- Home
- Risk Intelligence Software
- Black Kite Third-Party Cyber Risk
Black Kite Third-Party Cyber Risk
Boston, Massachusetts, United States
What it is
Black Kite Third-Party Cyber Risk is a web platform for monitoring and assessing cyber exposure across vendors and extended supply chains. It provides visibility from first-party posture through fifth-party exposure, identifies suppliers, software products, and geographies that may be single points of failure, and maps how downstream risks can spread. Black Kite Monitor continuously tracks vendor portfolios, while FocusTags connect breaches, active exploits, CVEs, and dark-web exposures with vendors. The Ransomware Susceptibility Index offers a vendor-specific predictive signal. Black Kite Assess parses policies and compliance documents, maps evidence to more than 25 global frameworks or a custom framework, and provides a shared space for requesting remediation and tracking vendor follow-up. Open, auditable standards support traceable findings, while Open FAIR-based analysis expresses cyber exposure in dollar terms. The platform includes hybrid assessments, questionnaire libraries, framework mapping, evidence collection, and workflow automation. Official integrations include ServiceNow, Aravo, OneTrust, Archer, Splunk, Jira, Power BI, Slack, Zapier, Microsoft Teams, and others. Pricing is on request. Production customer data is stored and processed exclusively in US-based Google Cloud Platform regions.
For and against
For
- Maps exposure through fifth-party relationships
- Continuously monitors vendor portfolios
- Assess maps evidence to global or custom frameworks
- Shared workspace supports vendor remediation follow-up
- Includes workflow automation and evidence collection
Against
- Pricing is available on request
- Production customer data is confined to US-based GCP regions
The verdict
Black Kite brings continuous monitoring, supply-chain mapping, and vendor assessment into one web platform. Organizations considering it should weigh its US-only production data residency and request pricing details.
Who it suits
Black Kite may suit organizations that need to assess vendor portfolios and understand exposure beyond direct suppliers. Its framework mapping, evidence collection, and vendor collaboration tools are relevant to teams coordinating risk review and remediation.
Plans and prices
Enterprise
full-featured product · onboarding, enablement, configuration and environment tuning included · unlimited users
Read 1 Oct 2026 · blackkite.com
Standard
full-featured product · onboarding, enablement, configuration and environment tuning included · unlimited users
Read 1 Oct 2026 · blackkite.com
On the record
- AI assessments
- Black Kite Assess parses policies and compliance documents and maps evidence to more than 25 global frameworks or a custom framework.blackkite.com · read 1 Oct 2026
- Cascading risk
- Black Kite maps third-, fourth- and fifth-party exposure to show how downstream impact can travel through the supply chain.blackkite.com · read 1 Oct 2026
- Concentration risk
- The platform identifies suppliers, software products and geographies that represent single points of failure.blackkite.com · read 1 Oct 2026
- Continuous monitoring
- Black Kite Monitor continuously monitors vendor portfolios and provides real-time risk intelligence.blackkite.com · read 1 Oct 2026
- Data residency
- Production customer data is stored and processed exclusively in US-based Google Cloud Platform regions.blackkite.com · read 1 Oct 2026
- Extended supply-chain visibility
- Black Kite provides real-time visibility from first-party posture through fifth-party exposure across the extended supply chain.blackkite.com · read 1 Oct 2026
- Financial quantification
- Open FAIR-based analysis translates vendor and supply-chain cyber posture into dollar-denominated exposure.blackkite.com · read 1 Oct 2026
- GovRAMP
- Black Kite announced GovRAMP Authorization for its Third-Party Cyber Risk Intelligence platform in July 2026.blackkite.com · read 1 Oct 2026
- Integrations
- Official integrations include ServiceNow TPRM and ITSM, Aravo, LogicGate Risk Cloud, OneTrust, Archer, Splunk, Jira, Power BI, Slack, Zapier, Microsoft Teams and an MCP Server.blackkite.com · read 1 Oct 2026
- Open standards
- Black Kite grounds findings in open, auditable standards for traceable and explainable risk decisions.blackkite.com · read 1 Oct 2026
- Ransomware prediction
- The Ransomware Susceptibility Index is a predictive vendor-specific signal for ransomware susceptibility.blackkite.com · read 1 Oct 2026
- SOC 2
- Black Kite completed a SOC 2 Type 2 examination covering security, availability, confidentiality, processing integrity and privacy criteria.blackkite.com · read 1 Oct 2026
- Threat intelligence
- FocusTags map breaches, active exploits, CVEs and dark-web exposures directly to vendors in a portfolio.blackkite.com · read 1 Oct 2026
- Vendor collaboration
- Assess provides a shared workspace to share gaps, request remediation and track follow-up with vendors.blackkite.com · read 1 Oct 2026
