Vendor comparison · 4 companies

Bitsight, Black Kite, iCOUNTER and Whistic

Change the companies

Up to four companies side by side.

Bitsight
Black Kite
iCOUNTER
Whistic

Four is the most one page holds. Remove or swap a company to add another.

Swipe the table sideways to see every company.

Bitsight, Black Kite, iCOUNTER and Whistic Compared
What it sells
	BitsightBitsight delivers a map of assets and vulnerabilities across an enterprise and its supply chain, prioritized by real-time threat intelligence.bitsight.com	Black KiteBlack Kite sells an AI-native third-party cyber risk management platform.blackkite.com	iCOUNTERIn real time, iCOUNTER detects the active threats targeting a customer's vendors, suppliers, MSPs, SaaS providers, partners, and broader digital ecosystem.icounter.com	WhisticWhistic sells a platform that includes Assess, Vendor Monitoring, Compliance, and Trust Center, supported by the Trust Center Exchange, Whistic AI, and Automation Orchestrator.whistic.com
What it sells	Vendor Risk Management^[5]Helps risk and security teams manage a growing vendor portfolio. Continuous Monitoring^[6][11]Delivers daily insight into vendors and their vendors. Security Ratings^[2][7]Gives an objective, outside-in measure of supplier cybersecurity performance. Attack Surface Intelligence^[2][8]Combines external attack surface intelligence and AI-driven threat intelligence. Cyber Threat Intelligence^[2][9]Delivers threat intelligence through the platform and APIs. Supply Chain Exposure Management^[2][11]Monitors third-party vendors and sends evidence-backed threat alerts. Third-Party Intelligence^[7]Brings supplier security posture and live threat intelligence together.	Cyber Risk Quantification^[1][4][10]Translates technical cyber risk into financial terms. Ransomware Threat Intelligence^[4][12]Connects ransomware intelligence to vendor risk through the Ransomware Susceptibility Index. Vendor Risk Monitoring^[4][8]Continuous monitoring of vendor cyber risk. Black Kite Extend^[4][8][9]Maps fourth- and fifth-party relationships through automated supply chain mapping. Vendor Risk Assessment^[4][13]AI-powered vendor risk assessments. Vendor Compliance Management^[15]Continuous monitoring, framework assessments and reporting for vendor compliance.	CTOS (Counter Threat Operating System)^[9]A cybersecurity platform that connects intelligence collection, risk determination, enterprise context, and counter-threat operations in one architecture.	Assess^[3][5][8]Maps vendor evidence to a customer's controls to reach a risk decision. Automation Orchestrator^[3][5]Coordinates specialized workflow agents inside Assess. Whistic AI^[3][5][6][7]Reads vendor evidence and maps it to customer controls.
Categories
Categories	Third-party risk and security ratings (primary category) External attack surface management Threat intelligence Vulnerability management	Third-party risk and security ratings (primary category) Cyber risk quantification	Third-party risk and security ratings (primary category) Digital risk protection Fraud prevention	Third-party risk and security ratings (primary category)
Headquarters
Headquarters	Not stated on its pages	Boston, United States^[2]	Not stated on its pages	United States^[2]
Founded
Founded	Not stated on its pages	2016^[3]	2020^[2][7]	2015^[2][6]
Ownership and funding
Ownership and funding	Not stated on its pages	Not stated on its pages	Not stated on its pages	Not stated on its pages
Named customers
Named customers	Not stated on its pages	Not stated on its pages	Not stated on its pages	Not stated on its pages
Recent news
Recent news	March 19, 2026Bitsight introduced Bitsight Security Posture Management, designed to help organizations measure, improve and demonstrate cyber resilience.^[15] February 10, 2026Bitsight announced Dark Web Intelligence for Supply Chains, a capability for detecting and responding to threats across vendor ecosystems.^[14]	November 2, 2026Black Kite announced a new integration with CrowdStrike that delivers third-party vendor risk intelligence into CrowdStrike Falcon Next-Gen SIEM.^[17] October 21, 2026Black Kite announced the release of Quantum Readiness, a new set of controls in the SSL/TLS Strength category of its Cyber Rating.^[18] September 17, 2026Black Kite released its 2026 Manufacturing & Distribution Ransomware Report.^[19] August 18, 2026Black Kite released a report on mid-market organizations covering ransomware, third-party risk and the AI gap.^[20] July 28, 2026Black Kite appointed Jim Clancy as a Strategic Advisor.^[21]	Not stated on its pages	Not stated on its pages
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: listed, seen November 10, 2026^[16] Gartner Peer Insights: Not stated on its pages	G2: listed, seen November 4, 2026^[5] Gartner Peer Insights: Not stated on its pages	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages	G2: listed, seen November 4, 2026^[4] Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	Not written yet	From its own pages, Black Kite sells mainly to organizations running third-party and supply chain cyber risk programs. It names GRC managers, CISOs, third-party risk teams and security operations teams as groups it serves. It says finance, healthcare, retail, government, and manufacturing organizations rely on it. It describes its approach as designed for enterprise-scale third-party ecosystems, and its supply chain material refers to global manufacturing supply chains, wholesale and retail networks, and public sector supplier portfolios.	From its own pages, iCOUNTER sells CTOS mainly to enterprises and public sector organizations with complex third party ecosystems, naming CISOs, third-party risk managers, security operations teams, and compliance officers as the buyer roles. Our reading is that CTOS is pitched to organizations that already run a third-party program and security tools, which CTOS complements. The ecosystems in scope include critical third parties, technology providers, supply-chain partners, and subsidiaries.	From its own pages, Whistic sells mainly to risk management and InfoSec teams that assess vendors, and to vendors that answer customer security reviews. Whistic says organizations can begin with the products that address their immediate needs. Whistic says teams already using it for third-party risk can manage internal controls in the same platform.
Last verified
Last verified	November 2, 2026	November 2, 2026	September 27, 2026	November 9, 2026

