What does Black Kite sell?

Black Kite sells Cyber Risk Quantification, Ransomware Threat Intelligence, Vendor Risk Monitoring, Black Kite Extend, Vendor Risk Assessment and Vendor Compliance Management. Cyber Risk Quantification: Translates technical cyber risk into financial terms. Ransomware Threat Intelligence: Connects ransomware intelligence to vendor risk through the Ransomware Susceptibility Index. Vendor Risk Monitoring: Continuous monitoring of vendor cyber risk. Black Kite Extend: Maps fourth- and fifth-party relationships through automated supply chain mapping.

How does CISO Tribune file Black Kite?

CISO Tribune files Black Kite under Third-party risk and security ratings, with Cyber risk quantification as a secondary category.

Where is Black Kite headquartered?

Black Kite is headquartered in Boston, United States.

When was Black Kite founded?

Black Kite was founded in 2016.

Company record · security vendor

Black Kite

Where Black Kite appears on the record (41)

Every page on CISO Tribune and its network that carries this company, 41 in all.

Compared with (39): vs Anecdotes, vs Apptega, vs Archer, vs Attaxion, vs Bitsight, vs Copla, vs CyberSaint, vs Cynomi, vs Dataminr, vs Drata, vs Fortified Health Security, vs Hilt, vs Hyperproof, vs iCOUNTER, vs Kovrr, vs LogicGate, vs MetricStream, vs OneTrust, vs Onspring, vs Optro, vs Osano, vs Panorays, vs Prevalent, vs Recorded Future, vs RegScale, vs RiskRecon, vs Safe Security, vs Scrut Automation, vs Scytale, vs Secureframe, vs SecurityScorecard, vs SOCRadar, vs Sprinto, vs Third Wave Innovations, vs Thoropass, vs UpGuard, vs Vanta, vs Vodafone, vs Whistic
In the vendor directory (2): Third-party risk and security ratings vendors · primary category
Cyber risk quantification vendors · category

What the company sells

Black Kite sells an AI-native third-party cyber risk management platform. Black Kite continuously monitors millions of organizations worldwide, giving customers visibility across their entire vendor ecosystem, extending to nth parties. Black Kite helps organizations uncover risks that would otherwise remain hidden across their extended supply chain.

Black Kite describes third party risk management as a way to understand, govern, and act on risk introduced by vendors and suppliers. Black Kite says most third party risk programs were built around questionnaires, annual reviews, and blackbox scores that nobody can fully explain. Annual questionnaires and periodic reviews become outdated quickly and fail to reflect how risk changes between assessments. Risk, security, procurement, and compliance often operate in parallel rather than together. Black Kite helps organizations move beyond point-in-time scores and annual reviews toward ongoing risk visibility and collaborative remediation.

Black Kite gives always-on visibility into vendor risk, with intelligence on adversary targeting, ransomware susceptibility, active cyber events, and financial exposure. Black Kite's AI parses vendor documents, extracts relevant evidence, and maps controls across frameworks. Black Kite identifies vendors impacted by critical vulnerabilities, breaches, and other active exposures. Black Kite says autonomous monitoring and predictive intelligence reveal risks as they emerge, and that vendors can then be engaged through The Bridge to close the loop on risk remediation.

Black Kite Extend identifies fourth- and fifth-party relationships through automated supply chain mapping. Black Kite Extend covers Nth-party mapping, geopolitical monitoring, threat actor tracking, and product-level risk analysis in one package. Black Kite Extend gives teams the depth of visibility that modern SCRM requires.

Black Kite applies Open FAIR to vendor and supply chain risk scenarios, translating a vendor's cyber posture into dollar-denominated exposure. Black Kite's Cyber Risk Quantification translates technical cyber risk into financial terms. Black Kite automatically estimates probable financial impact across ransomware, data breach, and business interruption scenarios. Black Kite's Ransomware Susceptibility Index predicts the likelihood of a vendor being hit by ransomware before an attack occurs. When a major breach, ransomware attack, or active exploitation of a vulnerability occurs, Black Kite FocusTags are automatically applied to affected vendors in a customer's portfolio.

