attack-surface
(3)
Black Kite
Black Kite is a Boston-based cybersecurity company that rates and monitors the cyber risk posed by an organization's third-party vendors and supply chain. Built from a hacker's perspective, its platform combines non-intrusive external assessments, ransomware-likelihood scoring, standards-based compliance mapping, and Open FAIR financial-impact modeling so risk teams can see, quantify, and act on the exposure hiding inside their vendor ecosystem.
Lema AI
Lema AI is a New York-based cybersecurity startup building an agentic AI platform for third-party risk management (TPRM). Founded by three veterans of Israel's Unit 8200, Lema replaces static vendor questionnaires and check-the-box compliance with continuous, behavior-based analysis that maps how vendors actually operate inside an enterprise - tracking data access, permission changes and 'risk drift' to surface real attack paths. The company emerged from stealth in February 2026 with roughly $24M in total funding, including a $17.5M Series A led by Team8.
Joe Eandi
Joe Eandi is a General Partner and Co-Founder of Cyber Mentor Fund, a mentorship-driven early-stage venture fund exclusively focused on cybersecurity startups. A former attorney turned tech executive turned founder turned investor, Eandi brings an unusually wide arc to his work: he started as a corporate lawyer at Wilson Sonsini, served as General Counsel at Inktomi through its Yahoo acquisition, spent seven years as SVP and GM at LiveOps, founded and ran BrightPoint Security (acquired by ServiceNow in 2016), and then co-founded Cyber Mentor Fund in 2018 alongside Tim Eades. CMF deploys $100K-$5M from pre-seed through Series A into cybersecurity startups, with over 35 portfolio companies, three unicorns, and four successful exits including Okera (Databricks), Revelstoke (Arctic Wolf), Message Control (Mimecast), and LeakSignal (F5).