What do Tenable and UpGuard sell?

Tenable sells Tenable One. UpGuard sells User Risk, Risk Automations and Questionnaire AI.

Are Tenable and UpGuard in the same category?

They share External attack surface management. Tenable's primary category is Vulnerability management and UpGuard's is Third-party risk and security ratings.

Where are Tenable and UpGuard headquartered?

UpGuard is headquartered in Hobart, Australia.

When were Tenable and UpGuard founded?

Tenable was founded in 2002. UpGuard was founded in 2012.

Who are Tenable and UpGuard sold to?

Tenable describes converged OT and IT environments among the environments it covers.

Vendor comparison · 2 companies

Tenable vs UpGuard

Tenable sells Tenable One, a platform that unifies security visibility, insight and action across an attack surface. UpGuard sells tools that move third-party risk monitoring from static snapshots to continuous oversight. CISO Tribune files both under External attack surface management. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

Tenable
UpGuard

Add a company

Tenable vs UpGuard: Products, Customers and Funding Compared
What it sells
	TenableTenable sells Tenable One, a platform that unifies security visibility, insight and action across an attack surface.tenable.com	UpGuardUpGuard sells tools that move third-party risk monitoring from static snapshots to continuous oversight.upguard.com
What it sells	Tenable One^[2][3][4][8]A platform that unifies security visibility, insight and action across an attack surface.	User Risk^[1][5][10]Human risk management that gives visibility into human risk and enables safe AI adoption. Risk Automations^[1][10]Risk automation that connects a risk stack to system APIs to automate discovery, notification and remediation. Questionnaire AI^[11]Automatically completes questionnaires using a customer's own security documentation.
Categories
Categories	Vulnerability management (primary category) External attack surface management Cloud-native application protection (CNAPP) OT and ICS security	Third-party risk and security ratings (primary category) External attack surface management Human risk management
Headquarters
Headquarters	Not stated on its pages	Hobart, Australia^[2]
Founded
Founded	2002	2012^[2]
Ownership and funding
Ownership and funding	Not stated on its pages	Privately held^[2][3]
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	Not stated on its pages	Not stated on its pages
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: listed, seen November 10, 2026^[10] Gartner Peer Insights: listed, seen November 10, 2026^[11]	G2: listed, seen November 10, 2026^[3] Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	Tenable describes converged OT and IT environments among the environments it covers. Tenable's pages cover multi-cloud and hybrid cloud environments, and Active Directory and Entra ID identity environments. Tenable describes highly dynamic cloud or remote workforce assets among those its asset discovery covers.	Not written yet
Last verified
Last verified	November 5, 2026	September 27, 2026

Where they overlap

Tenable and UpGuard are both filed under External attack surface management.

Where they differ, field by field

Tenable's primary category is Vulnerability management; UpGuard's is Third-party risk and security ratings.
Tenable is also filed under Cloud-native application protection (CNAPP) and OT and ICS security. UpGuard is also filed under Human risk management.
Tenable lists Tenable One. UpGuard lists User Risk, Risk Automations and Questionnaire AI.
UpGuard is headquartered in Hobart, Australia.
Tenable was founded in 2002. UpGuard was founded in 2012.
UpGuard is privately held.

What it sells: Tenable

What Tenable One does^[2][3][4][8]: Tenable One maps the attack surface across infrastructure, cloud, identity, OT, third-party applications and AI. Tenable Hexa AI is the agentic layer of Tenable One.

What it sells: UpGuard

What User Risk does^[1][5][10]: User Risk continuously detects unsanctioned applications running across a workforce and exposes over-privileged permissions and credential leaks. User Risk nudges employees mid-workflow and redirects them to approved corporate alternatives. User Risk sits in the browser and blocks unauthorized file uploads and copy-pastes.
What Risk Automations does^[1][10]: UpGuard describes risk automation that connects a risk stack to system APIs to automate discovery, notification and remediation. The offering automates discovery, notification and resolution by integrating a risk stack.
What Questionnaire AI does^[11]: Questionnaire AI automatically completes questionnaires using a customer's own security documentation. Customers upload documents such as a SOC 2 report, an information security report and previously completed questionnaires.

