Offensive security firm pairing high-end penetration testing with Cosmos, a continuous attack-surface management platform.
Engagement: Project + Cosmos subscription
Accreditations: PCI DSS, HIPAA, SOC 2, ISO 27001 +1
Mandiant (part of Google Cloud) alternatives (2026)
6 penetration testing firms tools listed alongside Mandiant (part of Google Cloud) for side-by-side comparison on capabilities, pricing, and deployment. No editorial ranking.
US cybersecurity consulting, audit and testing firm founded in 2004, focused on community banks and credit unions, with penetration testing plus CMMC Level 1 and 2 readiness work for defense contractors.
Pricing: Custom (contact sales)
Why look for Mandiant (part of Google Cloud) alternatives?
Mandiant (part of Google Cloud) is a strong option for penetration testing firms, but it's not the right fit for every team. Common reasons teams look elsewhere: premium enterprise pricing with bespoke engagements and no public price list; lead times can be long outside an active retainer relationship.
Below we list 6 alternatives, broken down by deployment model. All data is aggregated from official documentation and community feedback.
Head-to-Head Comparisons
Cloud-Managed Alternatives
FTSE 250 global cybersecurity and software resilience firm offering technical assurance, managed detection, and incident response.
Engagement: Project + retainer + managed services
Accreditations: CREST, CHECK, CBEST, TIBER-EU +2
Offensive security firm delivering continuous penetration testing and attack-surface management through its Chariot platform.
Engagement: Chariot subscription + project work
Accreditations: PCI DSS, HIPAA, GLBA, NERC CIP +1