third-party-cyber-risk
(4)
Jessica Stanford Saw the Supply-Chain Attack Coming. Now She Markets the Defense.
In 2018, Jessica Stanford warned that attackers would slip through the smaller companies around the perimeter. Seven years and several cybersecurity startups later, that old prediction became her new brief.
Black Kite
Black Kite is a Boston-based cybersecurity company that rates and monitors the cyber risk posed by an organization's third-party vendors and supply chain. Built from a hacker's perspective, its platform combines non-intrusive external assessments, ransomware-likelihood scoring, standards-based compliance mapping, and Open FAIR financial-impact modeling so risk teams can see, quantify, and act on the exposure hiding inside their vendor ecosystem.
BlueVoyant
BlueVoyant is a New York-based cyber defense company that combines a cloud-native technology platform with a 24x7 global security operations team to protect organizations from threats inside and outside their network. Its full-spectrum platform spans managed detection and response (MDR/MXDR), digital risk protection, and supply chain (third-party) cyber risk defense, drawing on global telemetry, dark web intelligence, and a deep partnership with Microsoft and Splunk. Founded in 2017 by James Rosenthal and Thomas Glocer, the company serves enterprises and governments worldwide and has raised roughly $695M to date.
James Rosenthal
James (Jim) Rosenthal co-founded BlueVoyant in 2017 and built it from a startup into a global cybersecurity company with more than 650 employees across five continents. A former Chief Operating Officer of Morgan Stanley, where he answered to the CEO and board for cybersecurity, he turned a Wall Street obsession with protecting the financial system into a company that defends businesses and governments against internal and supply-chain threats. In May 2026 he handed the CEO role to John Hernandez and became Chairman of the Board.