Black Kite Third-Party Cyber Risk vs ThreatWatch

Black Kite Third-Party Cyber Risk is a web platform for monitoring and assessing cyber risk across vendor portfolios and extended supply chains. It provides visibility from first-party posture through fifth-party exposure, flags suppliers, software products, and geographies as possible single points of failure, and maps downstream exposure. Black Kite Monitor continuously tracks vendor portfolios, while FocusTags connect breaches, active exploits, CVEs, and dark-web exposures to vendors. The Ransomware Susceptibility Index provides a predictive, vendor-specific signal. Black Kite Assess parses policies and compliance documents, mapping evidence to more than 25 global frameworks or a custom framework; its shared workspace supports gap sharing, remediation requests, and follow-up with vendors. The platform grounds findings in open, auditable standards, and Open FAIR-based analysis translates cyber posture into dollar-denominated exposure. It supports hybrid assessments, questionnaire libraries, framework mapping, evidence collection, and workflow automation. Official integrations include ServiceNow, Aravo, OneTrust, Splunk, Jira, Power BI, Slack, Zapier, Microsoft Teams, and others. Pricing is on request.

ThreatWatch is a web-based platform for monitoring third-party vendor risk. It tracks breaches, dark-web exposure, attack-surface vulnerabilities, and compliance gaps, then assigns each vendor an A-to-F grade using threat intelligence, security scanning, questionnaire responses, and certifications. A passive, outside-in free scan requires no signup or credit card and returns a grade in about 30 seconds. The catalogue contains 280,770 companies searchable by name, domain, or alias. Vendor staff devices are re-checked hourly, while leaked credentials are re-checked daily. Vulnerability matching is included on every plan, but ThreatWatch confirms a vulnerability only when it can read the exact software version. Alerts can be sent to Slack, Microsoft Teams, Jira, ServiceNow, PagerDuty, email, the app, or a generic webhook. Compliance AI supports PCI-DSS, ISO 27001, SOC 2, HIPAA, GDPR, and NIST CSF questionnaires, plus custom frameworks. AI Co-Pilot and Ask AI are available from Professional and above; proposed changes require human approval. A free plan is listed, and paid plan prices are on request.