Black Kite

Black Kite is an enterprise third-party risk management (TPRM) and cyber security ratings platform that combines non-invasive external attack surface assessments with automated vendor questionnaire intelligence to provide accurate, standards-based cyber risk scores. Unlike legacy security rating tools that rely on proprietary, unverified scoring algorithms, Black Kite calculates vendor risk scores mapped directly to the MITRE ATT&CK framework and provides financial cyber risk quantification based on the Open FAIR (Factor Analysis of Information Risk) standard. The platform continuously monitors thousands of third-party vendors and supply chain partners across 20 distinct risk categories, assessing external exposures such as patch management hygiene, SSL certificate health, credential leaks on dark web marketplaces, email security (SPF/DKIM/DMARC), and cloud misconfigurations. Black Kite features automated compliance correlation, mapping vendor security postures to standards like NIST CSF, ISO 27001, PCI-DSS, and GDPR. With its FocusTags feature, security teams can rapidly track and assess vendor exposure to emerging critical vulnerabilities and supply chain compromises like MOVEit and Log4j across their entire vendor roster in seconds. Black Kite empowers security and procurement leaders to make data-driven vendor risk decisions, accelerate vendor assessments, and protect their organizations from catastrophic third-party supply chain disruptions.