About Bitsight

Bitsight delivers a map of assets and vulnerabilities across an enterprise and its supply chain, prioritized by real-time threat intelligence. Bitsight serves both security operations and risk teams across the enterprise. Bitsight scans over 4B+ IPs to discover assets, subsidiaries, cloud environments, and supply chain exposure across connected digital infrastructure. Bitsight predicts the likelihood that a CVE will be exploited using real-time threat intelligence from 7M+ daily items across 1,000+ underground sources. Bitsight identifies compromised credentials, discovers ransomware and active exploits, and prioritizes remediation based on attacker activity from 1,000+ underground sources.^[2][3]

Bitsight monitors third-, fourth-, and nth-party exposure across a network of 68K+ vendors. Bitsight Vendor Risk Management lets teams review uploaded documents in one place, including SOC 2 and ISO 27001 certifications, SIG questionnaires, insurance, and external audits. Bitsight Vendor Risk Management syncs data with GRC and reporting tools, including RSA Archer, ServiceNow, and LogicManager, through an open API.^{[2][3][5][11]}

Bitsight Continuous Monitoring delivers daily, objective insight into vendors and their vendors. Bitsight Vulnerability Detection & Response surfaces exposed vendors within hours and helps coordinate cross-vendor response at scale. Bitsight gives vendors free access to Trust Management Hub so that vendors can reach their profiles. Bitsight professional services range from program design aligned to NIST CSF, ISO 27001, DORA, and NIS2 to managed vendor assessments and board-ready reporting.^[4][6]

Bitsight AI maps vendor SOC 2 reports, audit reports, and questionnaires to the frameworks teams already use, tracking vendor exposure across the supply chain. SOC2 Instant Insights, powered by Bitsight AI, summarizes SOC 2 reports in seconds. Bitsight Third-Party Intelligence brings supplier security posture and live threat intelligence together in one place. Bitsight Third-Party Intelligence monitors ransomware, data breaches, hacktivism, and cyber news affecting suppliers.^[5][7]

Bitsight describes Attack Surface Intelligence (ASI) as an evolution of External Attack Surface Management (EASM) that combines continuous asset discovery with real-time threat intelligence from the clear, deep, and dark web.^[2]

