Bishop Fox

Bishop Fox is an offensive security firm delivering penetration testing, red teaming, application and cloud security assessment, and continuous threat exposure management. Its managed Cosmos platform keeps a living inventory of an organization's external attack surface — domains, subdomains, DNS records, network ranges, IP addresses, open ports, and IP/hostname services — pairing continuous automated discovery with human operator validation so customers receive triaged, exploitable findings instead of scanner noise. Customers consume Cosmos data programmatically through the authenticated Cosmos v5 REST API at api.cosmos.bishopfox.com, secured with OAuth 2.0 client-credentials tokens issued by Bishop Fox's Auth0 tenant against the cosmos_public audience, and through bi-directional Jira and ServiceNow integrations plus AWS, GCP, Azure, Cloudflare, and Oracle cloud connectors. Bishop Fox also publishes a widely used open-source offensive-security toolkit — Sliver, CloudFox, sj (Swagger Jacker), jsluice, and aimap — from its GitHub organization.

Bishop Fox publishes 1 API on the APIs.io network. Tagged areas include Company, cybersecurity, offensive-security, penetration-testing, and attack-surface-management.

Bishop Fox’s developer surface includes developer portal, engineering blog, support, authentication, and 18 more developer resources.

🌐 Visit website 📡 Source on GitHub
21.1/100 emerging ▬ flat Agent 19/100 agent aware Full breakdown ↓
scored 2026-08-05 · rubric v0.9.1
1 APIs
Companycybersecurityoffensive-securitypenetration-testingattack-surface-managementexposure-managementred-teamingvulnerability-managementsecurity-findingsasset-discoverycontinuous-threat-exposure-managementoauth2

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-05 · rubric v0.9.1
Composite quality — 21.1/100 · emerging
Contract Quality 0.0 / 25
Developer Ergonomics 5.2 / 20
Commercial Clarity 4.7 / 20
Operational Transparency 2.1 / 13
Governance 0.4 / 12
Discoverability 8.7 / 10
Agent readiness — 19/100 · agent aware
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 3 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/bishop-fox: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

Bishop Fox Cosmos API (v5)

Authenticated REST API for the Bishop Fox Cosmos attack-surface management platform. Exposes the customer's discovered asset inventory through /v5/asset-view/* resources (domain...

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Bishop Fox Authentication

oauth2/http · 2 schemes

SECURITY

Bishop Fox Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Bishop Fox Vulnerability Disclosure

security.txt · contact published

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Bishop Fox Scopes

7 scopes · clientCredentials

7 scopes

SCOPES

Resources

Get Started 2

Portal, sign-up, and the first successful call

Portal
Portal
 Login
Login

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

WellKnown
WellKnown
 LLMsTxt
LLMsTxt

Design & Contract 5

Pagination, idempotency, versioning, errors, and events

Conventions
Conventions
 ErrorCatalog
ErrorCatalog
 DataModel
DataModel
 Lifecycle
Lifecycle
 Conformance
Conformance

Build 3

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization
 Packages
Packages
 OpenSourceTools
OpenSourceTools

Access & Security 6

Authentication, authorization, and security posture

Security
Security
 VulnerabilityDisclosure
VulnerabilityDisclosure
 SecurityTxt
SecurityTxt
 DomainSecurity
DomainSecurity
 Authentication
Authentication
 OAuthScopes
OAuthScopes

Operate 1

Status, limits, changes, and where to get help

Support
Support

Commercial 1

Pricing, plans, and the legal terms of use

PrivacyPolicy
PrivacyPolicy

Company 2

The organization behind the API

Website
Website
 Blog
Blog

Source (apis.yml)