Black Kite delivers AI-powered vendor risk assessments that provide security insights in hours, not weeks. AI-powered document parsing analyzes vendor security policies, SOC 2 reports, and trust center artifacts in minutes, not weeks. The Black Kite Bridge replaces email sprawl with centralized vendor collaboration. Black Kite delivers continuous vendor risk monitoring that keeps pace with a customer's business and the complexity of its supply chain. Black Kite Intelligence tracks ransomware campaigns, credential leaks, active exploitation, and high-impact zero-days. For vendor risk response, Black Kite delivers cyber risk intelligence and collaboration tools that turn vendor risk findings into resolved issues. Black Kite simplifies vendor compliance management with continuous cyber risk monitoring, automated framework assessments, and centralized reporting that demonstrates ongoing oversight to regulators and auditors. Black Kite integrates with existing GRC platforms, including ServiceNow and LogicGate.

Black Kite maps the cyber risk posture of entire supplier ecosystems, including the Nth-party relationships many organizations lack visibility into. According to Black Kite's research, every supplier breach now claims an average of 5.28 downstream victim organizations. Black Kite says AI has been foundational to its platform since day one, transforming billions of external risk signals into actionable intelligence. Black Kite's AI analyzes data from thousands of sources, including OSINT, dark web and hacker forums, and vulnerability data. Black Kite lets customers connect their own AI agents and orchestration toolchains to its platform and data. Black Kite has an open API and native integrations. Black Kite's open-standards methodology produces findings that are traceable and documented, supporting the requirements of DORA, SEC cyber disclosure rules, and the audit frameworks enterprise risk programs operate under.

Black Kite names GRC managers, CISOs, third-party risk teams and security operations teams as groups its approach serves. Black Kite says its platform is relied on across finance, healthcare, retail, government, and manufacturing. Organizations across financial services, healthcare, and technology rely on Black Kite's continuous monitoring. BK Labs is Black Kite's research and innovation organization. BK Labs analyzes ransomware, threat actors, and supply chain risk across more than 40 million organizations. BK Labs is led by Candan Bolukbas, Black Kite CTO and co-founder, and Dr Ferhat Dikbiyik, Chief Research and Intelligence Officer.^{[1][6][7][8][9][10][11][12][13][14][15][16]}

Categories: Third-party risk and security ratings (primary category)
Cyber risk quantification
Compare Black Kite with companies in the same category
Headquarters: Boston, United States^[2]
Founded: 2016^[3]
Ownership: Not established from our sources
CISO on record: Not yet on our record. Send a verified source
Website: blackkite.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

Cyber Risk Quantification^[1][4][10]
Translates technical cyber risk into financial terms.
Black Kite's Cyber Risk Quantification translates technical cyber risk into financial terms. Black Kite automatically estimates probable financial impact across ransomware, data breach, and business interruption scenarios. CRQ uses standards-based frameworks like Open FAIR to calculate financial impact.
Ransomware Threat Intelligence^[4][12]
Connects ransomware intelligence to vendor risk through the Ransomware Susceptibility Index.
Black Kite connects ransomware threat intelligence to a third-party risk program through the Ransomware Susceptibility Index. FocusTags are automatically applied to affected vendors when a major breach, ransomware attack, or active exploitation of a vulnerability occurs. Black Kite continuously tracks what ransomware operators and threat actors are discussing, planning, and claiming across leak sites, Telegram channels, and dark web forums.
Vendor Risk Monitoring^[4][8]
Continuous monitoring of vendor cyber risk.
Black Kite delivers continuous vendor risk monitoring that keeps pace with a customer's business and the complexity of its supply chain. Black Kite Intelligence tracks ransomware campaigns, credential leaks, active exploitation, and high-impact zero-days.
Black Kite Extend^[4][8][9]
Maps fourth- and fifth-party relationships through automated supply chain mapping.
Black Kite Extend identifies fourth- and fifth-party relationships through automated supply chain mapping. Black Kite Extend covers Nth-party mapping, geopolitical monitoring, threat actor tracking, and product-level risk analysis in one package.
Vendor Risk Assessment^[4][13]
AI-powered vendor risk assessments.
Black Kite delivers AI-powered vendor risk assessments that provide security insights in hours, not weeks. AI-powered document parsing analyzes vendor security policies, SOC 2 reports, and trust center artifacts in minutes, not weeks. The Black Kite Bridge replaces email sprawl with centralized vendor collaboration.
Vendor Compliance Management^[15]
Continuous monitoring, framework assessments and reporting for vendor compliance.
Black Kite simplifies vendor compliance management with continuous cyber risk monitoring, automated framework assessments, and centralized reporting that demonstrates ongoing oversight to regulators and auditors. Black Kite integrates with existing GRC platforms, including ServiceNow and LogicGate.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Black Kite's categories, then alphabetical. A list from the record, never a ranking.