Bitsight tracks 700+ ATP groups, 4,000+ malware types, 95M threat actors, 6M unique IOCs, and 1B compromised credentials weekly. Bitsight delivers cyber threat intelligence in structured formats through the platform and APIs. Bitsight supports STIX/TAXII and offers simplified, integration-ready data structures designed to fit into operational workflows and dashboards. The Identity Intelligence Module lets teams automatically reset or disable exposed accounts through native identity provider integrations (Active Directory, Okta, Entra ID). Bitsight threat intelligence services include purchases of compromised credentials listed for sale on the deep and dark web.^[2][9]

Bitsight Beacon is Bitsight's Supply Chain Exposure Management data solution that continuously monitors third-party vendors and provides triaged, evidence-backed threat alerts for supply chain exposures. Bitsight Beacon alerts are delivered directly into SIEM and SOAR. Bitsight Beacon covers more than 30 threat scenarios. Optional managed services for Bitsight Beacon handle triage and vendor remediation. Bitsight Continuous Monitoring tracks vendor risk posture over time, and Bitsight Beacon detects active threats in near real-time.^[2][6][11]

Bitsight SPM integrates with tools like ServiceNow, Palo Alto Cortex, Splunk, PowerBI, and Microsoft Sentinel. Bitsight is a SaaS platform that is 100% cloud-based in Amazon Web Services. Bitsight is headquartered in the U.S., and all personal data is hosted in the United States. Bitsight complies with the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. Data Privacy Framework. Bitsight has a report on Controls at a Service Organization Relevant to Security available for review.^{[1][4][5][6][7][12]}

Bitsight on the record

About Black Kite

Black Kite sells an AI-native third-party cyber risk management platform. Black Kite continuously monitors millions of organizations worldwide, giving customers visibility across their entire vendor ecosystem, extending to nth parties. Black Kite helps organizations uncover risks that would otherwise remain hidden across their extended supply chain.^[1]

Black Kite describes third party risk management as a way to understand, govern, and act on risk introduced by vendors and suppliers. Black Kite says most third party risk programs were built around questionnaires, annual reviews, and blackbox scores that nobody can fully explain. Annual questionnaires and periodic reviews become outdated quickly and fail to reflect how risk changes between assessments. Risk, security, procurement, and compliance often operate in parallel rather than together. Black Kite helps organizations move beyond point-in-time scores and annual reviews toward ongoing risk visibility and collaborative remediation.^[6]

Black Kite gives always-on visibility into vendor risk, with intelligence on adversary targeting, ransomware susceptibility, active cyber events, and financial exposure. Black Kite's AI parses vendor documents, extracts relevant evidence, and maps controls across frameworks. Black Kite identifies vendors impacted by critical vulnerabilities, breaches, and other active exposures. Black Kite says autonomous monitoring and predictive intelligence reveal risks as they emerge, and that vendors can then be engaged through The Bridge to close the loop on risk remediation.^[1][7]

Black Kite Extend identifies fourth- and fifth-party relationships through automated supply chain mapping. Black Kite Extend covers Nth-party mapping, geopolitical monitoring, threat actor tracking, and product-level risk analysis in one package. Black Kite Extend gives teams the depth of visibility that modern SCRM requires.^[8][9]

Black Kite applies Open FAIR to vendor and supply chain risk scenarios, translating a vendor's cyber posture into dollar-denominated exposure. Black Kite's Cyber Risk Quantification translates technical cyber risk into financial terms. Black Kite automatically estimates probable financial impact across ransomware, data breach, and business interruption scenarios. Black Kite's Ransomware Susceptibility Index predicts the likelihood of a vendor being hit by ransomware before an attack occurs. When a major breach, ransomware attack, or active exploitation of a vulnerability occurs, Black Kite FocusTags are automatically applied to affected vendors in a customer's portfolio.^{[1][6][7][10][11][12]}

