# Bishop Fox

**Canonical:** https://apis.io/providers/bishop-fox/  
**Website:** https://bishopfox.com/  
**APIs profiled:** 1

Bishop Fox is an offensive security firm delivering penetration testing, red teaming, application and cloud security assessment, and continuous threat exposure management. Its managed Cosmos platform keeps a living inventory of an organization's external attack surface — domains, subdomains, DNS records, network ranges, IP addresses, open ports, and IP/hostname services — pairing continuous automated discovery with human operator validation so customers receive triaged, exploitable findings instead of scanner noise. Customers consume Cosmos data programmatically through the authenticated Cosmos v5 REST API at api.cosmos.bishopfox.com, secured with OAuth 2.0 client-credentials tokens issued by Bishop Fox's Auth0 tenant against the cosmos_public audience, and through bi-directional Jira and ServiceNow integrations plus AWS, GCP, Azure, Cloudflare, and Oracle cloud connectors. Bishop Fox also publishes a widely used open-source offensive-security toolkit — Sliver, CloudFox, sj (Swagger Jacker), jsluice, and aimap — from its GitHub organization.

## Kin Score — 21.4 / 100 (emerging)

Scored 2026-08-25 under rubric 0.14.0. Trend: flat (+0.0 from 21.4).

| Facet | Score |
|---|---|
| Discoverability | 87.0 |
| Contract Quality | 0.0 |
| Governance | 4.5 |
| Contract Governance | 4.5 |
| Operational Transparency | 13.2 |
| Developer Ergonomics | 28.6 |
| Commercial Clarity | 23.7 |
| Access Clarity | 23.7 |

## Agent readiness — 20.1 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | served |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | yes |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | served |
| Protected Resource Metadata | no |
| Dynamic Client Registration | yes |
| Agentic Commerce | no |

## APIs (1)

- **Bishop Fox Cosmos API (v5)** — Authenticated REST API for the Bishop Fox Cosmos attack-surface management platform. Exposes the customer's discovered asset inventory through /v5/asset-view/* resources (domain...

## Security (3)

- **Bishop Fox Authentication** — oauth2/http · 2 schemes
- **Bishop Fox Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC
- **Bishop Fox Vulnerability Disclosure** — security.txt · contact published

## Tags

Company, Cybersecurity, Offensive Security, Penetration Testing, Attack Surface Management, Exposure Management, Red Teaming, Vulnerability Management, Security Findings, Asset Discovery, Continuous Threat Exposure Management, Authentication

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/bishop-fox/). Scores are computed from the provider's own public artifacts under a published rubric.