Bishop Fox, the offensive security firm trusted by 26 of the Fortune 100, announced the availability of Emerging Threat Testing as a standalone managed service. The service helps security leaders determine whether newly disclosed critical vulnerabilities affect their environments, with every assessment validated by a Bishop Fox offensive security expert.
Emerging Threat Testing is part of Bishop Fox’s Continuous Security Testing (CST) portfolio, which builds on the company’s managed attack surface capabilities. The portfolio now comprises three services—Attack Surface Discovery, Attack Surface Testing and Emerging Threat Testing—that organizations can purchase individually or combine to meet their security requirements.
Organizations are fully remediating only 26% of vulnerabilities listed in CISA’s Known Exploited Vulnerabilities catalog. Meanwhile, nearly three in 10 vulnerabilities added to VulnCheck’s exploited list in 2025 were attacked on or before the day they were publicly disclosed. As new vulnerabilities make headlines, security teams must rapidly determine their exposure, often relying on threat feeds that confirm a vulnerability’s existence but cannot establish whether it affects their specific environments.
“AI and automation let our experts work at the speed of a new threat, but an expert makes the final call, not a tool,” said Vinnie Liu, CEO and co-founder of Bishop Fox. “We tell you whether an attacker could actually use it against you, and when you’re in the clear. That’s an answer a board can act on.”
Three Verdicts for Newly Disclosed Vulnerabilities
Bishop Fox’s Emerging Threat Testing is a managed service through which its Threat Enablement & Analysis team monitors newly disclosed vulnerabilities and active threats, then evaluates relevant threats against each customer’s environment. If no existing off-the-shelf check is available, the team develops a custom assessment. Customers can supply their own asset inventories or combine the service with Attack Surface Discovery to maintain an up-to-date inventory.
Before any assessment reaches a customer, a Bishop Fox expert reviews the verdict. The service delivers one of three outcomes:
Confirmed Vulnerable: Identifies the specific affected assets and provides remediation guidance to eliminate the exposure.
Possibly Impacted: Indicates that further investigation is necessary, with Bishop Fox continuing its assessment.
Not Impacted: Provides a verified all-clear that undergoes the same quality review as a finding, giving security leaders confidence in communicating and defending the result.
Bishop Fox also verifies remediation outcomes. After a customer addresses a flagged exposure, an expert retests the affected assets to confirm that the issue has been resolved.
Between July and September 2026, Bishop Fox’s Threat Enablement & Analysis team evaluated 35,690 CVEs, identified 2,451 as potential emerging threats, deployed 50 new detections and published 36 to customer feeds. Approximately one in every 1,000 vulnerabilities assessed reached a customer, reflecting the team’s expert-led review process, which filters out threats that do not warrant customer action.
Three Services Provide Flexible Security Coverage
Bishop Fox designed its CST portfolio to accommodate different security program requirements, allowing organizations to select the services that align with their current objectives and expand or modify coverage as their needs change. Used together, the three services deliver a comprehensive view of an organization’s external attack surface and emerging threat exposure. Each service is fully managed by Bishop Fox.
The portfolio combines technology with human expertise: AI and automation enable assessments at scale, while Bishop Fox specialists validate significant findings before delivering them to customers.
Attack Surface Discovery: Continuously identifies, validates and maintains an accurate inventory of an organization’s internet-facing assets. Bishop Fox’s Attack Surface Intelligence team verifies asset ownership, with each asset assigned an evidence-based confidence rating. Ongoing hygiene checks identify exposed services, certificate issues and DNS risks that attackers commonly target.
Attack Surface Testing: Combines automated capabilities with continuous testing by Bishop Fox experts who assess an organization’s external attack surface using techniques that reflect real-world attacker behavior. The Adversarial Operations Team chains individual weaknesses into attack paths, validates actual exposures and verifies remediation through on-demand retesting. This enables security teams to prioritize confirmed risks and present human-validated evidence to boards, auditors and major customers.
Emerging Threat Testing: Evaluates newly disclosed vulnerabilities and emerging threats against a customer’s environment through Bishop Fox’s Threat Enablement & Analysis team. Customers receive an expert-reviewed verdict, followed by verification after remediation. Organizations can provide their own asset inventories or pair the service with Attack Surface Discovery to maintain a continuously validated inventory.
All three services are accessible through the Bishop Fox Portal, which is built on the company’s Cosmos platform. An API, along with integrations for Jira and ServiceNow, enables security teams to incorporate results directly into their existing workflows and tools.
The CST portfolio, including Attack Surface Discovery, Attack Surface Testing and Emerging Threat Testing, is available immediately. Additional information is available at https://bishopfox.com/services/continuous-security-testing
_______
About Bishop Fox
Bishop Fox is an offensive security firm founded in 2005 and headquartered in Tempe, Arizona. By combining elite human expertise with the power of its proprietary Cosmos AI engine, the firm delivers industry-leading cloud and application security services, including AI-powered penetration testing and AI/LLM security assessments that reflect real-world attacker behavior. Bishop Fox also provides red teaming and continuous threat exposure management services. Renowned for its innovation and contributions to the open-source community through flagship tools like Sliver and AIMap, Bishop Fox has released 25+ tools and 75+ advisories in the last 10 years.
As a trusted partner to the world’s most recognizable brands, Bishop Fox protects 26 of the Fortune 100, eight of the top 10 global tech companies, all of the top five global media companies, 10 of the top 20 retailers, and seven of the top 10 manufacturers. Bishop Fox was named a Leader and Fast Mover in the 2026 GigaOm Radar for Attack Surface Management, its fifth consecutive year in the report. With a Net Promoter Score of 70, the firm remains the trusted partner for organizations seeking to stay ahead of the evolving threat landscape. Learn more at bishopfox.com.
Media Contact: Rachel Chism, Bishop Fox Media Relations, media@bishopfox.com
Join our LinkedIn group Information Security Community!
——————————————————-
Click Here For The Original Source.
