On March 18, 2026, XBOW announced a $120 million Series C, led by DFJ Growth and Northzone, at a valuation above $1 billion. Its stated priorities were product development, enterprise expansion and international growth. XBOW’s announcement, Northzone’s investment thesis.

There is a further development worth including. On May 6, XBOW announced another $35 million in Series C financing, bringing the announced round and extension to $155 million. Participants included Accenture Ventures, NVentures, Samsung Ventures and SentinelOne S Ventures. That is the combined Series C amount, not XBOW’s lifetime funding total. Extension announcement.

For Decima, these announcements are a concrete competitive reference. A company pursuing autonomous offensive security has attracted substantial capital and strategic partners. The question is how we turn that market signal into a focused product and a credible reason for customers to choose us.

What the funding tells us

Our reading is that investors see an opportunity to make repeated security testing a larger, recurring part of enterprise operations. Northzone explicitly frames its investment around the gap between continuous software delivery and periodic testing. That is an investor’s thesis, with an investor’s financial interest in the outcome. Northzone.

There is also a reported adoption signal: XBOW said in May that it served more than 100 customers. That is useful context, though it does not disclose those customers’ contract values, retention or profitability. XBOW’s May announcement.

A financing valuation cannot tell us the size of Decima’s addressable market. Our practical market estimate has to begin with identifiable buyers: which regulated businesses need the service, what they currently spend, which approvals they require and what recurring price they will actually pay. Paid pilots and renewals will tell us more about our opportunity than applying a small percentage to a large cybersecurity-market headline.

XBOW is a direct competitor

The overlap is substantial. XBOW describes an agent platform that discovers and validates vulnerabilities, provides reproducible attack traces, logs agent activity, routes work across models and produces reporting for boards and auditors. It also advertises deployment options aligned with residency and compliance requirements. These are XBOW’s product claims; Decima has not independently benchmarked them. Current platform description.

That comparison sets a useful standard for our positioning. Agent tooling, model choice, auditability and polished reports belong in the product, but we cannot present the feature names alone as unique advantages. Nor can we assume that a larger competitor cannot serve smaller regulated customers.

Our differentiation has to become visible in a customer’s experience: the time needed to approve an engagement, the clarity of the evidence, the usefulness of a report, the control over spending and the quality of help when a finding needs judgment. Those are things we can demonstrate and compare.

What investors can bring beyond cash

Accenture’s May announcement provides a concrete example. Alongside its investment, it announced a partnership and plans to integrate XBOW into its Cyber.AI offering. Separately, XBOW described Samsung’s role as a preferred reseller in South Korea. These are routes into existing customer relationships. Accenture’s announcement, XBOW’s partner expansion.

That matters for Decima’s eventual funding decision. Outside investment could fund additional security researchers, platform engineers, independent evaluations, customer support and the work needed to sell into demanding organizations. A strategic investor could also help us reach qualified buyers or establish a useful distribution partnership.

We should be able to explain what each investment would accelerate and how we would measure the result. An introduction becomes valuable when it produces a suitable pilot, a reference customer or a repeatable sales channel. Capital makes those activities possible at greater scale; it does not establish product quality or customer demand by itself.

We welcome conversations with investors and strategic partners who see the same opportunity and can bring sector expertise, customer relationships or distribution alongside capital.

Where Decima can build a distinct offering

Our proposed focus is the regulated mid-market, informed by experience operating financial infrastructure at Byte Federal. The buyer may have a small security team while still needing evidence that engineers, executives and compliance reviewers can use. Our financial-services background and relationships in security research give us a starting point for understanding that workflow.

We intend to combine three things particularly well:

  • Control over the assessment. Clear authorization, defined targets and exclusions, visible activity and a testing cadence shaped by the customer’s budget. Customers should understand what a change in scope or frequency will cost before committing to it.
  • Independence in the execution stack. Evaluated, security-specialized models, self-hosted inference and an instrumented Kali-based environment. Deployment and data flows need to be explicit; model selection should follow measured task performance.
  • Evidence that works for different readers. A live operational view, an assurance view and a premium PDF built from the same reviewed findings. The report should explain business impact, remediation, retesting and relevant control mappings while preserving the evidence behind each claim.

These are development priorities. Their commercial value has to be established through working assessments and customer feedback. A daily report edition must also make the date and extent of underlying testing clear. Frequent publication cannot stand in for fresh coverage.

Our architecture perspective describes this direction in more detail. Our analysis of the OpenAI–Hugging Face incident explains why the execution record must remain trustworthy even when the worker generating activity cannot be trusted.

A useful price comparison needs the same scope

As checked on September 22, XBOW’s public pricing page describes usage-based pricing scoped to the customer’s environment and asks buyers to request a quote. It does not publish a numeric rate card. We therefore cannot responsibly claim that Decima is a particular percentage cheaper. XBOW pricing.

The meaningful comparison is the total cost of equivalent coverage: the same applications and authenticated roles, testing frequency, review effort, remediation support, retests, reporting and evidence retention. Setup costs, minimum commitments and overage rules also affect the customer’s bill.

For our own economics, GPU rental is only one input. Preparation, unsuccessful investigation, verification, storage, report production and support all consume resources. The measure to improve is the cost of delivering a useful, supported assessment at an agreed level of coverage. A low hourly compute price does not establish an attractive service margin.

What we should prove next

Decima’s next milestone is a real, authorized assessment of our own environment, captured through the proposed model and tool harness. From that run, we can build the live Operations view, analyze the retained evidence and produce the report that a human reviewer can evaluate.

We then need external pilot feedback on finding quality, coverage gaps, report usefulness and willingness to pay. Review by the customer’s compliance team can establish what the report supports and what additional work remains. That is also how we learn whether a referral or reseller relationship can deliver a consistently good service.

XBOW’s financing makes the competitive urgency tangible. It strengthens the case for moving deliberately from concept to evidence, while raising the standard of proof we should expect from ourselves.

Decima’s opportunity is to earn a place in this market through a focused customer experience, credible results and economics that support repeated testing.