Bishop Fox is an offensive security firm offering penetration testing, red team and social-engineering exercises, and continuous attack surface management through its Cosmos platform, serving numerous Fortune 100 clients.
Browse by category
Vulnerability Management
Explore vulnerability scanners, penetration testing tools, risk management platforms, and threat modeling solutions.
Refine results
How to choose vulnerability management tools
Vulnerability Management tools support a defined technical workload. Start with the systems, users and operating constraints the tool must cover before comparing individual features.
What belongs in this category: A listing belongs in Vulnerability Management when this workload is a primary product function rather than a secondary integration or marketing label.
Who uses these tools
- Technical owners responsible for the workload
- Operators who deploy, secure and support the system
- Teams evaluating integrations, cost and migration risk
Capabilities to compare
- Core workflow and platform coverage
- Deployment, identity and integration controls
- Administration, observability and recovery
Operating considerations
- Compatibility with the current environment
- Security, data location and access boundaries
- Migration effort, support and total operating cost
Selection checklist
- Write down the production workload, scale and failure scenarios.
- Test the most important integration and an export or recovery path.
- Verify current limits, licensing and support in official documentation.
Decision resources
Continue the technical evaluation
Use the resources that match your decision stage. Profile data and linked sources were refreshed through September 27, 2026.
6 results in Vulnerability Management
Bugcrowd runs bug bounty, vulnerability disclosure and penetration-testing-as-a-service programs through a managed platform and vetted researcher community.
HackerOne supports vulnerability disclosure programs and bug bounty programs with defined researcher rules.
Qualys VMDR combines vulnerability discovery, prioritization and remediation workflows for managed assets.
Tanium combines endpoint visibility with exposure management and related operational controls.
Trail of Bits is a security research and consulting firm performing software, blockchain/smart-contract, and AI/ML security reviews, publishing findings openly, and maintaining 100+ open-source tools including Slither, Echidna, and Manticore.
0 tools selectedCompare selected