Blog
Offensive Security Academy
10 Red Flags to Investigate When Evaluating AI Pentesting Vendors
XBOW TeamOffensive Security Academy
What Is Insecure Direct Object Reference (IDOR), and How Do You Test for It?
XBOW TeamOffensive Security Academy
How to Evaluate an AI Pentesting Vendor: A Decision Framework for Security Leaders
XBOW TeamCompany News
GPT-5.5: Democratizing Cyber Capabilities
Oege de Moor, Nico WaismanAI Research
GPT-5.5: Mythos-Like Hacking, Open to All
Albert Ziegler, Steve BuckleyAI Research
Smaller Bites, Bigger Meals: What We Learned Running Opus 4.7 in Offensive Workflows
Albert ZieglerProduct
Offensive Security Needs to Become Continuous
Christopher FordAI Research
AI for Pentesting: Strengths, Weaknesses, and Where XBOW Fills the Gaps
Albert ZieglerOffensive Security Academy