UpGuard Vendor Risk Reviews & Product Details

UpGuard Vendor Risk has been very helpful in streamlining our vendor security review process. I appreciate having a centralized platform where we can manage vendor assessments, track questionnaire progress, review security ratings, and store vendor-related evidence all in one place. It has improved visibility across the vendor risk lifecycle and makes it easier to follow up with both internal stakeholders and vendors. The automated risk insights, questionnaire workflows, and reporting features save time and help us maintain a more consistent assessment process. Review collected by and hosted on G2.com.

While UpGuard Vendor Risk is helpful overall, one area that could be improved is the flexibility of workflows and questionnaire customization. Some assessment steps can feel repetitive, especially when handling multiple vendors with similar requirements. It would also be helpful to have more advanced filtering, bulk update options, and clearer tracking of pending actions across internal stakeholders and vendor contacts. Enhancements in notification controls and reporting customization would make the platform even more efficient for vendor risk management activities. Review collected by and hosted on G2.com.

UpGuard Vendor Risk makes third-party risk management much easier to track and communicate. I like that it provides a clear view of vendor security posture, risk ratings, questionnaire status, and remediation items in one place. The external attack surface insights and continuous monitoring are especially useful because they help identify issues without waiting for a point-in-time review. It also makes vendor reviews more structured, with better visibility for both security teams and business stakeholders. Review collected by and hosted on G2.com.

A few areas could be improved. Some risk findings may need additional manual validation before they can be shared with vendors, especially when the issue depends on business context or compensating controls. The questionnaire and evidence review process can also feel time-consuming when dealing with many vendors. More flexible reporting, easier customization of risk scoring, and deeper integrations with GRC or ticketing tools would make the workflow even smoother. Review collected by and hosted on G2.com.

I find the user interface of UpGuard Vendor Risk easy to browse through, which significantly reduces learning time, as even a first-time user can start using it within 5 minutes. The intuitive and straightforward interface is a big plus. The pre-defined questionnaire feature is very helpful, transforming a process that was once time-consuming and difficult into just a couple of clicks. Additionally, the incident and news portal is a great resource for summarizing what's happening globally without needing to visit multiple websites for the same information. I also appreciate the excellent onboarding experience facilitated by a dedicated customer success manager, which made the initial setup very easy. The AI / Intelligence feature inside of platform is also time saving for summarize the risk at executive level. Review collected by and hosted on G2.com.

The price is too expensive. Some advanced features are locked for higher-priced subscriptions, which I believe could have a lite version for customers to use. For example, Breach Risk is locked. I believe it can be available for a certain amount of breach alerts in a lite version. Review collected by and hosted on G2.com.

The platform has a clear, simple UI/UX, and it’s easy to build integrations to collect data, for example via the REST API. Performance is quite good. I also appreciate the ability to rescan a domain or IP address after some changes have been applied; it’s especially useful because the results are real-time. Support and onboarding are smooth and frictionless, so you can start monitoring vendors in a short time. The AI support through the Security Profile is very helpful for getting an initial picture of a vendor, based on evidence such as contracts or certifications. Overall, the price/performance ratio is good. Review collected by and hosted on G2.com.

Some technical controls are not complete Review collected by and hosted on G2.com.

I like how easy the platform is to use, especially the vendor assessment part. It’s very user-friendly, simple to navigate, and easy to find your way around. It also has a modern design with a UI that’s easy on the eyes.

The platform is very fast, and we’ve never had issues with it being unavailable. It’s consistently online and reliable.

We get a high ROI because the platform covers many aspects of what we’re looking for in risk posture management, including vendor risk, the vendor onboarding process, user risk, and external risk. The email notifications are customizable and very easy to use. The scores are also helpful and make it easy to track progress.

We were also able to integrate it into our systems and procedures without difficulty. We have it integrated with Microsoft Entra ID for SSO.

The AI feature I mainly use is the support chat. There aren’t too many AI features overall, but since the platform is easy to use, I don’t mind that.

The support team and the onboarding process went smoothly, and we never had any issues with either. Review collected by and hosted on G2.com.

As of today I didn't find any major downsides/dislikes with the platform that would make me wish that they were different. Review collected by and hosted on G2.com.

What I like most is the continuous monitoring capability, which helps us stay informed about changes in the security posture of our vendors without requiring constant manual reviews. The platform also facilitates communication and collaboration with vendors when addressing findings. And most importantly the exact details about the breaches where in which users are impacted by pinpointing them and acilitating the easiest way by notifying them about the breach and change of credentials by sending the email from the platform itself.

Have struggled a lot with the other product we used where we need to purchase the credentials of compromised users by paying them, but UpGuard tells it upfront. Very much appreciate. Review collected by and hosted on G2.com.

One area for improvement would be the customization options for certain reports and workflows. While the platform offers strong out-of-the-box functionality, additional flexibility for tailoring reports to specific organizational requirements would be beneficial. Review collected by and hosted on G2.com.

Upguard provides a clear, accurate view of a vendor’s security posture by combining external scanning with verified control implementation. This leads to better prioritization of risk treatment and more informed investment decisions. Review collected by and hosted on G2.com.

Overall, we’re satisfied with our current subscription. We would have liked to include Threat Monitoring as well, but the cost was the main drawback for us. Review collected by and hosted on G2.com.

I really appreciate the AI capability in UpGuard Vendor Risk. It helps me go through software reports quickly and efficiently. This AI feature is wonderful since it precisely finds vulnerabilities from our compliance reports and suggests remediation strategies, which streamlines the vendor risk assessments. The ability to quickly navigate and analyze our SOC reports using this AI is particularly beneficial. Additionally, the initial setup was really easy; we signed the contract and got the purchase order, and it was ready to use. Review collected by and hosted on G2.com.

Threat monitoring doesn't work that well, and I would like it to be improved. Review collected by and hosted on G2.com.

Upguard vendor risk management is easy to handle, and everything will be in one place from vendor assessments and questionnaires to findings and remediation. It is simple to use and gives clear view. Review collected by and hosted on G2.com.

I don’t think there have been any major issues so far. The platform is easy to use overall, although the console does take a little time to get used to at first. Review collected by and hosted on G2.com.

The platform offers a range of risk assessment options and provides multiple ways to monitor your domains, websites, SSL certificates, open ports, and more. For me, it stands out as one of the top choices for vendor and third-party risk management. The interface is user-friendly, and customer support is both responsive and knowledgeable, always addressing issues directly. Implementation is straightforward and can be completed with their support if needed. Review collected by and hosted on G2.com.

The comprehensive feature set can feel overwhelming at times, especially if you have a smaller team. While the UI is clean, some workflows—like questionnaire customization and remediation tracking—require a learning curve. Additionally, the cost structure, while scalable, still means quite a bit of funding needed to run the product effectively. Review collected by and hosted on G2.com.