Black Kite
Black Kite is an AI-native third-party cyber risk management platform providing continuous vendor monitoring, ransomware susceptibility scoring, Open FAIR financial quantification, and Nth-party supply chain visibility for enterprises in manufacturing, financial services, healthcare, and federal sectors.
- Company typePrivate
- Founded2016
- HeadquartersBoston, United States
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What Black Kite does
Black Kite is an AI-native third-party cyber risk management (TPCRM) platform that provides enterprises with continuous visibility into the cyber posture of their vendor and supply chain ecosystems. The platform calculates cyber ratings across 20 unique risk categories and combines them with proprietary capabilities including ThreatTrace (NetFlow and DNS telemetry-based IOC detection using over 1 trillion internet traffic flows), the Ransomware Susceptibility Index, the Adversary Susceptibility Index tracking named threat groups such as Volt Typhoon and APT29, Open FAIR-based financial risk quantification, Product Analysis for SBOM-level software risk, and Black Kite Bridge for collaborative vendor risk response. Black Kite's product surface spans continuous monitoring, vendor assessment, Nth-party visibility, ransomware threat intelligence, and cyber risk quantification, with the Black Kite AI Agent providing AI-driven natural language interaction for TPRM workflows.
The company targets enterprise customers across seven verticals: Manufacturing, Financial Services, Healthcare, Public Sector/Federal, Insurance, Retail, and Technology, with primary use cases centered on cascading supply chain risk, ransomware preparedness, and financial communication of cyber exposure to executives. Black Kite monetizes via quote-based SaaS subscriptions priced by vendor count and assessment scope, billed annually, and distributed through direct enterprise field sales supplemented by VAR and managed service provider channels. The platform is FedRAMP Moderate Ready and ISO 27001:2022 certified, enabling procurement by U.S. federal agencies and regulated industries, and is supported by strategic data and channel partnerships including Sayari and CGS CyberDefense.
Founded in 2016 and headquartered in Newton, Massachusetts (with governing law under Virginia), Black Kite has raised $22M in Series B funding (2023) and operates with 101-250 employees. The company has no parent entity, is privately held, and has continued product expansion through 2025-2026 including multiple platform modules, the AI Agent, and federal compliance milestones.
Black Kite firmographics
Firmographics- Name
- Black Kite
- Legal name
- Black Kite, Inc.
- Website
- https://blackkitetech.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- Black Kite is an AI-native third-party cyber risk management platform providing continuous vendor monitoring, ransomware susceptibility scoring, Open FAIR financial quantification, and Nth-party supply chain visibility for enterprises in manufacturing, financial services, healthcare, and federal sectors.
- Ownership category
- akta.pro rank
Black Kite industry classification
Industry- Product category
- Third-Party Cyber Risk Management (TPCRM)
- NAICS
- Other Computer Related Services (541519)
- akta.pro primary industry
- Third-Party/Vendor Risk Management (TPRM/VRM) (HDADAIAE)
- akta.pro secondary industries
- Third-Party Model/Vendor Risk & Supply-Chain Assurance (HDAAAMAK), Third-Party Monitoring, Vendor Risk & Control Testing for Market Infrastructure (FSAFAKAO)
Keywords
Where Black Kite is headquartered
LocationHeadquarters
- HQ city
- Boston
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Black Kite business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations
Revenue model
- SaaS Subscription: Black Kite operates as a subscription-based SaaS platform for third-party cyber risk management. The End User License Agreement references subscription fees on a Subscription Order Form with annual renewal terms. The company offers enterprise licenses with pricing based on vendor count and assessment scope.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise subscription with customizable vendor monitoring scope |
Go-to-market motion1 record
Distribution channels4 records
Marketing channels6 records
Black Kite product offering
Product offeringCore offering
Black Kite provides an AI-native third-party cyber risk management (TPCRM) SaaS platform that delivers continuous vendor cyber risk ratings across 20 risk categories, ransomware susceptibility scoring, Open FAIR-based financial impact quantification, and Nth-party supply chain visibility. The platform is sold as annual enterprise subscriptions with quote-based pricing tied to vendor count and assessment scope, and is used by enterprise security and risk teams to monitor, assess, and respond to third-party cyber risk in real time.