Black Kite delivers AI-powered vendor risk assessments that provide security insights in hours, not weeks. AI-powered document parsing analyzes vendor security policies, SOC 2 reports, and trust center artifacts in minutes, not weeks. The Black Kite Bridge replaces email sprawl with centralized vendor collaboration. Black Kite delivers continuous vendor risk monitoring that keeps pace with a customer's business and the complexity of its supply chain. Black Kite Intelligence tracks ransomware campaigns, credential leaks, active exploitation, and high-impact zero-days. For vendor risk response, Black Kite delivers cyber risk intelligence and collaboration tools that turn vendor risk findings into resolved issues. Black Kite simplifies vendor compliance management with continuous cyber risk monitoring, automated framework assessments, and centralized reporting that demonstrates ongoing oversight to regulators and auditors. Black Kite integrates with existing GRC platforms, including ServiceNow and LogicGate.^{[8][13][14][15]}

Black Kite maps the cyber risk posture of entire supplier ecosystems, including the Nth-party relationships many organizations lack visibility into. According to Black Kite's research, every supplier breach now claims an average of 5.28 downstream victim organizations. Black Kite says AI has been foundational to its platform since day one, transforming billions of external risk signals into actionable intelligence. Black Kite's AI analyzes data from thousands of sources, including OSINT, dark web and hacker forums, and vulnerability data. Black Kite lets customers connect their own AI agents and orchestration toolchains to its platform and data. Black Kite has an open API and native integrations. Black Kite's open-standards methodology produces findings that are traceable and documented, supporting the requirements of DORA, SEC cyber disclosure rules, and the audit frameworks enterprise risk programs operate under.^[6][7][9]

Black Kite names GRC managers, CISOs, third-party risk teams and security operations teams as groups its approach serves. Black Kite says its platform is relied on across finance, healthcare, retail, government, and manufacturing. Organizations across financial services, healthcare, and technology rely on Black Kite's continuous monitoring. BK Labs is Black Kite's research and innovation organization. BK Labs analyzes ransomware, threat actors, and supply chain risk across more than 40 million organizations. BK Labs is led by Candan Bolukbas, Black Kite CTO and co-founder, and Dr Ferhat Dikbiyik, Chief Research and Intelligence Officer.^{[6][7][8][9][12][16]}

Black Kite on the record

About iCOUNTER

In real time, iCOUNTER detects the active threats targeting a customer's vendors, suppliers, MSPs, SaaS providers, partners, and broader digital ecosystem.

An acceptable security posture can coexist with stolen credentials, access for sale, or an active compromise. Enterprise systems now depend on vendors, SaaS providers, and other third parties that third party risk management programs cannot continuously monitor.

CTOS (Counter Threat Operating System) is a cybersecurity platform that connects intelligence collection, risk determination, enterprise context, and counter-threat operations in one architecture. CTOS identifies active threats across a customer's extended ecosystem, determines their relevance to the business, and drives remediation with the affected third party. CTOS identifies adversary targeting, exposed credentials, campaign staging, and active compromise signals. Example threats include network or administrator access for sale, compromised VPN credentials, web shells, and data appearing in ransomware files. Active targeting and compromise signals are identified across critical third parties, technology providers, supply-chain partners, and subsidiaries. The Counter Threat Operating System (CTOS) includes third-party risk management and counter fraud capabilities.^{[1][5][9][10]}

CTOS combines global intelligence collection with a digital twin of the customer's ecosystem to determine which live threats matter to that customer. Intelligence collection across thousands of global sources, including cybercrime forums, credential markets, and ransomware sites, is owned and operated by iCOUNTER. Signals are collected continuously from adversary infrastructure, active compromise activity, exposed credentials, dark web sources, and third-party ecosystem telemetry. HUMINT is augmented with AI parsing of hundreds of databases to identify specific targeted threats. CTOS correlates threat signals against a digital twin of the customer's ecosystem to help determine whether a threat is real, which third parties are affected, the potential business impact, and who needs to act. CTOS determines risk at the Edge of Intelligence Collection, validating threat signals against the customer's ecosystem before findings reach the customer's team. CTOS connects third-party relationships and business dependencies to the organization's risk framework and tiers. AI helps CTOS correlate large volumes of threat signals and determine which are relevant to the customer's ecosystem. CTOS connects validated risk to existing security and risk workflows, and feedback from remediation outcomes informs the intelligence operation.^[6]

