Search company, investor...

Founded Year



Series B | Alive

Total Raised


Last Raised

$22M | 2 yrs ago

About Black Kite

Black Kite develops a cyber risk rating platform. It identifies and monitors third-party cyber risk management and alerts businesses. The company serves financial services, insurance, manufacturing, federal, healthcare, and other industries. The company was formerly known as NormShield and changed its name to Black Kite. The company was founded in 2016 and is based in Boston, Massachusetts.

Headquarters Location

120 Saint James Avenue

Boston, Massachusetts, 02116,

United States

(571) 335-0222


ESPs containing Black Kite

The ESP matrix leverages data and analyst insight to identify and rank leading companies in a given technology landscape.

Insurance / P&C Insurance Tech

The cyber risk analytics market provides analytical solutions and services to assess and mitigate cyber risks for insurance purposes. It involves the use of data analytics and modeling techniques to evaluate the potential vulnerabilities and threats faced by insured organizations. This market aims to help insurance providers underwrite cyber insurance policies by quantifying the likelihood and pot…

Black Kite named as Challenger among 15 other companies, including SecurityScorecard, CyberCube, and BitSight Technologies.


Expert Collections containing Black Kite

Expert Collections are analyst-curated lists that highlight the companies you need to know in the most important technology spaces.

Black Kite is included in 2 Expert Collections, including Cybersecurity.



7,288 items

These companies protect organizations from digital threats.



4,111 items

Companies and startups that use of technology to improve core and ancillary insurance operations. Companies in this collection are creating new product architectures, improving underwriting models, accelerating claims and creating a better customer experience

Latest Black Kite News

Black Kite Added to the Department of Homeland Security’s Continuous Diagnostics and Mitigation Program’s Approved Products List (CDM APL)

Sep 19, 2023

Boston, Massachusetts, UNITED STATES BOSTON, Sept. 19, 2023 (GLOBE NEWSWIRE) -- Black Kite , the leader in third-party cyber risk intelligence, today announced that it has been added to the Department of Homeland Security (DHS) Continuous Diagnostics and Mitigation (CDM) Program’s approved products list (APL) under the risk assessment capabilities. The inclusion of Black Kite’s solution strengthens national cybersecurity by empowering federal agencies with enhanced capabilities to safeguard critical assets. The Cybersecurity and Infrastructure Security Agency’s (CISA) CDM Program is a fundamental pillar of the federal government's cybersecurity strategy, aimed at assisting agencies in identifying, managing, and mitigating cyber risks. By deploying robust cybersecurity tools through the CDM APL, agencies gain the ability to proactively identify and address threats, fortifying their resilience against evolving cyber threats. The availability of Black Kite’s third-party risk intelligence solution will aid federal agencies in identifying and defending against the ever-evolving cyber threats, ensuring the protection of critical systems, data, and operations. “Black Kite’s inclusion signifies its excellence in risk assessment and its alignment with the program's core principles of continuous monitoring and proactive cyber defense,” said Tony Monell, vice president public sector at Black Kite. “Our platform's capabilities will continue to empower public agencies to detect and neutralize threats effectively, while bolstering their cybersecurity resilience. With this approval, we reaffirm our commitment to helping federal agencies stay one step ahead of our adversaries." Black Kite has undergone rigorous evaluation and testing to meet the stringent criteria set by the CDM Program. Key features that propelled Black Kite's approval into the CDM APL include: Comprehensive Risk Assessment: Providing intelligence from a technical, financial, and compliance perspective, Black Kite eliminates false positives and ensures a holistic approach to vendor risk management. This allows agencies to make more informed decisions with straightforward, trustworthy, and defensible findings. Real-Time Threat Intelligence: Black Kite operationalizes real-time cyber threat data with a platform that does the heavy lifting, so federal agencies can focus cyber resources on fixing the most critical vulnerabilities. Simple Reporting and Customizable Dashboards: Black Kite provides agencies with easy-to-understand, trustworthy reporting and customizable dashboards, streamlining data analysis and simplifying the presentation of complex cybersecurity insights. Scalability and Integration: Black Kite seamlessly integrates into existing agency infrastructure, and as cyber ecosystems scale and evolve, the Black Kite platform allows agencies to pivot, grow, and identify critical vendors around the clock, whether it's one or 100,000 companies. Black Kite’s Cyber Risk Continuous Monitoring is available through immixGroup’s GSA MAS Contract GS-35F-0511T, NASA SEWP Contract NNG15SC16B, NCPA Contract 01-137, Equalis Contract COG-2139B, MHEC Contract MHEC-03012022-IM. To learn more about the CDM Program and the newly included Black Kite, visit CDM Program Approved Products List (APL) and Black Kite’s website . About CDM Program The Continuous Diagnostics and Mitigation (CDM) Program is a crucial component of the Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) that aims to safeguard federal government networks from cybersecurity threats. By providing tools and support, the CDM Program empowers federal agencies to strengthen their cybersecurity posture through continuous monitoring, risk assessment, and incident response capabilities. About Black Kite Black Kite gives companies a comprehensive, real-time view into cyber ecosystem risk so they can make informed risk decisions and improve business resilience while continuously monitoring more vendors, partners and suppliers in an ever changing digital landscape. Through an automated process, and a combination of threat, business and risk information, Black Kite provides cyber risk intelligence that goes beyond a simple risk score or rating. Black Kite serves more than 1,500 customers in a wide range of industries and has received numerous industry awards and recognition from customers . Learn more at, on the Black Kite blog . Copyright © 2023 Black Kite, Inc. All rights reserved. All other brand names, product names, or trademarks belong to their respective holders. Media Contact:

