# How BloomPath uses XBOW

As published on [xbow.com](https://xbow.com/customer-stories/bloompath), November 2025. Captured by usedby on 2026-10-07.

- Company: [BloomPath](https://www.usedby.ai/companies/bloompath.md)
- Tool: [XBOW](https://www.usedby.ai/tools/xbow.md)
- Teams: Security, Engineering

## What the story says

BloomPath's security team uses XBOW's autonomous penetration testing platform to run a blackbox assessment of its external application. XBOW's validated findings and remediation guidance let engineers fix issues, and the resulting report supported the company's SOC 2 submission.

Summary written by usedby from the source page, in English. The figures are those of XBOW and BloomPath, not ours.

> Full engagement, including the configuration, testing, validation process, and SOC report submission, was completed in a few days.

> For a lean team like ours, XBOW's simplicity and flexibility were game changers. We managed setup and execution ourselves with zero friction and could trigger tests on demand whenever we needed verification. Retesting fixes was quick and seamless, a huge contrast to the delays and back-and-forth that come with traditional pentesting vendors.
>
> Priscilla Fong, Security Advisor

> XBOW dramatically accelerated our path to SOC 2 readiness. What usually takes traditional firms weeks of coordination and manual testing was completed in just a few days, from kickoff to an auditor-ready report. It gave our team confidence that we could move fast without compromising on quality.
>
> Priscilla Fong, Security Advisor

## What usedby checked

We compared the story with its live page on 2026-10-07.

- Checked: the passage quoted above is copied word for word from the page, near the name of BloomPath.
- Checked: each number in our summary is printed on the page.
- Checked: the publication date is read from the page’s own metadata, never guessed.
- Checked: BloomPath uses XBOW. Confirmed line. Latest check across sources: 2026-10-07.
- Not checked: the result itself. We quote it; we did not measure it.

---
Source: https://www.usedby.ai/case-studies/bloompath-ai-xbow · How we check: https://www.usedby.ai/methodology