How does Black Kite compare to the competition?

Based on ten risk categories and 250+ control items but unknown amount of companies covered.

2,000,000+ organizations scanned daily.

170,000 supported organizations.

Provides security ratings that aggregate different risks into a single score, allowing for the comparison of different third-party vendors and service providers.

Offers cybersecurity ratings and deep reporting capabilities to help businesses surface and manage cyber risks

Company and product blog.

UpGuard Summit brings together a community of security leaders from leading companies, explores the future of security and helps businesses stay secure. The UpGuard cybersecurity and risk management blog is updated four times a week and our breach research blog has uncovered and secured some of the largest data breaches.

BitSight maintains regular blog posts and webinars covering security incidents, feature updates, and industry developments.

SecurityScoreCard offers a user Academy for customer users along with a regularly updated company blog, webinar series, and resource center.

Offers a customer user academy, consistently updated company blog, coverage of critical global security events, and a regular webinar schedule for sharing best practices.

Public pricing information is not available.

UpGuard has a transparent pricing model which you can view here. UpGuard pricing starts at $5,249/year and scales with your company.

Public pricing information is not available. Pricing is reported to start at $20,000 plus $2,000-$2,500 per vendor per year.

Public pricing information is not available. Reports say pricing starts at $16,500 for self-assessment plus five vendors, and additional vendors cost $1,500-$2,000 per vendor per year.

Public pricing information is not available. Pricing is reported to start at $10,000 and increases based on the number of vendors monitored.

Integrates with Supply Wisdom and VendorInsight.

Connect UpGuard with over 4,000+ apps using our Zapier integration.

Offers integrations with RSA Archer GRC, CyberGRX, OneTrust Vendorpedia, ProcessUnity, MetricStream, and more.

Offers integrations with several third party platforms, such as RSA Archer, ServiceNow, and more.

Offers integrations with GRC platforms, such as RSA Archer, Sigma Ratings, Whistic, and more.

Performs non-intrusive checks including passive DNS, attack surface detection, passive vulnerability scanning, DNS health, SSL/TLS strength, and email security, as well as asset reputation, credential compromises, hacktivist shares, social media monitoring, dark web search, cloud delivery network security, fraudulent apps, and DDoS detection. They do not, however, provide real transparency into the efficacy of these checks.

As UpGuard checks for misconfigurations across your Internet footprint, many important breach vectors are covered, including phishing, ransomware susceptibility (like WannaCry), man-in-the-middle attacks, DNSSEC, vulnerabilities, email spoofing, domain hijacking, and DNS issues. Data leaks are automatically surfaced by the platform for your team to assess and close before they become breaches.

The IP reputation methodology helps catch active malware installations, but that’s only one possible way a data breach can occur.

SecurityScorecard utilizes active and passive data collection methods that are publicly available. The data collected provides indicators of risk relating to open ports, DNS, HSTS, SSL (and more) that are processed via their proprietary algorithm to produce individual security ratings.

Allows users to implement a baseline configuration within the RiskRecon portal to match risk structures being used to manage enterprise and third-party risk. Risks monitored provide visibility into email security, application security, network filtering, and more.