Resource Center

LLM-Assisted Vulnerability Research

Red Team Readiness Guide

Solution Briefs

Application Portfolio Penetration Testing Solution Brief

Read Briefing

Building Tools: What, When, and How

Equifax Employs Bishop Fox’s Cosmos for Continuous Security Testing

Global data leader Equifax runs year-round perimeter testing to safeguard high-value data and stay ahead of emerging threats.

Eyeballer: Automating Security Triage with Machine Learning

This easy-to-follow guide explores the capabilities of Eyeballer, a first-of-its-kind AI-powered pen testing tool.

Using Cyber Offensive Methods to Improve Defense

TAG Cyber provides an unbiased assessment of Bishop Fox’s offensive cybersecurity services and Cosmos platform.

Zoom Secures their Rapidly Expanding Attack Surface with Cosmos

During unprecedented growth—jumping from 10M to 300M+ daily participants—Zoom used continuous attack surface monitoring to protect its expanding platform.

Quantifying the Impact of Micro-Segmentation Using Illumio ASP

Bishop Fox developed the industry’s first repeatable testing methodology to quantify the efficacy of micro-segmentation using the Illumio Adaptive Security Platform (ASP).

20 Tips to Make the Most of Your Pen Test

Whether you’ve conducted many pen tests or are about to embark on your first, this eBook contains helpful guidance for companies at every stage of security-program maturity.

13th B-Sides Las Vegas - ICS Security Assessments 101 or How da Fox I Test Dis?

We have seen many ICS attacks both in the news and in several talks at security conferences. They show how ICS protocols are insecure by default and how we can mess with control components so easily. However, from a consulting point of view, are we really asking our ICS clients to let us mess with their critical infrastructure just to show what we already know?

13th BSides Las Vegas - Management Hacking 101

Tom Eston, AVP of Consulting at Bishop Fox, shares his best advice for becoming a successful manager and leader in the security industry.

Canyon Partners with Bishop Fox to Ensure the Security of Sensitive Legal Data

Met aggressive Google Partner security requirements under tight deadlines without sacrificing quality.

Reltio Trusts Bishop Fox for Cloud Security Testing and Validation

Validated the security of its Kubernetes environments with independent cloud assessments, ensuring trust across its SaaS platform.

Reports

451 Research: Bishop Fox launches [Cosmos] platform

Get an independent analyst review of Cosmos (formerly CAST), Bishop Fox's continuous offensive security monitoring solution.

Read Report

Bishop Fox Hybrid Application Assessment Methodology

Overview of Bishop Fox’s methodology for hybrid application penetration testing.

Bishop Fox Application Penetration Testing Methodology

Bishop Fox Threat Modeling Methodology

Learn Bishop Fox's proven threat modeling approach. Proactively address security issues across your SDLC with in-depth threat analysis and mitigation strategies.

Bishop Fox External Penetration Testing Methodology

Overview of Bishop Fox’s methodology for external penetration testing.

Bishop Fox Internal Penetration Testing Methodology

Overview of Bishop Fox’s methodology for internal penetration testing.

Aspire Chooses Bishop Fox for their Google Partner Security Assessment

When they needed a security assessment to meet the requirements of the Google Partner Security Program, Aspire came to Bishop Fox. Bishop Fox evaluated their application, Azure environment, and external perimeter. As a result, the Aspire team satisfied Google's requirements.

Republic Services Chooses Bishop Fox for Continuous Testing that Scales

Gained complete attack surface visibility through always-on testing at scale, detecting and neutralizing risks as they appear.

Bishop Fox Product Security Review Methodology

Overview of Bishop Fox’s methodology for conducting product security reviews.

Parrot Chooses Bishop Fox for Privacy Audit and Application Penetration Testing

Underwent rigorous privacy audits and penetration testing for the FreeFlight 6 mobile app and API to ensure a secure user experience.

What to Expect of Your Nest Security Assessment

This guide covers what to expect when engaging Bishop Fox to perform a Google Nest Security Assessment, including timeline, scoping, scheduling, and reporting.

What to Expect of Your Google Partner Security Assessment

This guide covers what to expect when engaging Bishop Fox to perform a Google Partner OAuth Application security assessment, including project timeline, onboarding and scoping, and deliverables.

Developing a New Methodology for Illumio to Measure the Power of Micro-Segmentation

Proved the impact of micro-segmentation in slowing attackers with a custom testing methodology.

SmogCloud: Expose Yourself Without Insecurity - Cloud Breach Patterns

Presented at Black Hat 2020, this presentation looks at the most pragmatic ways to continuously analyze your AWS environments and operationalize that information to answer vital security questions. Demonstrations include integration between IAM Access Analyzer, Tiros Reachability API, and Bishop Fox CAST Cloud Connectors, along with a new open source tool SmogCloud to find continuously changing AWS internet-facing services.