Bishop Fox vs Mandiant (part of Google Cloud)
Bishop Fox
Founded in 2005 (originally as Stach & Liu), Bishop Fox positions itself as 'the leading authority in offensive security' and is headquartered in Tempe, Arizona. Beyond traditional consulting it sells Cosmos, a continuous attack-surface management and offensive-testing platform that pairs automated discovery with human operator validation.
Pros
- Cosmos delivers continuous human-validated testing, not point-in-time engagements
- Strong consultant brand and notable open-source releases (Sliver C2 framework)
- Active Bishop Fox Labs research output and conference presence
- Highly tenured consultant base focused exclusively on offensive security
Things to check
- Premium pricing aimed at upper mid-market and enterprise, no public price list
- Cosmos requires meaningful integration and a minimum spend
- Largely U.S.-centric delivery footprint compared with global rivals
Pricing: Custom (contact sales)
Mandiant (part of Google Cloud)
Founded in 2004 by Kevin Mandia, Mandiant built a global reputation responding to the world's most high-profile breaches. After acquisition by FireEye in 2013 and by Google for ~$5.4B in 2022, the firm retained its brand and now operates inside Google Cloud as a specialist consultancy for incident response, threat intelligence, and offensive security.
Pros
- Frontline visibility into nation-state and ransomware intrusions through real IR casework
- Deep threat intelligence backed by APT group tracking (APT1, APT28, APT41)
- Backed by Google Cloud scale, telemetry, and engineering resources
- Brand recognition that satisfies board and regulator expectations after a breach
Things to check
- Premium enterprise pricing with bespoke engagements and no public price list
- Lead times can be long outside an active retainer relationship
- Brand and roadmap increasingly tied to Google Cloud's strategic priorities
Pricing: Custom (contact sales)