CISO Tribune

Vendor comparison · 2 companies

ICF vs Kudelski Security

ICF sells security and resilience services that help government and industry strengthen defenses against cyber, physical, and emerging threats. Kudelski Security sells customized programs that span managed security, advisory engagements, technology consulting and research and development of tailored solutions. CISO Tribune files both under Security consulting and advisory. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • ICF
  • Kudelski Security
ICF vs Kudelski Security: Products, Customers and Funding Compared
ICFICF sells security and resilience services that help government and industry strengthen defenses against cyber, physical, and emerging threats.icf.comKudelski SecurityKudelski Security sells customized programs that span managed security, advisory engagements, technology consulting and research and development of tailored solutions.kudelskisecurity.com
What it sells
  • ICF Fathom[3]ICF's suite of tailored AI solutions and services.
  • Managed Detection and Response[4][6]Kudelski Security provides risk-based threat detection and response for any environment, 24/7.
  • Penetration Testing[11]Kudelski Security ethical hackers exploit misconfigurations, chained weaknesses, and business logic flaws.
  • Red Team[5]Red Team operations mimic real adversaries.
  • Product Security[14]Kudelski Security's product security helps embed security into every stage of the product lifecycle.
  • 24/7 Incident Response Retainer[5][8]The retainer gives assured access to 24/7 incident response.
  • Virtual CISO[5]Virtual CISO services provide strategic leadership, risk reduction, and compliance guidance.
Categories
Headquarters
Not stated on its pagesCheseaux-sur-Lausanne, Switzerland[3]
Founded
1969[3]Not stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, ICF sells its security and resilience services to government and industry. ICF delivers its services to clients across the U.S. federal government through a contracts portfolio. ICF names government and commercial clients in public health, IT modernization, energy efficiency, natural disaster relief and mitigation, utility consulting, and climate, environmental and infrastructure services. ICF's acquisitions point to cybersecurity and identity management work for U.S. federal civilian and defense agencies. ICF's acquisitions point to work for electric and gas utilities, state and local governments, and state energy offices.From its own pages, Kudelski Security designs its ethical hacking services for CISOs, CTOs, and security teams. Kudelski Security says its advisory work is for CISOs who develop strategies that minimize exposure and strengthen cybersecurity postures. Its product security services address organizations that build connected devices, SaaS platforms, or enterprise applications. Its credential monitoring use case describes a regional financial services provider concerned with credential-based attacks.
Last verified
October 14, 2026November 9, 2026

Where they overlap

  • Security consulting and advisory is the primary category of both ICF and Kudelski Security.

Where they differ, field by field

  • ICF is also filed under Compliance automation, Incident response and forensics and Vulnerability management. Kudelski Security is also filed under Managed security service providers.
  • ICF lists ICF Fathom. Kudelski Security lists Managed Detection and Response, Penetration Testing, Red Team, Product Security, 24/7 Incident Response Retainer and 1 more.
  • Kudelski Security is headquartered in Cheseaux-sur-Lausanne, Switzerland.
  • ICF was founded in 1969.

How they differ

CISO Tribune files ICF under Security consulting and advisory, Compliance automation, Incident response and forensics, and Vulnerability management, with Security consulting and advisory as its primary category. CISO Tribune files Kudelski Security under Security consulting and advisory and Managed security service providers, also with Security consulting and advisory as its primary category. ICF sells security and resilience services meant to help government and industry strengthen defenses against cyber, physical, and emerging threats, and it sells ICF Fathom, a suite of tailored AI solutions and services. Kudelski Security sells Managed Detection and Response, Penetration Testing, Red Team, Product Security, a 24/7 Incident Response Retainer, and Virtual CISO services. Both companies work in security consulting, though Kudelski Security lists managed security services and ICF lists compliance automation among its filed categories.

