XBOW

@Xbow • 11,679 subscribers

Bringing AI to offensive security by autonomously finding and exploiting web vulnerabilities. https://t.co/D5Mco1tAKe

Shorts

Anthropic’s Mythos raised the bar for AI vuln detection but kept it invite-only. GPT-5.5 is OpenAI’s answer, and it’s open to all. We had early access. Ran the benchmarks. Blackbox GPT-5.5 already beats whitebox GPT-5. Best pentesting model we’ve tested. Read our analysis:

Anthropic’s Mythos raised the bar for AI vuln detection but kept it invite-only. GPT-5.5 is OpenAI’s answer, and it’s open to all. We had early access. Ran the benchmarks. Blackbox GPT-5.5 already beats whitebox GPT-5. Best pentesting model we’ve tested. Read our analysis:

207,896 просмотров

Videos

Anya Rossi

sweetdream.ai

SweetDream.ai•Sponsored•Livecam

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

Exclusive private shows

1.2k viewers online

Private Show

Join now for exclusive access

Free preview available • Premium content

For the past 2 months, XBOW has been testing Mythos Preview under embargo as part of a select early-access group. Today, we can finally share what we found. The headline: Mythos Preview is a major advance. It is substantially better than prior models at finding vulnerability candidates, especially when source code is available. But it’s not perfect. We surfaced issues with exploit validation, judgment, and efficiency. Our full write-up covers where Mythos Preview shines, where it still needs support, and what we think this means for the future of offensive security:

For the past 2 months, XBOW has been testing Mythos Preview under embargo as part of a select early-access group. Today, we can finally share what we found. The headline: Mythos Preview is a major advance. It is substantially better than prior models at finding vulnerability candidates, especially when source code is available. But it’s not perfect. We surfaced issues with exploit validation, judgment, and efficiency. Our full write-up covers where Mythos Preview shines, where it still needs support, and what we think this means for the future of offensive security:

105,049 просмотров • 24 дней назад

XBOW + Microsoft: continuous pentesting, now inside Microsoft Security. 🚀 Discover assets + launch pentests in Security Copilot 🔍 Exploit-validated findings → Sentinel 📐 Copilot correlates attack paths with live telemetry No more periodic tests. No more disconnected reports. Just a continuous loop: test → validate → detect → remediate → retest See how to deploy: Booth #1843 RSAC

XBOW + Microsoft: continuous pentesting, now inside Microsoft Security. 🚀 Discover assets + launch pentests in Security Copilot 🔍 Exploit-validated findings → Sentinel 📐 Copilot correlates attack paths with live telemetry No more periodic tests. No more disconnected reports. Just a continuous loop: test → validate → detect → remediate → retest See how to deploy: Booth #1843 RSAC

82,974 просмотров • 2 месяцев назад

For the first time in history, the #1 hacker in the US is an AI. (1/8)

For the first time in history, the #1 hacker in the US is an AI. (1/8)

271,125 просмотров • 11 месяцев назад

XBOW is the world’s first fully automated web pentester. It previously scored an unprecedented 75% on renowned web pentesting benchmarks from PentesterLab and PortSwigger. So we decided to give it a harder challenge: competing against humans.

XBOW is the world’s first fully automated web pentester. It previously scored an unprecedented 75% on renowned web pentesting benchmarks from PentesterLab and PortSwigger. So we decided to give it a harder challenge: competing against humans.

261,020 просмотров • 1 год назад

The top hacker in the US is not a human, but a machine. XBOW founder and CEO Oege de Moor and Apoorv Agrawal of Brad Gerstner joined Bloomberg TV this morning to talk about the milestone.

The top hacker in the US is not a human, but a machine. XBOW founder and CEO Oege de Moor and Apoorv Agrawal of Brad Gerstner joined Bloomberg TV this morning to talk about the milestone.

58,665 просмотров • 11 месяцев назад

Offense at scale starts with an API. Today, we’re launching the XBOW Public API in Public Preview. Autonomous pentesting gave teams expert-level assessments in hours. But turning that capability into infrastructure required one more piece: programmatic access. Teams can now trigger and manage pentests across their entire portfolio; start, pause, resume, and monitor assessments at machine speed. Findings, assets, reports, and webhooks are all accessible through a production-ready API built to integrate directly into existing workflows. The result: run one pentest or one hundred with the same depth, autonomy, and exploit validation. No scheduling. No bottlenecks. No choosing which applications get coverage. Public Preview is live as of February 1, 2026. More here:

Offense at scale starts with an API. Today, we’re launching the XBOW Public API in Public Preview. Autonomous pentesting gave teams expert-level assessments in hours. But turning that capability into infrastructure required one more piece: programmatic access. Teams can now trigger and manage pentests across their entire portfolio; start, pause, resume, and monitor assessments at machine speed. Findings, assets, reports, and webhooks are all accessible through a production-ready API built to integrate directly into existing workflows. The result: run one pentest or one hundred with the same depth, autonomy, and exploit validation. No scheduling. No bottlenecks. No choosing which applications get coverage. Public Preview is live as of February 1, 2026. More here:

12,257 просмотров • 4 месяцев назад

CEO Oege de Moor was hosted today on Fox News to discuss how XBOW is changing the game in cybersecurity. "We found a flaw in a well-secured company. They fixed it. Then our AI checked again and found a bypass for their fix. These AIs are pretty clever." Full interview and technical breakdown below.

CEO Oege de Moor was hosted today on Fox News to discuss how XBOW is changing the game in cybersecurity. "We found a flaw in a well-secured company. They fixed it. Then our AI checked again and found a bypass for their fix. These AIs are pretty clever." Full interview and technical breakdown below.

15,363 просмотров • 9 месяцев назад

Больше нет контента для загрузки