CISO Tribune

Vendor comparison · 2 companies

ICF vs RAD Security

ICF sells security and resilience services that help government and industry strengthen defenses against cyber, physical, and emerging threats. RAD Security sells AI Workers that investigate, triage, and act on threats across a customer's entire stack. CISO Tribune files both under Vulnerability management. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • ICF
  • RAD Security
ICF vs RAD Security: Products, Customers and Funding Compared
ICFICF sells security and resilience services that help government and industry strengthen defenses against cyber, physical, and emerging threats.icf.comRAD SecurityRAD Security sells AI Workers that investigate, triage, and act on threats across a customer's entire stack.radsecurity.ai
What it sells
  • ICF Fathom[3]ICF's suite of tailored AI solutions and services.
  • RAD Bot[6][7][8][9]An AI agent with direct access to a customer's live environment data.
  • RADQL[9][10][11]A SQL-like query language built for security data.
  • AgentKeeper[2][14]An open-source tool that maps a cloud identity attack surface.
  • Evidence Room[12]Aggregates vulnerabilities, misconfigurations, runtime threats, and attack paths into one prioritized view.
  • AI Insights[13]Continuously analyzes a cloud-native environment and surfaces what matters most.
  • Explore[6][10]Asset discovery and investigation across a Kubernetes environment, powered by RAD Bot.
  • Dashboards[11]Pre-built and customizable dashboards powered by RADQL.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
1969[3]Not stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, ICF sells its security and resilience services to government and industry. ICF delivers its services to clients across the U.S. federal government through a contracts portfolio. ICF names government and commercial clients in public health, IT modernization, energy efficiency, natural disaster relief and mitigation, utility consulting, and climate, environmental and infrastructure services. ICF's acquisitions point to cybersecurity and identity management work for U.S. federal civilian and defense agencies. ICF's acquisitions point to work for electric and gas utilities, state and local governments, and state energy offices.RAD Security says RADQL lets security teams explore, analyze, and visualize cloud security data. The Evidence Room is described for people who are triaging alerts, remediating issues, or preparing for an audit. RAD Security provides audit-ready compliance documentation for CIS, HIPAA, and NSA Hardening frameworks, among others, and a weekly summary for leadership.
Last verified
October 14, 2026October 21, 2026

Where they overlap

  • ICF and RAD Security are both filed under Vulnerability management.

Where they differ, field by field

  • ICF's primary category is Security consulting and advisory; RAD Security's is Cloud-native application protection (CNAPP).
  • ICF is also filed under Compliance automation and Incident response and forensics. RAD Security is also filed under Cloud workload protection and Cloud security posture management.
  • ICF lists ICF Fathom. RAD Security lists RAD Bot, RADQL, AgentKeeper, Evidence Room, AI Insights and 2 more.
  • ICF was founded in 1969.

What it sells: ICF

What ICF Fathom does[3]
ICF Fathom is ICF's suite of tailored AI solutions and services for organizations. ICF's suite of AI solutions and services features customizable intelligent agents.

What it sells: RAD Security

What RAD Bot does[6][7][8][9]
RAD Bot queries a customer's live environment, correlates the results, and delivers findings with full source attribution. RAD Bot connects to Jira, Slack, ServiceNow, and email so users can escalate, assign, and remediate without leaving the conversation. RAD Bot workflows run multi-step investigations automatically and deliver results to an inbox, Slack, email, or ticketing system.
What RADQL does[9][10][11]
RADQL is a SQL-like query language built for security data. RADQL searches containers, correlates vulnerabilities, analyzes runtime behavior, and investigates incidents. RAD Bot can generate RADQL queries from natural language descriptions. RADQL results can be exported to CSV or JSON.
What AgentKeeper does[2][14]
AgentKeeper is RAD Security's open-source tool that maps a cloud identity attack surface. AgentKeeper visualizes IAM permissions, detects over-privileged roles, and uncovers hidden access paths.
What Evidence Room does[12]
The Evidence Room aggregates vulnerabilities, misconfigurations, runtime threats, and attack paths into a single prioritized view. Findings in the Evidence Room are automatically mapped to compliance frameworks such as CIS, SOC 2, PCI-DSS, and NIST. Findings flow into existing tools so that users can create tickets, alert teams, and export to a SIEM.
What AI Insights does[13]
AI Insights continuously analyzes a cloud-native environment and surfaces what matters most. Every insight is categorized so that issues route to the right team with the right context. Rankings are based on exploitability, blast radius, business context, and attack path relevance.
What Explore does[6][10]
Explore is powered by RAD Bot and the same query engine behind every feature on the platform. RAD Security's sensors continuously discover and track every asset in a Kubernetes environment, including containers, images, workloads, network connections, and process executions.
What Dashboards does[11]
RAD Security dashboards visualize security posture, infrastructure, and compliance data with pre-built templates, flexible widgets, and real-time updates powered by RADQL. Dashboards pull from Kubernetes, cloud, runtime, and external integrations.

Questions about ICF and RAD Security

What do ICF and RAD Security sell?
ICF sells ICF Fathom. RAD Security sells RAD Bot, RADQL, AgentKeeper, Evidence Room, AI Insights and 2 more.
Are ICF and RAD Security in the same category?
They share Vulnerability management. ICF's primary category is Security consulting and advisory and RAD Security's is Cloud-native application protection (CNAPP).
When were ICF and RAD Security founded?
ICF was founded in 1969.
Who are ICF and RAD Security sold to?
From its own pages, ICF sells its security and resilience services to government and industry. RAD Security says RADQL lets security teams explore, analyze, and visualize cloud security data.

