Downloadable Software Analysis (CPE)
Maps software products to their producing vendors and delivers a risk rating based on CVEs, exploits, certifications, and end-of-life status.

Black Kite’s Product Analysis module enables TPRM teams to go one step beyond vendor analysis by assessing individual products, giving them deeper insight into supply chain risks from third-party software.

A strong overall vendor rating does not guarantee the security of the individual products they offer. This creates a dilemma for risk teams, who must make decisions about specific software products, but may only have a vendor-level risk view.
Black Kite Product Analysis combines deep CPE, SaaS subdomain, and SBOM analysis to deliver a clear view of product-level risk exposure.
Give us 25 minutes and we’ll show you Product Analysis in action.