AI-Powered Application Penetration Testing—Scale Security Without Compromise Learn More

Services

Platform

Industries

Events

Resources

About

Get Started

Services Overview

Pen Testing Overview

A modern approach to cybersecurity that combines automated testing tools with human expertise to identify all your vulnerabilities.

AI/LLM Security Assessment

Application Penetration Testing

• AI-Powered Penetration Testing

• Mobile Application Assessment

• Secure Code Review

Cloud Security

Product Security

Network Security

• External Pen Testing

• Internal Pen Testing

Partner Assessments

• CASA & MASA

• Oracle Assessment

• ioXt Alliance Certification

CTEM Overview

Identify, prioritize and resolve business-impacting exposures through managed services that support and strengthen your CTEM program.

Attack Surface Discovery

Attack Surface Testing

Emerging Threats

Red Team & Readiness Overview

Get a holistic view of your ability to defend against a real-world attack.

Red Teaming

• Social Engineering

• Ransomware Readiness

IR Tabletop Exercises

Cosmos Platform

Meet Cosmos: The continuous offensive security platform designed to provide proactive defense.

Cosmos AI Engine

Introducing Cosmos AI, the engine behind AI-Powered Penetration Testing.

Featured Report

gigaom leader attack surface management radar 2026

Bishop Fox Named Leader & Fast Mover in the 2026 GigaOm Radar!

Get an overview of the Attack Surface Management (ASM) market — and learn why Bishop Fox was named a leader and Fast Mover by the analysts at GigaOm.

Get The Report

See how we help teams in these industries stay ahead of real attackers. More sectors supported than listed.

Energy & Utilities Industry

Financial Industry

Health Plans

Healthcare Industry

Media & Entertainment Industry

Trusted Partner Network (TPN)

New Alliance

Bolstering the Financial Sector Cyber Resilience!

Bishop Fox is an FS-ISAC Affiliate Partner helping members strengthen resilience with adversary-driven offensive security—from penetration testing to red teaming—designed to protect financial operations, support regulatory expectations, and defend customer trust.

See Program's Benefits

See All Events

We actively contribute to and participate in the cybersecurity community. Come see us at an upcoming industry event or tune into one of our speaking gigs, past or present!

Conferences

Technical Briefings

Virtual Sessions

Workshops & Training

Executive Briefings

Community Events

Featured Session

Red Teaming: Is your security program ready for the ultimate test?

Learn why traditional penetration testing fails on LLMs. Join Bishop Fox’s Brian D. for a deep dive into adversarial prompt exploitation, social engineering, and real-world AI security techniques. Rethink how you test and secure today’s most powerful models.

Watch Now

See All Resources

Explore offensive security resources, from detailed reports and step-by-step guides to expert-led webcasts and live sessions, all designed to keep you informed and ahead.

Blog

Customer Stories

Bishop Fox Labs

Initial Access Podcast

Open-Source Tools

Workshops & Training

Cybersecurity Style Guide

Featured Report

Bishop Fox Named Leader & Fast Mover in the 2026 GigaOm Radar!

Get an overview of the Attack Surface Management (ASM) market — and learn why Bishop Fox was named a leader and Fast Mover by the analysts at GigaOm.

Get The Report

Company Overview

We’ve been in the offensive security space for almost two decades, and we’re proud to be home to the innovators, engineers, and exploit writers behind some of the most widely used and respected security tools, techniques, and research in the industry.

Customers

Partner Program

• Become a Partner

• Partner Assessment

Newsroom

Career Opportunities

Educational Programs

We’re Hiring

Want to Work with the Best Minds in Offensive Security?

Hack the Planet. Have Fun Doing It. Be part of an elite team and work on projects that have a real impact.

Explore Openings

Services

Services Overview

PLATFORM

Events

Resources

About

Get Started

Meet The Author

Jon Williams
Staff Security Engineer

As a researcher for the Bishop Fox Capability Development team, Jon spends his time hunting for vulnerabilities and writing exploits for software on our customers' attack surface. Jon has written and presented research on various topics including enterprise wireless network attacks, bypassing network access controls, and reverse-engineering edge security device firmware.

Past Speaking Engagements:

Published Tools:

Sonicrack

Posts from Jon Williams

Jun 05, 2026

Popping Root on UniFi OS Server: Unauthenticated RCE Chain Detection & Analysis

May 29, 2026

Looting UniFi Controllers: Detecting and Weaponizing CVE-2026-22557

May 22, 2026

Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypass

Mar 26, 2026

strongSwan CVE-2026-25075: Integer Underflow in VPN Authentication

Dec 04, 2025

Arista NextGen Firewall XSS to RCE Chain

Nov 19, 2025

Fortinet FortiWeb Authentication Bypass – CVE-2025-64446

Aug 15, 2025

Vulnerability Discovery with LLM-Powered Patch Diffing

Apr 24, 2025

SonicWall Sonicos Versions 7.1.x and 8.0.x

Mar 21, 2025

SonicWall-CVE-2024-53704: Exploit Details

Mar 18, 2025

Tomcat CVE-2025-24813: What You Need to Know

Feb 24, 2025

Tearing Down (Sonic)Walls: Decrypting SonicOSX Firmware

Feb 10, 2025

SonicWall CVE-2024-53704: SSL VPN Session Hijacking

Jan 15, 2024

It’s 2024 and Over 178,000 SonicWall Firewalls are Publicly Exploitable

Aug 02, 2023

Breaking Fortinet Firmware Encryption

Jul 21, 2023

Citrix ADC Gateway RCE: CVE-2023-3519 is Exploitable, and 53% of Servers Are Unpatched

May 17, 2023

A More Complete Exploit for Fortinet CVE-2022-42475

Sep 12, 2019

Breaching the Trusted Perimeter | Automating Exploitation

Events from Jon Williams

April 24, 2025

Technical Briefing on SonicOS SSL VPN Denial-of-Service Vulnerability

February 21-22, 2022

Tearing Down (Sonic)Walls: Reverse-Engineering SonicOSX Firmware Encryption

Tomcat CVE-2025-24813: What You Need to Know

February 11, 2025

SonicWall-CVE2024-53704: Exploit Details

February 21-22, 2022

Bishop Fox at DistrictCon

Thursday, June 29, 2023 at 11 am PT / 2 pm ET

Breaking Down Q2's Critical CVEs: From Discovery to Exploitation

On-Demand Webcast

Achieving Warp Speed to Continuous Testing: How to Calculate ROI for your Business

Resources from Jon Williams

Guide

LLM-Assisted Vulnerability Research

Explore Bishop Fox's experimental research into applying Large Language Models to vulnerability research and patch diffing workflows. This technical guide presents methodology, data, and insights from structured experiments testing LLM capabilities across high-impact CVEs, offering a transparent look at where AI shows promise and where challenges remain.

Learn More

This site uses cookies to provide you with a great user experience. By continuing to use our website, you consent to the use of cookies. To find out more about the cookies we use, please see our Privacy Policy.