Case Study: Google achieves scalable, comprehensive security for 1,000+ G Suite partners with Bishop Fox

Scaling up Google's Third-Party Security Program

Google, a global technology leader, needed to ensure user data was protected across its 1,000+ G Suite Marketplace partners. To validate partner security at scale, Google partnered with Bishop Fox to build a third‑party security assessment program leveraging Application Penetration Testing, External Penetration Testing, Cloud Deployment Reviews, and Security Program Reviews.

Bishop Fox researched and designed the program over nine months, creating 21 testing models, defining methodologies for four core tests, and developing a 25‑category Self‑Assessment Questionnaire (SAQ). Rolled out in January 2019 to more than 1,000 partners, the Bishop Fox–built program became the largest public third‑party ecosystem testing initiative, giving Google quantifiable security metrics, consistent vendor assessments, and actionable remediation steps to better protect user data.

Google