CISO Tribune

Vendor comparison · 2 companies

Living Security vs UpGuard

Living Security sells a platform that reads signals from the security tools its customers already run to reveal human and agent risk, and guides the response. UpGuard sells tools that move third-party risk monitoring from static snapshots to continuous oversight. CISO Tribune files both under Human risk management. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Living Security
  • UpGuard
Living Security vs UpGuard: Products, Customers and Funding Compared
Living SecurityLiving Security sells a platform that reads signals from the security tools its customers already run to reveal human and agent risk, and guides the response.livingsecurity.comUpGuardUpGuard sells tools that move third-party risk monitoring from static snapshots to continuous oversight.upguard.com
What it sells
  • Livvy[5][10]Livvy proposes the next move, and the customer's team approves it.
  • Phishing simulation[5][7]Phishing simulation aimed by the customer's risk data, not its calendar.
  • Human Risk Management Framework[5]An open framework of 137 signals, open to everyone under CC BY 4.0.
  • Living Security SCIM[8]Account provisioning that follows the SCIM 2.0 standard.
  • User Risk[1][5][10]Human risk management that gives visibility into human risk and enables safe AI adoption.
  • Risk Automations[1][10]Risk automation that connects a risk stack to system APIs to automate discovery, notification and remediation.
  • Questionnaire AI[11]Automatically completes questionnaires using a customer's own security documentation.
Categories
Headquarters
Austin, United States[2]Hobart, Australia[2]
Founded
2017[1][4]2012[2]
Ownership and funding
Not stated on its pagesPrivately held[2][3]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • March 24, 2026Living Security announced general availability of its AI-native human risk management platform, which extends risk management to both human employees and AI agents.[9]
  • March 12, 2026Living Security announced that Edna Conway has joined the company as Executive Advisor.[11]
  • January 14, 2026Living Security launched Livvy, an AI intelligence engine for its AI-native human risk management platform, made available in beta.[10]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[3]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Living Security sells to organisations that already run security tools, from which it reads signals to reveal human and agent risk. Our reading is that the platform serves security teams that keep the final decision on responses, since approvals stay with the customer's team. The workforce Living Security describes includes people in business functions such as finance, with an accounts payable lead given as an example. Our reading is that Living Security sells to organisations running AI agents alongside people, with every agent held to an accountable owner.Not written yet
Last verified
September 27, 2026September 27, 2026

Where they overlap

  • Living Security and UpGuard are both filed under Human risk management.

Where they differ, field by field

  • Living Security's primary category is Human risk management; UpGuard's is Third-party risk and security ratings.
  • Living Security is also filed under Security awareness training. UpGuard is also filed under External attack surface management.
  • Living Security lists Livvy, Phishing simulation, Human Risk Management Framework and Living Security SCIM. UpGuard lists User Risk, Risk Automations and Questionnaire AI.
  • Living Security is headquartered in Austin, United States. UpGuard is headquartered in Hobart, Australia.
  • Living Security was founded in 2017. UpGuard was founded in 2012.
  • UpGuard is privately held.

What it sells: Living Security

What Livvy does[5][10]
Livvy recommends an action for each person, a playbook runs the action, and every result flows back into the Human Risk Index. Livvy can recommend step-up MFA and a credential reset for a person, then a 90-second coaching nudge, and waits for the team's approval. Approvals stay with the customer's team.
What Phishing simulation does[5][7]
Who is being targeted by real attacks, what assets those users can access and how they have behaved in the past go into shaping each test before it goes out. Living Security is launching support for phishing simulations via email and Teams. SMS, voice, and video simulations are on the Living Security near-term roadmap.
What Human Risk Management Framework does[5]
The Living Security map of how risk builds comes from the Human Risk Management Framework, which has 137 signals and is open to everyone under CC BY 4.0. In the map, signals from nine risk domains join into cohorts, cohorts feed sequences, and each sequence heads for a breach scenario.
What Living Security SCIM does[8]
Living Security SCIM follows the SCIM 2.0 standard (RFC 7643 and RFC 7644). SailPoint Identity Security Cloud and IdentityIQ manage Living Security accounts through the SailPoint SCIM 2.0 connector. The schema includes the core user, the Enterprise extension and the Living Security extension.

What it sells: UpGuard

What User Risk does[1][5][10]
User Risk continuously detects unsanctioned applications running across a workforce and exposes over-privileged permissions and credential leaks. User Risk nudges employees mid-workflow and redirects them to approved corporate alternatives. User Risk sits in the browser and blocks unauthorized file uploads and copy-pastes.
What Risk Automations does[1][10]
UpGuard describes risk automation that connects a risk stack to system APIs to automate discovery, notification and remediation. The offering automates discovery, notification and resolution by integrating a risk stack.
What Questionnaire AI does[11]
Questionnaire AI automatically completes questionnaires using a customer's own security documentation. Customers upload documents such as a SOC 2 report, an information security report and previously completed questionnaires.

Questions about Living Security and UpGuard

What do Living Security and UpGuard sell?
Living Security sells Livvy, Phishing simulation, Human Risk Management Framework and Living Security SCIM. UpGuard sells User Risk, Risk Automations and Questionnaire AI.
Are Living Security and UpGuard in the same category?
They share Human risk management. Living Security's primary category is Human risk management and UpGuard's is Third-party risk and security ratings.
Where are Living Security and UpGuard headquartered?
Living Security is headquartered in Austin, United States. UpGuard is headquartered in Hobart, Australia.
When were Living Security and UpGuard founded?
Living Security was founded in 2017. UpGuard was founded in 2012.
Who owns Living Security and UpGuard?
UpGuard is privately held.
Who are Living Security and UpGuard sold to?
From its own pages, Living Security sells to organisations that already run security tools, from which it reads signals to reveal human and agent risk.
What have Living Security and UpGuard announced recently?
March 24, 2026: Living Security announced general availability of its AI-native human risk management platform, which extends risk management to both human employees and AI agents.

