In the realm of cyber threats, the emergence of AI has given criminals new methods to breach systems and steal sensitive data. However, there’s one AI that stands out for its proficiency in identifying vulnerabilities within code: Xbow, currently leading the US HackerOne leaderboard.

Xbow AI (Image credit: quantic69 via Getty Images)

Xbow, a startup launched just a year ago, has already attracted $75 million in funding, highlighting its impressive capabilities in pinpointing security flaws. While the tools Xbow employs are not novel—ethical hackers have long utilized automated systems to scrutinize code—its utilization of AI significantly enhances efficiency in data analysis, allowing for rapid identification of common patterns.

Despite its leading position, Xbow isn’t without flaws, as instances of AI hallucination—where AI generates incorrect responses due to untrained data—can occur. This issue is addressed by having human experts review every discovered vulnerability.

As Xbow co-founder Oege de Moor noted, the model requires explicit instructions for context: “It needs to be explicitly told when looking at a medical website that prescriptions should be kept private.”

Given the modern emphasis on secure coding practices, startups like Xbow are poised for growth, combining machine efficiency with human oversight to maximize accuracy and speed.