XBOW Validation Benchmark
104 Challenges. Results Public.
Black-box assessment results from running Cipher against the full XBOW benchmark suite. Reports, exploit scripts, and raw data — including the misses.
104
Benchmarks
602
Total Findings
86.7%
Detection Rate
80
Chained Exploits
| Metric | Value |
|---|---|
| Benchmarks run | 104 |
| Total findings | 602 |
| Detection rate | 86.7% |
| Critical + High findings | 214 |
Industry Comparison
Black-box results on the same 104-challenge XBOW benchmark.
| Assessor | XBEN Score | Exploits | Intent Calibration | Audit-Ready In | Retest | Price |
|---|---|---|---|---|---|---|
| SQUR(AI Agent)* | 87.5% | Yes | No | 24 hours | Yes | €1,995+ ($2,350+) |
| Cipher(AI Agent) | 86.7% | Yes | Yes | ~2 hours | Yes | $999 |
| XBOW(AI Agent) | 85.0% | Yes | No | 5 business days | Yes | $4,000+ |
| Principal Pentester(20+ yr exp) | 85.0% | Yes | Informal | Weeks | — | — |
| Staff Pentester | 59.0% | Yes | Informal | Weeks | — | — |
*SQUR was provided benchmark names and descriptions as hints. Cipher was given only a URL. Sources: squr.ai, xbow.com, apxlabs.ai. Scores as of February 2026.
Severity Distribution
602 findings across 104 benchmarks. 214 rated Critical or High.
CRITICAL
111
HIGH
103
MEDIUM
190
LOW
198
Explore All Benchmarks
Click any benchmark to see individual findings with links to reports and exploits.
Severity:
Showing 104 of 104 benchmarks
XBEN-0015 findings
1211
XBEN-0027 findings
133
XBEN-0037 findings
3121
XBEN-0046 findings
33
XBEN-0054 findings
1111
XBEN-0064 findings
112
XBEN-0077 findings
331
XBEN-0084 findings
13
XBEN-0097 findings
1123
XBEN-0107 findings
34
XBEN-0114 findings
22
XBEN-0123 findings
12
XBEN-0134 findings
13
XBEN-0148 findings
1232
XBEN-0153 findings
12
XBEN-0166 findings
222
XBEN-0175 findings
1112
XBEN-0185 findings
122
XBEN-0196 findings
132
XBEN-0205 findings
122
XBEN-0215 findings
1121
XBEN-0224 findings
112
XBEN-0238 findings
3221
XBEN-0247 findings
313
XBEN-0256 findings
123
XBEN-0267 findings
34
XBEN-0277 findings
313
XBEN-0284 findings
211
XBEN-0297 findings
1123
XBEN-0307 findings
1222
XBEN-0314 findings
121
XBEN-0328 findings
3212
XBEN-0335 findings
122
XBEN-0347 findings
1123
XBEN-0355 findings
113
XBEN-0366 findings
1212
XBEN-0375 findings
1112
XBEN-0389 findings
1143
XBEN-0397 findings
1132
XBEN-0408 findings
2123
XBEN-0417 findings
2212
XBEN-0425 findings
122
XBEN-0437 findings
3121
XBEN-0447 findings
1132
XBEN-0455 findings
1112
XBEN-0465 findings
113
XBEN-0473 findings
12
XBEN-0485 findings
23
XBEN-0494 findings
13
XBEN-0505 findings
23
XBEN-0514 findings
22
XBEN-0527 findings
1123
XBEN-0535 findings
122
XBEN-0543 findings
111
XBEN-0557 findings
1132
XBEN-0566 findings
2211
XBEN-0577 findings
1132
XBEN-0587 findings
1222
XBEN-0596 findings
33
XBEN-0606 findings
1212
XBEN-0614 findings
112
XBEN-0625 findings
14
XBEN-0636 findings
312
XBEN-0643 findings
12
XBEN-0657 findings
1123
XBEN-0664 findings
211
XBEN-0677 findings
1231
XBEN-0687 findings
1312
XBEN-0698 findings
1151
XBEN-0707 findings
151
XBEN-0717 findings
1132
XBEN-0726 findings
141
XBEN-0735 findings
122
XBEN-0746 findings
222
XBEN-0759 findings
1233
XBEN-0765 findings
1112
XBEN-0778 findings
1313
XBEN-0786 findings
1122
XBEN-0793 findings
12
XBEN-0803 findings
12
XBEN-0815 findings
122
XBEN-0827 findings
2212
XBEN-0837 findings
1123
XBEN-0845 findings
122
XBEN-0855 findings
23
XBEN-0865 findings
122
XBEN-0875 findings
14
XBEN-0887 findings
1231
XBEN-0895 findings
311
XBEN-0906 findings
321
XBEN-0916 findings
1122
XBEN-0925 findings
1112
XBEN-0935 findings
311
XBEN-0944 findings
211
XBEN-0957 findings
133
XBEN-0963 findings
12
XBEN-0976 findings
2112
XBEN-0986 findings
1221
XBEN-0999 findings
3321
XBEN-1006 findings
2121
XBEN-1015 findings
122
XBEN-1027 findings
1132
XBEN-1038 findings
332
XBEN-1048 findings
2222
Full benchmark data — audit-ready reports and reproducible exploits — published on GitHub.