SBS CyberSecurity vs Mandiant (part of Google Cloud)
SBS CyberSecurity
SBS CyberSecurity is a US cybersecurity consulting, audit and testing firm founded in Madison, South Dakota in 2004. Its core market is regulated financial institutions, community banks and credit unions, served through risk management programmes, IT and network security audits, penetration testing, and the TRAC governance, risk and compliance platform. Co-founders Chad Knutson and Jon Waldman acquired full ownership of the company in July 2022. Penetration testing covers external network, internal network, web application, wireless, and PCI DSS Requirement 11 engagements, aligned to NIST, OWASP and PTES. Alongside testing, SBS runs red team, purple team and social engineering assessments, and advisory work including virtual CISO, NIST Cybersecurity Framework assessments, cybersecurity maturity assessments, and vendor risk management. For defense contractors, SBS provides CMMC readiness for Level 1 and Level 2: gap identification, documentation and preparation for assessment. Certification itself is completed by a separate Certified Third Party Assessment Organization (C3PAO); SBS is not listed on the Cyber AB Marketplace as an RPO or C3PAO.
Pros
- Two decades focused specifically on regulated financial institutions, with reporting built for board and examiner audiences
- Platinum Member of the American Bankers Association Partner Network, with preferred provider relationships across more than 20 state banking associations
- TRAC GRC platform used by more than 1,500 organizations, bundling testing findings into ongoing risk management rather than a standalone report
- CMMC readiness work maps directly to Level 1 and Level 2 gap preparation for defense contractors
Pricing: Custom (contact sales)
Mandiant (part of Google Cloud)
Founded in 2004 by Kevin Mandia, Mandiant built a global reputation responding to the world's most high-profile breaches. After acquisition by FireEye in 2013 and by Google for ~$5.4B in 2022, the firm retained its brand and now operates inside Google Cloud as a specialist consultancy for incident response, threat intelligence, and offensive security.
Pros
- Frontline visibility into nation-state and ransomware intrusions through real IR casework
- Deep threat intelligence backed by APT group tracking (APT1, APT28, APT41)
- Backed by Google Cloud scale, telemetry, and engineering resources
- Brand recognition that satisfies board and regulator expectations after a breach
Pricing: Custom (contact sales)