What do ICF and Keepnet Labs sell?

ICF sells ICF Fathom. Keepnet Labs sells Phishing Simulator and Vishing assessment.

Are ICF and Keepnet Labs in the same category?

They share Incident response and forensics. ICF's primary category is Security consulting and advisory and Keepnet Labs's is Human risk management.

Where are ICF and Keepnet Labs headquartered?

Keepnet Labs is headquartered in London, United Kingdom.

When were ICF and Keepnet Labs founded?

ICF was founded in 1969. Keepnet Labs was founded in 2017.

Who are ICF and Keepnet Labs sold to?

From its own pages, ICF sells its security and resilience services to government and industry. Keepnet Labs says any team that takes calls can be included in a vishing assessment, with the help desk requested most.

Vendor comparison · 2 companies

ICF vs Keepnet Labs

ICF sells security and resilience services that help government and industry strengthen defenses against cyber, physical, and emerging threats. Keepnet Labs sells security awareness training and multi-channel phishing simulations. CISO Tribune files both under Incident response and forensics. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

ICF
Keepnet Labs

Add a company

ICF vs Keepnet Labs: Products, Customers and Funding Compared
What it sells
	ICFICF sells security and resilience services that help government and industry strengthen defenses against cyber, physical, and emerging threats.icf.com	Keepnet LabsKeepnet Labs sells security awareness training and multi-channel phishing simulations.keepnetlabs.com
What it sells	ICF Fathom^[3]ICF's suite of tailored AI solutions and services.	Phishing Simulator^[1][2][7][9]Runs email phishing simulations. Vishing assessment^[15]Live calls from experienced social engineers to test verification.
Categories
Categories	Security consulting and advisory (primary category) Compliance automation Incident response and forensics Vulnerability management	Human risk management (primary category) Security awareness training Threat intelligence Incident response and forensics
Headquarters
Headquarters	Not stated on its pages	London, United Kingdom
Founded
Founded	1969^[3]	2017^[1]
Ownership and funding
Ownership and funding	Not stated on its pages	Not stated on its pages
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	Not stated on its pages	Not stated on its pages
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages	G2: listed, seen October 26, 2026^[13] Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	From its own pages, ICF sells its security and resilience services to government and industry. ICF delivers its services to clients across the U.S. federal government through a contracts portfolio. ICF names government and commercial clients in public health, IT modernization, energy efficiency, natural disaster relief and mitigation, utility consulting, and climate, environmental and infrastructure services. ICF's acquisitions point to cybersecurity and identity management work for U.S. federal civilian and defense agencies. ICF's acquisitions point to work for electric and gas utilities, state and local governments, and state energy offices.	Keepnet Labs says any team that takes calls can be included in a vishing assessment, with the help desk requested most. Keepnet Labs organises published customer numbers by sector. Keepnet Labs prices its plans per employee per month, billed annually, and customers can buy through a Keepnet partner. Keepnet Labs lists hosting regions of the UK, EU, US, Canada, the UAE and Türkiye.
Last verified
Last verified	October 14, 2026	September 27, 2026

Where they overlap

ICF and Keepnet Labs are both filed under Incident response and forensics.

Where they differ, field by field

ICF's primary category is Security consulting and advisory; Keepnet Labs's is Human risk management.
ICF is also filed under Compliance automation and Vulnerability management. Keepnet Labs is also filed under Security awareness training and Threat intelligence.
ICF lists ICF Fathom. Keepnet Labs lists Phishing Simulator and Vishing assessment.
Keepnet Labs is headquartered in London, United Kingdom.
ICF was founded in 1969. Keepnet Labs was founded in 2017.

What it sells: ICF

What ICF Fathom does^[3]: ICF Fathom is ICF's suite of tailored AI solutions and services for organizations. ICF's suite of AI solutions and services features customizable intelligent agents.

What it sells: Keepnet Labs

What Phishing Simulator does^[1][2][7][9]: Phishing Simulator runs email phishing simulations. Phishing Simulator provides templates across languages and difficulty levels.
What Vishing assessment does^[15]: A Keepnet vishing assessment is a set of live calls from experienced social engineers to employees, using pretexts the customer approves. Senior Keepnet social engineers hold the calls themselves, with no AI voices.