Product overview
Black Kite is an AI-native third-party cyber risk management (TPCRM) platform offering a unified portfolio of interconnected modules. The core platform includes Black Kite Monitor for continuous monitoring, Black Kite Assess for vendor evaluation, and Black Kite Extend for Nth-party visibility. AI capabilities are delivered through Black Kite AI and the Black Kite AI Agent. Specialized modules include ThreatTrace for IOC detection, Product Analysis for software SBOM analysis, Ransomware Susceptibility Index for predictive risk scoring, and Financial Impact modeling using Open FAIR standards. The platform is designed for enterprise-scale TPRM programs across Manufacturing, Financial Services, Healthcare, Insurance, Retail, Technology, and Public Sector industries, with solutions covering third-party risk management, cyber risk quantification, ransomware threat intelligence, and supply chain cyber risk management.
Differentiator
Problem solved
Functional benefit
Brands
- Ransomware Susceptibility Index (RSI): A predictive indicator of a vendor's likelihood to experience a ransomware attack
- The Bridge
- Black Kite AI
- ThreatTrace
- Adversary Susceptibility Index (ASI)
Products and services
- Third-Party Risk Management (TPRM) Standards-based third-party cyber risk management solution providing continuous visibility, cyber ratings, and collaborative remediation tools for enterprise TPRM teams managing vendor ecosystems. Built on evidence-based insight rather than questionnaire-only assessments, it enables faster action and reduced exposure across the vendor portfolio.
- Cyber Risk Quantification Solution that translates vendor cyber exposure into Open FAIR-based financial impact estimates, giving executives and boards the financial language needed to prioritize cybersecurity investments and communicate vendor risk in monetary terms.
- Ransomware Threat Intelligence Solution built on the Ransomware Susceptibility Index (RSI), which analyzes technical and behavioral signals to predict a vendor's likelihood of experiencing a ransomware attack before incidents occur. Used by enterprise security and insurance underwriting teams to anticipate ransomware exposure across vendor portfolios.
- Supply Chain Cyber Risk Management Solution that maps Nth-party relationships, surfaces concentration and cascading risk, and flags threats from fourth, fifth, and Nth parties for early detection. Designed for organizations needing visibility beyond direct vendors to detect cascading cyber risk across the extended supply chain.
Quantifiable outcome
- 75% reduction in vendor assessment time with automated assessments
- +5 more outcomes
Companies that use Black Kite
Customer profileSegments7 records
Ideal customer profiles5 records
Black Kite technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration1 record
AI capability8 records
Feature10 records
Black Kite partnerships and signals
Strategic signalPartnerships
Four partnerships are on record, tiered core.
- SayaricoreBlack Kite and Sayari announced a strategic partnership and product integration combining Black Kite's continuous cyber risk ratings with Sayari's corporate ownership and trade data spanning over 250 jurisdictions. The integration enables organizations to gain a unified view of third-party risk across cyber, supply chain, and corporate dimensions. The combined solution supports enhanced due diligence, N-tier supply chain visibility, financial crime compliance, and M&A risk assessments by connecting previously siloed information on beneficial ownership structures, upstream supply chain dependencies, and cyber posture.
- CGS CyberDefensecoreBlack Kite and CGS CyberDefense partnered to deliver unparalleled visibility and actionable insights to remediate third-party risks. The partnership expands Black Kite's reach through managed services and implementation capabilities, enabling CGS CyberDefense to offer Black Kite's third-party risk management capabilities as part of their cybersecurity service offerings.
- Managed Service PartnerscoreBlack Kite has a Partner Program supporting Managed Services providers who resell and implement Black Kite's third-party cyber risk management platform. Partners include dedicated portal access at partners.blackkite.com and co-delivery of vendor risk assessment and monitoring services.
- Value Added Resellers (VARs)coreBlack Kite's Partner Program includes Value Added Resellers who resell the platform to enterprise customers. VARs leverage their existing customer relationships in target verticals like manufacturing, healthcare, and financial services to distribute Black Kite's TPRM solutions.
