Bishop Fox CISO: Christie Terrill

What the company sells

Bishop Fox sells offensive security services, including penetration testing and continuous security testing. Bishop Fox says it has 20 years of offensive security experience and thousands of customer engagements. Bishop Fox was founded by ethical hackers. Bishop Fox says it is behind offensive security tools including Sliver and CloudFox. Bishop Fox applies agentic AI to its offensive testing, and Bishop Fox assesses models and architectures as part of securing AI and LLM initiatives.

Bishop Fox penetration testing spans applications, networks, products, cloud, and AI systems. Bishop Fox offers assessments of AI systems tailored to the customer's use case, priorities, and development lifecycle. Bishop Fox's application offering includes web and mobile app penetration testing, AI-powered portfolio assessments, and secure code review. Application testing covers web, thick-client, e-commerce, single page applications, and APIs. Bishop Fox runs in-depth manual and dynamic analyses of Android and iOS devices and apps, guided by OWASP testing methodologies. Bishop Fox AI-Powered Application Penetration Testing delivers validated, expert-reviewed findings across an entire portfolio. Bishop Fox application testers are fluent in programming languages such as Python, C, C#, C++, Java, JavaScript, GO, Swift, PHP, Rust, and Objective C.

Bishop Fox cloud testing goes beyond configuration reviews to identify critical and exploitable paths in AWS, GCP, Azure, and Kubernetes environments. Bishop Fox network testing simulates real-world attack scenarios to uncover perimeter weaknesses and identify how an attacker could gain access to internal networks. Bishop Fox says its External Penetration Testing emulates targeted adversaries and results in discovery of defensive gaps, including likelihood of exploitation and business impact. Bishop Fox hardware and software testing covers IoT, consumer, commercial, and industrial devices. Hardware testing inspects devices down to electronic components including PCBs, chips, storage, debugging interfaces, and bus protocols. Bishop Fox experts test strategic partners and 3rd party vendors.

Bishop Fox provides continuous security testing that it describes as integral to a successful Continuous Threat Exposure Management (CTEM) program. Bishop Fox managed services identify, prioritize, and help customers remediate business-impacting exposures. Bishop Fox Attack Surface Discovery continuously finds, validates, and attributes perimeter assets. Bishop Fox Emerging Threat Testing delivers a per-environment verdict. Bishop Fox says its red team work lets customers face the tactics real adversaries use and see how their team responds. Bishop Fox customizes its reporting, weekly status reports, and post-engagement reviews to the unique needs of the customer's organization.

Cosmos is Bishop Fox's cloud-native technology platform and the foundation of its offensive security services. Cosmos is built on stateless microservices that auto scale to enterprise volumes, continuously discovers external assets, and routes high-confidence findings into an expert human validation pipeline. Cosmos builds and verifies a living inventory of an organization's external attack surface. Cosmos runs daily automations that validate reachability and protocol behavior so customers see only verified, visible assets. Cosmos captures evidence in the form of technology fingerprints, screenshots, and service metadata. Cosmos uses tenant- and organization-level cloud connectors. Cosmos integrates with customer workflows through Jira and ServiceNow, syncing validated findings into existing ticketing systems. Validated outputs are surfaced through the Bishop Fox Portal, which provides an asset inventory, confirmed findings, indicators of exposure, and a triage workflow integrated with customer ticketing and collaboration systems. Bishop Fox operates and manages Cosmos as part of its services, and customers do not deploy or maintain the platform themselves.

Bishop Fox built AIMap, an open-source tool that discovers, scores, and tests exposed AI endpoints. Sliver is a cross-platform general purpose implant framework. Sliver supports asymmetrically encrypted C2 over DNS, HTTP, HTTPS, and Mutual TLS.

Bishop Fox says it helps customers who are looking to safely deploy AI, release a new app or service, or validate corporate governance. A healthcare technology company moving to SaaS needed to validate its multi-tenant cloud platform, secure connected device provisioning, and maintain visibility across a growing attack surface. An energy provider faces constant threats from nation-state actors targeting critical infrastructure. Equifax runs year-round perimeter testing to safeguard high-value data. Zoom used continuous attack surface monitoring to protect its expanding platform. Apollo selected Bishop Fox to perform a Google Security Assessment of its application, external perimeter, and Google Cloud Platform (GCP) environment. John Deere relied on in-depth product security reviews and ongoing protection through a managed offensive security platform. Ventrilo.ai partnered with Bishop Fox for application penetration testing and AI security assessments. A financial services organization tested Bishop Fox's Cosmos AI platform against a realistic application.^{[7][9][11][12][13]}

Categories

• Penetration testing and red team services (primary category)
• External attack surface management
• Compare Bishop Fox with companies in the same categoryside by side

Headquarters

Tempe, United States^[2]

Founded

2005^[1][4][8]

Ownership

Not established from our sources

CISO on record

Christie Terrill, Chief Information Security Officer (CISO) (roster, verified October 25, 2026)

Website

bishopfox.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Cosmos^{[3][7][13][14]}

  Bishop Fox's cloud-native technology platform and the foundation of its offensive security services.

