Vendor comparison · 4 companies
Up to four companies side by side.
Four is the most one page holds. Remove or swap a company to add another.
Swipe the table sideways to see every company.
| BitsightBitsight sells cyber risk intelligence products covering third-party and supply chain risk monitoring, security ratings, attack surface mapping, vulnerability intelligence and cyber threat intelligence.bitsight.com | Black KiteBlack Kite lists Third-Party Risk Management and Cyber Risk Quantification among its core solutions.blackkite.com | SecurityScorecardSecurityScorecard sells third-party risk management, security ratings, security-questionnaire automation and threat intelligence products for monitoring vendor and supply-chain cyber risk.securityscorecard.com | UpGuardUpGuard sells a cyber risk posture management platform covering vendor risk, attack surface monitoring, workforce human risk, trust-page questionnaire automation and risk automations.upguard.com | |
|---|---|---|---|---|
| What it sells | ||||
| What it sells |
|
|
| |
| Categories | ||||
| Categories | ||||
| Headquarters | ||||
| Headquarters | Not stated on its pages | Boston, United States[2] | New York, United States[2] | Hobart, Australia[2] |
| Founded | ||||
| Founded | Not stated on its pages | 2016[3] | 2013[2] | 2012[2] |
| Ownership and funding | ||||
| Ownership and funding | Not stated on its pages | Not stated on its pages | Not stated on its pages | Privately held[2][3] |
| Named customers | ||||
| Named customers | Not stated on its pages | Not stated on its pages | Not stated on its pages | Not stated on its pages |
| Recent news | ||||
| Recent news | Not stated on its pages | Not stated on its pages |
| Not stated on its pages |
| G2 and Gartner Peer Insights | ||||
| G2 and Gartner Peer Insights |
| |||
| Who it fits | ||||
| Who it fits | Not written yet | From its own pages, the company sells mainly to organisations in the industries it lists: Manufacturing, Financial Services, Healthcare, Insurance, Retail, Technology and Public Sector. Its menu groups vendor risk capabilities such as assessment, monitoring, response and compliance, which points to teams that manage vendor risk. Its event listing refers to enterprise risk teams. The company also has a partner menu naming Managed Services and Value Added Resellers, so some buyers may reach it through partners. | From its own pages, the company addresses CISOs and risk and compliance professionals. It also has pages for information technology organizations, hospitality and gaming, and critical infrastructure. The critical infrastructure page names energy grids, transportation networks, and public utilities. The hospitality page refers to a lean internal security team, and the information technology page refers to tech companies with SaaS sprawl and developer ecosystem risks. | Not written yet |
| Last verified | ||||
| Last verified | November 2, 2026 | November 2, 2026 | September 27, 2026 | September 27, 2026 |
Bitsight sells cyber risk intelligence products covering third-party and supply chain risk monitoring, security ratings, attack surface mapping, vulnerability intelligence and cyber threat intelligence. Its platform is used by organizations to assess their own and their vendors' security posture and report on risk to executives and boards.[1][2]
Bitsight on the recordBlack Kite lists Third-Party Risk Management and Cyber Risk Quantification among its core solutions. It also lists Ransomware Threat Intelligence and Supply Chain Cyber Risk Management as core solutions. Its menu names Vendor Risk Assessment, Vendor Risk Monitoring, Vendor Risk Response and Vendor Compliance as vendor risk capabilities. It also has an industries menu naming Manufacturing, Financial Services, Healthcare, Insurance, Retail, Technology and Public Sector.[1]
Its platform menu names Black Kite AI, Black Kite Monitor, Black Kite Assess and Black Kite Extend. Its partner menu lists a Partner Program, Managed Services and Value Added Resellers.
Black Kite lists a report called 2026 Third-Party Breach Report. Its summary calls this the seventh annual report and mentions waiting 117 days for a vendor breach notification. It also lists a 2026 Ransomware Report, whose summary says attacks surged 25%, then 60% midyear, with 7,551 total direct victims. A promoted event is described as one day in Charlotte on Oct. 22, with 14 speakers and 7 enterprise risk teams.[1]
Black Kite on the recordSecurityScorecard sells third-party risk management, security ratings, security-questionnaire automation and threat intelligence products for monitoring vendor and supply-chain cyber risk. Its pages include a section for risk and compliance professionals. Its pages also include a section for CISOs.[1][3][4][5]
It lists Security Ratings as a way to track, maintain, and communicate scorecards for contractual, insurance or brand reasons. It also lists Compliance, described as meeting risk management requirements for regulatory audits. Its platform page describes the AI operating system for end-to-end third-party cyber risk management. On the risk and compliance page, TITAN AI unifies threat intelligence and third-party data to deliver real-time visibility across unknown 3rd and 4th-party vendors. The platform page also describes a complete view of real-time threat intelligence and adversary TTPs to prioritize actual risk over generic compliance.[1][3][4][6]
The home page offers a 14-day free trial.[3]
The home page states SOC 2 Type II & GDPR Compliant.[1][3][4][5][6][7][8][9]
SecurityScorecard on the recordUpGuard sells a cyber risk posture management platform covering vendor risk, attack surface monitoring, workforce human risk, trust-page questionnaire automation and risk automations. The company was founded in 2012, is headquartered in Hobart, Tasmania, with a US headquarters in Mountain View, California, and remains privately held after raising a Series C round in February 2026.[1]
UpGuard on the recordSpot a factual error? Request a correction.