Scale indicators5 records
Recent moves6 records
Expansion highlights7 records
Black Kite competitors and assessment
Company assessmentDirect peers
- SecurityScorecard: SecurityScorecard is a direct competitor offering vendor risk management and cyber risk ratings. It is the most cited alternative to Black Kite in the TPCRM market and serves the same enterprise buyer with similar continuous-monitoring capabilities.
- Bitsight: Bitsight provides external cyber risk ratings and third-party risk management. Acquired by Moody's, Bitsight competes head-to-head with Black Kite on continuous vendor monitoring and financial-services buyers.
- UpGuard: UpGuard delivers third-party risk and attack surface management to enterprise customers. It is a like-for-like competitor to Black Kite's continuous monitoring and vendor risk assessment offerings.
- ProcessUnity: ProcessUnity is a TPRM workflow platform that competes with Black Kite in vendor risk assessment, due diligence, and ongoing monitoring for highly regulated enterprises.
- Prevalent: Prevalent offers third-party risk management with vendor assessments, network intel, and continuous monitoring — directly competing with Black Kite across mid-market and enterprise TPRM programs.
- RiskRecon (Mastercard): RiskRecon, a Mastercard company, delivers vendor cyber risk ratings based on passive data collection. It is a direct comparable to Black Kite's evidence-based, continuous rating approach.
- Venminder: Venminder provides TPRM software and managed services for vendor due diligence and ongoing monitoring, overlapping with Black Kite's enterprise buyer base in financial services and healthcare.
- Panorays: Panorays offers AI-driven third-party security risk management with external attack surface scans and questionnaire automation, competing with Black Kite's AI-powered assessments and supply chain visibility.
- SAFE Security: SAFE Security provides cyber risk quantification using the SAFE platform, overlapping with Black Kite's Open FAIR-based financial impact modeling and AI-driven cyber risk scoring.
Broad incumbents
- OneTrust: OneTrust is a broad GRC and trust intelligence platform with a third-party risk module. While not focused exclusively on TPCRM, it competes with Black Kite for enterprise budget allocated to vendor risk and GRC consolidation.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Black Kite social profiles
Digital presenceBlack Kite compliance and trust
Trust signalCompliance2 records
Black Kite financial estimates
Financial estimateRevenue estimate
Valuation estimate
Black Kite leadership team
Management profileNumber of profiles
Profiles1 record
Black Kite funding detail
Funding detailFunding overview
Funding rounds1 record
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Black Kite M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Black Kite
What does Black Kite do?
Black Kite provides an AI-native third-party cyber risk management (TPCRM) SaaS platform that delivers continuous vendor cyber risk ratings across 20 risk categories, ransomware susceptibility scoring, Open FAIR-based financial impact quantification, and Nth-party supply chain visibility. The platform is sold as annual enterprise subscriptions with quote-based pricing tied to vendor count and assessment scope, and is used by enterprise security and risk teams to monitor, assess, and respond to third-party cyber risk in real time.
Is Black Kite a public or private company?
Black Kite is a private company. It is classified as venture growth investor backed and is currently operating.
When was Black Kite founded?
Black Kite was founded in 2016. It employs 101 to 250 people.
Where is Black Kite based?
Black Kite is headquartered in Boston, United States, in the North America region.
How does Black Kite make money?
One revenue line is on record: saaS Subscription.
Who are Black Kite's main competitors?
Direct peers on record are SecurityScorecard, Bitsight, UpGuard, ProcessUnity, Prevalent, RiskRecon (Mastercard), Venminder, Panorays and SAFE Security. OneTrust is listed as a broad incumbent.
Does Black Kite have an API?
No public API is recorded for Black Kite.
What industry is Black Kite in?
Black Kite's product category is Third-Party Cyber Risk Management (TPCRM). Its primary akta.pro industry code is HDADAIAE, Third-Party/Vendor Risk Management (TPRM/VRM), with a secondary code of HDAAAMAK, Third-Party Model/Vendor Risk & Supply-Chain Assurance. Its NAICS code is 541519.