On third-party risk and security ratings, Black Kite competes with Bitsight, iCOUNTER, Panorays, Prevalent, RiskRecon, SecurityScorecard, UpGuard, Whistic, CyberSaint, Cynomi and 28 more.
On cyber risk quantification, Black Kite competes with CyberSaint, Kovrr, Safe Security, Cynomi and Dataminr.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

G2 · 5.0 out of 5 · 1 review^[5]seen November 4, 2026

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

[1]blackkite.comBlack Kite · blackkite.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
[2]Cyber risk ratings leader normshield rebrands to black kite 301205147Black Kite via PR Newswire · prnewswire.com · published January 11, 2021 · Tier A: the company, a regulator or a filing
[3]About Black Kite | TPCRM PioneersBlack Kite · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
[4]Black Kite | Standards-Based Third-Party Cyber Risk ManagementBlack Kite · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
[5]Black Kite Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 23, 2026 · Tier C
[6]Third-Party Risk Management (TPRM) Solutions | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[7]Cyber Risk Management Platform | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[8]Vendor Risk Monitoring Solutions | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[9]Supply Chain Cyber Risk Management | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[10]Cyber Risk Quantification (CRQ) Solutions | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[11]Financial Impact of Cyber Risk | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[12]Ransomware Threat Intelligence for Your Vendors | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[13]How to Evaluate Vendors and Reduce Cyber Risk | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[14]Vendor Risk Response & Remediation | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[15]Vendor Compliance Management | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[16]BK Labs is Black Kite's research and innovation organizationBlack Kite · undated page, accessed November 4, 2026 · Tier A: the company, a regulator or a filing
[17]Black Kite Announces New Integration with CrowdStrike Falcon Next-Gen SIEMBlack Kite · published November 2, 2026 · Tier A: the company, a regulator or a filing
[18]Black Kite Introduces Quantum Readiness for Third-Party Cyber Risk ManagementBlack Kite · published October 21, 2026 · Tier A: the company, a regulator or a filing
[19]Black Kite’s Manufacturing & Distribution Ransomware Report 2026 Confirms Manufacturing Remains #1 TargetBlack Kite · published September 17, 2026 · Tier A: the company, a regulator or a filing
[20]Black Kite Research Reveals That Ransomware's Primary Target Is the Mid-Market, Not Enterprises as Widely AssumedBlack Kite · published August 18, 2026 · Tier A: the company, a regulator or a filing
[21]Black Kite Appoints Data Protection Veteran Jim Clancy as Strategic AdvisorBlack Kite · published July 28, 2026 · Tier A: the company, a regulator or a filing

Last verified November 2, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 4, 2026 from the references above.

Work for Black Kite? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Security leadership

CISO Tribune has not yet recorded who holds the top security seat at Black Kite. We add a seat only from a verified source; if you have one, send it to the desk.

Questions CISOs ask about Black Kite

What does Black Kite sell?: Black Kite sells Cyber Risk Quantification, Ransomware Threat Intelligence, Vendor Risk Monitoring, Black Kite Extend, Vendor Risk Assessment and Vendor Compliance Management. Cyber Risk Quantification: Translates technical cyber risk into financial terms. Ransomware Threat Intelligence: Connects ransomware intelligence to vendor risk through the Ransomware Susceptibility Index. Vendor Risk Monitoring: Continuous monitoring of vendor cyber risk. Black Kite Extend: Maps fourth- and fifth-party relationships through automated supply chain mapping.
Who does Black Kite fit?: From its own pages, Black Kite sells mainly to organizations running third-party and supply chain cyber risk programs. It names GRC managers, CISOs, third-party risk teams and security operations teams as groups it serves. It says finance, healthcare, retail, government, and manufacturing organizations rely on it. It describes its approach as designed for enterprise-scale third-party ecosystems, and its supply chain material refers to global manufacturing supply chains, wholesale and retail networks, and public sector supplier portfolios.
How does CISO Tribune file Black Kite?: CISO Tribune files Black Kite under Third-party risk and security ratings, with Cyber risk quantification as a secondary category.
Where is Black Kite headquartered?: Black Kite is headquartered in Boston, United States.
When was Black Kite founded?: Black Kite was founded in 2016.

Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.