Skip to content
Companies

XBow

AI agents that run autonomous penetration tests

Raised to date

$120.9M

of $180M offered across 1 Form D filing

Still open
$59.1M
Investors
13
Last filed
Mar 19, 2026

About

XBOW builds an autonomous offensive security platform that uses AI agents to perform penetration testing without human input. The system discovers, chains and exploits vulnerabilities across a customer's attack surface and proves each finding with a working exploit, completing a comprehensive pentest in hours rather than weeks. Founded in January 2024 by Oege de Moor, who previously created GitHub Copilot and GitHub Advanced Security at Microsoft, the company lists Seattle as its headquarters while operating as a distributed team of more than 250 people. In March 2026 it raised a $120M Series C led by DFJ Growth and Northzone at a valuation above $1 billion, later extended to $155M with participation from NVIDIA, Samsung and SentinelOne.

It was the first autonomous system to reach #1 on the HackerOne US bug bounty leaderboard, and every vulnerability it reports comes with a validated working exploit, which removes the false-positive triage burden that conventional scanners create.

Funding

  • EquityFiled Mar 19, 2026Form D
    $120.9M/ $180M

Product

XBOW Autonomous Offensive Security Platform

Offensive security / penetration testing platform

An AI-driven penetration testing platform that runs autonomous hackers against a customer's applications and infrastructure, reasoning through offensive security workflows the way a human pentester would, then confirming each vulnerability with a real exploit.

  • Fully autonomous operation requiring no human input
  • Discovers, chains and exploits vulnerabilities across the whole attack surface
  • Real exploit validation for every finding

Built for

Enterprise security teams, including Fortune 500 companies; more than 100 customers run it in production and 150+ security teams use it

People on file