Bishop Fox Offensive Security Industry Blog

Services

Cosmos

Events

Resources

About

Get Started

Pen Testing Overview

A modern approach to cybersecurity that combines automated testing tools with human expertise to identify all your vulnerabilities.

AI/LLM Security Assessment

Application Penetration Testing

• Mobile Application Assessment

• Secure Code Review

Cloud Security

Product Security

Network Security

• External Pen Testing

• Internal Pen Testing

Partner Assessments

• CASA & MASA

• Oracle Assessment

• ioXt Alliance Certification

CTEM Overview

Identify, prioritize and resolve business-impacting exposures through managed services that support and strengthen your CTEM program.

Attack Surface Discovery

Attack Surface Testing

Emerging Threats

Red Team & Readiness Overview

Get a holistic view of your ability to defend against a real-world attack.

Red Teaming

• Social Engineering

• Ransomware Readiness

IR Tabletop Exercises

Cosmos Platform

Meet Cosmos: The continuous offensive security solution designed to provide proactive defense.

Cosmos Attack Surface Management

Get Cosmos Attack Surface Management (CASM) for unmatched visibility into your changing external attack surface with continuous discovery and mapping.

Cosmos Application Penetration Testing

Cosmos Application Penetration Testing (CAPT) strengthens the security of business-critical applications with in-depth assessments.

Cosmos External Penetration Testing

Cosmos External Penetration Testing (CEPT) builds on Cosmos Attack Surface Management to provide the highest level of attack surface protection with post-exploitation activities.

Featured Report

Scoring high in the GigaOm Radar for the fourth year in a row!

Get an overview of the Attack Surface Management (ASM) market — and learn why Bishop Fox was named a Fast Mover by the analysts at GigaOm.

Get The Report

See All Events

We actively contribute to and participate in the cybersecurity community. Come see us at an upcoming industry event or tune into one of our speaking gigs, past or present!

Conferences

Technical Briefings

Virtual Sessions

Workshops & Training

Executive Briefings

Community Events

Featured Session

Red Teaming: Is your security program ready for the ultimate test?

Learn why traditional penetration testing fails on LLMs. Join Bishop Fox’s Brian D. for a deep dive into adversarial prompt exploitation, social engineering, and real-world AI security techniques. Rethink how you test and secure today’s most powerful models.

Watch Now

See All Resources

Explore offensive security resources, from detailed reports and step-by-step guides to expert-led webcasts and live sessions, all designed to keep you informed and ahead.

Blog

Customer Stories

Research

Open-Source Tools

Workshops & Training

Cybersecurity Style Guide

Featured Research

LLM-Assisted Vulnerability Research

Explore Bishop Fox's experimental research into applying Large Language Models to vulnerability research and patch diffing workflows.

View Guide

Company Overview

We’ve been in the offensive security space for almost two decades, and we’re proud to be home to the innovators, engineers, and exploit writers behind some of the most widely used and respected security tools, techniques, and research in the industry.

Customers

Partner Program

• Become a Partner

• Partner Assessment

Newsroom

Career Opportunities

Educational Programs

We’re Hiring

Want to Work with the Best Minds in Offensive Security?

Hack the Planet. Have Fun Doing It. Be part of an elite team and work on projects that have a real impact.

Explore Openings

Services

Services Overview

COSMOS

Events

Resources

About

Get Started

Featured Industry

Before You Red Team: Fix These 5 Common Mistakes

Attackers exploit the same 5 mistakes time and again. Red Teams spot the patterns, in this blog you will learn how to fix what adversaries count on.

Digitally generated Snowflakes hanging against blue background

Industry

Nov 28, 2019

The Pen Testing Tools We’re Thankful for This Season

By Britt Kemp

Black and white cloaked masked person holding a white candle

Industry

Oct 31, 2019

Scary Security Stories to Tell in the Dark

By Britt Kemp

Girl in purple jacket holding up sign with cyber.dic

Industry

Sep 30, 2019

Introducing cyber.dic

By Brianne Hughes, Catherine Lu

Gauge showing high severity reading for a security advisory for EzAdsPro “BlackBox” application.

Industry

Sep 11, 2019

OpenEMR 5.0.1(6) - Technical Advisory Release

By Chris Davis

Man in suit squatting down while covering ears

Industry

Sep 02, 2019

Cybersecurity Fatalism - How It Poisons Your Decision Making

By Dan Petro

Industry

Aug 29, 2019

Contain Your Toxic Waste: Keep Prod Out of Dev

By Tony Lozano

Kangaroos fighting sign please do not give psychoactive substances to the animals

Industry

Aug 12, 2019

Every Sign Has a Story

By Thiago Campos

Person working on laptop other person leaning over with pencil in hand

Industry

Aug 06, 2019

How Bishop Fox Enables Wickr's Security Assurance

By Bishop Fox

Cell phone held up with photo of Christie Terrill on it

Industry

Mar 25, 2019

My Path to Security - How Christie Terrill Got Into Security

By Bishop Fox

Cell phone held up with photo of Tom Wilhelm on it

Industry

Jan 21, 2019

My Path to Security - How Tom Wilhelm Got Into Security

By Bishop Fox

Cell phone being held up with photo of Gerben Kleijn on it

Industry

Oct 11, 2018

My Path to Security - How Gerben Kleijn Got Into Security

By Bishop Fox

Person typing on laptop with post it next to them with their password on it

Industry

Aug 16, 2018

Password Security: The Good, the Bad, and the "Never Should Have Happened"

By Candis Orr

This site uses cookies to provide you with a great user experience. By continuing to use our website, you consent to the use of cookies. To find out more about the cookies we use, please see our Privacy Policy.