On the recordRead 9 Oct 202613 facts
XBOW
Plans and prices
Usage-based pricing
Priced on request
Coverage scales with usage · Request a quote
Read 9 Oct 2026 · xbow.com
On the record
- API
- The REST API can configure assets, set scope and safety controls, trigger assessments, and retrieve findings; API requests require a bearer token and pinned version.xbow.com · read 9 Oct 2026
- Assessment workflow
- XBOW learns from supplied documentation, credentials, API specifications, and architecture notes, maps the attack surface, coordinates agents, attacks, and validates findings.xbow.com · read 9 Oct 2026
- Auditability
- XBOW says every agent action is logged and reviewable.xbow.com · read 9 Oct 2026
- Cloud marketplaces
- XBOW says it is available through AWS, Google, Oracle, and Microsoft marketplaces.xbow.com · read 9 Oct 2026
- Company
- The company identifies itself as XBOW USA Inc.xbow.com · read 9 Oct 2026
- Compliance
- The platform page lists support for more than 40 compliance frameworks and shows SOC 2, ISO 27001, HIPAA, ISO 42001, and GDPR.xbow.com · read 9 Oct 2026
- Continuous testing
- The platform runs pentests continuously as applications change.xbow.com · read 9 Oct 2026
- Data residency
- The API page lists US, EU, and Singapore hosts for data residency.xbow.com · read 9 Oct 2026
- Findings
- Findings include reproducible attack traces, exploit evidence, and developer-ready remediation.xbow.com · read 9 Oct 2026
- Integrations
- XBOW documentation names Jira, Microsoft Sentinel, and Security Copilot as integrations.docs.xbow.com · read 9 Oct 2026
- Product
- XBOW autonomously tests applications and APIs for vulnerabilities, then validates findings with working exploits.xbow.com · read 9 Oct 2026
- Safety controls
- Customers define the testing scope, and XBOW says its production-safe validation is designed to avoid modifying data or disrupting systems.xbow.com · read 9 Oct 2026
- Webhooks
- The API supports webhooks for assessment and finding events, with delivery signature verification and delivery history inspection.xbow.com · read 9 Oct 2026