Questions about Tenable and UpGuard

What do Tenable and UpGuard sell?: Tenable sells Tenable One. UpGuard sells User Risk, Risk Automations and Questionnaire AI.
Are Tenable and UpGuard in the same category?: They share External attack surface management. Tenable's primary category is Vulnerability management and UpGuard's is Third-party risk and security ratings.
Where are Tenable and UpGuard headquartered?: UpGuard is headquartered in Hobart, Australia.
When were Tenable and UpGuard founded?: Tenable was founded in 2002. UpGuard was founded in 2012.
Who owns Tenable and UpGuard?: UpGuard is privately held.
Who are Tenable and UpGuard sold to?: Tenable describes converged OT and IT environments among the environments it covers.

About Tenable

Tenable sells Tenable One, a platform that unifies security visibility, insight and action across an attack surface. Tenable One uses native signals, exposure intelligence and third-party data to map the attack surface across infrastructure, cloud, identity, OT, third-party applications and AI. Tenable One connects potential risk with pathways for exploitation and impact through continuously enriched exposure intelligence. Tenable One unifies disparate security data to show how a weakness in one domain can escalate into a breach in another. Tenable Hexa AI is the agentic layer of Tenable One.^[2][3]

Tenable One Vulnerability Management is built on Tenable Nessus technology and is managed in the cloud. Vulnerability Priority Rating (VPR) is powered by generative AI, enriched threat intelligence and context-aware scoring. Tenable unifies all vulnerability management data with continuous asset scanning and automated risk prioritization capabilities. Tenable supports bi-directional ticketing to mobilize remediation and benchmarking of progress. Tenable One discovers and continuously inventories assets across IT, cloud, OT, web applications and the external attack surface. Tenable One measures, compares and tracks exposure using risk scores and benchmarks. Exposure alerts from Tenable One can be integrated with manual or automated ticketing workflows for IT, cloud and security teams.^[1][3][4][5]

Tenable cloud security addresses misconfigurations, risky entitlements and vulnerabilities across multi-cloud and hybrid environments. Tenable combines cloud workload protection (CWPP) with cloud security posture management (CSPM and KSPM).^[2][4][5]

Tenable identity security uncovers weaknesses and overprivileged access in Active Directory and Entra ID. Tenable offers a unified security solution for converged OT/IT environments. Tenable continuously discovers AI tools, agents and workloads across an attack surface. Tenable discovers shadow AI, AI workloads, services and externally exposed AI components. Tenable identifies vulnerabilities and misconfigurations in AI workloads and supporting cloud infrastructure. Tenable provides visibility into employee use of generative AI and autonomous agents. Tenable detects and responds to AI-specific threats and misuse, including prompt injection and jailbreaks.^[2][4][5][6]

Tenable Security Center identifies and prioritizes vulnerabilities based on risk to a business and is managed on premises. Tenable Security Center provides an automated approach to implementing and maintaining many technical controls included in an Information Security Management System based on ISO/IEC 27001/27002 standards. Tenable Security Center collects data from multiple sensors to analyse vulnerability, threat, network traffic and event information. Tenable Security Center supports most technical controls prescribed in the NIST CSF, ISO/IEC 27002 and CIS CSC frameworks. Tenable Security Center provides active and passive monitoring of technical control status. Tenable Security Center audits configurations of many third-party products and analyses events generated by them to identify control weaknesses.^[5][7]

Tenable One connectors combine data from third-party security tools. Tenable One connectors can ingest data from additional tools, internal systems, spreadsheets or files. Tenable offers several global hosting locations, depending on the product used. Tenable customers may request a specific geographic region prior to deployment. Tenable keeps customer data within the designated region, including backups. Tenable Identity Exposure uses additional Azure data center locations. Tenable supports regional failover and disaster recovery for its cloud-based services. Tenable targets an RPO and RTO of 48 hours for all cloud-based solutions.^{[1][2][3][5][8][9]}

Tenable on the record

About UpGuard

UpGuard sells tools that move third-party risk monitoring from static snapshots to continuous oversight. UpGuard offers a TPRM platform that delivers continuous vendor insights, 360-degree assessments and AI-powered workflows. UpGuard describes a platform with a unified view of cyber risk across an organization. UpGuard offers attack surface management and threat intelligence to expose, surface and remediate external risk. UpGuard offers trust management with trust centers and questionnaire imports. UpGuard offers risk automation that automates discovery, notification and resolution by integrating a risk stack.^[1][4][5][6]