Questions about ICF and Keepnet Labs

What do ICF and Keepnet Labs sell?: ICF sells ICF Fathom. Keepnet Labs sells Phishing Simulator and Vishing assessment.
Are ICF and Keepnet Labs in the same category?: They share Incident response and forensics. ICF's primary category is Security consulting and advisory and Keepnet Labs's is Human risk management.
Where are ICF and Keepnet Labs headquartered?: Keepnet Labs is headquartered in London, United Kingdom.
When were ICF and Keepnet Labs founded?: ICF was founded in 1969. Keepnet Labs was founded in 2017.
Who are ICF and Keepnet Labs sold to?: From its own pages, ICF sells its security and resilience services to government and industry. Keepnet Labs says any team that takes calls can be included in a vishing assessment, with the help desk requested most.

About ICF

ICF sells security and resilience services that help government and industry strengthen defenses against cyber, physical, and emerging threats. ICF frames resilience as key to protecting America's security, economy, and way of life. ICF's security work covers safeguarding critical assets, fortifying infrastructure, and building a security-first culture that considers cyber and physical convergence. ICF develops capabilities and executes real-time operations in support of national security.

ICF's infrastructure security and resilience work starts with understanding threats to mission-critical assets. ICF experts assess vulnerabilities, analyze cyber and physical risks, and develop strategic defenses to safeguard essential operations and national security. ICF experts design custom algorithms using statistics, machine learning, and AI. ICF analyzes the domain, integrates expert insights, and builds analytics for strategic decision-making and national security. ICF experts apply analytical methods and cybersecurity expertise to develop solutions for mission needs and national defense.

ICF Fathom is ICF's suite of tailored AI solutions and services for organizations. ICF's suite of AI solutions and services features customizable intelligent agents. ICF has ServiceNow and Appian capabilities. ICF partners with marketing, commerce, cloud and analytics platforms, with vertically-specific technology providers particularly in the energy sector, and with supply chain professionals. ICF says technology partners play a larger role in its offerings as the world becomes more interconnected. ICF seeks to collaborate with experts, suppliers, contractors, and technology partners.^[5]

ICF delivers its services to clients across the U.S. federal government through a contracts portfolio. ICF works for government and commercial clients in areas including public health, IT modernization and digitization, energy efficiency, natural disaster relief and mitigation, utility consulting, and climate, environmental and infrastructure services. ICF provides clients with facts, data, and independent analysis to help them further their missions. ICF's team includes business analysts and policy specialists who work alongside technologists, data scientists, and creatives. ICF has built and integrated a set of marketing and communications capabilities to help organizations develop engagement with their audiences.^[6][7]

Incentive Technology Group, LLC (ITG) provides cloud-based platform services to the U.S. federal government. ICF combines its strategic consulting, analytics and domain expertise with ITG's digital capabilities to help agencies architect and develop the technology platforms they need for their missions. Creative Systems and Consulting provides IT modernization and digital transformation solutions to U.S. federal agencies. SemanticBits provides digital modernization services using open-source frameworks to U.S. federal health agencies. ICF pairs its health and social services with ESAC's health technology solutions and applied understanding of genomics, proteomics and physical sciences in its digital health solutions. DMS Disaster Consultants is a disaster planning and recovery services firm whose capabilities augment ICF's disaster response, recovery and preparedness work in the public sector. Applied Energy Group (AEG) provides energy technology and advisory services to electric and gas utilities, state and local governments, and state energy offices.

ICF traces its origin to 1969, when a WWII veteran and former Tuskegee Airman, along with three U.S. Department of Defense analysts, founded the Inner City Fund to finance businesses in Washington, D.C. ICF describes itself as a global solutions and technology provider. In 2012, ICF acquired GHK Holdings Limited, a London-based consultancy with offices across Europe and Asia that added capabilities in environment, health, education, social programs, logistics, and international development. Mostra SA is a communications agency based in Brussels, Belgium, whose strategic communications capabilities complement ICF's policy work. ICF files annual reports on Form 10-K and quarterly reports on Form 10-Q with the U.S. Securities and Exchange Commission.^[2][6]

ICF on the record

About Keepnet Labs

Keepnet Labs sells security awareness training and multi-channel phishing simulations. Keepnet sells a plan that adds incident response for the emails, SMS and calls employees report, and before and after behaviour measurement. Signals from the security stack a customer already runs become named behaviours in Keepnet.^[4][7][9]

Keepnet sends a nudge in the moment, then training for the same behaviour. Keepnet nudges are short reminders by email, SMS and Teams, timed to each employee's behaviour. Keepnet security awareness training is matched to role, risk and behaviour, with nudges. Compliance 360 is role-based compliance training and readiness tracking. Secure Behaviour Dashboard shows before and after behaviour change, and risky behaviour from security tools drives nudges, training and simulations. Keepnet executive and advanced reports are ready-made reports with before and after behaviour data.^[7][9]

