Offensive Security Blog

Services

Cosmos

Industries

Events

Resources

About

Get Started

Services Overview

Pen Testing Overview

A modern approach to cybersecurity that combines automated testing tools with human expertise to identify all your vulnerabilities.

AI/LLM Security Assessment

Application Penetration Testing

• Mobile Application Assessment

• Secure Code Review

Cloud Security

Product Security

Network Security

• External Pen Testing

• Internal Pen Testing

Partner Assessments

• CASA & MASA

• Oracle Assessment

• ioXt Alliance Certification

CTEM Overview

Identify, prioritize and resolve business-impacting exposures through managed services that support and strengthen your CTEM program.

Attack Surface Discovery

Attack Surface Testing

Emerging Threats

Red Team & Readiness Overview

Get a holistic view of your ability to defend against a real-world attack.

Red Teaming

• Social Engineering

• Ransomware Readiness

IR Tabletop Exercises

Cosmos Platform

Meet Cosmos: The continuous offensive security solution designed to provide proactive defense.

Cosmos Attack Surface Management

Get Cosmos Attack Surface Management (CASM) for unmatched visibility into your changing external attack surface with continuous discovery and mapping.

Cosmos Application Penetration Testing

Cosmos Application Penetration Testing (CAPT) strengthens the security of business-critical applications with in-depth assessments.

Cosmos External Penetration Testing

Cosmos External Penetration Testing (CEPT) builds on Cosmos Attack Surface Management to provide the highest level of attack surface protection with post-exploitation activities.

Featured Report

Scoring high in the GigaOm Radar for the fourth year in a row!

Get an overview of the Attack Surface Management (ASM) market — and learn why Bishop Fox was named a Fast Mover by the analysts at GigaOm.

Get The Report

See how we help teams in these industries stay ahead of real attackers. More sectors supported than listed.

Energy & Utilities Industry

Financial Industry

Health Plans

Healthcare Industry

Media & Entertainment Industry

Trusted Partner Network (TPN)

New Alliance

Bolstering the Financial Sector Cyber Resilience!

Bishop Fox is an FS-ISAC Affiliate Partner helping members strengthen resilience with adversary-driven offensive security—from penetration testing to red teaming—designed to protect financial operations, support regulatory expectations, and defend customer trust.

See Program's Benefits

See All Events

We actively contribute to and participate in the cybersecurity community. Come see us at an upcoming industry event or tune into one of our speaking gigs, past or present!

Conferences

Technical Briefings

Virtual Sessions

Workshops & Training

Executive Briefings

Community Events

Featured Session

Red Teaming: Is your security program ready for the ultimate test?

Learn why traditional penetration testing fails on LLMs. Join Bishop Fox’s Brian D. for a deep dive into adversarial prompt exploitation, social engineering, and real-world AI security techniques. Rethink how you test and secure today’s most powerful models.

Watch Now

See All Resources

Explore offensive security resources, from detailed reports and step-by-step guides to expert-led webcasts and live sessions, all designed to keep you informed and ahead.

Blog

Customer Stories

Bishop Fox Labs

Open-Source Tools

Workshops & Training

Cybersecurity Style Guide

Featured Research

LLM-Assisted Vulnerability Research

Explore Bishop Fox's experimental research into applying Large Language Models to vulnerability research and patch diffing workflows.

View Guide

Company Overview

We’ve been in the offensive security space for almost two decades, and we’re proud to be home to the innovators, engineers, and exploit writers behind some of the most widely used and respected security tools, techniques, and research in the industry.

Customers

Partner Program

• Become a Partner

• Partner Assessment

Newsroom

Career Opportunities

Educational Programs

We’re Hiring

Want to Work with the Best Minds in Offensive Security?

Hack the Planet. Have Fun Doing It. Be part of an elite team and work on projects that have a real impact.

Explore Openings

Services

Services Overview

COSMOS

Events

Resources

About

Get Started

Featured Blog

Vulnerability Discovery with LLM-Powered Patch Diffing

Read our most recent research to see how LLMs can assist in scaling patch diffing workflows, saving valuable time in a crucial race against attackers.

Game Over, Man! Reversing Video Games to Create an Unbeatable AI Player

Technical

Aug 10, 2016

Game Over, Man! Reversing Video Games to Create an Unbeatable AI Player

By Dan Petro

Industry

Jun 15, 2016

How to Engineer Secure Things: Past Mistakes and Future Advice

By Nathan Elendt

Industry

Jun 01, 2016

The Power of 'Agile' Security at Dun & Bradstreet

By Vincent Liu

Technical

Apr 08, 2016

If You Can't Break Crypto, Break the Client: Recovery of Plaintext iMessage Data

By Joe DeMesy, Shubham Shah, and Matthew Bryant

Advisory

Apr 08, 2016

OS X Messages (iMessage): XSS & File Disclosure

By Joe DeMesy, Shubham Shah, and Matthew Bryant

Male torso blue shirt holding cell phone

Industry

Mar 31, 2016

On Apple, Encryption, and Privacy: A Word About Decryption

By Carl Livitt

Woman sitting at desktop computer holding her chin

Industry

Mar 23, 2016

CA Single Sign-On Software Update: Stay Secure

By Bishop Fox

Advisory

Mar 23, 2016

CA Single Sign-On Unspecified High-Risk Vulnerabilities Advisory

By Mike Brooks

Arm holding out cell phone out of focus background

Industry

Mar 02, 2016

On Apple, Encryption, and Privacy

By Joe DeMesy and Carl Livitt

Illustration box orange side gray side black background

Technical

Feb 03, 2016

Burp, Collaborate, and Listen: A Pentester Reviews the Latest Burp Suite Addition

By Max Zinkus

Man brown hair plaid shirt gold globes in background

Industry

Oct 20, 2015

Building a Winning Security Team From the Top Down

By Vincent Liu

Technical

Oct 07, 2015

Fishing the AWS IP Pool for Dangling Domains

By Matt Bryant

This site uses cookies to provide you with a great user experience. By continuing to use our website, you consent to the use of cookies. To find out more about the cookies we use, please see our Privacy Policy.