ICF was founded in 1969, and it files annual reports on Form 10-K and quarterly reports on Form 10-Q with the U.S. Securities and Exchange Commission. Kudelski Security is headquartered in Cheseaux-sur-Lausanne, Switzerland. ICF delivers its services to clients across the U.S. federal government through a contracts portfolio, and it works for government and commercial clients in areas including public health, energy efficiency, and utility consulting. Kudelski Security describes its ethical hacking services as designed for CISOs, CTOs, and security teams, and its product security services address organizations that build connected devices, SaaS platforms, or enterprise applications.

Kudelski Security offers MDR for CrowdStrike and MXDR for Microsoft, and it integrates with Google SecOps.

What it sells: ICF

What ICF Fathom does[3]
ICF Fathom is ICF's suite of tailored AI solutions and services for organizations. ICF's suite of AI solutions and services features customizable intelligent agents.

What it sells: Kudelski Security

What Penetration Testing does[11]
Kudelski Security penetration testing assessments are conducted by OSCP-certified professionals. Kudelski Security penetration testing covers internal networks, web apps, mobile, APIs, and cloud services in one engagement.
What Red Team does[5]
Red Team operations reveal blind spots and test controls. Red Team operations assess the ability to detect and contain active intrusions.
What 24/7 Incident Response Retainer does[5][8]
The 24/7 Incident Response Retainer provides expert-led, SLA-backed support. The 24/7 Incident Response Retainer includes automated incident response capabilities.
What Virtual CISO does[5]
Virtual CISO services are meant to bridge security gaps. Virtual CISO services are tailored to the business of the customer.

Questions about ICF and Kudelski Security

What do ICF and Kudelski Security sell?
ICF sells ICF Fathom. Kudelski Security sells Managed Detection and Response, Penetration Testing, Red Team, Product Security, 24/7 Incident Response Retainer and 1 more.
Are ICF and Kudelski Security in the same category?
Yes. Security consulting and advisory is the primary category of both on CISO Tribune.
Where are ICF and Kudelski Security headquartered?
Kudelski Security is headquartered in Cheseaux-sur-Lausanne, Switzerland.
When were ICF and Kudelski Security founded?
ICF was founded in 1969.
Who are ICF and Kudelski Security sold to?
From its own pages, ICF sells its security and resilience services to government and industry. From its own pages, Kudelski Security designs its ethical hacking services for CISOs, CTOs, and security teams.

About ICF

ICF sells security and resilience services that help government and industry strengthen defenses against cyber, physical, and emerging threats. ICF frames resilience as key to protecting America's security, economy, and way of life. ICF's security work covers safeguarding critical assets, fortifying infrastructure, and building a security-first culture that considers cyber and physical convergence. ICF develops capabilities and executes real-time operations in support of national security.

ICF's infrastructure security and resilience work starts with understanding threats to mission-critical assets. ICF experts assess vulnerabilities, analyze cyber and physical risks, and develop strategic defenses to safeguard essential operations and national security. ICF experts design custom algorithms using statistics, machine learning, and AI. ICF analyzes the domain, integrates expert insights, and builds analytics for strategic decision-making and national security. ICF experts apply analytical methods and cybersecurity expertise to develop solutions for mission needs and national defense.

ICF Fathom is ICF's suite of tailored AI solutions and services for organizations. ICF's suite of AI solutions and services features customizable intelligent agents. ICF has ServiceNow and Appian capabilities. ICF partners with marketing, commerce, cloud and analytics platforms, with vertically-specific technology providers particularly in the energy sector, and with supply chain professionals. ICF says technology partners play a larger role in its offerings as the world becomes more interconnected. ICF seeks to collaborate with experts, suppliers, contractors, and technology partners.[5]

ICF delivers its services to clients across the U.S. federal government through a contracts portfolio. ICF works for government and commercial clients in areas including public health, IT modernization and digitization, energy efficiency, natural disaster relief and mitigation, utility consulting, and climate, environmental and infrastructure services. ICF provides clients with facts, data, and independent analysis to help them further their missions. ICF's team includes business analysts and policy specialists who work alongside technologists, data scientists, and creatives. ICF has built and integrated a set of marketing and communications capabilities to help organizations develop engagement with their audiences.[6][7]

