Tools AI-Found Vulnerability Register aifv-0058
Register entry
XBOW submitted close to 1,060 reports to HackerOne programmes and topped the US leaderboard
- Project
- HackerOne programmes (various)
- Finder
- XBOW
- Autonomy
- autonomous pentester with human review before submission
- Evidence tier
- Aggregate claim
- Bounty
- HackerOne; XBOW published no cash total and said bounty income ran below the compute cost of the runs
- Confidence
- CONFIRMED
What happened
Roughly 1,060 reports in about 90 days to June 2025: 130 resolved, 303 triaged, 208 duplicate, 209 informative and 36 not applicable, per XBOW's own post. The individual reports are largely undisclosed, so the campaign enters as one aggregate row.
Credit as recorded: XBOW's own post: "XBOW submitted nearly 1,060 vulnerabilities". Date basis: XBOW post, 24 June 2025.
Sources
- XBOW, how XBOW ranked number onexbow.com/blog/top-1-how-xbow-did-it
One record from the AI-Found Vulnerability Register, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 19 September 2026