UpGuard Vendor Risk Reviews & Product Details

UpGuard Vendor Risk provides excellent visibility into our third-party ecosystem. The continuous monitoring, security ratings, and assessment workflows save significant time compared to manual reviews, while giving us a clear, actionable view of vendor risk and security posture changes. It has helped make our vendor risk management program more efficient, consistent, and scalable. Review collected by and hosted on G2.com.

The platform provides strong vendor risk visibility, but some findings can require manual analysis to determine business relevance. More customization options for reporting, workflows, and assessment management would make the process even more efficient. Review collected by and hosted on G2.com.

Ease of use and remediation tracking. It’s straightforward to implement and set up, and the account manager is consistently supportive—not only during the initial commercial stage. I use it at least three times per week to keep an eye on vendors and on our own rating.

I haven’t integrated it yet, but I plan to look into that in the future. It’s a great tool, but it still needs a solid process to work well. We also haven’t done any integrations yet, as most of the features we need are already easy to use entirely within the app. The AI and intelligence features save a tremendous amount of time and are incredibly useful. The system is always available when I need it and peforms as expected too - no system latency or issues accessing any of the features - reliable! Review collected by and hosted on G2.com.

Previously the licences were limited to 3, but Upguard increased these to 6 now, at no additional cost. Which is great. The only other thing, I've been asking for is the abuility to add vendors, without monitoring them so that all vendors can be added to the platform, and becomes more integretyed as part of our vendor onboarding process, rather than isolated to where data or technology matters. Review collected by and hosted on G2.com.

I like that UpGuard provides a centralised platform for managing vendor risk assessments, tracking outstanding actions, and keeping supporting documentation in one place. It makes it easier to monitor assessment progress and maintain an audit-ready record of third-party risk activities. Review collected by and hosted on G2.com.

The platform can sometimes be difficult to navigate when managing a large number of vendors and assessments. It would also be helpful to have more flexibility around notifications, assessment tracking, and reporting to make it easier to identify and follow up on outstanding actions. Review collected by and hosted on G2.com.

Insights into identifying specific vulnerabilities and which ones to prioritize. Has security and regulatory compliance documentation always up to date and user interface is easy to navigate. Review collected by and hosted on G2.com.

Does not show attack surface or exposure management related vulnerabilities. The score is based on the vendor itself, not how it is configured in your own environment. This can make it difficult to know if your own installed instance is aligned with the reported score. Missing Security updates, misconfigurations, etc. It gives no information reguarding "here's what you should fix." Review collected by and hosted on G2.com.

I use the scoring in UpGuard Vendor Risk to quickly establish whether a potential vendor is taking security seriously or not, which is crucial for assessing both vendors and my own organization’s security posture. I like how I can quickly evaluate a potential vendor, and if they pass the first test, I can send them detailed questionnaires for further evaluation. This helps ensure the vendor is not putting my company at unnecessary risk. I also appreciate being able to dive deeper than just a vendor’s attack surface with the option of using either out-of-the-box questionnaires or creating my own. Additionally, the initial setup of UpGuard Vendor Risk was quite easy for my team. Review collected by and hosted on G2.com.

Finding the time to develop questionnaires and get the flow right is a challenge. Having a more graphical interface, perhaps like a flow chart to move questions around, would be helpful. Review collected by and hosted on G2.com.

It’s easy to view a summary of the items we’re recommended to action. I also like being able to send action items to external contacts and have them view them. Review collected by and hosted on G2.com.

I don't believe I have used UpGuard enough to give an accurate assessment of what I dislike. Nothing comes to mind immediately though. Review collected by and hosted on G2.com.

I like that all of our security documentation lives on UpGuard Vendor Risk, where clients can access it in one central location. I really like that it shows the security rating, which constantly changes. The transparency is really important for clients and prospective clients to see. Setting it up was really easy, I just had to set up a login and accessed all our security documentation, so it was pretty seamless. Review collected by and hosted on G2.com.

We recently implemented UpGuard. As of this time, I do not have any dislikes. Review collected by and hosted on G2.com.

It’s easy to use and offers really good tools, like Excel export/import and the AI assistance. The UI looks good and feels intuitive. Login and security are also straightforward and sufficient for a due diligence service. I also really like that it remembers past questionnaires we’ve done for other clients, which makes it much easier to create a new one. Review collected by and hosted on G2.com.

Something that worries me is how easy it is to submit responses even when we haven’t finished. For example, after importing an Excel file with some answers, it can go straight to submit immediately. I know it shows a message saying there are unfinished questions to review before submitting, but I don’t think that alert is alarming enough. Maybe it should use different colors or something more attention-grabbing that clearly says, “Hey, you’re about to submit—are you really, really, really sure you don’t want to finish the questions first?” Review collected by and hosted on G2.com.

I like that we receive real-time email reports whenever there’s a risk involving one of our organisation’s third-party vendors. It’s also very useful to have a risk rating, so we can compare a specific vendor’s rating against industry standards. Review collected by and hosted on G2.com.

The downsides would be that it is sometimes difficult to navigate the vendor dashboard as there is too much information presented at once. Review collected by and hosted on G2.com.

It is very user friendly and provides a clear overview of what I need Review collected by and hosted on G2.com.

Sometimes the system is slow to navigate Review collected by and hosted on G2.com.