company
XBOW builds AI agents that autonomously discover and exploit software vulnerabilities, used for automated penetration testing and security research.
Exploitation is now the top initial-access vector at 31% of breaches. The median defender needs 43 days to close a known-exploited flaw. Both figures reach operators through a guide selling the fix.
Reality
Agents show up in logs carrying the credentials of the employees whose authority they inherit. The security executives in a CSO Online account want their scope set by proxies, brokered tokens and downstream authorization before deployment.
Reality
Formerly CYTRIX, the company says more than 25 agents exploit, rank, route and then retest customer systems continuously. The accuracy and growth figures are self-reported, and the 0.1% false-positive rate comes without a sample or a period.
Reality
Matthew Green argues AI patching will strand law enforcement without exploits to buy. Most practitioners TechCrunch asked think otherwise, and either way the thing a mandate reaches is your default configuration.
Reality
A VC that reviewed hundreds of AI productivity tools in a year says most are headed for the graveyard, and capital should rotate to drug discovery, defense and physical AI.
Reality