CISO Tribune

Vendor comparison · 2 companies

Keepnet Labs vs UpGuard

Keepnet Labs sells security awareness training and multi-channel phishing simulations. UpGuard sells tools that move third-party risk monitoring from static snapshots to continuous oversight. CISO Tribune files both under Human risk management. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Keepnet Labs
  • UpGuard
Keepnet Labs vs UpGuard: Products, Customers and Funding Compared
Keepnet LabsKeepnet Labs sells security awareness training and multi-channel phishing simulations.keepnetlabs.comUpGuardUpGuard sells tools that move third-party risk monitoring from static snapshots to continuous oversight.upguard.com
What it sells
  • Phishing Simulator[1][2][7][9]Runs email phishing simulations.
  • Vishing assessment[15]Live calls from experienced social engineers to test verification.
  • User Risk[1][5][10]Human risk management that gives visibility into human risk and enables safe AI adoption.
  • Risk Automations[1][10]Risk automation that connects a risk stack to system APIs to automate discovery, notification and remediation.
  • Questionnaire AI[11]Automatically completes questionnaires using a customer's own security documentation.
Categories
Headquarters
London, United KingdomHobart, Australia[2]
Founded
2017[1]2012[2]
Ownership and funding
Not stated on its pagesPrivately held[2][3]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: listed, seen October 26, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[3]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Keepnet Labs says any team that takes calls can be included in a vishing assessment, with the help desk requested most. Keepnet Labs organises published customer numbers by sector. Keepnet Labs prices its plans per employee per month, billed annually, and customers can buy through a Keepnet partner. Keepnet Labs lists hosting regions of the UK, EU, US, Canada, the UAE and Türkiye.Not written yet
Last verified
September 27, 2026September 27, 2026

Where they overlap

  • Keepnet Labs and UpGuard are both filed under Human risk management.

Where they differ, field by field

  • Keepnet Labs's primary category is Human risk management; UpGuard's is Third-party risk and security ratings.
  • Keepnet Labs is also filed under Security awareness training, Threat intelligence and Incident response and forensics. UpGuard is also filed under External attack surface management.
  • Keepnet Labs lists Phishing Simulator and Vishing assessment. UpGuard lists User Risk, Risk Automations and Questionnaire AI.
  • Keepnet Labs is headquartered in London, United Kingdom. UpGuard is headquartered in Hobart, Australia.
  • Keepnet Labs was founded in 2017. UpGuard was founded in 2012.
  • UpGuard is privately held.

What it sells: Keepnet Labs

What Phishing Simulator does[1][2][7][9]
Phishing Simulator runs email phishing simulations. Phishing Simulator provides templates across languages and difficulty levels.
What Vishing assessment does[15]
A Keepnet vishing assessment is a set of live calls from experienced social engineers to employees, using pretexts the customer approves. Senior Keepnet social engineers hold the calls themselves, with no AI voices.

What it sells: UpGuard

What User Risk does[1][5][10]
User Risk continuously detects unsanctioned applications running across a workforce and exposes over-privileged permissions and credential leaks. User Risk nudges employees mid-workflow and redirects them to approved corporate alternatives. User Risk sits in the browser and blocks unauthorized file uploads and copy-pastes.
What Risk Automations does[1][10]
UpGuard describes risk automation that connects a risk stack to system APIs to automate discovery, notification and remediation. The offering automates discovery, notification and resolution by integrating a risk stack.
What Questionnaire AI does[11]
Questionnaire AI automatically completes questionnaires using a customer's own security documentation. Customers upload documents such as a SOC 2 report, an information security report and previously completed questionnaires.

Questions about Keepnet Labs and UpGuard

What do Keepnet Labs and UpGuard sell?
Keepnet Labs sells Phishing Simulator and Vishing assessment. UpGuard sells User Risk, Risk Automations and Questionnaire AI.
Are Keepnet Labs and UpGuard in the same category?
They share Human risk management. Keepnet Labs's primary category is Human risk management and UpGuard's is Third-party risk and security ratings.
Where are Keepnet Labs and UpGuard headquartered?
Keepnet Labs is headquartered in London, United Kingdom. UpGuard is headquartered in Hobart, Australia.
When were Keepnet Labs and UpGuard founded?
Keepnet Labs was founded in 2017. UpGuard was founded in 2012.
Who owns Keepnet Labs and UpGuard?
UpGuard is privately held.
Who are Keepnet Labs and UpGuard sold to?
Keepnet Labs says any team that takes calls can be included in a vishing assessment, with the help desk requested most.