Using observable connection data, iCOUNTER maps a customer's ecosystem of vendors and data flows. Early warning is given if access to a vendor's network has been gained by cybercriminals. Vendors that have been victims of successful ransomware attacks, or that have exposed data that may include the customer's, are identified.^[6]

On the customer's behalf, iCOUNTER runs the intelligence-to-remediation operation: collecting and validating signals, determining ecosystem risk, engaging affected third parties, and coordinating remediation through completion. Under its terms, iCOUNTER provides managed third-party threat detection and response services that perform continuous reconnaissance across the customer's extended third-party ecosystem using human intelligence, technical intelligence, and adversary infrastructure monitoring. The managed services include a Validated Connectivity Inventory, which enumerates third parties based on verified bi-directional data exchange. Prescriptive Remediation provides actionable countermeasures with defensible evidence for third parties to take corrective actions. Analysts at iCOUNTER manage the CTOS Platform to track risk events, communicate with impacted third parties, and track third-party mitigations. Customers get access to the CTOS Platform for monitoring risk events, communications, and mitigations. Quarterly Business Reviews summarize alerts, mitigations, and current risk profile. Remediation is handled by iCOUNTER, which engages the affected third party, coordinates remediation, and tracks the fix to completion with evidence. Built-in metrics and remediation tracking are used to communicate progress to stakeholders and the board. The Managed Services and the CTOS Platform dashboard are provided by iCOUNTER, Inc.^[5]

CTOS complements a customer's existing program, including security ratings, questionnaires, GRC, threat intelligence, and SOC tools. Alongside a SecurityScorecard program, iCOUNTER adds its own intelligence collection, business-specific risk determination, and managed third-party response. A direct integration with SecurityScorecard is not required to begin an iCOUNTER engagement. Any data exchange or workflow integration can be scoped separately around the customer's environment and the products the customer uses. To start, a customer supplies a CSV of priority third parties and ecosystem partners. Customers share their risk framework, priorities, and current service coverage so the engagement can focus on relevant business dependencies. CTOS is aimed at CISOs, third-party risk managers, security operations teams, and compliance officers in enterprises and public sector organizations with complex third party ecosystems.^[8]

John Watters acquired iDEFENSE in 2002, four years after its founding in 1998, and later founded iSIGHT Partners in 2007. Following the merger of iSIGHT and Mandiant under the Mandiant brand, John Watters served as President and COO until the company's acquisition by Google in 2022.^{[5][6][8][9][10][11]}

iCOUNTER on the record

About Whistic

Whistic sells a platform that includes Assess, Vendor Monitoring, Compliance, and Trust Center, supported by the Trust Center Exchange, Whistic AI, and Automation Orchestrator.^[5]

Whistic says risk does not stay in one workflow, and that it keeps context connected as teams assess, respond, share, and prove. Whistic describes Risk Operations as the work of turning evidence and signals into the actions, decisions, and proof required to manage trust. Whistic says the platform covers the risk inherited from vendors and the security assurance customers expect.^[5][7]

Organizations can begin with the products that address their immediate needs and do not need to buy every product. Automation Orchestrator is a platform feature that coordinates specialized workflow agents, and the current Orchestrator workflow supports Assess through the Initiator, Collector, Analyst, and Reporter agents. Whistic keeps vendor context, evidence, Issues, control activity, customer requests, human decisions, and history connected to the work they support. Whistic says people retain consequential decisions, approvals, overrides, and finalization.^[5]

Teams collect existing vendor evidence, use Whistic Assess to map it to their controls, identify gaps, catalog issues, and finalize a defensible risk decision. Whistic AI reads vendor evidence and maps it to customer controls. Whistic AI can generate a summary of a SOC 2 audit report catered to a customer's controls. Whistic states that every answer carries a confidence score and a source citation. Whistic states that no agent approves a vendor and every agent action is recorded in an activity log. Calastone brought vendor assessments and customer security information together with Whistic Assess and Trust Center.^[1][5][7][8]

Whistic replaces alert-only monitoring with workflows that show what changed, why it matters, and what to do next. Vendor Monitoring shows severity-rated vendor events with source evidence inside the vendor workflow. Teams can create an Issue or launch a targeted assessment without starting over.^[5]