About Living Security

Living Security sells a platform that reads signals from the security tools its customers already run to reveal human and agent risk, and guides the response. Living Security states that humans and AI agents now share access, data, and decisions. Living Security says human risk management was built on the assumption that the identity taking an action is a person, and that the assumption no longer holds. Living Security describes an AI agent as an identity that has credentials, does things that cannot be fully predicted, and can move risk as fast and as much as a person can. Living Security notes that AI agents have permissions, touch data and take action.[5][7]

Living Security joins hundreds of human risk signals from the security and HR tools customers already use, per person, with Livvy guiding the response. Living Security weighs threat, access and behavior so that the riskiest few people rise first. In the Living Security model, signals from nine risk domains join into cohorts, cohorts feed sequences, and each sequence heads for a breach scenario. The Living Security map of how risk builds comes from the Human Risk Management Framework, which has 137 signals and is open to everyone under CC BY 4.0. In one Living Security example, four signals from email security and the identity provider reach an accounts payable lead in Finance, and that person's priority rises to High.[5]

Livvy proposes the next move, and the customer's team approves it. Livvy recommends an action for each person, a playbook runs the action, and every result flows back into the Human Risk Index. Living Security guides or runs approved responses, and approvals stay with the customer's team. Livvy can recommend step-up MFA and a credential reset for a person, then a 90-second coaching nudge, and waits for the team's approval. Living Security says that when an employee's score moves, the response moves with it, and the response can be coaching, tightening the person's authentication or changing what the person can access.[3][5][7]

Living Security offers phishing simulation aimed by the customer's risk data, not its calendar. For a Living Security phishing simulation, who is being targeted by real attacks, what assets those users can access and how they have behaved in the past go into shaping the test before it goes out. Living Security is launching support for phishing simulations via email and Teams. Living Security places SMS, voice, and video simulations on its near-term roadmap. In a playbook Living Security demonstrated, everyone who clicked gets training and the whole team gets a nudge. Access tightens on its own for the people who clicked in a playbook Living Security demonstrated.[5][7]

Living Security offers AI calls and two-way texts that talk back, then coach. Living Security offers a library aimed by risk and delivered by playbooks. Living Security takes content from threat to training that is on brand and approved by the customer. Living Security offers team escape rooms and a tabletop for practicing the breach. Living Security offers a way to see the shadow AI and to hold every agent to an accountable owner.[5]

Microsoft Entra ID can contribute normalized identity, sign-in, risk, device, and attack-simulation activity to Living Security. With a Microsoft Entra ID permission for group membership actions, a Living Security playbook can add a person to, or remove them from, a Microsoft Entra ID group. For group membership actions on the Microsoft Entra ID connection, an administrator chooses an explicit allowlist of groups on the connection. A Living Security customer can invite a system admin into the platform with scoped permissions, so that the admin enters integration credentials directly.

SailPoint Identity Security Cloud and IdentityIQ manage Living Security accounts through the SailPoint SCIM 2.0 connector. Living Security SCIM follows the SCIM 2.0 standard (RFC 7643 and RFC 7644). When a source sends a custom extension attribute for the first time, Living Security adds that extension. Living Security holds some changes that succeed in SailPoint, for example a change that would remove the customer's last owner.[3][5][8]

Living Security on the record

Sources

Living Security full record

  1. [1]About usLiving Security · livingsecurity.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]ContactLiving Security · livingsecurity.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]PlatformLiving Security · livingsecurity.com · undated page, accessed September 27, 2026 · Tier A
  4. [4]Living security strengthens cybersecurity human risk platform with phishing simulation moderator free training and foreign translation support 301277650Living Security via PR Newswire · prnewswire.com · published April 27, 2021 · Tier A
  5. [5]Living Security | AI-native Human Risk ManagementLiving Security · undated page, accessed October 26, 2026 · Tier A
  6. [6]Microsoft Entra ID integration setup - Living Security PlatformLiving Security · undated page, accessed October 26, 2026 · Tier A
  7. [7]HRMCon 2026: Human Risk Management Conference | Living SecurityLiving Security · undated page, accessed November 10, 2026 · Tier A
  8. [8]Set up SCIM with SailPoint - Living Security PlatformLiving Security · undated page, accessed November 10, 2026 · Tier A
  9. [9]Living Security Launches AI-Native Human Risk Management PlatformLiving Security · published March 24, 2026 · Tier A
  10. [10]Living Security Launches Livvy, AI-Native Predictive HRM IntelligenceLiving Security · published January 14, 2026 · Tier A
  11. [11]Living Security Welcomes Edna Conway as Executive AdvisorLiving Security · published March 12, 2026 · Tier A

UpGuard full record

  1. [1]upguard.comUpGuard · upguard.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Upguard raises 75m in series c funding to accelerate market leadership in cyber risk posture managementUpGuard · upguard.com · published February 26, 2026 · Tier A
  3. [3]UpGuard Vendor Risk Reviews & Product DetailsG2 · undated page, accessed October 29, 2026 · Tier C
  4. [4]Continuous Third-Party Risk Monitoring | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
  5. [5]The #1 Cyber Risk Posture Management Platform | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
  6. [6]Pricing For The UpGuard CRPM Platform | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
  7. [7]Third-party Risk Assessment Software | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
  8. [8]Lucid Security Rating & Data Breaches | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
  9. [9]GiftPay Security Rating & Data Breaches | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
  10. [10]User Risk: A Human Risk Management Platform | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
  11. [11]Free AI-Powered Security Questionnaires Done in MinutesUpGuard · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.