For vendor monitoring, UpGuard scans attack surfaces and vulnerabilities, tracks security news and incidents, and sends alerts when risk appears. UpGuard runs daily scans and uses threat feeds that surface exposures, misconfigurations, CVEs and security incidents. UpGuard scores each finding for severity and enriches it with impact and context. UpGuard tracks vendor posture changes over time, which lets customers demonstrate continuous oversight and measure improvement or decline. UpGuard sends notifications when something changes, such as a new vulnerability, a breach or a posture shift.^[4][8]

UpGuard generates security ratings through the analysis of commercial, open-source and proprietary threat intelligence feeds and non-intrusive data collection methods. Vendor inventory helps customers find, track and monitor the security posture of any organization. Customers can categorize vendors, compare them against industry benchmarks and see how their security posture changes over time. Vendor tiering classifies vendors by the inherent risk they pose to the organization and adjusts the level of assessment for each vendor. UpGuard can assign vendors to labels automatically based on Vendor Relationship Questionnaire responses. The vendor portfolios feature organizes monitored vendors by different use-cases into separate lists. UpGuard compliance reporting maps risk details for a customer or its vendors against security standards and compliance frameworks such as NIST CSF and ISO 27001. UpGuard shows the domains and IPs that belong to an individual vendor and their cyber risks.^[7]

On the attack surface side, UpGuard describes continuous visibility into a digital footprint to detect threats and to know the full attack surface. UpGuard continuously monitors externally observable security posture across website security, email, network, DNS, encryption, data leakage, IP and domain reputation and vulnerability management. UpGuard security ratings reflect only what can be verified from outside the organization and are not an audit of internal controls.^[1][5][9]

User Risk continuously detects unsanctioned applications running across a workforce and exposes over-privileged permissions and credential leaks. User Risk nudges employees mid-workflow, flags violations instantly and redirects them to approved corporate alternatives. User Risk sits in the browser and blocks unauthorized file uploads and copy-pastes.^[10]

Questionnaire AI automatically completes questionnaires using a customer's own security documentation. Customers upload security documents such as a SOC 2 report, an information security report and previously completed questionnaires to Questionnaire AI. UpGuard offers AI-powered questionnaire automation and a Trust Page. UpGuard describes risk automation that connects a risk stack to system APIs to automate discovery, notification and remediation.^{[1][4][5][7][10][11]}

UpGuard on the record

Sources

Tenable full record

[1]About usTenable · tenable.com · undated page, accessed November 5, 2026 · Tier A
[2]Vulnerability and exposure management | Cloud and AI security | Tenable®Tenable · undated page, accessed November 10, 2026 · Tier A
[3]Tenable One Vulnerability Management | Tenable®Tenable · undated page, accessed November 10, 2026 · Tier A
[4]Tenable One Pricing | Tenable®Tenable · undated page, accessed November 10, 2026 · Tier A
[5]Tenable One exposure management platform and products | Tenable®Tenable · undated page, accessed November 10, 2026 · Tier A
[6]AI security solutions | Tenable®Tenable · undated page, accessed November 10, 2026 · Tier A
[7]ISO/IEC 27001/27002 | Tenable®Tenable · undated page, accessed November 10, 2026 · Tier A
[8]Tenable One connectors | Tenable®Tenable · undated page, accessed November 10, 2026 · Tier A
[9]Tenable Trust PortalTenable · undated page, accessed November 10, 2026 · Tier A
[10]Tenable Vulnerability Management Reviews 2026G2 · undated page, accessed November 10, 2026 · Tier C
[11]Tenable Reviews, Ratings & Features 2026Gartner Peer Insights · undated page, accessed November 10, 2026 · Tier C

UpGuard full record

[1]upguard.comUpGuard · upguard.com · undated page, accessed September 27, 2026 · Tier A
[2]Upguard raises 75m in series c funding to accelerate market leadership in cyber risk posture managementUpGuard · upguard.com · published February 26, 2026 · Tier A
[3]UpGuard Vendor Risk Reviews & Product DetailsG2 · undated page, accessed October 29, 2026 · Tier C
[4]Continuous Third-Party Risk Monitoring | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
[5]The #1 Cyber Risk Posture Management Platform | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
[6]Pricing For The UpGuard CRPM Platform | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
[7]Third-party Risk Assessment Software | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
[8]Lucid Security Rating & Data Breaches | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
[9]GiftPay Security Rating & Data Breaches | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
[10]User Risk: A Human Risk Management Platform | UpGuardUpGuard · undated page, accessed November 10, 2026 · Tier A
[11]Free AI-Powered Security Questionnaires Done in MinutesUpGuard · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.