EVERYTHING XIAOMI
Get listed
Black Kite Third-Party Cyber Risk logo

Black Kite Third-Party Cyber Risk

Black Kite Third-Party Cyber Risk is a web platform for monitoring and assessing cyber risk across vendor portfolios and extended supply chains.

Place
#11 of 23
Score
5.6
Black Kite Third-Party Cyber Risk's website

What Black Kite Third-Party Cyber Risk is

Black Kite Third-Party Cyber Risk is a web platform for monitoring and assessing cyber risk across vendor portfolios and extended supply chains. It provides visibility from first-party posture through fifth-party exposure, identifies concentration risks, and maps how downstream impacts can travel through suppliers. Black Kite Monitor continuously tracks vendor portfolios, while FocusTags link breaches, active exploits, CVEs, and dark-web exposures to vendors. Its Ransomware Susceptibility Index provides a vendor-specific predictive signal. Black Kite Assess parses policies and compliance documents, mapping evidence to more than 25 global frameworks or a custom framework; its shared workspace supports remediation requests and vendor follow-up. The platform grounds findings in open, auditable standards, and Open FAIR-based analysis translates cyber posture into dollar-denominated exposure. It offers hybrid assessments, questionnaire libraries, framework mapping, evidence collection, and workflow automation. Official integrations include ServiceNow TPRM and ITSM, Aravo, LogicGate Risk Cloud, OneTrust, Archer, Splunk, Jira, Power BI, Slack, Zapier, Microsoft Teams, and an MCP Server. Pricing is available on request. Production customer data is stored and processed exclusively in US-based Google Cloud Platform regions.

Good

  • Maps exposure through fifth-party relationships.
  • Continuously monitors vendor portfolios.
  • Maps evidence to more than 25 global frameworks or a custom one.
  • Provides a shared workspace for vendor remediation follow-up.
  • Offers hybrid assessments, evidence collection, and workflow automation.

Watch out

  • Pricing is available on request.
  • Production customer data is confined to US-based Google Cloud Platform regions.

Who it suits

It may suit organizations managing cyber risk across vendor portfolios and extended supply chains. Teams needing document assessments, vendor follow-up, and links to risk-management tools may find its assessment and integration features relevant.

Verdict

Black Kite combines ongoing vendor monitoring with assessments, supply-chain visibility, and vendor remediation workflows. Consider its US-only production data residency and request pricing to assess whether it fits your requirements.

Plans and prices

From Black Kite Third-Party Cyber Risk's own pricing page, checked 1 Oct 2026.

All about pricing
PlanPriceWhat it gives you
EnterprisePriced on requestfull-featured product · onboarding, enablement, configuration and environment tuning included · unlimited users
StandardPriced on requestfull-featured product · onboarding, enablement, configuration and environment tuning included · unlimited users

The facts

Each one read from Black Kite Third-Party Cyber Risk's own pages, with the date it was checked.

What it does

AI assessments
Black Kite Assess parses policies and compliance documents and maps evidence to more than 25 global frameworks or a custom framework.checked 1 Oct 2026
Cascading risk
Black Kite maps third-, fourth- and fifth-party exposure to show how downstream impact can travel through the supply chain.checked 1 Oct 2026
Concentration risk
The platform identifies suppliers, software products and geographies that represent single points of failure.checked 1 Oct 2026
Continuous monitoring
Black Kite Monitor continuously monitors vendor portfolios and provides real-time risk intelligence.checked 1 Oct 2026
Data residency
Production customer data is stored and processed exclusively in US-based Google Cloud Platform regions.checked 1 Oct 2026
Extended supply-chain visibility
Black Kite provides real-time visibility from first-party posture through fifth-party exposure across the extended supply chain.checked 1 Oct 2026
Financial quantification
Open FAIR-based analysis translates vendor and supply-chain cyber posture into dollar-denominated exposure.checked 1 Oct 2026
GovRAMP
Black Kite announced GovRAMP Authorization for its Third-Party Cyber Risk Intelligence platform in July 2026.checked 1 Oct 2026
Integrations
Official integrations include ServiceNow TPRM and ITSM, Aravo, LogicGate Risk Cloud, OneTrust, Archer, Splunk, Jira, Power BI, Slack, Zapier, Microsoft Teams and an MCP Server.checked 1 Oct 2026
Open standards
Black Kite grounds findings in open, auditable standards for traceable and explainable risk decisions.checked 1 Oct 2026
Ransomware prediction
The Ransomware Susceptibility Index is a predictive vendor-specific signal for ransomware susceptibility.checked 1 Oct 2026
SOC 2
Black Kite completed a SOC 2 Type 2 examination covering security, availability, confidentiality, processing integrity and privacy criteria.checked 1 Oct 2026
Threat intelligence
FocusTags map breaches, active exploits, CVEs and dark-web exposures directly to vendors in a portfolio.checked 1 Oct 2026
Vendor collaboration
Assess provides a shared workspace to share gaps, request remediation and track follow-up with vendors.checked 1 Oct 2026

The company

Headquarters
Boston, Massachusetts, United Stateschecked 28 Sep 2026

Alternatives to Black Kite Third-Party Cyber Risk

All alternatives
  1. 1UpGuard logo

    UpGuard

    Free planAndroidiOSWebAPI
    8.2From $1,750 a month
  2. 2
    6.9
  3. 3

    Riskonnect

    AndroidiOSWebAPI
    6.3
  4. 4SecurityScorecard Third-Party Risk Management logo
    6.3Free plan
  5. 5ThreatWatch logo

    ThreatWatch

    Free planWeb
    6.2Free plan
  6. 6

    Neotas

    WebAPI
    6.0