About ICF

ICF sells security and resilience services that help government and industry strengthen defenses against cyber, physical, and emerging threats. ICF frames resilience as key to protecting America's security, economy, and way of life. ICF's security work covers safeguarding critical assets, fortifying infrastructure, and building a security-first culture that considers cyber and physical convergence. ICF develops capabilities and executes real-time operations in support of national security.

ICF's infrastructure security and resilience work starts with understanding threats to mission-critical assets. ICF experts assess vulnerabilities, analyze cyber and physical risks, and develop strategic defenses to safeguard essential operations and national security. ICF experts design custom algorithms using statistics, machine learning, and AI. ICF analyzes the domain, integrates expert insights, and builds analytics for strategic decision-making and national security. ICF experts apply analytical methods and cybersecurity expertise to develop solutions for mission needs and national defense.

ICF Fathom is ICF's suite of tailored AI solutions and services for organizations. ICF's suite of AI solutions and services features customizable intelligent agents. ICF has ServiceNow and Appian capabilities. ICF partners with marketing, commerce, cloud and analytics platforms, with vertically-specific technology providers particularly in the energy sector, and with supply chain professionals. ICF says technology partners play a larger role in its offerings as the world becomes more interconnected. ICF seeks to collaborate with experts, suppliers, contractors, and technology partners.[5]

ICF delivers its services to clients across the U.S. federal government through a contracts portfolio. ICF works for government and commercial clients in areas including public health, IT modernization and digitization, energy efficiency, natural disaster relief and mitigation, utility consulting, and climate, environmental and infrastructure services. ICF provides clients with facts, data, and independent analysis to help them further their missions. ICF's team includes business analysts and policy specialists who work alongside technologists, data scientists, and creatives. ICF has built and integrated a set of marketing and communications capabilities to help organizations develop engagement with their audiences.[6][7]

Incentive Technology Group, LLC (ITG) provides cloud-based platform services to the U.S. federal government. ICF combines its strategic consulting, analytics and domain expertise with ITG's digital capabilities to help agencies architect and develop the technology platforms they need for their missions. Creative Systems and Consulting provides IT modernization and digital transformation solutions to U.S. federal agencies. SemanticBits provides digital modernization services using open-source frameworks to U.S. federal health agencies. ICF pairs its health and social services with ESAC's health technology solutions and applied understanding of genomics, proteomics and physical sciences in its digital health solutions. DMS Disaster Consultants is a disaster planning and recovery services firm whose capabilities augment ICF's disaster response, recovery and preparedness work in the public sector. Applied Energy Group (AEG) provides energy technology and advisory services to electric and gas utilities, state and local governments, and state energy offices.

ICF traces its origin to 1969, when a WWII veteran and former Tuskegee Airman, along with three U.S. Department of Defense analysts, founded the Inner City Fund to finance businesses in Washington, D.C. ICF describes itself as a global solutions and technology provider. In 2012, ICF acquired GHK Holdings Limited, a London-based consultancy with offices across Europe and Asia that added capabilities in environment, health, education, social programs, logistics, and international development. Mostra SA is a communications agency based in Brussels, Belgium, whose strategic communications capabilities complement ICF's policy work. ICF files annual reports on Form 10-K and quarterly reports on Form 10-Q with the U.S. Securities and Exchange Commission.[2][6]

ICF on the record

Sources

ICF full record

  1. [1]Cybersecurity Solutions and Cyber Strategy | ICFICF · undated page, accessed October 14, 2026 · Tier A
  2. [2]Who We Are | ICFICF · undated page, accessed October 14, 2026 · Tier A
  3. [3]Who We Are | ICFICF · undated page, accessed November 10, 2026 · Tier A
  4. [4]Acquisitions | ICFICF · undated page, accessed November 10, 2026 · Tier A
  5. [5]Seeking Suppliers, Contractors, and Technology Partners | ICFICF · undated page, accessed November 10, 2026 · Tier A
  6. [6]Overview | Investor Relations | ICF International Inc.ICF International Inc. · undated page, accessed November 10, 2026 · Tier A
  7. [7]About Us - We're the Changemakers | ICF Next | ICFICF · undated page, accessed November 10, 2026 · Tier A

RAD Security full record

  1. [1]Female foundersRAD Security · radsecurity.ai · published April 29, 2024 · Tier A
  2. [2]radsecurity.aiRAD Security · radsecurity.ai · undated page, accessed October 21, 2026 · Tier A
  3. [3]PressRAD Security · radsecurity.ai · undated page, accessed October 21, 2026 · Tier A
  4. [4]AI-Native Cloud Security Platform | RAD Security | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  5. [5]Stop Managing Alerts. Start Running Security. | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  6. [6]Explore — Asset Discovery & Investigation | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  7. [7]Ask RAD — AI Security Assistant | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]Knowledge Base — Searchable Security Knowledge | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]RADQL — Security Query Language | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  10. [10]RADQL Engine — Advanced Security Analytics | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  11. [11]Security Dashboards — Real-Time Visibility | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  12. [12]Evidence Room — Unified Security Findings | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  13. [13]AI Insights — Prioritized Security Intelligence | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A
  14. [14]Exports | RAD Security | RAD SecurityRAD Security · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.