Cyber Rating

A cyber rating is a standardized measure of an organization's external cybersecurity posture, derived from observable data rather than self-reporting. Cyber ratings are used in third-party risk management to screen vendors, monitor posture over time, and prioritize remediation efforts. Black Kite's Cyber Rating expresses posture as letter grades (A through F) across 20 technical categories organized into four groups: Safeguard, Privacy, Resiliency, and Reputation. It is built on open standards including MITRE's Cyber Threat Susceptibility Assessment, Common Weakness Scoring System (CWSS), Common Weakness Risk Analysis Framework (CWRAF), and Common Vulnerability Scoring System (CVSS), making every output transparent, auditable, and defensible.