What still requires human intuition. And how teams cut through the noise. Register for the LinkedIn Live: bit.ly/4mHo3Te

GPT-5.5 is dramatically changing how AI performs in security testing. In our evals, it cut missed vulnerabilities to 10% (down from 40% in GPT-5). That’s not incremental; it’s a step change. Our Head of AI, Albert Ziegler, shares more in this @thenewstack article from @psawers: bit.ly/41OTPUZ

Nasdaq recognizing XBOW’s recent inclusion on the Enterprise Tech 30 list! One of 60 enterprise tech leaders chosen from more than 15,000 candidates, XBOW is grateful to be included on this list of the most promising venture-backed enterprise tech companies. “The theme for 2026 is agents moving from demo to production,” said @peter_wagner, founding partner at @Wing_VC and creator of the ET30. “Last year, we saw the rise of agentic applications. This year, those agents are being deployed and doing real work.” See full list: bit.ly/4mNzWHB

Hiding tools never worked in security. The vulnerability research invite-only lists, private clubs. Info always leaked, and insiders won. AI offense is the same problem at a different scale. OpenAI’s answer to Mythos: accountable access, not exclusivity. That’s how you close the gap: bit.ly/4sSFiCD

Anthropic’s Mythos raised the bar for AI vuln detection but kept it invite-only. GPT-5.5 is OpenAI’s answer, and it’s open to all. We had early access. Ran the benchmarks. Blackbox GPT-5.5 already beats whitebox GPT-5. Best pentesting model we’ve tested. Read our analysis: bit.ly/48OX7v6

We appreciate everyone who stopped by the XBOW booth at #AWSSummit London today. Strong conversations around continuous, exploit-validated testing—where agents prove real attack paths, not just surface findings. More events and opportunities to connect soon.

Claude Opus 4.7 is Anthropic's most capable generally available model, with notable improvements over its predecessor Opus 4.6 in software engineering, instruction following, and vision — but it is intentionally less capable than Anthropic's most powerful offering, Claude Mythos Preview,” says @MichaelFNunez in a new @VentureBeat article. The article breaks down the implications of the release of Opus 4.7, including results from XBOW’s early access that revealed a 98.5% score on our visual-acuity benchmark: bit.ly/3OyQuGw

The AI question that more should be asking: When do the open weights models become capable of crafting exploits as well as the frontier models? XBOW CEO Oege de Moor’s estimate: 6–8 months, and that window is already closing. See more from this Fireside Chat with @robtlee, Chief AI Officer and Chief of Research at the @SANSInstitute and XBOW CEO @oegerikus: bit.ly/422eZPo

Headed to StackX Cybersecurity 2026 by @GovTechSG? Join XBOW at Booth 20! Stop by to get a demo of our autonomous offensive security platform and see how you can get human-quality testing results with the speed and scale of a machine. Learn more: bit.ly/4suVFVL

Today, Anthropic released Opus 4.7. We were lucky enough to have early access. We have been working with the model for a while – evaluating it to understand how it actually behaves in real offensive workflows. Get details on our findings: bit.ly/3QgH1nE

What should you look for in AI pentesting? From safety guardrails to API access and reproducible findings, we’ve got the answers to help you as you explore this new approach. Learn everything you need to know about how these tools work and what capabilities to look for in our new buyers guide. 📗 bit.ly/3PS8wE0

What is the frontline of cybersecurity today? @robtlee, Chief AI Officer and Chief of Research at the @SANSInstitute, shares his thoughts in a fireside chat with XBOW CEO @oegerikus below. Watch more of their conversation. bit.ly/422eZPo

Exploitation is no longer a linear process. Our Head of Field Engineering, Andy Dennis, is leading a hands-on workshop at the @SANSInstitute AI Cybersecurity Summit 2026 on what replaces it. Enumerate. Scan. Hand off. Repeat. That process breaks at machine speed. This session focuses on systems that pursue exploit paths, adapt in real time, and continue until there’s proof. Don’t just read about it. Run it: bit.ly/3PYCKoU #AISummit

There are areas in pentesting where AI excels, and excels independently. There are other areas where AI works well, but needs a bit of scaffolding. And finally, there are areas where it struggles and needs a lot of external structure. Albert Ziegler, our Head of AI, breaks down these pros and cons and explains how XBOW leverages the strengths of AI agents while mitigating their weaknesses in his new blog post: bit.ly/4cb0o90

XBOW is delivering continuous discovery, validation, and vulnerability prioritization directly to @msftsecurity Copilot and Microsoft Sentinel data lake. Explore how this integration can streamline your security operations and prioritize what matters most. Learn more ➡️ bit.ly/4dEtZdf

What is AI pentesting? What does AI do? What do humans do? How is it different from PTaaS? What about DAST? What should you look for in an AI pentesting solution? We hear these questions a lot, and we created a buyer’s guide to answer them. Understand how this technology works and what capabilities to look for in our new guide: bit.ly/3PS8wE0

Systems that decide what to do next > traditional tools That’s the advantage of agentic AI: adaptive exploration, continuous prioritization, and broader coverage. Our Head of AI, Albert Ziegler, discusses how systems don’t just run tests; they choose what to test next in @CybrSecTribe: bit.ly/4lZzo0y

AI just found critical vulnerabilities in Microsoft systems on its own. XBOW identified 3 critical RCEs, including one of the most severe issues in March’s Patch Tuesday and two in Bing with potential SYSTEM-level impact. No source code. Real environments. Real CVEs. AI is no longer assisting security research. It’s doing it. bit.ly/4bNBgWT

XBOW has been named to the 2026 Cyber 150 by @stiennon of IT-Harvest, recognizing companies gaining meaningful traction. As environments grow more complex, periodic testing is no longer enough. Continuous, autonomous validation is becoming the standard for understanding real risk. XBOW is built for that shift. See the full list: bit.ly/4m6ZNtJ