Guidance

Guidance documentation for XBOW Console.

Articles in this section

• Choosing an asset to test

  Learn which assets are most suited to XBOW penetration testing.

• Comparing different types of assessment

  Understand XBOW assessment types: comprehensive security testing, retest to verify fixes, and how you can focus on specific vulnerability classes.

• Protecting assets during XBOW testing

  Learn how to configure an assessment for full testing at the same time as protecting your asset and users.

• Guiding XBOW testing

  Improve XBOW assessment accuracy by uploading source code and documentation for gray-box testing. Learn what to include and exclude from your archive.

• Guiding XBOW testing for experts

  Brief XBOW like a human pentester. Use assessment guidance cards to direct testing focus and validate results.

• Checking configurations before assessment

  Learn what happens during XBOW's configuration check phase, including target validation, credential verification, and scope discovery.

• Interpreting XBOW results

  Understand XBOW security findings, vulnerability classifications, and how to prioritize mitigation based on validated and informational results.