Black Kite Unveils Adversary Susceptibility Index to Operationalize Threat Actor Intelligence in Third-Party Risk Management

Powerful solution enhances Black Kite's comprehensive threat intelligence to help TRPM teams identify high-risk vendors and take action faster

BOSTON, Aug. 6, 2025 /PRNewswire/ -- Black Kite, the leader in cyber third-party risk intelligence, today announced Adversary Susceptibility Index (ASI). Purpose-built for Third-Party Risk Management (TPRM) teams, ASI empowers them to proactively identify which vendors in their ecosystem are most vulnerable to specific threat actors before threats become a breach.

"With high-profile threats like Volt Typhoon, Black Basta, and APT29, security teams cannot wait for weeks to respond," said Ferhat Dikbiyik, Chief Research and Intelligence Officer, Black Kite. "As threat actors become more targeted and sophisticated, third-party risk teams need tools that reflect the real-world threat landscape. ASI gives organizations the ability to immediately understand which of their suppliers are likely to be in the crosshairs of specific threat groups. It's a powerful step forward in transforming cyber risk programs from passive monitoring to proactive, intelligence-driven action."

ASI builds on Black Kite's Ransomware Susceptibility Index (RSI) by mapping ransomware exposure to the specific threat actor groups behind the risk. ASI does this by revealing vendors that exhibit known vulnerabilities, behaviors, or configurations linked to that actor's tactics, techniques, and procedures (TTPs); exposure indicators, such as open RDP ports, unpatched CVEs, or stealer log leaks; and third parties warranting immediate outreach and coordinated remediation. As a result, organizations can quickly and accurately identify which vendors are most likely to be targeted based on each group's known behaviors, tools, and tactics, adding precision and context to their prioritization strategy.

Key features and benefits include:

• Threat Actor Intelligence for Suppliers: Instantly see which vendors align with a known adversary profile
• Vendor Sorting by Susceptibility: Prioritize outreach based on real-world exposure and targeted actor tactics
• Industry and Geography-Aware Risk: Assess risk with contextual intelligence, including actor-specific industries, regions, and motivations
• Proactive Vendor Engagement: Deliver actor-specific insights to suppliers to accelerate mitigation and build trust

ASI brings a new level of precision to cyber risk management by embedding threat actor intelligence directly into third-party risk workflows. Rather than relying on static indicators, ASI enables organizations to prioritize suppliers based on real-world adversary behavior. With this capability, Black Kite delivers a unified, intelligence-driven approach to vendor cyber risk.

For more information, visit blackkite.com/threat-actor-monitoring.

About Black Kite
Black Kite gives organizations a comprehensive, real-time view into cyber ecosystem risk so they can make informed risk decisions and improve business resilience while continuously monitoring more vendors, partners, and suppliers in an ever-changing digital landscape. Through an automated process, and a combination of threat, business and risk information, Black Kite provides cyber risk intelligence that goes beyond a simple risk score or rating. Black Kite serves more than 3,000 customers in a wide range of industries and has received numerous industry awards and recognition from customers.

Learn more at www.blackkite.com, or on the Black Kite blog.

Media Contact:
Michelle Kearney
Hi-Touch PR
443-857-9468
[email protected]

SOURCE Black Kite