Black Kite Frequently Asked Questions (FAQ)

  • When was Black Kite founded?

    Black Kite was founded in 2016.

  • Where is Black Kite's headquarters?

    Black Kite's headquarters is located at 120 Saint James Avenue, Boston.

  • What is Black Kite's latest funding round?

    Black Kite's latest funding round is Series B.

  • How much did Black Kite raise?

    Black Kite raised a total of $33.05M.

  • Who are the investors of Black Kite?

    Investors of Black Kite include Data Point Capital, Glasswing Ventures, Moore Strategic Ventures, Volition Capital, Plug and Play Accelerator and 3 more.

  • Who are Black Kite's competitors?

    Competitors of Black Kite include CyberGRX and 6 more.


Compare Black Kite to Competitors

SecurityScorecard Logo

SecurityScorecard (SSC) operates as an information security company. It offers solutions including automatic vendor detection, cyber risk quantification, cyber risk reporting, and more. It serves industries such as insurance, retail, healthcare, and others. The company was founded in 2013 and is based in New York, New York.

BitSight Technologies

BitSight Technologies provides cyber risk management. It allows organizations to manage third-party/fourth-party risk, benchmark performance, security performance management, and vendor risk management integrations. It serves financial services, healthcare, technology, government, energy and utilities, retail, manufacturing, and engineering industries. It was founded in 2011 and is based in Boston, Massachusetts.

Panorays Logo

Panorays develops third-party security risk management. The company offers a software-as-a-service (SaaS) platform that manages the entire process from inherent to residual risk, remediation, and ongoing monitoring. Its main services include automated, dynamic security questionnaires, external attack surface evaluations, and business context to provide organizations with a rapid, accurate view of supplier cyber risk. It was founded in 2016 and is based in New York, New York.

Cyberwrite Logo

Cyberwrite provides carriers, re-insurers, brokers, and managing general agents (MGAs) with a comprehensive solution for cyber insurance policy management. The company offers automated cyber insurance insights technology for cyber policy underwriting of potential and existing clients in order to optimize the sales process, reduce risks and maximize return on investment (ROI) on the product. It was founded in 2016 and is based in New York, New York.

Corax Logo

Corax Cyber Security is a software company helping organizations and the insurance community make better decisions on cyber security actions and investments. Corax's Cyber Risk Analytics Platform quantifies cyber risk for organizations and their surrounding ecosystem and automatically shows how much insurance covers and what security measures offer the highest return on investment. This means customers get the right pricing and coverage for cyber insurance and can build a secure organization in the most cost-effective way. Corax was founded in 2013 and is based in Houston, Texas.

UpGuard Logo

UpGuard is a company that specializes in third-party risk and attack surface management within the cybersecurity industry. The company offers services such as monitoring businesses for data breaches, controlling third-party vendor risk, and improving cybersecurity posture. It primarily serves sectors such as financial services, technology, and healthcare. UpGuard was formerly known as ScriptRock. It was founded in 2012 and is based in Mountain View, California.


CBI websites generally use certain cookies to enable better interactions with our sites and services. Use of these cookies, which may be stored on your device, permits us to improve and customize your experience. You can read more about your cookie choices at our privacy policy here. By continuing to use this site you are consenting to these choices.