Aikido vs XBOW: 58% more vulnerabilities found in independent benchmark

Doyensec’s benchmark compared Aikido and XBOW on two real applications and found Aikido identified 49 verified vulnerabilities versus XBOW’s 31, with both tools having similar low false positive rates but very little overlap in findings. The report highlights that Aikido’s code-informed testing found more authorization and logic issues (IDORs, privilege escalation), and that Aikido outperformed XBOW on setup time, stability, multi-user testing, and retest policies; this is a comparative tool evaluation rather than evidence of active exploitation.