About Keepnet Labs

Keepnet Labs sells security awareness training and multi-channel phishing simulations. Keepnet sells a plan that adds incident response for the emails, SMS and calls employees report, and before and after behaviour measurement. Signals from the security stack a customer already runs become named behaviours in Keepnet.[4][7][9]

Keepnet sends a nudge in the moment, then training for the same behaviour. Keepnet nudges are short reminders by email, SMS and Teams, timed to each employee's behaviour. Keepnet security awareness training is matched to role, risk and behaviour, with nudges. Compliance 360 is role-based compliance training and readiness tracking. Secure Behaviour Dashboard shows before and after behaviour change, and risky behaviour from security tools drives nudges, training and simulations. Keepnet executive and advanced reports are ready-made reports with before and after behaviour data.[7][9]

Phishing Simulator runs email phishing simulations, with templates across languages and difficulty levels. Keepnet voice phishing simulations use pre-recorded, text-to-speech or two-way AI calls. Keepnet runs voice phishing simulations from numbers it owns, not spoofed. Keepnet places the call and records what each employee does. Keepnet voice campaign setup starts when a customer adds phone numbers and then creates a voice campaign. Keepnet SMS phishing simulations use numbers that Keepnet provides. Keepnet callback phishing is an email that asks the employee to call a number. Keepnet email threat simulator tests how email defences handle realistic threats. Keepnet customers can run voice, SMS, email, QR code and callback simulations themselves from the Keepnet console.[2][7][9][14][15]

Incident Responder provides analysis and response for reported emails, SMS and calls. Keepnet threat sharing lets customers share and receive phishing intelligence with peers. Keepnet says AI agents run the loop and, by default, nothing goes out until the customer approves it. Keepnet states that customer data is not used to train AI models.[3][7][9]

Senior Keepnet social engineers hold the calls themselves, with no AI voices. Keepnet vishing assessments are requested most for the help desk, and any team that takes calls can be included. Password and MFA resets, account changes and callbacks to the number on file are the most common scopes of a Keepnet vishing assessment. Keepnet vishing assessment callers are UK, Europe and US callers, in English and Spanish. Card, health, government ID and other high-sensitivity data are never requested or recorded in a Keepnet vishing assessment. Keepnet vishing assessment findings point to the verification steps and policies to strengthen, not to individual employees. Keepnet vishing assessment recordings are encrypted and deleted within five business days of report acceptance, under EU and UK GDPR and the published DPA. In a Keepnet vishing simulation, a platform the customer's team controls runs AI-agent, text-to-speech or recorded calls.[15]

Keepnet offers hosting in the region the customer chooses: the UK, EU, US, Canada, the UAE or Türkiye. Microsoft Azure hosts every Keepnet region except Türkiye, which AWS hosts. Keepnet lists certified security of ISO/IEC 27001, with data in the region the customer chooses. Keepnet states four current certifications, independently audited. Keepnet lists AES-256 at rest and TLS 1.2 or 1.3 in transit.[9][15]

Keepnet prices its plans per employee per month, billed annually, on a 3-year agreement, excluding tax, and 1-year agreements are quoted. Customers buying through a Keepnet partner have the partner quote, bill and support them. Keepnet names Whitbread and Koton among the teams it describes with the numbers they moved.[5][6][7][8][9][10][11][14][15]

Keepnet Labs on the record

Sources

Keepnet Labs full record

  1. [1]About usKeepnet Labs · keepnetlabs.com · published July 23, 2024 · Tier A
  2. [2]Phishing simulatorKeepnet Labs · keepnetlabs.com · published September 24, 2026 · Tier A
  3. [3]Threat intelligenceKeepnet Labs · keepnetlabs.com · published March 19, 2025 · Tier A
  4. [4]Phishing incident responseKeepnet Labs · keepnetlabs.com · published August 25, 2026 · Tier A
  5. [5]Privacy policyKeepnet Labs · doc.keepnetlabs.com · undated page, accessed September 27, 2026 · Tier A
  6. [6]About Us | KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
  7. [7]Human Risk Management Platform for Cybersecurity | KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
  8. [8]Vishing as a Service: Managed Live-Human Calls - KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
  9. [9]Security Awareness Training Pricing & Plans | KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
  10. [10]Customer Case Studies: Phishing Simulation Results | KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
  11. [11]Cybersecurity Platform Features & Benefits: User Management & Automation | KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
  12. [12]Integrations - KeepnetKeepnet Labs · undated page, accessed October 26, 2026 · Tier A
  13. [13]Keepnet Labs Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 26, 2026 · Tier C
  14. [14]Voice delivery Integration - KeepnetKeepnet · undated page, accessed November 10, 2026 · Tier A
  15. [15]Vishing Assessment: Social Engineering by Phone | KeepnetKeepnet · undated page, accessed November 10, 2026 · Tier A

UpGuard full record

  1. [1]upguard.comUpGuard · upguard.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Upguard raises 75m in series c funding to accelerate market leadership in cyber risk posture managementUpGuard · upguard.com · published February 26, 2026 · Tier A
  3. [3]UpGuard Vendor Risk Reviews & Product DetailsG2 · undated page, accessed October 29, 2026 · Tier C
  4. [4]Continuous Third-Party Risk Monitoring | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
  5. [5]The #1 Cyber Risk Posture Management Platform | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
  6. [6]Pricing For The UpGuard CRPM Platform | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
  7. [7]Third-party Risk Assessment Software | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
  8. [8]Lucid Security Rating & Data Breaches | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
  9. [9]GiftPay Security Rating & Data Breaches | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
  10. [10]User Risk: A Human Risk Management Platform | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
  11. [11]Free AI-Powered Security Questionnaires Done in MinutesUpGuard · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.