XBOW, an autonomous offensive security company that uses AI to continuously test applications for vulnerabilities at machine speed, has raised $120m in a Series C funding round, pushing its valuation above $1bn.
The round was led by DFJ Growth and Northzone, with new investors Sofina and Alkeon Capital also participating alongside existing backers Altimeter, NFDG Ventures, and Sequoia Capital. As part of DFJ Growth’s involvement, Ramin Sayar, venture partner and former CEO of Sumo Logic, will join XBOW’s board of directors to help the company scale operations and expand in the enterprise market.
The funding arrives as AI is fundamentally changing the threat landscape. Attackers can now probe every release, every environment, and every exposed surface continuously and at scale — a pace that traditional human-led penetration testing cannot match. XBOW is positioning autonomous offensive security as the response, shifting organisations away from periodic manual testing and towards continuous, intelligent coverage that reflects how modern adversaries actually operate.
XBOW’s platform applies AI reasoning and adversarial workflows based on real-world attack techniques to identify and validate vulnerabilities at machine speed. The system is designed to uncover deep exploits that manual testing often misses, while maintaining a low false-positive rate. The investment will be used to accelerate the company’s expansion across enterprise markets, drive product innovation, and support international growth.
Founded in January 2024 by Oege de Moor, creator of GitHub Copilot and GitHub Advanced Security, XBOW was built alongside engineers from the original Copilot team. From the outset, the company paired its autonomous systems with elite human hackers to train the platform to think like a real adversary. Chief Information Security Officer Nico Waisman, formerly CISO at Lyft, joined at the start and has shaped XBOW’s approach to deploying autonomous systems safely in complex environments, assembling a team of leading offensive security specialists to train the platform.
Over the past year, the company demonstrated that its autonomous systems can operate safely and effectively in live production environments. It reached the top of the HackerOne global leaderboard — the first time a machine had outperformed all human hackers on the platform — and is now deployed at a number of major enterprise customers.
XBOW founder and CEO Oege de Moor said, “When I founded XBOW in January 2024, few believed AI could truly think like a hacker and operate at machine speed. We proved it. XBOW reached the top of the HackerOne leaderboard and is now deployed at some of the most security-forward companies in the world. Attackers are already using AI. Defenders need to move just as fast. XBOW provides that continuous speed, and this funding enables us to bring it to the entire industry.”
DFJ Growth co-founder and managing partner Barry Schuler said, “XBOW was the first to demonstrate how large language models could be applied to offensive security at scale. The company didn’t just prove the technology, it also proved market demand. By combining AI reasoning with real-world adversarial expertise, XBOW is bringing the autonomous hacker to life.”
Northzone partner Sanjot Malhi said, “XBOW is rapidly emerging as a category leader, with Fortune 500 and global enterprises already relying on the platform as a mission-critical layer in their security stack. Oege and the team have built an extraordinarily capable AI-driven security platform in a remarkably short time, and we’re thrilled to partner with them as they scale.”
Onyx Security recently launched with $40m in funding as it seeks to address emerging risks tied to the rapid adoption of agentic artificial intelligence across organisations.
Copyright © 2026 RegTech Analyst
Copyright © 2018 RegTech Analyst
