Explore Bishop Fox's experimental research into applying Large Language Models to vulnerability research and patch diffing workflows. This technical guide presents methodology, data, and insights from structured experiments testing LLM capabilities across high-impact CVEs, offering a transparent look at where AI shows promise and where challenges remain.
Powering Up Burp Suite: Building Custom Extensions for Advanced Web Application Testing
Learn how to power up web application security testing with tips on creating customized extensions featuring BurpCage, an extension that replaces any image proxied through Burp Suite leveraging the Montoya API.
Bishop Fox Tabletop Exercise Methodology
Download Bishop Fox's IR tabletop exercise methodology to understand how we develop realistic attack scenarios, facilitate collaborative exercises, and assess your organization's incident response readiness.
Bishop Fox Social Engineering Methodology
Get Bishop Fox's social engineering testing methodology. See how we simulate phishing, vishing, and physical attacks to strengthen your security awareness.
Cybersecurity Style Guide v2.0
Designed for security researchers, this guide is an invaluable resource for advice on which cybersecurity terms to use in reports and how to use them correctly.
2023 GigaOm Radar Webcast: Attack Surface Management
Join us to learn how to choose the right ASM solution for your needs and how new ASM solutions can help you improve your overall security posture.
Threat Modeling Datasheet
| Learn how threat modeling proactively addresses security issues across the software development life cycle with in-depth analysis of application design, threats, and countermeasures that become foundational to ongoing DevOps processes. |
Social Engineering Datasheet
| Learn how social engineering goes beyond conventional phishing exercises to explore the depths of how adversaries can exploit your users, empowering you with insights to improve your security awareness program and related controls like email and file security. |
Secure Code Review Datasheet
| Learn how secure code review combines cutting-edge automation with meticulous manual review, ensuring the full spectrum of code-base vulnerabilities are proactively eliminated before attackers have a fighting chance. |
Ransomware Readiness Datasheet
| Learn how to obtain a thorough assessment of your organization’s resilience to ransomware threats by applying the latest intelligence, attacker TTPs, and world-class experience so you can effectively communicate relevant risks to your leadership and refine your strategy. |
Product Security Review Datasheet
| Learn how to fortify your device security by leveraging a multi-point testing methodology that extends beyond known vulnerabilities to keep security issues from reaching production and avoiding real-world attacks. |
Incident Response Tabletop Datasheet
| Learn how to enable your organization to accurately evaluate incident response readiness by immersing your key stakeholders in realistic and customized threat scenarios designed specifically for your business. |
Hybrid Application Assessment Datasheet
| Learn how to uncover the full spectrum of application security risks and code-level vulnerabilities with automated and manual testing methods. |
This site uses cookies to provide you with a great user experience. By continuing to use our website, you consent to the use of cookies. To find out more about the cookies we use, please see our Privacy Policy.