Post

For the first time in history, the #1 hacker in the US is an AI. (1/8)

In 2025, solving CTFs is table stakes. To prove that AI agents can hack, we need attacks on live production systems. Earlier this year, @xbow.com became the top hacker in the US on @hacker0x01.bsky.social, outperforming every human participant. It’s the first time an autonomous system has done so.

XBOW automatically runs expert-level attacks across all webapps, giving security teams unprecedented scale. @xbow.com reported 1092 vulnerabilities on HackerOne in just a few months, including RCE, XXE, SQLi, SSRF, exposed secrets, and XSS.

How did @xbow.com become the top-ranked hacker in the US on HackerOne? @nicowaisman.bsky.social takes you behind the scenes to show how it all works, from reconnaissance to zero day discovery: xbow.com/blog/top-1-h...

Real security is POC || GTFO – and XBOW agrees. We’re releasing technical deep-dives on cool findings from our journey to the top of the HackerOne US leaderboard. The first is a zero-day XSS in Palo Alto Networks GlobalProtect by @pwntester.bsky.social. xbow.com/blog/xbow-gl...

Our previous investors, Konstantine Buhler of Sequoia Capital and Nat Friedman, are participating super pro rata. We could not wish for better partners in this fight. This brings the total funding of @xbow.com to $117M, allowing us to move as fast as the problem demands.

XBOW is now generally available. See it in action → Book a demo with our team. www.xbow.com