Bishop Fox
Tempe, Arizona-headquartered offensive security firm and Black Hat / DEF CON regulars, makers of the Cosmos continuous attack surface management platform.
- Based in
- Tempe, United States
- Founded
- 2005
- Size
- 201-500 staff
- Ownership
- Private
About Bishop Fox
Bishop Fox is an offensive security company. It sells penetration testing, red teaming and continuous threat exposure management services. It also offers a cloud platform called Cosmos that supports its services. The company says it has twenty years of experience and works with large technology and Fortune 100 customers. Its services cover AI and LLM security, applications, cloud, networks, hardware and partner assessments. It also provides attack surface discovery, social engineering, ransomware readiness and incident response tabletop exercises. Cosmos is managed by Bishop Fox and is not deployed by customers. It discovers external assets, verifies them and routes findings to human experts. The company also releases open-source tools for security testing. These include tools for AI systems, cloud infrastructure, web applications and adversary emulation. Bishop Fox says its experts think like attackers and tailor each engagement to the customer's environment and threats.
Products
- CosmosA cloud platform that discovers external assets, verifies them and routes findings to human experts.
- Cosmos AI EngineAn AI component of the Cosmos platform.
- AIMapA tool that finds, fingerprints, scores and tests exposed AI agent infrastructure.
- Broken HillA tool for testing large language models with a greedy coordinate gradient attack.
- SliverA cross-platform command-and-control implant framework for adversary emulation.
- CloudFoxA command-line tool for finding exploitable paths in AWS cloud infrastructure.
Ownership and deals
- Raised $46mInvestor WestCapReport on the Bishop Fox funding round of November 2022 (opens in a new tab)
- Raised $75m in a Series B roundInvestor Carrick Capital PartnersReport on the Bishop Fox funding round of July 2022 (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.