Bitsight is a cyber risk platform that maps the attack surface of an organisation and its supply chain. It combines discovery of assets, subsidiaries and cloud environments with vulnerability and threat intelligence, scores the likelihood that vulnerabilities will be exploited, and tracks the exposure of third parties and more distant links in the chain. It also includes detection of compromised credentials and ransomware, benchmarking and reporting. The service is delivered as SaaS and through APIs, data feeds and an MCP connection.
BitSight Technologies, Inc. is based in Boston in the United States and is therefore subject to US jurisdiction, including the CLOUD Act. According to its data processing agreement, the service is hosted by Amazon Web Services and the customer agrees to personal data being processed in the United States; no EU region is documented. That agreement covers the GDPR, the UK GDPR and the Swiss data protection act with standard contractual clauses, and the company participates in the EU-US Data Privacy Framework. European organisations should factor the transfer to the US into their risk assessment.