apis.yml Raw ↑ 
aid: bishop-fox
name: Bishop Fox
description: Bishop Fox is an offensive security firm delivering penetration testing, red teaming, application and cloud security
  assessment, and continuous threat exposure management. Its managed Cosmos platform keeps a living inventory of an organization's
  external attack surface — domains, subdomains, DNS records, network ranges, IP addresses, open ports, and IP/hostname services
  — pairing continuous automated discovery with human operator validation so customers receive triaged, exploitable findings
  instead of scanner noise. Customers consume Cosmos data programmatically through the authenticated Cosmos v5 REST API at
  api.cosmos.bishopfox.com, secured with OAuth 2.0 client-credentials tokens issued by Bishop Fox's Auth0 tenant against the
  cosmos_public audience, and through bi-directional Jira and ServiceNow integrations plus AWS, GCP, Azure, Cloudflare, and
  Oracle cloud connectors. Bishop Fox also publishes a widely used open-source offensive-security toolkit — Sliver, CloudFox,
  sj (Swagger Jacker), jsluice, and aimap — from its GitHub organization.
image: https://assets.bishopfox.com/prod-1437/Images/og/_1200x630_crop_center-center_82_none/services-v1.jpg
url: https://raw.githubusercontent.com/api-evangelist/bishop-fox/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.20'
created: '2026-08-02'
modified: '2026-08-02'
tags:
- Company
- cybersecurity
- offensive-security
- penetration-testing
- attack-surface-management
- exposure-management
- red-teaming
- vulnerability-management
- security-findings
- asset-discovery
- continuous-threat-exposure-management
- oauth2
apis:
- name: Bishop Fox Cosmos API (v5)
  description: Authenticated REST API for the Bishop Fox Cosmos attack-surface management platform. Exposes the customer's
    discovered asset inventory through /v5/asset-view/* resources (domains, subdomains, dns-records, networks, ip-addresses,
    ports, ip-services, hostname-services), validated findings via /v5/findings, and platform activity via /v5/activities.
    Access is by OAuth 2.0 client-credentials (API key + API secret exchanged for a bearer token at the Bishop Fox Auth0 tenant,
    audience cosmos_public); the reference documentation is published inside the authenticated Cosmos portal. The v1 API was
    retired on 2025-12-05.
  humanURL: https://bishopfox.com/services/cosmos
  baseURL: https://api.cosmos.bishopfox.com/
  tags:
  - attack-surface-management
  - security-findings
  - asset-discovery
  - exposure-management
  - cybersecurity
  - oauth2
  properties:
  - type: Authentication
    url: authentication/bishop-fox-authentication.yml
  - type: OAuthScopes
    url: scopes/bishop-fox-scopes.yml
  - type: Conventions
    url: conventions/bishop-fox-conventions.yml
  - type: ErrorCatalog
    url: errors/bishop-fox-problem-types.yml
  - type: DataModel
    url: data-model/bishop-fox-data-model.yml
  - type: Lifecycle
    url: lifecycle/bishop-fox-lifecycle.yml
  - type: Conformance
    url: conformance/bishop-fox-conformance.yml
  - type: Portal
    url: https://cosmos.bishopfox.com/
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://bishopfox.com/
- type: Portal
  url: https://cosmos.bishopfox.com/
- type: Login
  url: https://cosmos.bishopfox.com/
- type: Blog
  url: https://bishopfox.com/blog
- type: Support
  url: https://bishopfox.com/support
- type: GitHubOrganization
  url: https://github.com/BishopFox
- type: PrivacyPolicy
  url: https://bishopfox.com/privacy-statement
- type: Security
  url: https://bishopfox.com/vulnerability-disclosure-policy
- type: VulnerabilityDisclosure
  url: security/bishop-fox-vulnerability-disclosure.yml
- type: SecurityTxt
  url: well-known/bishop-fox-security.txt
- type: WellKnown
  url: well-known/bishop-fox-well-known.yml
- type: DomainSecurity
  url: security/bishop-fox-domain-security.yml
- type: LLMsTxt
  url: llms/bishop-fox-llms.txt
- type: Authentication
  url: authentication/bishop-fox-authentication.yml
- type: OAuthScopes
  url: scopes/bishop-fox-scopes.yml
- type: Conventions
  url: conventions/bishop-fox-conventions.yml
- type: ErrorCatalog
  url: errors/bishop-fox-problem-types.yml
- type: DataModel
  url: data-model/bishop-fox-data-model.yml
- type: Lifecycle
  url: lifecycle/bishop-fox-lifecycle.yml
- type: Conformance
  url: conformance/bishop-fox-conformance.yml
- type: Packages
  url: packages/bishop-fox-packages.yml
- type: OpenSourceTools
  url: https://bishopfox.com/tools
x-enrichment:
  date: '2026-08-02'
  status: enriched
  artifacts_added: 15
  pass: local-v1