What you get
An XBOW subscription is an enterprise product: the vendor does not publish package contents, billing is tied to the surface under coverage, and it is arranged through its own staff, partners or cloud marketplaces. Get the essentials from the seller: what exactly is paid for — a one-off pentest on demand or continuous platform coverage — and what volume of hosts and applications the access is sized for. Check the formal side separately: launching offensive tests requires proof that the assets are yours, and that proof is given on behalf of an organization. Ask about the term as well, because how much of the period is left determines how many runs you can fit in.
About the service
An autonomous offensive test for web applications: you point it at a URL and the platform spins up thousands of parallel AI agents that crawl the app themselves, find weak spots, chain them together and prove every finding with a working exploit. It runs in five stages: agents absorb the context you hand over (documentation, credentials, API specs), build a live map of entry points and authentication flows, a coordinator sets priorities, then the attack itself runs, and separate validator agents confirm the vulnerability really reproduces — which is how false positives get removed. Each finding ships with the chained attack path, the working exploit and a full log of the agent decisions, so the report holds up in front of both a developer and an auditor. There is scope containment, production-safe validation modes, reporting mapped to 40+ frameworks such as SOC 2, ISO 27001, HIPAA, GDPR and PCI DSS, plus an API for launching tests from your own pipelines. It sells in two shapes: a one-off self-serve pentest on demand with results in a handful of days, and continuous platform coverage of your perimeter. The vendor does not publish package contents or terms — its pricing page only says billing scales with coverage, and buying goes through the AWS, Google Cloud, Oracle and Microsoft marketplaces or a quote request, so confirm the exact volume and term with the seller.