Overview
Employees
390
Founded
2005
Revenue
$107.8M
Location
Tempe, Arizona, United States
Industry
computer & network security
About
Bishop Fox is a leading offensive security consulting firm based in Tempe, Arizona, founded in 2005 by Vincent Liu and Francis Brown. The company specializes in helping organizations assess their security posture from an attacker's perspective. With a client base that includes over 25% of the Fortune 100 and half of the Fortune 10, Bishop Fox has established itself as a trusted partner for many top global technology and media companies.
The firm offers a wide range of services, including continuous penetration testing, red team operations, attack surface management, and application security assessments. Their proprietary technology, such as the Cosmos AI Engine, enhances their capabilities by combining human expertise with AI-driven solutions for vulnerability identification. Bishop Fox operates with a proactive approach to security, focusing on discovering and addressing vulnerabilities before they can be exploited by attackers. With a team of approximately 387 employees, including over 380 offensive security professionals, the company is well-equipped to deliver enterprise-scale security solutions.
Technologies(68)
Google Search ConsolePendo.Atlassian CloudCloudFlare CDNSalesforceSalesforce Sales CloudCloudflare DNSAmazon SESMailChimpMicrosoft Email ProvidersMicrosoft Exchange OnlineOutlookMicrosoft ExchangeAtlassianMicrosoft 365
Show all 68 technologiesShow less
Microsoft 365 Apps & ServicesAdobeAdobe Marketo EngageAnthropic ClaudeDocuSignGreenhouseCloudFlareAdobe FontsOpen GraphMobile FriendlyWistiaHighlight.jsGoogle Tag ManagerDiscordAdobe Marketo MeasurecdnjsDreamdataElement UIGoogle Font APIBrightEdgeAmazon AWSViewport MetaCloudflare Rocket LoaderAmazon S3Azure Cosmos DBModePower BI DocumenterClariConga CPQMicrosoft PowerPointExcel4AppsCosmoshopTerraformMicrosoft AzureGitHub ActionsGoPythonMicrosoft Entra IDMicrosoft PowerShellBashAIAtlassian ConfluenceBurp SuiteJiraKubernetesMicrosoft SharepointMITRE ATT&CKNext.jsNmapNode.jsReactJavawebpack
Keywords(172)
computer securityrisk assessmentpentestinginformation securityarchitecture securitypenetration testingnetwork securityapplication securityred teamingcontinuous penetration testingmobile securitycybersecurityphysical penetration testingapplication assessmentproduct security review
Show all 172 keywordsShow less
mobile application assessmentattack surface testingsocial engineeringexternal penetration testinginternal penetration testingcloud securityattack surface managementthreat modelingenterprise securitycomputer and network securitysecurity validationthreat detectionsecurity gap analysissecurity testing for devops pipelinescustomer engagementsecurity assessment for third-party vendorssecurity lifecyclesecurity frameworkssecurity researchsecurity toolsai/llm security assessmentsecurity posturesecurity framework alignmentsecurity testing for connected devicesphysical device securitythreat simulationsecurity assessment reportsapplication security for aisecurity research on emerging threatsautomated testingcloud security testingservicessecurity best practicessecurity testing for embedded systemssecurity testing for media companiessecurity innovationsecurity research on zero-day vulnerabilitiessecurity operationscybersecurity researchsecurity technologysecurity tool developmentsecurity metricsred team exercisescomputer systems design and related servicessecurity assessment for financial servicessecurity orchestrationcloud security for multi-cloud environmentssecurity incident managementcloud configuration reviewrisk managementsecurity research on social engineeringsecurity tool development for offensive securityconsultingsecurity automation toolsattack surface discoverysecurity testing for saas applicationssecurity analyticssecurity consultingsecurity awarenesspenetration testing servicesvulnerability managementcontinuous threat monitoringsecurity reportingsecurity testing for mobile applicationsb2boffensive security servicessecurity automationsecurity testing for industrial control systemssecurity program developmentoffensive securitysecurity maturityinformation technology and servicessecurity testing for saas platformssecurity automation frameworkspenetration testing automationapplication penetration testingsecurity assessmentsiot security testingsecurity risk managementregulatory compliance for cybersecuritysecurity strategysecurity research on ai vulnerabilitieshardware security testingcompliance testingsecurity automation platformshuman expertiseregulatory compliancesecurity testing methodologysecurity incident responsesecurity controls validationsecurity policysecurity testing for hybrid cloud environmentscybersecurity communitysecurity governancesecurity testing toolssecurity trainingreal-world attack simulationsecurity assessment for critical infrastructuresecurity research on supply chain attackssecurity architecturesecurity advisoriesopen-source security toolsnetwork penetration testingsecurity assessment for healthcare systemssecurity automation in cloud environmentssecurity monitoringthreat intelligencesecurity posture improvementadversarial attack simulationsecurity automation using aivulnerability assessmentsecurity tool open-source projectscontinuous security testingcloud security assessmentnetwork security assessmentiot securitysecurity complianceincident responsesecurity auditsexploit analysisreal-world attack emulationdevsecopsdata breach preventionai security assessmentsransomware readinessthird-party security assessmentssecurity awareness trainingcloud vulnerability assessmentmobile application securitycritical infrastructure securitybackup and disaster recoverysecurity partnershipsrisk mitigationcybersecurity frameworkscontinuous threat managementcybersecurity assessmentsenterprise security solutionsincident managementsecurity incident trackingreal-time threat detectionadaptive securityexternal attack vector assessmentmanaged security servicesproactive defensebusiness impact analysispenetration testing toolssecurity intelligencehealthcarefinancecomputer & network securityinformation technology & servicesinternethealth carehealthwellness & fitnesshospital & health carefinancial services
Industry Codes
SIC 7371NAICS 54151