Mandiant (part of Google Cloud) vs Bishop Fox

Mandiant (part of Google Cloud)

Founded in 2004 by Kevin Mandia, Mandiant built a global reputation responding to the world's most high-profile breaches. After acquisition by FireEye in 2013 and by Google for ~$5.4B in 2022, the firm retained its brand and now operates inside Google Cloud as a specialist consultancy for incident response, threat intelligence, and offensive security.

Pros
  • Frontline visibility into nation-state and ransomware intrusions through real IR casework
  • Deep threat intelligence backed by APT group tracking (APT1, APT28, APT41)
  • Backed by Google Cloud scale, telemetry, and engineering resources
  • Brand recognition that satisfies board and regulator expectations after a breach
Cons
  • Premium enterprise pricing with bespoke engagements and no public price list
  • Lead times can be long outside an active retainer relationship
  • Brand and roadmap increasingly tied to Google Cloud's strategic priorities

Pricing: Custom (contact sales)

Bishop Fox

Founded in 2005 (originally as Stach & Liu), Bishop Fox positions itself as 'the leading authority in offensive security' and is headquartered in Tempe, Arizona. Beyond traditional consulting it sells Cosmos, a continuous attack-surface management and offensive-testing platform that pairs automated discovery with human operator validation.

Pros
  • Cosmos delivers continuous human-validated testing, not point-in-time engagements
  • Strong consultant brand and notable open-source releases (Sliver C2 framework)
  • Active Bishop Fox Labs research output and conference presence
  • Highly tenured consultant base focused exclusively on offensive security
Cons
  • Premium pricing aimed at upper mid-market and enterprise, no public price list
  • Cosmos requires meaningful integration and a minimum spend
  • Largely U.S.-centric delivery footprint compared with global rivals

Pricing: Custom (contact sales)