Black Kite Third-Party Cyber Risk vs Riskonnect

Black Kite Third-Party Cyber Risk is a web platform for monitoring and assessing cyber risk across vendor portfolios and extended supply chains. It provides visibility from first-party posture through fifth-party exposure, flags suppliers, software products, and geographies as possible single points of failure, and maps downstream exposure. Black Kite Monitor continuously tracks vendor portfolios, while FocusTags connect breaches, active exploits, CVEs, and dark-web exposures to vendors. The Ransomware Susceptibility Index provides a predictive, vendor-specific signal. Black Kite Assess parses policies and compliance documents, mapping evidence to more than 25 global frameworks or a custom framework; its shared workspace supports gap sharing, remediation requests, and follow-up with vendors. The platform grounds findings in open, auditable standards, and Open FAIR-based analysis translates cyber posture into dollar-denominated exposure. It supports hybrid assessments, questionnaire libraries, framework mapping, evidence collection, and workflow automation. Official integrations include ServiceNow, Aravo, OneTrust, Splunk, Jira, Power BI, Slack, Zapier, Microsoft Teams, and others. Pricing is on request.

Riskonnect connects risk data, intelligence and decisions across organizations through software for risk, compliance, claims and resilience. Its coverage includes governance, risk and compliance; insurable risk; and business continuity and resilience. Teams can conduct risk assessments, collect evidence, map controls, manage vendor risk and coordinate remediation workflows across frameworks such as ISO, NIST, GDPR, PCI, HIPAA, AICPA SOX, DORA and APRA CPS 230. The company describes the product as a cloud-based enterprise SaaS platform with configurable workflows, forms, dashboards and automations, along with integrated data and AI-powered risk intelligence. Users can access it on laptops, desktops, tablets and phones; 35 languages are available out of the box, with more than 90 available for customization. APIs support data import and export, and the company lists integrations with providers including Cube, Tenable, AlertMedia, Zurich, NCCI and AM Best. Pricing is on request and depends on project size, complexity and customization. Riskonnect was founded in 2007 and is headquartered in Atlanta, Georgia, United States.