Bishop Fox

Offensive security firm pairing high-end penetration testing with Cosmos, a continuous attack-surface management platform.

CompanyPenetration Testing FirmsCloud

Pricing: Custom (contact sales)

Reviewed by the CyberSecTool editorial team against the public sources cited below · Last reviewed June 2026 · How we review listings

What is Bishop Fox?

Founded in 2005 (originally as Stach & Liu), Bishop Fox positions itself as 'the leading authority in offensive security' and is headquartered in Tempe, Arizona. Beyond traditional consulting it sells Cosmos, a continuous attack-surface management and offensive-testing platform that pairs automated discovery with human operator validation.

Best for: Mid-to-large enterprises wanting continuous offensive testing rather than annual point-in-time pentests

Pros

✓ Cosmos delivers continuous human-validated testing, not point-in-time engagements
✓ Strong consultant brand and notable open-source releases (Sliver C2 framework)
✓ Active Bishop Fox Labs research output and conference presence
✓ Highly tenured consultant base focused exclusively on offensive security

Considerations

• Premium pricing aimed at upper mid-market and enterprise, no public price list
• Cosmos requires meaningful integration and a minimum spend
• Largely U.S.-centric delivery footprint compared with global rivals

Reported in public reviews and vendor documentation. See sources below.