Virtual Session

Services

Cosmos

Events

Resources

About

Get Started

Pen Testing Overview

A modern approach to cybersecurity that combines automated testing tools with human expertise to identify all your vulnerabilities.

AI/LLM Security Assessment

Application Penetration Testing

• Mobile Application Assessment

• Secure Code Review

Cloud Security

Product Security

Network Security

• External Pen Testing

• Internal Pen Testing

Partner Assessments

• CASA & MASA

• Oracle Assessment

• ioXt Alliance Certification

CTEM Overview

Identify, prioritize and resolve business-impacting exposures through managed services that support and strengthen your CTEM program.

Attack Surface Discovery

Attack Surface Testing

Emerging Threats

Red Team & Readiness Overview

Get a holistic view of your ability to defend against a real-world attack.

Red Teaming

• Social Engineering

• Ransomware Readiness

IR Tabletop Exercises

Cosmos Platform

Meet Cosmos: The continuous offensive security solution designed to provide proactive defense.

Cosmos Attack Surface Management

Get Cosmos Attack Surface Management (CASM) for unmatched visibility into your changing external attack surface with continuous discovery and mapping.

Cosmos Application Penetration Testing

Cosmos Application Penetration Testing (CAPT) strengthens the security of business-critical applications with in-depth assessments.

Cosmos External Penetration Testing

Cosmos External Penetration Testing (CEPT) builds on Cosmos Attack Surface Management to provide the highest level of attack surface protection with post-exploitation activities.

Featured Report

Scoring high in the GigaOm Radar for the fourth year in a row!

Get an overview of the Attack Surface Management (ASM) market — and learn why Bishop Fox was named a Fast Mover by the analysts at GigaOm.

Get The Report

See All Events

We actively contribute to and participate in the cybersecurity community. Come see us at an upcoming industry event or tune into one of our speaking gigs, past or present!

Conferences

Technical Briefings

Virtual Sessions

Workshops & Training

Executive Briefings

Community Events

Featured Session

Red Teaming: Is your security program ready for the ultimate test?

Learn why traditional penetration testing fails on LLMs. Join Bishop Fox’s Brian D. for a deep dive into adversarial prompt exploitation, social engineering, and real-world AI security techniques. Rethink how you test and secure today’s most powerful models.

Watch Now

See All Resources

Explore offensive security resources, from detailed reports and step-by-step guides to expert-led webcasts and live sessions, all designed to keep you informed and ahead.

Blog

Customer Stories

Bishop Fox Labs

Open-Source Tools

Workshops & Training

Cybersecurity Style Guide

Featured Research

LLM-Assisted Vulnerability Research

Explore Bishop Fox's experimental research into applying Large Language Models to vulnerability research and patch diffing workflows.

View Guide

Company Overview

We’ve been in the offensive security space for almost two decades, and we’re proud to be home to the innovators, engineers, and exploit writers behind some of the most widely used and respected security tools, techniques, and research in the industry.

Customers

Partner Program

• Become a Partner

• Partner Assessment

Newsroom

Career Opportunities

Educational Programs

We’re Hiring

Want to Work with the Best Minds in Offensive Security?

Hack the Planet. Have Fun Doing It. Be part of an elite team and work on projects that have a real impact.

Explore Openings

Services

Services Overview

COSMOS

Events

Resources

About

Get Started

Virtual and In-Person Events

Let's connect at an upcoming event!

We actively contribute to and participate in the cybersecurity community. Come see us at an upcoming industry event or tune into one of our speaking gigs, past or present!

Virtual Session

Tuesday, November 18

Peeling Back the Plastic: Finding 0-Days in IoT Devices

Join Senior Security Consultant Nick Cerne for “Peeling Back the Plastic: Finding 0-Days in IoT Devices” on Tuesday, Nov. 18. Learn hands-on techniques for uncovering hidden vulnerabilities in…

Learn More

Virtual Session

Past Event: Tuesday, October 28

The Basics are the Breach: Lessons from Real-World Product Security Reviews

In this live virtual session, you’ll explore two years of product testing across healthcare, IoT, industrial, and financial systems—and see how “basic” vulnerabilities continue to cause the biggest…

Learn More

Fireside chat title: Fireside Chat - SaaS Security: Inside Recent Attacks Disrupting Global Enterprises and code showing on a white background.

Virtual Session

Past Event: September 18th, 2025

Fireside Chat - SaaS Security: Inside Recent Attacks Disrupting Global Enterprises

Two recent cyberattacks crippled global enterprises by exploiting Salesforce OAuth mechanisms. Join CISO Christie Terrill and former Salesforce security leader Brian Soby for an exclusive breakdown…

Learn More

Virtual event titled "AI War Stories: Silent Failures, Real Consequences" exploring real-world AI security incidents and silent compliance vulnerabilities.

Virtual Session

Past Event: Wednesday, August 20th

AI War Stories: Silent Failures, Real Consequences

AI doesn’t crash when compromised—it complies. Join Jessica Stinson as she shares real-world AI security failures, revealing how trusted tools are silently hijacked. Learn to spot hidden risks and…

Learn More

Virtual Session

Past Event: July 16, 2025

Breaking AI: Inside the Art of LLM Pen Testing

Learn why traditional pen testing fails on LLMs. Join Bishop Fox’s Brian D. for a deep dive into adversarial prompt exploitation, social engineering, and real-world AI security techniques. Rethink…

Learn More

Virtual Session

Past Event: On Demand

Architecting Cloud Security Testing in the GenAI Era

Explore how cloud-native architectures with AI components create new security challenges, revealing why upfront architecture reviews are essential for effective security testing and how red teams are…

Learn More

Subscribe to our blog

Be first to learn about latest tools, advisories, and findings.

Attacking & Defending Deepfakes: A Red Teamer’s Perspective featured image with Bishop Fox new branding of easter eggs.

Virtual Session

Past Event: Wednesday, May 28, 2025

Attacking & Defending Deepfakes: A Red Teamer’s Perspective

Explore the offensive and defensive use of deepfake technology in cybersecurity with Bishop Fox red teamer Brandon Kovacs. This session dives into real-world attack simulations, red team…

Learn More

Senior Security Engineer Tom Hudson’s keynote tomorrow: "Good Vibes Only: Should You Still Learn to Code?

Conference

Past Event: Friday, May 23, 2025

Catch Senior Security Engineer Tom Hudson’s keynote @NAHAMCON 2025

NahamCon 2025 starts Thursday, May 22 at 12 p.m. EDT! Two tracks. Top hackers. All virtual. Catch Senior Security Engineer Tom Hudson’s keynote tomorrow: "Good Vibes Only: Should You Still Learn to…

Learn More

Attack Surface Management Measuring Real World Impact Webcast featured image.

Virtual Session

Past Event: May 7, 2025

Attack Surface Management: Measuring Real-World Impact

Our experts explain how to tell if your ASM is effective, what teams often miss, and why it’s more than just tracking known vulnerabilities.

Learn More

Ready to Get Started? Let's Connect.

Get Started

This site uses cookies to provide you with a great user experience. By continuing to use our website, you consent to the use of cookies. To find out more about the cookies we use, please see our Privacy Policy.