Whistic Compliance keeps internal controls connected to the broader risk program. Teams define controls, write tests, and run them manually or with the Browser Agent. Each test run creates a permanent, timestamped record with evidence. Teams set a recurrence cadence when creating a test, for example every 12 months. Whistic says the product is self-service from day one.^[1][5][9]

Trust Center lets vendors publish approved security documents and questionnaires and control who can see them. Whistic says sharing in the Trust Center Exchange is granted by the vendor. The Trust Center Exchange connects buyers with thousands of published vendor profiles. Whistic says Smart Response answers questionnaires from documents in a customer's Knowledge Base.^[5][7][10]

Whistic's SOC 2 Type II is an independent audit of its controls for security, availability, and confidentiality over a 12-month period. Whistic's information security management system is certified to ISO/IEC 27001:2022 across the business since 2023. Whistic AI has been in production for 2+ years, and its AI management system is certified to ISO/IEC 42001. Whistic holds TX-RAMP Level 1, the Texas Risk and Authorization Management Program certification required for cloud services used by Texas state agencies and public higher education. Whistic says it hosts primarily on AWS US-West with AWS US-East as standby. Whistic names investors including Emergence Capital, ForgePoint Capital, and JMI Equity, and says it holds two issued patents.^[1][9]

Whistic on the record

Sources

Bitsight full record

[1]Bitsight insurance business grows 30 h1 extending market leadershipBitsight · bitsight.com · published October 9, 2025 · Tier A
[2]bitsight.comBitsight · bitsight.com · undated page, accessed November 2, 2026 · Tier A
[3]Bitsight | The Cyber Risk Platform Trusted by the Fortune 500Bitsight · undated page, accessed November 10, 2026 · Tier A
[4]Bitsight Vendor Network | BitsightBitsight · undated page, accessed November 10, 2026 · Tier A
[5]Vendor Risk Management (VRM) Platform | BitsightBitsight · undated page, accessed November 10, 2026 · Tier A
[6]Third Party Risk Management Solutions | BitsightBitsight · undated page, accessed November 10, 2026 · Tier A
[7]Bitsight Third-Party Intelligence SolutionBitsight · undated page, accessed November 10, 2026 · Tier A
[8]Attack Surface Intelligence Solutions | BitsightBitsight · undated page, accessed November 10, 2026 · Tier A
[9]Cyber Threat Intelligence Data | BitsightBitsight · undated page, accessed November 10, 2026 · Tier A
[10]Identity Intelligence Solutions | BitsightBitsight · undated page, accessed November 10, 2026 · Tier A
[11]Supply Chain Exposure Management | Bitsight BeaconBitsight · undated page, accessed November 10, 2026 · Tier A
[12]SPM Integrations | BitsightBitsight · undated page, accessed November 10, 2026 · Tier A
[13]About Bitsight Security | BitsightBitsight · undated page, accessed November 10, 2026 · Tier A
[14]Bitsight Launches Industry’s First Dark Web Intelligence for Supply Chains, Empowering Organizations to Predict and Prevent Third-Party Exploits | BitsightBitsight · published February 10, 2026 · Tier A
[15]Bitsight Introduces Security Posture Management to Operationalize Enterprise Cyber Resilience | BitsightBitsight · published March 19, 2026 · Tier A
[16]Bitsight Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Black Kite full record

