Black Kite Third-Party Cyber Risk vs Exiger Supply Chain Risk Management

Black Kite Third-Party Cyber Risk is a web platform for monitoring and assessing cyber risk across vendor portfolios and extended supply chains. It provides visibility from first-party posture through fifth-party exposure, flags suppliers, software products, and geographies as possible single points of failure, and maps downstream exposure. Black Kite Monitor continuously tracks vendor portfolios, while FocusTags connect breaches, active exploits, CVEs, and dark-web exposures to vendors. The Ransomware Susceptibility Index provides a predictive, vendor-specific signal. Black Kite Assess parses policies and compliance documents, mapping evidence to more than 25 global frameworks or a custom framework; its shared workspace supports gap sharing, remediation requests, and follow-up with vendors. The platform grounds findings in open, auditable standards, and Open FAIR-based analysis translates cyber posture into dollar-denominated exposure. It supports hybrid assessments, questionnaire libraries, framework mapping, evidence collection, and workflow automation. Official integrations include ServiceNow, Aravo, OneTrust, Splunk, Jira, Power BI, Slack, Zapier, Microsoft Teams, and others. Pricing is on request.

Exiger Supply Chain Risk Management is a web and API platform for mapping supply chains, monitoring risk, and connecting disruptions to affected parts and deliveries. 1Exiger.AI maps value chains and bills of materials from suppliers through parts and materials. Monitoring covers supplier, product, part, component, and risk data, using seven third-party and supply-chain risk dimensions with customizable weighting. Exiger says its engineering knowledge graph contains 10 billion supply-chain records, 400 million part attributes, and 6.5 million mapped relationships across more than 200 countries. The platform supports UFLPA, REACH, RoHS, ITAR, and other regulatory programs with audit-ready evidence. It detects signals involving logistics, supplier continuity, geopolitics, and materials, then links them to affected parts, programs, and deliveries. The API-first service offers hundreds of native integrations, open APIs, and an AI-driven ETL layer for ERP, PLM, and source-to-pay data. Supplier profiles receive numerical risk scores. Pricing is on request.