Featured Resource
Bishop Fox Livestream at DEF CON 32
Join us for a livestream from DEF CON 32 to hear seasoned hackers and cybersecurity experts inspire and empower the tech community to reclaim the security landscape through active engagement and innovation.
Application Penetration Testing Datasheet
| Learn how our experts conduct application penetration testing, using manual and automated testing methods, to discover critical vulnerabilities and logic flaws. |
Fortifying Your Applications: A Guide to Penetration Testing
Download this eBook to explore key aspects of application penetration testing, questions to ask along the way, how to evaluate vendors, and our top recommendations to make the most of your pen test based on almost two decades of experience and thousands of engagements.
Shifting Left: A DevSecOps Field Guide
Our eBook offers practical recommendations on how developers and security teams alike can move towards a DevSecOps model in any organization – with a goal of shared responsibility and creating a perpetual and repeatable process.
What the Vuln: Zimbra
Watch the inaugural episode of our What the Vuln livestream series as we examine Zimbra Zip Path Traversal vulnerabilities, CVE-2022-27925 and CVE-2022-37042.
Application Security: Getting the Most Out of Your Penetration Tests
Learn how to make the most of your application pen test and implement steps for repetitive secure application design in the future.
Bishop Fox Secure Code Review Methodology
Overview of Bishop Fox’s methodology for Secure Code Review.
Cracking the Code: Secure Code Review in DevSecOps
On-demand webcast offers an in-depth look at how DevOps can integrate both automated and manual code review into the software development lifecycle.
What Bad Could Happen? Managing Application Risk with Threat Modeling
What if security could become an integral framework within the software development process? Join Tom Eston and Chris Bush to learn how Threat Modeling is changing the way organizations manage application security risks.
DevSecOps and Application Penetration Testing: Defying the Myth
On-demand webcast dives into the role of application penetration testing in today’s software development lifecycle (SDLC).
Fuzzing: Get the buzz on fuzz testing in software development
This slide deck includes:
- Fuzzing Basics
- How Fuzzing Works
- Popular Fuzzing Tools
Managing Application Security Risk with Threat Modeling
Bishop Fox Hybrid Application Assessment Methodology
Overview of Bishop Fox’s methodology for hybrid application penetration testing.