Black Kite AI Agent
Vendor: Black Kite (NormShield, Inc.) · HQ: United States · Category: Risk · Security
Last verified · Added · 6 sources · How we verify
Vendor? Get your “Listed on Agent Index” badge
On this page
What it does
The Black Kite AI Agent runs on a network of TPRM sub-agents. The Assessment Agent maps vendor controls to questionnaires, frameworks and regulations. The Incident Response Agent analyses vendor exposure to breaches, zero-days and CVEs. The Threat Actor Intelligence Agent monitors for emerging threats to vulnerable vendors. The Investigation Agent validates exposures, checks patch status and triggers rescans. The Prioritization Agent ranks vendors by severity and business impact, and the Procurement Agent benchmarks vendors side by side. Pre-built 'Blueprints' cover deep-dive investigations and TPRM board reporting, and the agent can draft vendor outreach. NormShield, Inc. dba Black Kite is in Boston, MA. Pricing is not published.
Frameworks (vendor-stated)
No framework tags yet.
Government authorizations
Registry records checked 2026-10-18. Scope “listing” means the certified product is this listing or the government boundary it already documents; “platform-only” means another product line is certified and the vendor does not state this agent is inside that boundary.
| Program | Product | Status | Scope | Source |
|---|---|---|---|---|
| TX-RAMP | Black Kite · Level 1 · TX1464698 · expires 2027-03-04 | Level 1 | Vendor platform; agent scope not stated | Registry |
| GovRAMP | Black Kite Third Party Risk Intelligence · Ready · Moderate | Ready | Vendor platform; agent scope not stated | Registry |
Pricing (as published)
Not published
Tasks
vendor risksecurity ratingsrisk prioritizationincident responsequestionnaire automation
Sources
- blackkite.com/ai (primary)
- blackkite.com/
- blackkite.com/privacy-policy
- blackkite.com/contact-us
- dir.texas.gov/resource-library-item/tx-ramp-certified-cloud-products
- govramp.org/program-participants
Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.
Next step: find an auditor
After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.
Narrow by region
This listing’s HQ country is United States. That is a starting point only — choose any published country page.
United States (suggested) · India · United Kingdom · Japan · Germany · Australia · Netherlands · Canada · Brazil · Singapore · Ireland · United Arab Emirates
Audit firms in India (131)
Audit firms in Japan (49)
Send a request Get matched with verified auditors All verified audit firms
Request received
Thanks, we've received your request. We'll be in touch before sharing it with any firm.
Reference:
Use-case comparisons
- TPRM and vendor-risk AI agents — 40 verified listings (Third-party risk, vendor assessments, security ratings and questionnaire automation)
Compare Black Kite AI Agent with
Alternatives
-
ACTICO Compliance Solutions AI agents (KI-Agenten for AML, customer and payment screening) — Rules-based AML, customer screening, payment screening and market-abuse software for banks and insurers in which AI agents do the research, analysis and documentation work (for example adverse-media checks on screening hits) inside the platform's governance, with the compliance analyst making the final decision. -
AiPrise AI agents (AML Agent, Website Agent and Document Agent) — KYC/KYB and compliance platform whose AI agents review AML screening hits (sanctions, PEP, adverse media) and recommend a decision under the customer's AML policy, check business websites for legitimacy and risk with ongoing monitoring, and review documents, with an analyst confirming the outcome. -
BigID (incl. AgentIQ agents) — Data security, privacy and DSPM platform whose AgentIQ agentic layer runs data-risk work from a request: four BigID agents at launch (Remediate Sensitive Data, AI Governance Enforcement, Access Exposure Analysis, Privacy Operations) investigate, prioritise and act, e.g. revoking access, remediating exposure, applying retention, quarantining data and fulfilling data subject requests. -
Blinqx KYC Agent (Wwft client due diligence and UBO checks for accounting firms) — Dutch AI agent that runs Wwft client due diligence for accounting and tax firms: it analyses client files, UBO structures and legal constructions, checks identities against PEP and sanctions lists, pulls audit information from the Dutch UBO register and Trade Register, flags profile changes and schedules re-reviews, and delivers audit-ready KYC files with a source reference for every conclusion, while a person makes the decision. -
Bretton AI agentic back-office platform (formerly Greenlite AI) — Agent platform for bank and fintech financial-crime operations: pre-built and custom agents gather evidence, apply the institution's policy and draft full cases for EDD, monitoring alerts, sanctions, SAR drafting and KYB, with every action logged. - Castellum.AI Arbiter AI agents (alert resolution, transaction and fraud monitoring agents) — AML/KYC agents that resolve L1 and L2 screening alerts (sanctions, PEPs, adverse media) against the institution's own policies, plus transaction-monitoring and fraud-monitoring agents, with a documented rationale for every decision.
See all Black Kite AI Agent alternatives →
FAQ (from this dataset)
What does Black Kite AI Agent do?
Third-party cyber risk agent made of sub-agents (Assessment, Incident Response, Threat Actor Intelligence, Investigation, Prioritization, Procurement) that assess vendors, investigate exposures, trigger rescans and draft outreach.
How much does Black Kite AI Agent cost?
Not published
Where is Black Kite (NormShield, Inc.) headquartered?
United States
What are alternatives to Black Kite AI Agent?
See the Black Kite AI Agent alternatives page for category-sharing listings in relevance order, not a ranking. Black Kite AI Agent alternatives.
Stay updated
Check your inbox to confirm your email. We’ll only send the weekly brief after you click the link.
We use your email only to send the newsletter. See our privacy policy.