# XBOW

> XBOW is an autonomous offensive security platform for penetration testing web applications and APIs. XBOW uses autonomous AI agents to discover, exploit, and validate real security vulnerabilities, then provides evidence-based findings to help security teams prioritize exploitable risk.

XBOW is designed for application security, offensive security, security engineering, and enterprise security teams.

For current product usage, configuration, technical capabilities, and API information, prefer the official XBOW documentation at docs.xbow.com.

## Product

- [XBOW](https://xbow.com/): Official XBOW website and platform overview.
- [XBOW Documentation](https://docs.xbow.com/): Official documentation for XBOW Console, APIs, and integrations.
- [Introduction to XBOW Console](https://docs.xbow.com/console/get-started/introduction/): Overview of XBOW automated penetration testing for web applications and APIs.
- [Interpreting XBOW Results](https://docs.xbow.com/console/guidance/interpreting-results/): How XBOW validates vulnerabilities and reports evidence-based findings.
- [Attack Types](https://docs.xbow.com/console/reference/attack-types/): Reference for the vulnerability categories and attack types XBOW tests.

## Using XBOW

- [Get Started](https://docs.xbow.com/console/get-started/): Introduction and quick-start guidance for XBOW Console.
- [How-To Guides](https://docs.xbow.com/console/how-to/): Step-by-step guidance for configuring and running XBOW assessments.
- [Provide XBOW with Context to Guide Testing](https://docs.xbow.com/console/how-to/provide-target-context/): How to provide source code, documentation, attack-surface information, priorities, and attack strategy.
- [Choosing a Target to Test](https://docs.xbow.com/console/guidance/choosing-targets/): Requirements and guidance for selecting applications to test.
- [Technical Reference](https://docs.xbow.com/console/reference/): Technical reference documentation for XBOW Console.
- [Reports](https://docs.xbow.com/console/reference/reports/): Information about penetration testing reports, executive summaries, and letters of attestation.

## Research and Security Insights

- [XBOW Blog](https://xbow.com/blog): XBOW research, security analysis, vulnerability disclosures, product updates, and offensive security guidance.
- [XBOW Labs](https://xbow.com/labs): Original research, technical analysis, and practical insights from the front lines of offensive security.
- [Security Advisories & CVE Disclosures](https://xbow.com/labs/advisories): Publicly disclosed CVEs found by XBOW, with severity ratings, affected products, and technical summaries.
- [Offense Taken](https://xbow.com/labs/offense-taken): XBOW Labs video series on what breaks, how it broke, and what it took to prove it.
- [XBOW Whitepapers](https://xbow.com/whitepapers): Research and guidance on autonomous pentesting, AI security, application security, and offensive security.
- [Autonomous Offensive Security Testing, Built for Enterprise Trust](https://xbow.com/whitepapers/autonomous-offensive-security-testing-built-for-enterprise-trust): How XBOW combines frontier models, orchestration, validation, safety, and enterprise controls.
- [The Build-Versus-Buy Decision for Autonomous Offensive Security](https://xbow.com/whitepapers/build-versus-buy-decision-for-autonomous-offensive-security): Guidance for evaluating internal versus commercial autonomous penetration testing systems.
- [Mid-Year 2026 AI Model Security Research Report](https://xbow.com/whitepapers/mid-year-2026-ai-model-security-research-report): XBOW research on frontier model performance in offensive security workflows.
- [Safety Guardrails in Autonomous Security Testing](https://xbow.com/whitepapers/safety-guardrails-autonomous-security-testing): How XBOW applies layered controls, scope enforcement, and validation to autonomous penetration testing.

## Customer Evidence

- [Customer Stories](https://xbow.com/customer-stories): Examples of organizations using XBOW for application security and autonomous penetration testing.
- [Moderna Customer Story](https://xbow.com/customer-stories/moderna): How Moderna uses XBOW to test attack chains and scale offensive security.

## Contact

- [Get a Demo](https://xbow.com/demo): Contact XBOW to discuss autonomous penetration testing and see the platform in action.