
Black Kite Third-Party Cyber Risk
Black Kite Third-Party Cyber Risk is a web platform for monitoring and assessing cyber risk across vendor portfolios and extended supply chains.
What Black Kite Third-Party Cyber Risk is
Black Kite Third-Party Cyber Risk is a web platform for monitoring and assessing cyber risk across vendor portfolios and extended supply chains. It provides visibility from first-party posture through fifth-party exposure, identifies concentration risks, and maps how downstream impacts can travel through suppliers. Black Kite Monitor continuously tracks vendor portfolios, while FocusTags link breaches, active exploits, CVEs, and dark-web exposures to vendors. Its Ransomware Susceptibility Index provides a vendor-specific predictive signal. Black Kite Assess parses policies and compliance documents, mapping evidence to more than 25 global frameworks or a custom framework; its shared workspace supports remediation requests and vendor follow-up. The platform grounds findings in open, auditable standards, and Open FAIR-based analysis translates cyber posture into dollar-denominated exposure. It offers hybrid assessments, questionnaire libraries, framework mapping, evidence collection, and workflow automation. Official integrations include ServiceNow TPRM and ITSM, Aravo, LogicGate Risk Cloud, OneTrust, Archer, Splunk, Jira, Power BI, Slack, Zapier, Microsoft Teams, and an MCP Server. Pricing is available on request. Production customer data is stored and processed exclusively in US-based Google Cloud Platform regions.
Good
- Maps exposure through fifth-party relationships.
- Continuously monitors vendor portfolios.
- Maps evidence to more than 25 global frameworks or a custom one.
- Provides a shared workspace for vendor remediation follow-up.
- Offers hybrid assessments, evidence collection, and workflow automation.
Watch out
- Pricing is available on request.
- Production customer data is confined to US-based Google Cloud Platform regions.
Who it suits
It may suit organizations managing cyber risk across vendor portfolios and extended supply chains. Teams needing document assessments, vendor follow-up, and links to risk-management tools may find its assessment and integration features relevant.
Verdict
Black Kite combines ongoing vendor monitoring with assessments, supply-chain visibility, and vendor remediation workflows. Consider its US-only production data residency and request pricing to assess whether it fits your requirements.
Plans and prices
From Black Kite Third-Party Cyber Risk's own pricing page, checked 1 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Enterprise | Priced on request | full-featured product · onboarding, enablement, configuration and environment tuning included · unlimited users |
| Standard | Priced on request | full-featured product · onboarding, enablement, configuration and environment tuning included · unlimited users |
The facts
Each one read from Black Kite Third-Party Cyber Risk's own pages, with the date it was checked.
What it does
- AI assessments
- Black Kite Assess parses policies and compliance documents and maps evidence to more than 25 global frameworks or a custom framework.checked 1 Oct 2026
- Cascading risk
- Black Kite maps third-, fourth- and fifth-party exposure to show how downstream impact can travel through the supply chain.checked 1 Oct 2026
- Concentration risk
- The platform identifies suppliers, software products and geographies that represent single points of failure.checked 1 Oct 2026
- Continuous monitoring
- Black Kite Monitor continuously monitors vendor portfolios and provides real-time risk intelligence.checked 1 Oct 2026
- Data residency
- Production customer data is stored and processed exclusively in US-based Google Cloud Platform regions.checked 1 Oct 2026
- Extended supply-chain visibility
- Black Kite provides real-time visibility from first-party posture through fifth-party exposure across the extended supply chain.checked 1 Oct 2026
- Financial quantification
- Open FAIR-based analysis translates vendor and supply-chain cyber posture into dollar-denominated exposure.checked 1 Oct 2026
- GovRAMP
- Black Kite announced GovRAMP Authorization for its Third-Party Cyber Risk Intelligence platform in July 2026.checked 1 Oct 2026
- Integrations
- Official integrations include ServiceNow TPRM and ITSM, Aravo, LogicGate Risk Cloud, OneTrust, Archer, Splunk, Jira, Power BI, Slack, Zapier, Microsoft Teams and an MCP Server.checked 1 Oct 2026
- Open standards
- Black Kite grounds findings in open, auditable standards for traceable and explainable risk decisions.checked 1 Oct 2026
- Ransomware prediction
- The Ransomware Susceptibility Index is a predictive vendor-specific signal for ransomware susceptibility.checked 1 Oct 2026
- SOC 2
- Black Kite completed a SOC 2 Type 2 examination covering security, availability, confidentiality, processing integrity and privacy criteria.checked 1 Oct 2026
- Threat intelligence
- FocusTags map breaches, active exploits, CVEs and dark-web exposures directly to vendors in a portfolio.checked 1 Oct 2026
- Vendor collaboration
- Assess provides a shared workspace to share gaps, request remediation and track follow-up with vendors.checked 1 Oct 2026
The company
- Headquarters
- Boston, Massachusetts, United Stateschecked 28 Sep 2026
Alternatives to Black Kite Third-Party Cyber Risk
- 1

UpGuard
Free planAndroidiOSWebAPI8.2From $1,750 a month - 2
Qualys Enterprise TruRisk Platform
AndroidiOSWebAPI6.9 - 3
Riskonnect
AndroidiOSWebAPI6.3 - 4

SecurityScorecard Third-Party Risk Management
Free planWebAPI6.3Free plan - 5

ThreatWatch
Free planWeb6.2Free plan - 6
Neotas
WebAPI6.0
