Edge Rewrite
// HTMLRewriter · presentation

This page was redesigned at the edge.

Cloudflare fetched the original article and streamed it through HTMLRewriter to apply an entirely new visual system without rebuilding the source page.

// request.cf · coarse context

A page that knows where it met you.

Only coarse request metadata is shown. This demo does not display or persist visitor IP addresses.

Country
US
Cloudflare location
CMH
Connection
HTTP/2
Language
Not provided

Ray ID: a22f8b901c1a386c

Jump to content

Draft:XBOW

From Wikipedia, the free encyclopedia

XBOW is a US-based cybersecurity company that develops an eponymous AI-based software penetration tool. In 2025, the tool took top spot on the HackerOne leaderboard for software vulnerability detection,[1] with over a thousand reported vulnerabilities over a few months,[2] a first for an AI-based tool.[3]

The system performs autonomous offensive security checks by crawling the front end of web applications and checking for weaknesses and vulnerabilities, including cross-site scripting, cross-site request forgery, remote code execution, cache poisoning and SQL injection.[4] Notable discoveries include over 50 Critical vulnerabiltiies, and vulnerabilities from companies such as Toyota, Disney, IBM, AT&T, PayPal, and Sony,[3] and an exploitable vulnerability in Palo Alto Networks' GlobalProtect VPN platform.[5]

The company was founded by Oege de Moor,[6] founder of Semmle, which was acquired by GitHub[7] in September 2019 and became part of GitHub Advanced Security and GitHub Copilot.[8]

XBOW is funded by a consortium led by Sequoia Capital.[8]

References

[edit]
  1. ^ Marton, Riah (27 June 2025). "What is XBOW? An AI Tool that is America's 'Best Hacker' Secures $75M in Funding - Forbes 40under40".
  2. ^ Abdullahi, Aminu (27 June 2025). "AI Bug Hunter Sets Milestone By Claiming Top Spot on HackerOne's Leaderboard". TechRepublic.
  3. ^ a b Jacobs, Skye (27 June 2025). "History made as Al claims number one spot among world's top ethical hackers". TechSpot.
  4. ^ dept, EditorDavid from the robo-rooter (5 July 2025). "XBOW's AI-Powered Pentester Grabs Top Rank on HackerOne, Raises $75M to Grow Platform - Slashdot". it.slashdot.org.
  5. ^ "Palo Alto GlobalProtect Vulnerability Enables Malicious Code Execution - PoC Released". Cyber Security News. 21 May 2025.
  6. ^ "XBOW founder touts topping of world ethical hacking leaderboard | Fox Business Video". Fox Business. 13 August 2025.
  7. ^ Kovacs, Eduard (18 September 2019). "GitHub Becomes CVE Numbering Authority, Acquires Semmle". SecurityWeek.
  8. ^ a b Naraine, Ryan (16 July 2024). "Ex-GitHub Engineers Raise $20M to Enhance Pen-Testing with AI-Powered XBOW". SecurityWeek.