Black Kite Third-Party Cyber Risk
- Runs on
- Web
Summary
Black Kite Third-Party Cyber Risk is a web platform for monitoring and assessing cyber risk across vendor portfolios and extended supply chains. It provides visibility from first-party posture through fifth-party exposure, identifies concentration risks, and maps how downstream impacts can travel through suppliers. Black Kite Monitor continuously tracks vendor portfolios, while FocusTags link breaches, active exploits, CVEs, and dark-web exposures to vendors. Its Ransomware Susceptibility Index provides a vendor-specific predictive signal. Black Kite Assess parses policies and compliance documents, mapping evidence to more than 25 global frameworks or a custom framework; its shared workspace supports remediation requests and vendor follow-up. The platform grounds findings in open, auditable standards, and Open FAIR-based analysis translates cyber posture into dollar-denominated exposure. It offers hybrid assessments, questionnaire libraries, framework mapping, evidence collection, and workflow automation. Official integrations include ServiceNow TPRM and ITSM, Aravo, LogicGate Risk Cloud, OneTrust, Archer, Splunk, Jira, Power BI, Slack, Zapier, Microsoft Teams, and an MCP Server. Pricing is available on request. Production customer data is stored and processed exclusively in US-based Google Cloud Platform regions.
Who it is for
It may suit organizations managing cyber risk across vendor portfolios and extended supply chains. Teams needing document assessments, vendor follow-up, and links to risk-management tools may find its assessment and integration features relevant.
What is good
- Maps exposure through fifth-party relationships.
- Continuously monitors vendor portfolios.
- Maps evidence to more than 25 global frameworks or a custom one.
- Provides a shared workspace for vendor remediation follow-up.
- Offers hybrid assessments, evidence collection, and workflow automation.
What to know first
- Pricing is available on request.
- Production customer data is confined to US-based Google Cloud Platform regions.
Verdict
Black Kite combines ongoing vendor monitoring with assessments, supply-chain visibility, and vendor remediation workflows. Consider its US-only production data residency and request pricing to assess whether it fits your requirements.
Black Kite Third-Party Cyber Risk plans and pricing
All plansCompared on third-party risk management software
- Assessment method
- hybridblackkite.com
- Continuous monitoring
- Yesblackkite.com
- Questionnaire library
- Yesblackkite.com
- Framework mapping
- Yesblackkite.com
- Evidence collection
- Yesblackkite.com
- Workflow automation
- Yesblackkite.com
Facts
- Extended supply-chain visibility
- Black Kite provides real-time visibility from first-party posture through fifth-party exposure across the extended supply chain.blackkite.com · 1 Oct 2026
- Concentration risk
- The platform identifies suppliers, software products and geographies that represent single points of failure.blackkite.com · 1 Oct 2026
- Cascading risk
- Black Kite maps third-, fourth- and fifth-party exposure to show how downstream impact can travel through the supply chain.blackkite.com · 1 Oct 2026
- Open standards
- Black Kite grounds findings in open, auditable standards for traceable and explainable risk decisions.blackkite.com · 1 Oct 2026
- Financial quantification
- Open FAIR-based analysis translates vendor and supply-chain cyber posture into dollar-denominated exposure.blackkite.com · 1 Oct 2026
- Threat intelligence
- FocusTags map breaches, active exploits, CVEs and dark-web exposures directly to vendors in a portfolio.blackkite.com · 1 Oct 2026
- Ransomware prediction
- The Ransomware Susceptibility Index is a predictive vendor-specific signal for ransomware susceptibility.blackkite.com · 1 Oct 2026
- AI assessments
- Black Kite Assess parses policies and compliance documents and maps evidence to more than 25 global frameworks or a custom framework.blackkite.com · 1 Oct 2026
- Vendor collaboration
- Assess provides a shared workspace to share gaps, request remediation and track follow-up with vendors.blackkite.com · 1 Oct 2026
- Integrations
- Official integrations include ServiceNow TPRM and ITSM, Aravo, LogicGate Risk Cloud, OneTrust, Archer, Splunk, Jira, Power BI, Slack, Zapier, Microsoft Teams and an MCP Server.blackkite.com · 1 Oct 2026
- SOC 2
- Black Kite completed a SOC 2 Type 2 examination covering security, availability, confidentiality, processing integrity and privacy criteria.blackkite.com · 1 Oct 2026
- GovRAMP
- Black Kite announced GovRAMP Authorization for its Third-Party Cyber Risk Intelligence platform in July 2026.blackkite.com · 1 Oct 2026
- Data residency
- Production customer data is stored and processed exclusively in US-based Google Cloud Platform regions.blackkite.com · 1 Oct 2026
Company
- Headquarters
- Boston, Massachusetts, United Statesblackkite.com · 28 Sept 2026
Best Black Kite Third-Party Cyber Risk alternatives
See all 20
Where it ranks on Everything Xiaomi
Is Black Kite Third-Party Cyber Risk yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.
Sources
- blackkite.com/platform· checked 1 Oct 2026
- blackkite.com/platform/monitor· checked 1 Oct 2026
- blackkite.com/platform/assess· checked 1 Oct 2026
- blackkite.com/platform/integrations· checked 1 Oct 2026
- blackkite.com/press-releases/black-kite-achieves-soc-· checked 1 Oct 2026
- blackkite.com/press-releases/black-kite-achieves-govr· checked 1 Oct 2026
- blackkite.com/privacy-policy· checked 1 Oct 2026
- blackkite.com· checked 28 Sept 2026
- blackkite.com/blog/no-hidden-costs-how-black-kite-red· checked 1 Oct 2026