Resource Center

LLM-Assisted Vulnerability Research

Red Team Readiness Guide

Solution Briefs

Application Portfolio Penetration Testing Solution Brief

Read Briefing

Building Tools: What, When, and How

Resource

What the Vuln: EDR Bypass with LoLBins

Watch the second episode of our What the Vuln livestream series as we explore how to bypass endpoint detection and response (EDR) with native Windows binaries to gain advanced post-exploitation control.

Learn More

21 Questions with Kaitlin O'Neil, Recruiting Manager

When you think of cybersecurity… what do you picture? A guy in a hoodie behind a keyboard? We don’t blame you. But Kaitlin is here to show you that women in cybersecurity are on the rise and ready to even the playing field.

Bishop Fox Live at DEF CON 30 featuring Sandeep Singh

In this DEF CON 30 interview from the Bishop Fox livestream, ProjectDiscovery co-founder and Nuclei creator Sandeep Singh (Geekboy) shares some thoughts about the open source community, his company, and more.

21 Questions with Bianca Luna-Acosta, Security Consultant II

Get to know our Lady Foxes in our "21 Questions with Bishop Fox" video series. In this episode, hear from Bianca Luna-Acosta, Security Consultant II.

21 Questions with Chelsea Bradley, Contracts Manager

Get to know our Lady Foxes in our "21 Questions with Bishop Fox" video series. In this episode, hear from Chelsea Bradley, Contracts Manager.

Unredacter Challenge: John L.'s Solution

Challenge Accepted! We asked the security community to take Unredacter to the next level by decoding our secret blurred message. Watch as John L. showcases his solution.

Unredacter Challenge: Shawn A.'s Solution

Challenge Accepted! We asked the security community to take Unredacter to the next level by decoding our secret blurred message. Watch as Shawn A. showcases his solution.

Unredacter Challenge: Alejandro's Solution

Challenge Accepted! We asked the security community to take Unredacter to the next level by decoding our secret blurred message. Watch as Alejandro showcases his solution.

TomNomNom AMA

Tom Hudson (aka TomNomNom) participates in this Discord AMA about the pen testing tools he's created over the years, his cybersecurity journey, and more.

Managing Application Security Risk with Threat Modeling

Fireside Chat: What We Learned from the SolarWinds Attack (and Beyond)

On-demand webcast features security experts discussing recent attacks at SolarWinds, Colonial Pipeline, and more.

Equifax Employs Bishop Fox’s Cosmos for Continuous Security Testing

Global data leader Equifax runs year-round perimeter testing to safeguard high-value data and stay ahead of emerging threats.

Eyeballer: Automating Security Triage with Machine Learning

This easy-to-follow guide explores the capabilities of Eyeballer, a first-of-its-kind AI-powered pen testing tool.

Using Cyber Offensive Methods to Improve Defense

TAG Cyber provides an unbiased assessment of Bishop Fox’s offensive cybersecurity services and Cosmos platform.

Zoom Secures their Rapidly Expanding Attack Surface with Cosmos

During unprecedented growth—jumping from 10M to 300M+ daily participants—Zoom used continuous attack surface monitoring to protect its expanding platform.

Quantifying the Impact of Micro-Segmentation Using Illumio ASP

Bishop Fox developed the industry’s first repeatable testing methodology to quantify the efficacy of micro-segmentation using the Illumio Adaptive Security Platform (ASP).

20 Tips to Make the Most of Your Pen Test

Whether you’ve conducted many pen tests or are about to embark on your first, this eBook contains helpful guidance for companies at every stage of security-program maturity.

13th B-Sides Las Vegas - ICS Security Assessments 101 or How da Fox I Test Dis?

We have seen many ICS attacks both in the news and in several talks at security conferences. They show how ICS protocols are insecure by default and how we can mess with control components so easily. However, from a consulting point of view, are we really asking our ICS clients to let us mess with their critical infrastructure just to show what we already know?

13th BSides Las Vegas - Management Hacking 101

Tom Eston, AVP of Consulting at Bishop Fox, shares his best advice for becoming a successful manager and leader in the security industry.

Canyon Partners with Bishop Fox to Ensure the Security of Sensitive Legal Data

Met aggressive Google Partner security requirements under tight deadlines without sacrificing quality.

Reltio Trusts Bishop Fox for Cloud Security Testing and Validation

Validated the security of its Kubernetes environments with independent cloud assessments, ensuring trust across its SaaS platform.