# How PuppyGraph uses XBOW

**less than 2 days**: “In less than 2 days a full penetration test was conducted and a report was delivered.”

As published on [xbow.com](https://xbow.com/customer-stories/puppygraph), December 2025. Captured by usedby on 2026-11-08.

- Company: [PuppyGraph](https://www.usedby.ai/companies/puppygraph.md)
- Tool: [XBOW](https://www.usedby.ai/tools/xbow.md)
- Industry: [Data & Analytics](https://www.usedby.ai/companies/industry/data-analytics.md)

## The use case: how PuppyGraph deploys XBOW

PuppyGraph moved all of its penetration testing to XBOW after XBOW found critical vulnerabilities that a previous provider missed. It now uses XBOW for continuous pentesting aligned with its release cycles instead of periodic assessments.

Summary written by usedby from the source page, in English. The figures are those of XBOW and PuppyGraph, not ours.

> As a result, we’ve decided to move all our pentesting needs to XBOW and shift from periodic assessments to a more continuous testing approach aligned with our release cycles.

> After working with XBOW, it was clear that their approach to security was a much better fit for our needs.
>
> Danfeng Xu, CTO at PuppyGraph

Source: [xbow.com](https://xbow.com/customer-stories/puppygraph), captured 2026-11-08.

> Before working with XBOW, we relied on a different pentest provider. Their findings lacked depth. Key vulnerabilities remained undetected, leaving us with a false sense of security. Additionally, while we leveraged other security tools like SAST and DAST solutions, they didn't provide the same level of real-world attack simulation that a strong pentest should deliver.
>
> Weimo Liu, CEO

Source: [xbow.com](https://xbow.com/), captured 2026-10-07.

## Other companies using XBOW

- [BloomPath](https://www.usedby.ai/companies/bloompath.md) — Confirmed
- [Jimini AI](https://www.usedby.ai/companies/jimini-ai.md) — Confirmed
- [Lumios](https://www.usedby.ai/companies/lumios.md) — Confirmed
- [Moderna](https://www.usedby.ai/companies/moderna.md) — Confirmed
- [Rogo](https://www.usedby.ai/companies/rogo.md) — Confirmed
- [Seznam.cz](https://www.usedby.ai/companies/seznam-cz.md) — Confirmed

## What usedby checked

We compared the story with its live page on 2026-11-08.

- Checked: the figure less than 2 days is printed word for word on the page, near the name of PuppyGraph.
- Checked: the passage quoted above is copied word for word from the page, near the name of PuppyGraph.
- Checked: the publication date is read from the page’s own metadata, never guessed.
- Checked: PuppyGraph uses XBOW. Confirmed line. Latest check across sources: 2026-11-08.
- Not checked: the result itself. We quote it; we did not measure it.

---
Source: https://www.usedby.ai/case-studies/puppygraph-xbow · How we check: https://www.usedby.ai/methodology