Incentive Technology Group, LLC (ITG) provides cloud-based platform services to the U.S. federal government. ICF combines its strategic consulting, analytics and domain expertise with ITG's digital capabilities to help agencies architect and develop the technology platforms they need for their missions. Creative Systems and Consulting provides IT modernization and digital transformation solutions to U.S. federal agencies. SemanticBits provides digital modernization services using open-source frameworks to U.S. federal health agencies. ICF pairs its health and social services with ESAC's health technology solutions and applied understanding of genomics, proteomics and physical sciences in its digital health solutions. DMS Disaster Consultants is a disaster planning and recovery services firm whose capabilities augment ICF's disaster response, recovery and preparedness work in the public sector. Applied Energy Group (AEG) provides energy technology and advisory services to electric and gas utilities, state and local governments, and state energy offices.

ICF traces its origin to 1969, when a WWII veteran and former Tuskegee Airman, along with three U.S. Department of Defense analysts, founded the Inner City Fund to finance businesses in Washington, D.C. ICF describes itself as a global solutions and technology provider. In 2012, ICF acquired GHK Holdings Limited, a London-based consultancy with offices across Europe and Asia that added capabilities in environment, health, education, social programs, logistics, and international development. Mostra SA is a communications agency based in Brussels, Belgium, whose strategic communications capabilities complement ICF's policy work. ICF files annual reports on Form 10-K and quarterly reports on Form 10-Q with the U.S. Securities and Exchange Commission.[2][6]

ICF on the record

Sources

ICF full record

  1. [1]Cybersecurity Solutions and Cyber Strategy | ICFICF · undated page, accessed October 14, 2026 · Tier A
  2. [2]Who We Are | ICFICF · undated page, accessed October 14, 2026 · Tier A
  3. [3]Who We Are | ICFICF · undated page, accessed November 10, 2026 · Tier A
  4. [4]Acquisitions | ICFICF · undated page, accessed November 10, 2026 · Tier A
  5. [5]Seeking Suppliers, Contractors, and Technology Partners | ICFICF · undated page, accessed November 10, 2026 · Tier A
  6. [6]Overview | Investor Relations | ICF International Inc.ICF International Inc. · undated page, accessed November 10, 2026 · Tier A
  7. [7]About Us - We're the Changemakers | ICF Next | ICFICF · undated page, accessed November 10, 2026 · Tier A

Kudelski Security full record

  1. [1]About usKudelski Security · kudelskisecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Kudelski security reinforces its presence in germany austria and switzerlandKudelski Security · kudelskisecurity.com · published June 11, 2018 · Tier A
  3. [3]Privacy noticeKudelski Security · kudelskisecurity.com · published January 2, 2026 · Tier A
  4. [4]Kudelski Security - Cybersecurity Programs Your Company NeedsKudelski Security · undated page, accessed October 26, 2026 · Tier A
  5. [5]Cybersecurity Programs Your Company Needs - Kudelski SecurityKudelski Security · undated page, accessed October 26, 2026 · Tier A
  6. [6]Detection and Response - Kudelski SecurityKudelski Security · undated page, accessed October 26, 2026 · Tier A
  7. [7]Threat Exposure Management - Kudelski SecurityKudelski Security · undated page, accessed October 26, 2026 · Tier A
  8. [8]Incident Response and Digital Forensics - Kudelski SecurityKudelski Security · undated page, accessed October 26, 2026 · Tier A
  9. [9]Continuous Credential Leak Monitoring - Kudelski SecurityKudelski Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]External Attack Surface Management - Kudelski SecurityKudelski Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Pentesting - Kudelski SecurityKudelski Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Cyber-Physical Systems & OT Security Services - Kudelski SecurityKudelski Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]AI & Emerging Technology Security - Kudelski SecurtiyKudelski Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Product Security - Kudelski SecurityKudelski Security · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.