Threat Hunting & Incident Response
Investigate threats, validate indicators, and analyze suspicious activity.

BK Labs is Black Kite's research and innovation organization. We analyze ransomware, threat actors, and supply chain risk across more than 40 million organizations, applying what we learn to continuously validate Black Kite's intelligence and develop cutting-edge capabilities.

New threat actor groups emerge weekly. AI is accelerating how attackers identify targets, exploit vulnerabilities, and develop new techniques. Digital supply chains are more dynamic and interconnected than ever. Keeping pace takes a team built to move at that speed. That's why BK Labs exists.

Continuous dark web monitoring, external cyber telemetry, and more than 40 million organizations under observation.
Original research that surfaces emerging threats, attacker behavior, and supply chain risk trends.
Every finding measured against real-world cyber events to prove the intelligence holds up.
Research turned into capabilities that help you identify risk earlier and act faster.
BK Labs measures the Ransomware Susceptibility Index® (RSI™) against publicly disclosed ransomware incidents to test how well it separates high-risk organizations from low-risk ones.

Tested every year since 2023. The model keeps getting sharper.
LATEST INNOVATIONS
ThreatTrace™ Search gives security, risk, and threat intelligence teams direct access to Black Kite's underlying cyber intelligence.
[insert video]
Investigate threats, validate indicators, and analyze suspicious activity.
Dig deeper into findings, gather context, and support vendor remediation.

BK Labs is led by Candan Bolukbas, Black Kite CTO and co-founder, and Dr. Ferhat Dikbiyik, Chief Research and Intelligence Officer.



Most third-party risk research is a survey. Ours is primary. Reports and analysis from the Black Kite Research Group™ are built on real incidents, real victims, and defensible data.
REPORTS
ZDNet: Did ransomware attacks really decline? Here are your business' 4 best defenses
Dark Reading: Ransomware Is Accelerating, But It's Not Because of AI
Cyber Security Dive: Ransomware victims fail to fix flaws that exposed them
SecurityWeek: Supply Chain Security Crisis: Too Many Vulnerabilities, Too Little Visibility
InfoSecurity Magazine: Huge "Shadow Layer" of Organizations Hit by Supply Chain Attacks
See how Black Kite turns research into intelligence and capabilities that help you identify risk earlier and act faster.