QA Rating

Bishop Fox

Bishop Fox is an independent testing company founded in 2005, headquartered in Tempe, the USA, with 201-500 people. It offers Penetration testing, Security testing, IoT and device testing, Secure code review, Red teaming, Attack surface management, Compliance testing. Certificates confirmed by a register entry: CREST. It publishes no rate card. Data checked on September 2, 2026.
Profile checkedSeptember 2, 202618 sourcesbishopfox.com

Best suited for

  • Security focus

    Bishop Fox offers Penetration testing, Security testing, IoT and device testing, Secure code review, Red teaming, Attack surface management, Compliance testing; holds CREST, each confirmed by a register entry or the certificate itself; publishes 5 case studies.

    Security testing is offered, together with either penetration testing or a verified ISO/IEC 27001 certificate, and at least one published case study.

Facts

Comparable facts about Bishop Fox. Every field is shown, including the ones the company has not published.
HeadquartersTempe, the USA
Delivery locationsthe USA, the UK
Team size201-500 people
Founded2005
OwnershipIndependent
ServicesPenetration testing, Security testing, IoT and device testing, Secure code review, Red teaming, Attack surface management, Compliance testing
IndustriesMedia, Ecommerce, Manufacturing, Banking
FrameworksNot published
Engagement modelsContinuous testing program
Client stagesNot published
CertificatesCRESTregister entry
Signs a BAA / GDPR DPANot confirmed / Not confirmed
Published ratesNot published
Minimum projectNot published
OnboardingNot published
Crowd tester poolNot published
Device labNot published

Reviews on external platforms

No external review profile found.

This catalog collects no reviews of its own. Review counts and scores are aggregates from external platforms, shown with the date they were read.

Named clients

Editorial note

Bishop Fox's profile lists CREST as its only verified certification, with no ISO/IEC 27001 or SOC 2 certificate on file, which keeps the enterprise applicability tag from applying even though team size (201-500) and named publicly traded clients, including Equifax and Google, are both recorded.

Rankings this company appears in

Sources

  1. Bishop Fox: About Us (company overview, HQ address, ownership, client-tier breakdown)Checked on September 2, 2026
  2. Bishop Fox: LinkedIn company pageChecked on September 2, 2026. Employee count band 201-500, founded 2005, headquarters Tempe AZ, company type Privately Held.
  3. Bishop Fox: CREST Marketplace member profile (accreditation registry)Checked on September 2, 2026. CREST's own directory entry: lists Penetration Testing accreditation, ISO 27001 among certifications awarded, geographic coverage Europe and North America, employee band 100-499, 4 years of CREST membership. Employee band differs slightly from LinkedIn's 201-500; LinkedIn used for teamSize as the higher-priority source for that field.
  4. Forgepoint Capital: Celebrating 20 Years of Groundbreaking Achievements by Vinnie Liu, Bishop Fox, and the Fox DenChecked on September 2, 2026. Confirms founding in 2005 (20-year anniversary as of March 2025), bootstrapped for 13 years, Series A $25M (Feb 2019) led by Forgepoint Capital, Series B $75M (Jul 2022) led by Carrick Capital Partners plus $46M extension (Nov 2022) from WestCap et al., total Series B $129M.
  5. Bishop Fox: Offensive Security Services overviewChecked on September 2, 2026
  6. Bishop Fox: Compliance Penetration Testing & Cybersecurity FrameworksChecked on September 2, 2026. Describes compliance testing services against PCI DSS, HIPAA, SOC 2, ISO 27001, NIST CSF, GDPR, OWASP ASVS/Top Ten, DORA. States CREST accreditation. Does not state whether Bishop Fox itself signs a BAA or a GDPR DPA.
  7. Bishop Fox: Customers (client base overview)Checked on September 2, 2026. States client mix: 26% of Fortune 100, 80% of Top 10 Global Tech Companies, 100% of Top 5 Global Media Firms, 1.5K+ customers protected. Company positions itself around large enterprise clients rather than a stated small/mid-market/enterprise segmentation.
  8. Equifax Employs Bishop Fox's Cosmos for Continuous Security Testing: customer storyChecked on September 2, 2026
  9. Zoom Secures their Expanding Attack Surface with Cosmos: customer storyChecked on September 2, 2026
  10. Securing John Deere Products Against Cyberattacks: customer storyChecked on September 2, 2026
  11. LastPass Prioritizes Security in Move to Cloud: customer storyChecked on September 2, 2026
  12. Scaling up Google's Third-Party Security Program: customer storyChecked on September 2, 2026
  13. Bishop Fox blog: Application Pen Testing: Point-In-Time vs. OngoingChecked on September 2, 2026. Describes two delivery models in the company's own words: traditional point-in-time Application Penetration Test, and ongoing/subscription testing via Cosmos Application Penetration Testing (CAPT), launched early 2024, delivered over a year or more with live tester access.
  14. Bishop Fox Announces UK Expansion at RSA ConferenceChecked on September 2, 2026. April 26, 2023 announcement of San Francisco and London presence, CREST accreditation in UK and USA for Penetration Testing, existing UK/European clients in Technology, Retail, Media, Financial Services.
  15. Bishop Fox - Services & Company Info: ClutchChecked on September 2, 2026. Profile confirmed to exist via web search results; the page itself returned HTTP 403 to automated fetch, so review count/rating and hourly rate band could not be directly verified and are not recorded as facts.
  16. Bishop Fox: G2 product profileChecked on September 2, 2026. Profile existence confirmed via web search results (subpages /competitors/alternatives and /discuss indexed); the main profile page returned HTTP 403 to automated fetch, so review count/rating could not be verified and are not recorded as facts.
  17. Bishop Fox - Crunchbase Company Profile & FundingChecked on September 2, 2026. Profile confirmed to exist via web search results; page returned HTTP 403 to automated fetch.
  18. AWS Partner Network directory: "Stach & Liu, LLC d/b/a Bishop Fox"Checked on September 2, 2026. Page title/listing confirmed via web search results showing the legal entity name Stach & Liu, LLC doing business as Bishop Fox; automated fetch of the page itself did not return content. Corroborated by independent press coverage of the 2013 rename (Dark Reading headline: "Security Consultancy Stach & Liu Changes Name To Bishop Fox") and a Dun & Bradstreet listing for Stach & Liu, LLC at the same Tempe, Arizona location, neither of which could be fetched directly.

