Blog
Security Research
Dead.Letter (CVE-2026-45185) How XBOW Found an Unauthenticated RCE on Exim
Federico Kirschbaum, Andres LuksenbergSecurity Research
Mythos for Offensive Security: XBOW's Evaluation
Albert ZieglerOffensive Security Academy
10 Red Flags to Investigate When Evaluating AI Pentesting Vendors
XBOW TeamOffensive Security Academy
What Is Insecure Direct Object Reference (IDOR), and How Do You Test for It?
XBOW TeamOffensive Security Academy
How to Evaluate an AI Pentesting Vendor: A Decision Framework for Security Leaders
XBOW TeamCompany News
GPT-5.5: Democratizing Cyber Capabilities
Oege de Moor, Nico WaismanAI Research
GPT-5.5: Mythos-Like Hacking, Open to All
Albert Ziegler, Steve BuckleyAI Research
Smaller Bites, Bigger Meals: What We Learned Running Opus 4.7 in Offensive Workflows
Albert ZieglerProduct
