CyberGrape – cyber security certification and GRC platform for small business
Black Kite logo
Supply chain risk

Black Kite

Attackers often get in through a supplier, not through you. We use Black Kite to keep watch on your whole supply chain.

What they do

Black Kite continuously rates the cyber risk of the vendors, suppliers and partners you rely on. It does this from the outside using open intelligence and threat feeds, so there are no agents to install and no questionnaires to chase. Each vendor gets a clear risk rating, a ransomware likelihood score, and an estimate of what a breach could cost in dollars.

How we use it for you

We monitor your critical suppliers around the clock and alert you the moment one of them is exposed, breached or slipping. You get vendor scorecards you can share straight back to a supplier with the fixes spelled out, and board-ready reporting that puts risk in plain financial terms.

What you see

Your vendor risk dashboard, vendor scorecards, risk-change alerts, and the supply chain section of your board reporting. You can also monitor your own organisation the same way an attacker would see it.

What it means for you

You see which suppliers carry risk, and you can send a supplier a clear list of what to fix.

Standards and requirements it supports

SMB1001:2026

  • 4.9.0.1Digital trust programme with suppliers

ISO 27001:2022

  • 5.19Information security in supplier relationships
  • 5.20Addressing security within supplier agreements
  • 5.21Managing information security in the ICT supply chain
  • 5.22Monitoring and review of supplier services
  • 5.7Threat intelligence

See where Black Kite fits for your business

The free readiness assessment shows where you stand and what to fix first, and whether this is one of the tools you need.