Black Kite Third-Party Cyber Risk vs UpGuard

Black Kite Third-Party Cyber Risk is a web platform for monitoring and assessing cyber risk across vendor portfolios and extended supply chains. It provides visibility from first-party posture through fifth-party exposure, flags suppliers, software products, and geographies as possible single points of failure, and maps downstream exposure. Black Kite Monitor continuously tracks vendor portfolios, while FocusTags connect breaches, active exploits, CVEs, and dark-web exposures to vendors. The Ransomware Susceptibility Index provides a predictive, vendor-specific signal. Black Kite Assess parses policies and compliance documents, mapping evidence to more than 25 global frameworks or a custom framework; its shared workspace supports gap sharing, remediation requests, and follow-up with vendors. The platform grounds findings in open, auditable standards, and Open FAIR-based analysis translates cyber posture into dollar-denominated exposure. It supports hybrid assessments, questionnaire libraries, framework mapping, evidence collection, and workflow automation. Official integrations include ServiceNow, Aravo, OneTrust, Splunk, Jira, Power BI, Slack, Zapier, Microsoft Teams, and others. Pricing is on request.

UpGuard is a cloud platform for managing cyber risk across an organization’s vendors, digital footprint, and workforce. Vendor Risk supplies continuous vendor insights, assessments, and AI-powered workflows. Attack Surface Management monitors an organization’s digital footprint to help detect threats, while Trust Exchange provides questionnaire automation, a Trust Page, and collaboration features. The platform supports remediation tracking and advanced risk prioritization, with access through web and API. Listed integrations include Jira Cloud, Slack, and ServiceNow, plus connections to more than 4,000 apps through Zapier. Vendor Risk tiers list API access and SSO. Standard covers 50 vendors; Enterprise+ includes unlimited vendors and platform users. The free plan is available, and paid plans start at $250/mo. Standard is listed at $1,750 a month when billed annually. UpGuard says customer data is encrypted at rest and in transit, and its security program aligns with ISO/IEC 27001; it also reports SOC 2 Type II compliance and annual attestation.