UpGuard

What the company sells

UpGuard sells tools that move third-party risk monitoring from static snapshots to continuous oversight. UpGuard offers a TPRM platform that delivers continuous vendor insights, 360-degree assessments and AI-powered workflows. UpGuard describes a platform with a unified view of cyber risk across an organization. UpGuard offers attack surface management and threat intelligence to expose, surface and remediate external risk. UpGuard offers trust management with trust centers and questionnaire imports. UpGuard offers risk automation that automates discovery, notification and resolution by integrating a risk stack.

For vendor monitoring, UpGuard scans attack surfaces and vulnerabilities, tracks security news and incidents, and sends alerts when risk appears. UpGuard runs daily scans and uses threat feeds that surface exposures, misconfigurations, CVEs and security incidents. UpGuard scores each finding for severity and enriches it with impact and context. UpGuard tracks vendor posture changes over time, which lets customers demonstrate continuous oversight and measure improvement or decline. UpGuard sends notifications when something changes, such as a new vulnerability, a breach or a posture shift.

UpGuard generates security ratings through the analysis of commercial, open-source and proprietary threat intelligence feeds and non-intrusive data collection methods. Vendor inventory helps customers find, track and monitor the security posture of any organization. Customers can categorize vendors, compare them against industry benchmarks and see how their security posture changes over time. Vendor tiering classifies vendors by the inherent risk they pose to the organization and adjusts the level of assessment for each vendor. UpGuard can assign vendors to labels automatically based on Vendor Relationship Questionnaire responses. The vendor portfolios feature organizes monitored vendors by different use-cases into separate lists. UpGuard compliance reporting maps risk details for a customer or its vendors against security standards and compliance frameworks such as NIST CSF and ISO 27001. UpGuard shows the domains and IPs that belong to an individual vendor and their cyber risks.

On the attack surface side, UpGuard describes continuous visibility into a digital footprint to detect threats and to know the full attack surface. UpGuard continuously monitors externally observable security posture across website security, email, network, DNS, encryption, data leakage, IP and domain reputation and vulnerability management. UpGuard security ratings reflect only what can be verified from outside the organization and are not an audit of internal controls.

User Risk continuously detects unsanctioned applications running across a workforce and exposes over-privileged permissions and credential leaks. User Risk nudges employees mid-workflow, flags violations instantly and redirects them to approved corporate alternatives. User Risk sits in the browser and blocks unauthorized file uploads and copy-pastes.

Questionnaire AI automatically completes questionnaires using a customer's own security documentation. Customers upload security documents such as a SOC 2 report, an information security report and previously completed questionnaires to Questionnaire AI. UpGuard offers AI-powered questionnaire automation and a Trust Page. UpGuard describes risk automation that connects a risk stack to system APIs to automate discovery, notification and remediation.^{[1][4][5][6][7][8][9][10][11]}

Categories

• Third-party risk and security ratings (primary category)
• External attack surface management
• Human risk management
• Compare UpGuard with companies in the same categoryside by side

Headquarters

Hobart, Australia^[2]

Founded

2012^[2]

Ownership

Privately held^[2][3]

CISO on record

Not yet on our record. Send a verified source

Website

upguard.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• User Risk^[1][5][10]

  Human risk management that gives visibility into human risk and enables safe AI adoption.

  User Risk continuously detects unsanctioned applications running across a workforce and exposes over-privileged permissions and credential leaks. User Risk nudges employees mid-workflow and redirects them to approved corporate alternatives. User Risk sits in the browser and blocks unauthorized file uploads and copy-pastes.

• Risk Automations^[1][10]

  Risk automation that connects a risk stack to system APIs to automate discovery, notification and remediation.

  UpGuard describes risk automation that connects a risk stack to system APIs to automate discovery, notification and remediation. The offering automates discovery, notification and resolution by integrating a risk stack.

• Questionnaire AI^[11]

  Automatically completes questionnaires using a customer's own security documentation.

  Questionnaire AI automatically completes questionnaires using a customer's own security documentation. Customers upload documents such as a SOC 2 report, an information security report and previously completed questionnaires.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of UpGuard's categories, then alphabetical. A list from the record, never a ranking.

• On third-party risk and security ratings, UpGuard competes with Bitsight, Black Kite, iCOUNTER, Panorays, Prevalent, RiskRecon, SecurityScorecard, Whistic, Attaxion, Recorded Future and 28 more.

• On external attack surface management, UpGuard competes with Attaxion, Censys, CyCognito, Hadrian, IONIX, Bitsight, Recorded Future, SOCRadar, Arctic Wolf, Bishop Fox and 25 more.

• On human risk management, UpGuard competes with Fable Security, Hoxhunt, Keepnet Labs, Living Security, Cofense, Doppel, Egress, Frame Security, Immersive, Jericho Security and 4 more.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

• G2 · 4.5 out of 5^[3]seen November 10, 2026

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]upguard.comUpGuard · upguard.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
2. [2]Upguard raises 75m in series c funding to accelerate market leadership in cyber risk posture managementUpGuard · upguard.com · published February 26, 2026 · Tier A: the company, a regulator or a filing
3. [3]UpGuard Vendor Risk Reviews & Product DetailsG2 · undated page, accessed October 29, 2026 · Tier C
4. [4]Continuous Third-Party Risk Monitoring | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
5. [5]The #1 Cyber Risk Posture Management Platform | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
6. [6]Pricing For The UpGuard CRPM Platform | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
7. [7]Third-party Risk Assessment Software | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
8. [8]Lucid Security Rating & Data Breaches | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]GiftPay Security Rating & Data Breaches | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
10. [10]User Risk: A Human Risk Management Platform | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
11. [11]Free AI-Powered Security Questionnaires Done in MinutesUpGuard · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 10, 2026 from the references above.

Work for UpGuard? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.