Security Startups

Black Kite

Third-party cyber risk intelligence: rates and monitors vendors from outside-in data, flags which ones a new breach or vulnerability touches, and estimates the financial exposure.

Proof of life. Released an MCP server that exposes its third-party cyber risk platform to AI agent workflows, February 2026

About Black Kite

Black Kite monitors vendors and their extended supply chains from external data, giving each a cyber rating and tracking it over time.

When a new vulnerability or breach appears, it identifies which vendors are likely affected, and it estimates the financial impact of a vendor incident.

In November 2025 it added an AI agent built from task-specific sub-agents that investigates rating changes and breach impact, reads vendor documents such as SOC 2 reports, and drafts board reports. It also exposes its data through an MCP server.

The company, formerly NormShield, is based in Boston.

Investors

Volition CapitalMoore Strategic VenturesGlasswing VenturesData Point Capital
Work at Black Kite? Link to this listing

Optional badge for your site or README. It changes nothing about the listing, its order or its review. Other formats and a dark version: press kit.

<a href="https://securitystartups.com/companies/black-kite"><img src="https://securitystartups.com/badge/listed.svg" alt="Listed on Security Startups" width="184" height="44"></a>