UpGuard Vendor Risk Reviews & Product Details

As a vendor who frequently responds to security assessments, I find UpGuard’s portal far more user-friendly than the traditional Excel-based questionnaires. The interface feels clean and straightforward, and the progress tracking makes it easy to see what’s left to complete. My favorite feature is the 'Shared Profile' (Trust Page). It lets us proactively share our security documentation—such as SOC 2 reports and ISO certificates—which often meets customer requirements before they even send a manual questionnaire. Overall, it saves us a significant amount of repetitive work. Review collected by and hosted on G2.com.

The automated scanning (Security Ratings) can sometimes feel a bit rigid. At times, the platform flags external risks that we view as false positives or very low risk, and it can be time-consuming to submit disputes or provide explanations for every single finding just to satisfy the customer’s dashboard. I’d also love to see stronger AI-assisted auto-filling for questionnaires, especially when it can draw from evidence we’ve already uploaded. Review collected by and hosted on G2.com.

Interface is intuitive but is starting to become more complex and slow. I wish upguard developed an MCP by now so we can improve integration with AI agents too. Review collected by and hosted on G2.com.

Sometimes the navigation is confusing, the columns get overwhelming once you start to dive deeper into a specific company. Also some vendors have problems to access upguard platform and then we have to send the questionnaire through excel. Upguard should have a way to help us with these corner cases Review collected by and hosted on G2.com.

I absolutely appreciate UpGuard's vendor risk analysis feature. It simplifies the process of evaluating both existing and new vendors by assigning them a score and providing a clear rationale behind that score. This scoring system is not only easy to understand but can also be tracked over time, ensuring that our vendors maintain security standards. Additionally, it's been incredibly valuable for monitoring vendor risk, breach risk, vulnerabilities, and potential employee data breaches. Setting up UpGuard was straightforward, and adding our vendors to the portal was seamless, which made the transition into using the platform quite smooth. Review collected by and hosted on G2.com.

I wish the 'Incidents & News' page had a tab dedicated to new CVEs that impact (or could impact) our environment. Just an easy way to see all CVEs over the last year and which ones are the most severe. Review collected by and hosted on G2.com.

It is easy and seamless to enroll a new third party in UpGuard's solution and receive actionable insights to more effectively oversee my organization's engagements. UpGuard's AI capabilities have improved significantly in my time using the tool. Review collected by and hosted on G2.com.

There is truly nothing that I dislike about UpGuard. Our customer success team helps us navigate new use cases and listens to our feedback. We've seen some of our suggestions enter production. Review collected by and hosted on G2.com.

What I like the most about UpGuard is how it simplifies vendor risk management. It gives a clear view of third-party security posture and helps identify risks early with continuous monitoring. The dashboard is easy to navigate, and the automated questionnaires save a lot of time during audits like ISO 27001 and SOC. Overall, it reduces manual effort and makes compliance tracking much more manageable. Review collected by and hosted on G2.com.

Reporting could be more flexible, since it sometimes needs manual adjustments for audit use. There are also a few false positives in the risk findings that still need to be validated. Integration options are good but could be expanded further for smoother workflows. Performance is generally stable, though occasional delays can happen when handling larger datasets. Pricing can feel a bit on the higher side for smaller teams, especially when scaling. Support is helpful, but response times could be improved in some cases. The platform provides useful insights, but there is room to enhance AI-driven recommendations for more actionable outputs. Overall, it’s a solid tool, but improving these areas would make it even more efficient. Review collected by and hosted on G2.com.

I like that UpGuard is reliable and provides a lot of information about vendor profiles that we don't have access to otherwise, allowing us to score vendors as high risk or low risk. Their vulnerability scanning is also reliable, and I appreciate the value we get with multiple services bundled into one, such as monitoring for Tyosquatting. It's helpful for scanning vulnerabilities in our public IPs and websites and allows us to survey the score of prospective vendors. UpGuard also alerts us if any user passwords are detected in the dark web or in a leak, which helps us ensure our users' safety by advising them to reset their passwords. Review collected by and hosted on G2.com.

Nothing Review collected by and hosted on G2.com.

Uploading our SOC and having it fill out answers was awesome! These reports take forever and this made it much less awful as any security or compliance officer will attest. Review collected by and hosted on G2.com.

Need to have a "Policy" file type on the file upload. Review collected by and hosted on G2.com.

One new aspect I really like about UpGuard is its continuous attack surface monitoring, which provides real-time visibility into exposed assets across the internet. Instead of relying on periodic scans, UpGuard constantly tracks changes, alerting you the moment something becomes publicly visible — such as a misconfigured S3 bucket, expired SSL certificate, or exposed domain.

Another standout is the built-in data leak detection engine. UpGuard scans the web, dark web, GitHub, forums, and paste sites to identify leaked credentials or sensitive information related to your organisation — something traditional security tools often miss.

I also appreciate how UpGuard makes security questionnaires and vendor assessments extremely streamlined. Their questionnaire library, automation, and workflow tools eliminate the repetitive back-and-forth usually required with vendors, improving compliance and reducing friction.

Finally, the platform’s risk rating transparency is impressive. It provides clear, easy-to-understand explanations of every risk factor, how the score is calculated, and recommended fixes — making it easier for both security and non-security teams to take action quickly. Review collected by and hosted on G2.com.

Although UpGuard is a robust platform overall, there are a few areas where it could evolve further:

Greater pricing flexibility: The current pricing structure may pose a barrier for startups and smaller businesses. Offering scaled-down tiers or a modular pricing approach could broaden its accessibility.

Expanded platform customization: While the dashboards are effective, users often seek more in-depth customization options — especially for reporting, risk scoring, and automated workflows — to better align with their internal requirements.

Stronger integration capabilities: Some users face challenges when connecting UpGuard with older systems or specific SIEM/SOAR tools. Broadening its integration options, particularly with plug-and-play solutions, would streamline implementation.

More sophisticated analytics and predictive features: UpGuard delivers solid visibility, but adding advanced analytics — like predictive risk trends or proactive vendor assessments — could enhance strategic planning.

Easier onboarding for advanced features: Despite its intuitive design, some complex functionalities can be difficult to navigate. Embedding more in-product guidance, step-by-step walkthroughs, or interactive tutorials would improve the user experience. Review collected by and hosted on G2.com.

I really appreciate how quickly UpGuard allows you to scan after remediation. I like the details it provides, making it easy to check if issues are resolved after making necessary changes. I also like how easy it is to see and understand vulnerabilities, why they exist, and potential solutions. The ease of rescanning to make sure the solution accurately corrected the vulnerability is a big plus for me. The initial setup was easy too. Review collected by and hosted on G2.com.

Thoroughness of scanning, detailed reason for the vulnerability, detailed resolution steps and ease of rescanning. Review collected by and hosted on G2.com.

It's really helpful to identify the risks of the vendors while dealing with those vendors. The insights are really clear and forward to the customers. Review collected by and hosted on G2.com.

I found nothing dislike about the vendor risk. Review collected by and hosted on G2.com.