TLDR Tech / InfoSec
Comparing AI Application Security Testing Platforms: Aikido vs. XBOW
Doyensec ran an Aikido-sponsored head-to-head of Aikido's Attack AI Pentest and XBOW's Lightspeed against two OSS web apps (Fider and Photoview), manually validating every finding as true or false positive. Aikido surfaced more true positives (49 vs. 31), set up in under 20 minutes, and ran cleanly, while XBOW edged it on false-positive ratio (3% vs. 4%) but suffered a sales-gated, week-long flow whose scans crashed, disabled auth, and deleted the test account, plus a single-admin-credential limitation that may have masked authorization bugs. Both platforms reliably overstated severities (corrections trended downward on review) and beat legacy SAST/DAST on ROI, though the two-app sample keeps this a test drive rather than a verdict.
Read the full story