  Cosmos builds and verifies a living inventory of an organization's external attack surface. It integrates with customer workflows through Jira and ServiceNow, syncing validated findings into existing ticketing systems. Bishop Fox operates and manages Cosmos as part of its services, and customers do not deploy or maintain it.

• Penetration Testing Services^[4]

  Bishop Fox penetration testing across applications, networks, products, cloud, and AI systems.

  Bishop Fox penetration testing spans applications, networks, products, cloud, and AI systems. Engagements cover web and mobile apps, cloud environments in AWS, GCP, Azure, and Kubernetes, and IoT, consumer, commercial, and industrial devices.

• Application Penetration Testing^[3][9][14]

  Testing of web, mobile, and other applications, including an AI-powered portfolio option.

  Bishop Fox runs in-depth manual and dynamic analyses of Android and iOS devices and apps, guided by OWASP testing methodologies. Bishop Fox AI-Powered Application Penetration Testing delivers validated, expert-reviewed findings across an entire portfolio.

• External Penetration Testing^[10]

  Perimeter testing that emulates targeted adversaries.

  Bishop Fox says its External Penetration Testing emulates targeted adversaries and results in discovery of defensive gaps, including likelihood of exploitation and business impact. Testing extends to public cloud storage services and peripheral web apps.

• Hardware Penetration Testing^[4][11]

  Testing of connected devices and their ecosystems.

• Continuous Security Testing^[5][8]

  Managed continuous testing that Bishop Fox ties to Continuous Threat Exposure Management programs.

  Bishop Fox provides continuous security testing that it describes as integral to a successful Continuous Threat Exposure Management (CTEM) program. Its managed services identify, prioritize, and help remediate business-impacting exposures.

• AIMap^[3]

  Open-source tool built by Bishop Fox for testing exposed AI endpoints.

  AIMap is an open-source tool built by Bishop Fox. It discovers, scores, and tests exposed AI endpoints.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Bishop Fox's categories, then alphabetical. A list from the record, never a ranking.

• On penetration testing and red team services, Bishop Fox competes with BreachLock, Halo Security, NCC Group, NetSPI, ABIR Networks, Astra Security, Cobalt, Millennium Corporation, Red Sentry, REDLattice and 36 more.

• On external attack surface management, Bishop Fox competes with Attaxion, Censys, CyCognito, Hadrian, IONIX, BreachLock, Halo Security, Intruder, NCC Group, NetSPI and 25 more.

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• February 10, 2026

  Bishop Fox announced an updated application penetration testing service that combines its expert testing teams with its proprietary AI engine, Cosmos AI. Bishop Fox^[14]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]bishopfox.comBishop Fox · bishopfox.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
2. [2]ContactBishop Fox · bishopfox.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
3. [3]Bishop Fox | The leading authority in offensive security… | Bishop FoxBishop Fox · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
4. [4]Offensive Security: Penetration Testing Services | Bishop FoxBishop Fox · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
5. [5]Continuous Security Testing Services | Bishop FoxBishop Fox · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
6. [6]Red Team Services | Bishop FoxBishop Fox · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
7. [7]Cosmos Technology Platform | Bishop FoxBishop Fox · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
8. [8]Offensive Security Services | Bishop FoxBishop Fox · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
9. [9]Application Penetration Testing Services | Bishop FoxBishop Fox · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
10. [10]External Penetration Testing for Network Security | Bishop FoxBishop Fox · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
11. [11]Hardware Security Assessments and Product Security… | Bishop FoxBishop Fox · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
12. [12]Bishop Fox | Tactics of Deception: Protecting Trust and PurposeBishop Fox · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
13. [13]Explore Customers of Our Offensive Security Solutions | Bishop FoxBishop Fox · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
14. [14]Bishop Fox Redefines Offensive Security at Scale with AI-Augmented Penetration TestingBishop Fox · published February 10, 2026 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 5, 2026 from the references above.

Work for Bishop Fox? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.