Bishop Fox

Offensive security firm pairing high-end penetration testing with Cosmos, a continuous attack-surface management platform.

CompanyPenetration Testing FirmsCloud

Pricing: Custom (contact sales)

Updated June 2026.

What is Bishop Fox?

Founded in 2005 (originally as Stach & Liu), Bishop Fox positions itself as 'the leading authority in offensive security' and is headquartered in Tempe, Arizona. Beyond traditional consulting it sells Cosmos, a continuous attack-surface management and offensive-testing platform that pairs automated discovery with human operator validation.

Best for: Mid-to-large enterprises wanting continuous offensive testing rather than annual point-in-time pentests

Pros

✓ Cosmos delivers continuous human-validated testing, not point-in-time engagements
✓ Strong consultant brand and notable open-source releases (Sliver C2 framework)
✓ Active Bishop Fox Labs research output and conference presence
✓ Highly tenured consultant base focused exclusively on offensive security

Cons

✗ Premium pricing aimed at upper mid-market and enterprise, no public price list
✗ Cosmos requires meaningful integration and a minimum spend
✗ Largely U.S.-centric delivery footprint compared with global rivals