Downloadable Software Analysis (CPE)
Maps software products to their producing vendors and delivers a risk rating based on CVEs, exploits, certifications, and end-of-life status.
PRODUCT ANALYSIS
Unlock Product-Level Intelligence to Mitigate Software Supply Chain Exposure
Black Kite’s Product Analysis module enables TPRM teams to go one step beyond vendor analysis by assessing individual products, giving them deeper insight into supply chain risks from third-party software.
Good Vendor, Risky Product
A strong overall vendor rating does not guarantee the security of the individual products they offer. This creates a dilemma for risk teams, who must make decisions about specific software products, but may only have a vendor-level risk view.
Go Beyond Vendor Analysis with Product-Level Intelligence
Black Kite Product Analysis combines deep CPE, SaaS subdomain, and SBOM analysis to deliver a clear view of product-level risk exposure.
SaaS Subdomain Analysis
Identifies SaaS subdomains, associates them with the correct company, and rates risk level based on vulnerabilities, weaknesses, and potential exploits.
SBOM Analysis
Analyzes open-source components in third-party software, including nested dependencies, to uncover hidden vulnerabilities and risks.
Use Cases
Software Supply Chain Risk Assessment
Identify vulnerabilities and risks within software products used by your organization or your third parties.
Targeted Risk Mitigation
Leverage granular intelligence to drive specific mitigation actions, such as product upgrades and configuration changes to reduce risk exposure.
Technical Product Evaluation
Analyze a product's components and vulnerability history before procurement to inform technical and security-based acquisition decisions.
Frequently Asked Questions About Product-Level Intelligence
See Risks in Third-Party Software
Give us 25 minutes and we’ll show you Product Analysis in action.