Every field on this profile records which of these sources it came from. The profile was last rebuilt from them on September 2, 2026. A field no source confirms is left empty rather than estimated.

Published by QA Rating

Every fact about a company comes from a listed source. A field without a source stays empty. A certificate counts as confirmed only when a registry, certificate or auditor report backs it; a certificate the company only claims about itself is published separately, under that label. Vendors can request a correction at hello@qa-rating.com. A correction is applied when it comes with a public source. Last checked on September 2, 2026.

Badge for your site

If you work at Bishop Fox, you can put a badge linking to this profile on your own site. It is free, it is not tied to any tier, and the badges page explains what each badge claims and when it should come down.

Bishop Fox

  • Bishop Fox Listed in QA Rating 
    <a href="https://qa-rating.com/companies/bishop-fox/">
  <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="Bishop Fox listed in QA Rating">
    <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/>
    <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">Bishop Fox</text>
    <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Listed in QA Rating</text>
  </svg>
</a>
  • Bishop Fox Profile checked 2026 
    <a href="https://qa-rating.com/companies/bishop-fox/">
  <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="Bishop Fox: profile checked 2026 in QA Rating">
    <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/>
    <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">Bishop Fox</text>
    <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Profile checked 2026</text>
  </svg>
</a>
  • Bishop Fox Security focus, 2026 
    <a href="https://qa-rating.com/companies/bishop-fox/">
  <svg xmlns="http://www.w3.org/2000/svg" width="240" height="64" viewBox="0 0 240 64" role="img" aria-label="Bishop Fox grouped under Security focus in QA Rating, 2026">
    <rect x="0.5" y="0.5" width="239" height="63" rx="6" fill="#ffffff" stroke="#cbd2d9"/>
    <text x="16" y="27" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="15" font-weight="600" fill="#1f2933">Bishop Fox</text>
    <text x="16" y="47" font-family="system-ui, -apple-system, Segoe UI, Roboto, sans-serif" font-size="12" fill="#52606d">Security focus, 2026</text>
  </svg>
</a>