/

Companies / XBOW / Subprocessors

XBOW subprocessors

xbow.com

XBOW is an autonomous penetration testing platform that attacks applications and APIs to find exploitable vulnerabilities and then re-tests after fixes. It serves security teams.

Summarized from its homepage on 4 Nov 2026.

Classified asCybersecurity

The XBOW homepage

Subprocessors of XBOW

XBOW declares 23 subprocessors, including AI providers Anthropic, OpenAI, xAI.

From the company's own list.Read the source
SubprocessorPurposeFirst seen
Amazon Web Services (AWS)Cloud hosting for our product and customer data.4 Nov 2026
AnthropicUsed as part of the XBOW core product to direct and guide the Penetration test machines.4 Nov 2026
CheckboxCheckbox provides a platform for managing and automating legal requests, approvals, and related workflows.4 Nov 2026
CloudflareFedRAMP registryDomain purchasing and DNS Management for Root domain, WAF4 Nov 2026
FrontHIPAA statementISO 27001 statementSOC 2 statementProduct and IT support case management and knowledge base services.4 Nov 2026
GongConversational intelligence4 Nov 2026
Google CloudWe use GCP to host some internal corporate tooling and use LLM services for our core product e.g. via Gemini Enterprise Agent Platform (previously Vertex).4 Nov 2026
Google WorkspaceCollaboration tools (emails & docs), video conferencing, identity provision.4 Nov 2026
HashiCorp Terraform CloudStorage of terraform configuration and secrets4 Nov 2026
Microsoft AzureFedRAMP registryLLM Inteference provider, cloud services for system deployment4 Nov 2026

13 more subprocessors

See the full list with purpose, location and first seen date.

Create a free accountWork email, no card. Already have one? Log in

Questions about XBOW

Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.

See XBOW's full stack

Every vendor with its source and date, and an alert when XBOW adds or drops one. The same lookup works for any company.

  • Every company and vendor, with its public source
  • 100 API calls a month, plus MCP and the Chrome extension
  • Work email only. No card, no sales call