Resource Center

LLM-Assisted Vulnerability Research

Red Team Readiness Guide

Solution Briefs

Application Portfolio Penetration Testing Solution Brief

Read Briefing

Workshops & Training

Building Tools: What, When, and How

Watch Workshop

Learn how to enable your organization to accurately evaluate incident response readiness by immersing your key stakeholders in realistic and customized threat scenarios designed specifically for your business.

Incident Response Tabletop Datasheet

Learn how to uncover the full spectrum of application security risks and code-level vulnerabilities with automated and manual testing methods.

Hybrid Application Assessment Datasheet

Learn how cloud penetration testing can help fortify your cloud defenses with a complete testing methodology that extends beyond configuration reviews to illuminate high-risk entry points, overprivileged access, and susceptible internal pathways that are commonly targeted by attackers.

Cloud Penetration Testing Datasheet

Architecture Security Assessment Datasheet

Learn how our assessment puts your applications and underlying security architecture under the microscope, illuminating critical flaws and systemic improvements that enhance existing security controls and harden defenses against the speed and precision of modern adversaries.

Solution Briefs

Architecture Security Assessment Solution Brief

Read Briefing

From strategic engagements that integrate security across the software development life cycle, to manual and automated testing, our experts uncover tactical and strategic security issues that real-world adversaries specifically target.

Application Security Portfolio Datasheet

Application Penetration Testing Packages Datasheet

Maximize protection, minimize risk, and scale security testing across your growing application portfolio with our penetration testing packages. With three levels of testing to choose from, you can prioritize risk and improve your security posture by assessing more applications for comprehensive coverage.

Learn how our experts conduct application penetration testing, using manual and automated testing methods, to discover critical vulnerabilities and logic flaws.

Application Penetration Testing Datasheet

Healthcare Services Datasheet

Bishop Fox provides a comprehensive portfolio of offensive security solutions to harden the defenses of the healthcare sector against the latest cyber threats, helping to secure sensitive data and protect patient safety.

Financial Services Datasheet

Bishop Fox partners with the world's leading financial institutions to stress-test their defenses, applying the latest adversarial insights & tactics and deep industry expertise to protect their critical assets, customers, and reputation.

SANS Institute: Inside the Minds & Methods of Modern Adversaries

This inaugural report, in partnership with Bishop Fox, surveyed 280 ethical hackers to understand how adversaries think about the attack surfaces that they seek to exploit.

The Offensive Security Guide to Ransomware Readiness

Our ransomware readiness guide helps you understand your current state of ransomware readiness, prepare for ransomware attacks, identify gaps in your current strategy, and measure progress to continually enhance readiness.

Worksheets

Ready or Not: A Ransomware Readiness Self-Assessment

Fill out Bishop Fox’s ransomware readiness self-assessment to see how your program stacks up to rigorous offensive security preparation.

Download Worksheet

An Interview with Marene Allison, Former Global CISO at Johnson & Johnson: From West Point Pioneer to Global CISO

In this session, hear from Marene Allison who is a former Global CISO at Johnson & Johnson and responsible for protecting the company’s information technology systems and business data worldwide

From Fighter Jets to Cyber Defense: How Military Experience Shapes Security Investment

Former F-16 pilot turned ForgePoint Managing Director Ernie Bio shares insights on identifying innovative cybersecurity startups, the evolving role of CISOs, and why the combination of AI with human expertise represents security's most promising frontier.

Strategic Insights from Wendy Nather Cisco's Advisory CISO Leader

Hear from Wendy Nather, Head of Advisory CISOs at Cisco. She is co-author of The Cloud Security Rules, and she was listed as one of SC Magazine‘s women in IT security “power players” in 2014, as well as an “influencer” in the Reboot Leadership Awards in 2018; she was also inducted into the Infosecurity Europe Hall of Fame in 2021.

Disrupting Cybersecurity: A CISO-Investor's Blueprint for Industry Innovation

Westcap's Christian Schnedler shares his journey from protecting NYC during Occupy Wall Street to identifying the next generation of cybersecurity innovators, revealing why identity management represents the industry's most critical frontier.

Breaking Barriers in Cybersecurity: Leadership Insights from BlackGirlsHack's Founder

In this session, hear from Tennisha Martin who is the founder and Executive Director of BlackGirlsHack (BGH Foundation), a national cybersecurity nonprofit organization dedicated to providing education and resources to underserved communities and increasing the diversity in cyber.

From Product Security to Incident Response: Strategic Insights from NYDIG's CISO

Former Microsoft security executive Avi Ben-Menachem shares insights on building security teams founded on military values, bridging technical and business perspectives, and adapting security approaches across vastly different technology environments.

Leadership Beyond Authority: Building Inclusive Security Culture with Andy Ellis

In this session, hear from Andy Ellis who is a seasoned technology and business executive with deep expertise in security, managing risk, and leading an inclusive culture. He is also the author of 1% Leadership, a handy guidebook that business readers can regularly apply to identify blind spots, boost morale, and solve problems at work.

Defend Like A Girl: Hacking Your Way to Cyber Success

Join our livestream as host Alethe Denis and special guests Lindsay Von Tish, Jessica Stinson, Shanni Prutchi, and Katie Ritchie as they share their experiences as hackers and showcase how you can find success in the rapidly evolving world of cybersecurity.

Combatting Adversaries: Proactive Social Engineering & Network Testing

Explore how sophisticated social engineering techniques bypass traditional security controls, featuring insights from Bishop Fox security experts on realistic attack scenarios and practical defensive strategies.

RSA Conference 2023: Leadership Perspectives in Cybersecurity - From CISOs to Founders

Watch from RSA Conference to explore cybersecurity leadership through multiple lenses. Get perspectives from CISOs, industry authorities, cyber-focused investors, and security founders on topics that are top of mind for today’s security leaders.

Shifting Left: A DevSecOps Field Guide

Our eBook offers practical recommendations on how developers and security teams alike can move towards a DevSecOps model in any organization – with a goal of shared responsibility and creating a perpetual and repeatable process.