[1]blackkite.comBlack Kite · blackkite.com · undated page, accessed September 27, 2026 · Tier A
[2]Cyber risk ratings leader normshield rebrands to black kite 301205147Black Kite via PR Newswire · prnewswire.com · published January 11, 2021 · Tier A
[3]About Black Kite | TPCRM PioneersBlack Kite · undated page, accessed September 27, 2026 · Tier A
[4]Black Kite | Standards-Based Third-Party Cyber Risk ManagementBlack Kite · undated page, accessed October 23, 2026 · Tier A
[5]Black Kite Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 23, 2026 · Tier C
[6]Third-Party Risk Management (TPRM) Solutions | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A
[7]Cyber Risk Management Platform | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A
[8]Vendor Risk Monitoring Solutions | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A
[9]Supply Chain Cyber Risk Management | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A
[10]Cyber Risk Quantification (CRQ) Solutions | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A
[11]Financial Impact of Cyber Risk | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A
[12]Ransomware Threat Intelligence for Your Vendors | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A
[13]How to Evaluate Vendors and Reduce Cyber Risk | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A
[14]Vendor Risk Response & Remediation | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A
[15]Vendor Compliance Management | Black KiteBlack Kite · undated page, accessed November 4, 2026 · Tier A
[16]BK Labs is Black Kite's research and innovation organizationBlack Kite · undated page, accessed November 4, 2026 · Tier A
[17]Black Kite Announces New Integration with CrowdStrike Falcon Next-Gen SIEMBlack Kite · published November 2, 2026 · Tier A
[18]Black Kite Introduces Quantum Readiness for Third-Party Cyber Risk ManagementBlack Kite · published October 21, 2026 · Tier A
[19]Black Kite’s Manufacturing & Distribution Ransomware Report 2026 Confirms Manufacturing Remains #1 TargetBlack Kite · published September 17, 2026 · Tier A
[20]Black Kite Research Reveals That Ransomware's Primary Target Is the Mid-Market, Not Enterprises as Widely AssumedBlack Kite · published August 18, 2026 · Tier A
[21]Black Kite Appoints Data Protection Veteran Jim Clancy as Strategic AdvisorBlack Kite · published July 28, 2026 · Tier A

iCOUNTER full record

[1]icounter.comiCOUNTER · icounter.com · undated page, accessed September 27, 2026 · Tier A
[2]Icounter emerges from stealth to launch cyber risk intelligence category 302506189iCOUNTER via PR Newswire · prnewswire.com · published July 16, 2025 · Tier A
[3]Counter Cyber Threats Before They Strike | iCOUNTERiCOUNTER · undated page, accessed October 25, 2026 · Tier A
[4]CTOS: Counter Threat Operating System | iCOUNTERiCOUNTER · undated page, accessed October 25, 2026 · Tier A
[5]End User Terms of Service | iCOUNTERiCOUNTER · undated page, accessed October 25, 2026 · Tier A
[6]Third-Party Cyber Risk Solutions | iCOUNTERiCOUNTER · undated page, accessed October 25, 2026 · Tier A
[7]About iCOUNTER | The Cyber Risk Intelligence CompanyiCOUNTER · undated page, accessed October 25, 2026 · Tier A
[8]iCOUNTER Alongside SecurityScorecard | Threat DetectioniCOUNTER · undated page, accessed October 25, 2026 · Tier A
[9]The Third Wave of Cybersecurity | iCOUNTERiCOUNTER · undated page, accessed October 25, 2026 · Tier A
[10]Next Generation of Fraud Panel | Jason Brown, iCOUNTERiCOUNTER · undated page, accessed November 10, 2026 · Tier A
[11]Keynote | Intel Led Security for Third Party RiskiCOUNTER · undated page, accessed November 10, 2026 · Tier A

Whistic full record

[1]whistic.comWhistic · whistic.com · undated page, accessed September 27, 2026 · Tier A
[2]About Whistic | Third-Party Risk Management SoftwareWhistic · undated page, accessed September 27, 2026 · Tier A
[3]Whistic | The Agentic Risk Operations PlatformWhistic · undated page, accessed October 30, 2026 · Tier A
[4]Whistic Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 30, 2026 · Tier C
[5]AI-Driven Third-Party Risk Platform | WhisticWhistic · undated page, accessed November 4, 2026 · Tier A
[6]Trust, Security & Privacy at WhisticWhistic · undated page, accessed November 4, 2026 · Tier A
[7]Pricing & Packages for TPRM Software | WhisticWhistic · undated page, accessed November 4, 2026 · Tier A
[8]Customer Stories & TPRM Case Studies | WhisticWhistic · undated page, accessed November 4, 2026 · Tier A
[9]AI-Powered Compliance Automation | WhisticWhistic · undated page, accessed November 4, 2026 · Tier A
[10]Whistic Trust Center | Publish & Share Security Posture | WhisticWhistic · undated page, accessed November 4, 2026 · Tier A

Spot a factual error? Request a correction.