Skip to content
SPECIFICTION
Get listed

Black Kite Third-Party Cyber Risk

blackkite.com

Web
Visit blackkite.com
Spec score 7.4 #5 of 23 in Risk Intelligence Software

What it is

Black Kite Third-Party Cyber Risk is a web platform for monitoring and assessing cyber risk across vendor portfolios and extended supply chains. It provides visibility from first-party posture through fifth-party exposure, flags suppliers, software products, and geographies as possible single points of failure, and maps downstream exposure. Black Kite Monitor continuously tracks vendor portfolios, while FocusTags connect breaches, active exploits, CVEs, and dark-web exposures to vendors. The Ransomware Susceptibility Index provides a predictive, vendor-specific signal. Black Kite Assess parses policies and compliance documents, mapping evidence to more than 25 global frameworks or a custom framework; its shared workspace supports gap sharing, remediation requests, and follow-up with vendors. The platform grounds findings in open, auditable standards, and Open FAIR-based analysis translates cyber posture into dollar-denominated exposure. It supports hybrid assessments, questionnaire libraries, framework mapping, evidence collection, and workflow automation. Official integrations include ServiceNow, Aravo, OneTrust, Splunk, Jira, Power BI, Slack, Zapier, Microsoft Teams, and others. Pricing is on request.

Spec sheet

Integrations
Official integrations include ServiceNow TPRM and ITSM, Aravo, LogicGate Risk Cloud, OneTrust, Archer, Splunk, Jira, Power BI, Slack, Zapier, Microsoft Teams and an MCP Server.Read 1 Oct 2026 · blackkite.com
Headquarters
Boston, Massachusetts, United StatesRead 28 Sep 2026 · blackkite.com
AI assessments
Black Kite Assess parses policies and compliance documents and maps evidence to more than 25 global frameworks or a custom framework.Read 1 Oct 2026 · blackkite.com
Cascading risk
Black Kite maps third-, fourth- and fifth-party exposure to show how downstream impact can travel through the supply chain.Read 1 Oct 2026 · blackkite.com
Concentration risk
The platform identifies suppliers, software products and geographies that represent single points of failure.Read 1 Oct 2026 · blackkite.com
Continuous monitoring
Black Kite Monitor continuously monitors vendor portfolios and provides real-time risk intelligence.Read 1 Oct 2026 · blackkite.com
Data residency
Production customer data is stored and processed exclusively in US-based Google Cloud Platform regions.Read 1 Oct 2026 · blackkite.com
Extended supply-chain visibility
Black Kite provides real-time visibility from first-party posture through fifth-party exposure across the extended supply chain.Read 1 Oct 2026 · blackkite.com
Financial quantification
Open FAIR-based analysis translates vendor and supply-chain cyber posture into dollar-denominated exposure.Read 1 Oct 2026 · blackkite.com
GovRAMP
Black Kite announced GovRAMP Authorization for its Third-Party Cyber Risk Intelligence platform in July 2026.Read 1 Oct 2026 · blackkite.com
Open standards
Black Kite grounds findings in open, auditable standards for traceable and explainable risk decisions.Read 1 Oct 2026 · blackkite.com
Ransomware prediction
The Ransomware Susceptibility Index is a predictive vendor-specific signal for ransomware susceptibility.Read 1 Oct 2026 · blackkite.com
SOC 2
Black Kite completed a SOC 2 Type 2 examination covering security, availability, confidentiality, processing integrity and privacy criteria.Read 1 Oct 2026 · blackkite.com
Threat intelligence
FocusTags map breaches, active exploits, CVEs and dark-web exposures directly to vendors in a portfolio.Read 1 Oct 2026 · blackkite.com
Vendor collaboration
Assess provides a shared workspace to share gaps, request remediation and track follow-up with vendors.Read 1 Oct 2026 · blackkite.com

Plans and prices

Enterprise Priced on request full-featured product · onboarding, enablement, configuration and environment tuning included · unlimited users Read 1 Oct 2026 · blackkite.com
Standard Priced on request full-featured product · onboarding, enablement, configuration and environment tuning included · unlimited users Read 1 Oct 2026 · blackkite.com

Every Black Kite Third-Party Cyber Risk plan and price →

Strong points and limits

Strong points

  • Visibility extends through fifth-party exposure.
  • Monitor provides continuous vendor portfolio monitoring.
  • Assess maps evidence to global or custom frameworks.
  • Open FAIR-based analysis expresses exposure in dollars.
  • Standard and Enterprise plans list unlimited users.

Limits

  • Pricing is available only on request.
  • The listed platform is web only.
  • Production customer data is stored and processed in US-based GCP regions.

Who it suits

It suits organizations that monitor vendor portfolios and need visibility into downstream supply-chain exposure. Teams assessing policies against frameworks or coordinating vendor remediation may use its listed Assess capabilities.

Verdict

Black Kite combines continuous monitoring, supply-chain exposure mapping, and document-based assessments with vendor collaboration. Pricing requires a request, and production data residency is limited to US-based Google Cloud Platform regions.

Where Specifiction places it

Alternatives to Black Kite Third-Party Cyber RiskAll alternatives →