Black Kite Due Diligence
Run due diligence on Black Kite: check compliance and get alerts when suppliers or ownership change.
United States · owned by Independent (United States) · blackkite.com · 12 vendors
Black Kite is an AI-native third-party cyber risk management (TPCRM) platform that provides continuous cyber risk intelligence, standards-based assessments, and Open FAIR™-based financial impact quantification for vendor and supply chain risk. Founded in 2016 by certified ethical hacker Candan Bolukbas, the company helps security and business leaders identify, monitor, and manage cyber risks posed by third-party vendors and suppliers. Its platform covers vendor risk assessment, ransomware susceptibility indexing, nth-party visibility, and compliance monitoring.
Resilience scores
- Digital Sovereignty: 83
- Digital Resilience: 9
- Financial Resilience: 6
Technology vendors
- HackerOne, Inc. — Cybersecurity — United States
- KnowBe4, Inc. — Cybersecurity — United States
- Stripe, Inc. — Financial Services — United States
- and 9 more
Insights
Last updated 2026-07-22 · revision 4
12 direct vendors, 144 subvendors
Direct vendors by controlling owner country (sample)
- United States: 10
- Singapore: 1
- Sweden: 1
Subvendors by controlling owner country (sample)
- Italy: 1
- Germany: 2
- Denmark: 2
Compliance
7 in-scope frameworks identified; showing 3.
FedRAMP — No public evidence
Evidence: https://blackkite.com/industry/federal, https://blackkite.com/about
CPRA — Evidence found
Evidence: https://blackkite.com/privacy-policy
SOC 2 (source) — Evidence found
Evidence: https://trust.blackkite.com, https://blackkite.com/privacy-policy
Financials
Three-year financials
- null:
- null:
- null:
Financial Resilience Score: 6/10
Black Kite is a privately held, venture-backed US cybersecurity SaaS company that does not disclose revenue, EBIT, or equity figures. Its financial resilience must therefore be assessed qualitatively. Positive indicators include institutional backing from investors such as Volition Capital (which reportedly led a ~USD 22M Series B in 2022) and Paladin Capital Group, a recurring SaaS revenue model, strong customer satisfaction (Gartner Peer Insights 4.8 across 162 reviews), a differentiated Open FAIR™-based methodology, and diversified vertical exposure across Manufacturing, Financial Services, Healthcare, Insurance, Retail, Technology, and Public Sector. Offsetting these strengths are several risks: complete lack of public financial transparency, a highly competitive TPCRM category with well-funded rivals (SecurityScorecard, Bitsight, UpGuard, SAFE Security, Panorays, Prevalent), dependence on continued external funding, compressed cybersecurity valuations since 2022, and the CFO's explicit 'liquidity event' objective signaling reliance on an M&A or IPO exit. Overall, the company appears to be in a growth/pre-exit phase typical of venture-backed private SaaS firms, warranting a moderate resilience score.
Key strengths: Venture backing from Volition Capital (Series B lead, ~USD 22M in 2022) and Paladin Capital Group, Recurring SaaS subscription revenue model with high visibility, Strong customer satisfaction: 4.8/5 Gartner Peer Insights rating across 162 reviews, Experienced leadership bench with 200+ years of combined cybersecurity experience, Defensible IP: Open FAIR™-based methodology and Ransomware Susceptibility Index® (RSI™), Diversified vertical exposure across seven industries, Multi-fold customer growth reported over three-year window
Risk factors: No public financial transparency; balance-sheet strength, burn rate, and profitability unknown, Highly competitive TPCRM category with well-funded rivals (SecurityScorecard, Bitsight, UpGuard, SAFE Security, Panorays, Prevalent), Dependence on continued VC/PE funding rounds, Cybersecurity valuations have compressed since 2022, Regulatory and methodology risk from cyber-rating pushback and evolving disclosure regimes (SEC, DORA), Concentration in enterprise TPRM buyers exposes the company to enterprise IT spending slowdowns, CFO's explicit 'liquidity event' objective indicates reliance on M&A or IPO exit assumptions
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.