Phishing Simulator runs email phishing simulations, with templates across languages and difficulty levels. Keepnet voice phishing simulations use pre-recorded, text-to-speech or two-way AI calls. Keepnet runs voice phishing simulations from numbers it owns, not spoofed. Keepnet places the call and records what each employee does. Keepnet voice campaign setup starts when a customer adds phone numbers and then creates a voice campaign. Keepnet SMS phishing simulations use numbers that Keepnet provides. Keepnet callback phishing is an email that asks the employee to call a number. Keepnet email threat simulator tests how email defences handle realistic threats. Keepnet customers can run voice, SMS, email, QR code and callback simulations themselves from the Keepnet console.^{[2][7][9][14][15]}

Incident Responder provides analysis and response for reported emails, SMS and calls. Keepnet threat sharing lets customers share and receive phishing intelligence with peers. Keepnet says AI agents run the loop and, by default, nothing goes out until the customer approves it. Keepnet states that customer data is not used to train AI models.^[3][7][9]

Senior Keepnet social engineers hold the calls themselves, with no AI voices. Keepnet vishing assessments are requested most for the help desk, and any team that takes calls can be included. Password and MFA resets, account changes and callbacks to the number on file are the most common scopes of a Keepnet vishing assessment. Keepnet vishing assessment callers are UK, Europe and US callers, in English and Spanish. Card, health, government ID and other high-sensitivity data are never requested or recorded in a Keepnet vishing assessment. Keepnet vishing assessment findings point to the verification steps and policies to strengthen, not to individual employees. Keepnet vishing assessment recordings are encrypted and deleted within five business days of report acceptance, under EU and UK GDPR and the published DPA. In a Keepnet vishing simulation, a platform the customer's team controls runs AI-agent, text-to-speech or recorded calls.^[15]

Keepnet offers hosting in the region the customer chooses: the UK, EU, US, Canada, the UAE or Türkiye. Microsoft Azure hosts every Keepnet region except Türkiye, which AWS hosts. Keepnet lists certified security of ISO/IEC 27001, with data in the region the customer chooses. Keepnet states four current certifications, independently audited. Keepnet lists AES-256 at rest and TLS 1.2 or 1.3 in transit.^[9][15]

Keepnet prices its plans per employee per month, billed annually, on a 3-year agreement, excluding tax, and 1-year agreements are quoted. Customers buying through a Keepnet partner have the partner quote, bill and support them. Keepnet names Whitbread and Koton among the teams it describes with the numbers they moved.^{[5][6][7][8][9][10][11][14][15]}

Keepnet Labs on the record

Sources

ICF full record

[1]Cybersecurity Solutions and Cyber Strategy | ICFICF · undated page, accessed October 14, 2026 · Tier A
[2]Who We Are | ICFICF · undated page, accessed October 14, 2026 · Tier A
[3]Who We Are | ICFICF · undated page, accessed November 10, 2026 · Tier A
[4]Acquisitions | ICFICF · undated page, accessed November 10, 2026 · Tier A
[5]Seeking Suppliers, Contractors, and Technology Partners | ICFICF · undated page, accessed November 10, 2026 · Tier A
[6]Overview | Investor Relations | ICF International Inc.ICF International Inc. · undated page, accessed November 10, 2026 · Tier A
[7]About Us - We're the Changemakers | ICF Next | ICFICF · undated page, accessed November 10, 2026 · Tier A

Keepnet Labs full record

[1]About usKeepnet Labs · keepnetlabs.com · published July 23, 2024 · Tier A
[2]Phishing simulatorKeepnet Labs · keepnetlabs.com · published September 24, 2026 · Tier A
[3]Threat intelligenceKeepnet Labs · keepnetlabs.com · published March 19, 2025 · Tier A
[4]Phishing incident responseKeepnet Labs · keepnetlabs.com · published August 25, 2026 · Tier A
[5]Privacy policyKeepnet Labs · doc.keepnetlabs.com · undated page, accessed September 27, 2026 · Tier A
[6]About Us | KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
[7]Human Risk Management Platform for Cybersecurity | KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
[8]Vishing as a Service: Managed Live-Human Calls - KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
[9]Security Awareness Training Pricing & Plans | KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
[10]Customer Case Studies: Phishing Simulation Results | KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
[11]Cybersecurity Platform Features & Benefits: User Management & Automation | KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
[12]Integrations - KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
[13]Keepnet Labs Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 26, 2026 · Tier C
[14]Voice delivery Integration - KeepnetKeepnet · undated page, accessed November 10, 2026 · Tier A
[15]Vishing Assessment: Social Engineering by Phone | KeepnetKeepnet · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.