Category pillar
Black Kite
What does Black Kite help security teams measure?
Black Kite helps teams measure and prioritise cyber risk across suppliers and third parties by combining external signals with business context and actionable assessment workflows.
Black Kite. Third-party cyber risk management for continuous supplier visibility, prioritisation and evidence-based remediation.
Why third-party cyber risk needs continuous visibility
Supplier exposure changes when domains, infrastructure, credentials, software and business relationships change. A point-in-time questionnaire cannot show the operational risk created by an exposed service or a degraded supplier control today.
Capabilities to evaluate
- External attack-surface signals for suppliers and critical dependencies.
- Risk scoring that combines technical exposure with business context.
- Prioritisation of suppliers that can materially affect the organisation.
- Assessment workflows, evidence collection and remediation tracking.
- Reporting for procurement, risk, security and executive stakeholders.
Operating model
Start by defining the supplier inventory, critical services, data exchanged, contractual controls and escalation owner. Use the platform to focus human assessment on suppliers whose technical exposure or business criticality warrants deeper review.
Questions for an evaluation
- How is supplier identity resolved across domains and subsidiaries?
- Which signals are monitored and how often are they refreshed?
- Can risk owners see evidence behind the score?
- How are supplier notifications, exceptions and remediation deadlines tracked?
Start a technical evaluation
Request an architecture conversation through the demo page. Define the supplier population, criticality model, reporting audience and acceptance criteria.
Control criteria: validate supplier identity, evidence quality, scoring logic and remediation ownership before using third-party risk results for decisions.
