UpGuard Vendor Risk Reviews & Product Details

I like that UpGuard provides a single platform for vendor risk management and external attack surface visibility, which includes detecting vulnerabilities like open ports, SSL issues, and leaked credentials. The platform makes complex data easy to understand through its dashboards. I appreciate the automated vendor risk assessment workflow that removes the manual complexity from managing third-party risks. Additionally, UpGuard improves consistency and audit readiness by centralizing vendor data and their responses, allowing us to track progress and review responses easily. The straightforward and quick initial setup, coupled with the well-guided onboarding process, allows us to see our security rating and external risk insights promptly. Review collected by and hosted on G2.com.

I think UpGuard would be more effective if its integration capabilities were expanded, especially with SIEM, Ticketing tools, and the M365 Security stack. Stronger and more seamless integration with existing enterprise security and IT ecosystems would help reduce manual efforts. Deeper integration with the M365/Defender ecosystem, like Defender for Endpoints, Defender for Cloud apps, and Entra ID, would add value and enable better collaboration with UpGuard findings. Review collected by and hosted on G2.com.

I use UpGuard for its clear and easy-to-understand risk insights that provide real-time visibility into security risks, which helps me quickly identify and prioritize what needs fixing. I appreciate its continuous monitoring that helps quickly identify and fix vulnerabilities without much manual effort. UpGuard integrates well with other security tools, helping to centralize risk insights from different systems, providing a more complete view of our overall security posture. The initial setup was quick and straightforward, with minimal configuration required. We switched to UpGuard for its better visibility, user-friendly interface, and more comprehensive risk monitoring compared to our previous solution. Review collected by and hosted on G2.com.

Sometimes the alerts can feel overwhelming and need better prioritization. It can improve alert prioritization by better grouping similar issues and highlighting the most critical risks first. Adding smarter filtering and customizable alert settings would help reduce noise and focus on what matters most. Review collected by and hosted on G2.com.

I like how UpGuard combines vendor risk management with external attack surface monitoring in one place. It's useful for vendor risk management, attack surface management, and automation and reporting. UpGuard helps us track exposed servers and misconfigurations and maintains compliance with ISO and SOC standards. I appreciate how it monitors my overall security posture and gives real-time actionable insights. The attack surface monitoring provides a continuously updated map of external risks and prioritizes what needs fixing. I find it helpful for discovering forgotten IT assets and monitoring vendor security risks. The initial setup was very easy, user-friendly, and straightforward for engineers to deploy. Overall, I find UpGuard's integration of various security features into a single workflow extremely valuable. Review collected by and hosted on G2.com.

As of now I haven't found anything of which I dislike UpGuard. Review collected by and hosted on G2.com.

I really like the graphical interface of UpGuard Vendor Risk, as it simplifies my work and makes it much more fluid and smooth. I also appreciate the remediation request feature and the ability to perform scans on a domain whenever I want. Review collected by and hosted on G2.com.

Some limitations due to additional packages required for a fee Review collected by and hosted on G2.com.

I like UpGuard for its ease of use, especially the vendor assessment module which is a breeze to use. We are very happy with the nested questionnaires, and the initial risk scoring based on the answers is a good time saver. The vendor threat intelligence is very useful and has proven to be quite accurate over the past year. I found the initial setup extremely easy. The integration with Jira and email notifications is also beneficial for us. Review collected by and hosted on G2.com.

The module for risk approvals and waivers needs a bit of tweaking. The more you use it, the harder it becomes to see what is pending. So sorting and organizing can be improved. Review collected by and hosted on G2.com.

As a client invited to complete a vendor assessment, these types of audits can easily feel overwhelming. UpGuard structures the onboarding questionnaire in a logical way, breaking what is usually a tedious process into manageable, easy-to-follow sections. That said, I found the initial onboarding flow—and locating the security questionnaire—somewhat unintuitive. I was taken to the full dashboard rather than being directed straight to the questionnaire, and it took me a few minutes to figure out what I needed to click.

Once I got past the initial dashboard layout, the interface itself felt incredibly clean, modern, and visually polished. It comes across as a contemporary tool rather than a clunky legacy system.

The AI-assisted autofill feature is genuinely helpful. Uploading our existing security artifacts and having the platform pre-populate answers saved us hours of repetitive manual data entry.

Integrating our existing compliance documents (like our SOC 2 reports and policies) into the assessment workflow was straightforward. We didn't need to lean heavily on customer support because, despite the initial dashboard confusion, the core mechanics work exactly as intended with the little onboarding guide in the dash itself.

The platform also feels snappy and fast. We didn’t run into lag or frustrating load times while working to get our assessment submitted.

I can’t accurately assess the cost of the platform or whether it’s worth it overall, since we were invited to use the system by a third party that was assessing us. However, from an operational standpoint, the time saved through the automated questionnaire features provided an immediate return on our time investment. Review collected by and hosted on G2.com.

The icons on the left-hand menu are surprisingly pixelated and completely unintuitive—it's honestly hard to guess what they are supposed to represent. Coupled with the fact that it took me a while to realize "Start Assessment" was the primary button I needed to click, the initial dashboard experience is definitely lacking.

Being introduced to the Trust Centre right away makes no sense for my specific use case. Since I was simply onboarded onto the platform by a client to fill out an assessment, pitching or showing me broader platform features just distracted from the task at hand and added to the confusion.

While I like the logical categories of the security questionnaire, the actual progression could be better. I would suggest organizing the questionnaire into more of a guided "flow" structure, which would make navigating from start to finish feel much more seamless.

Because I was invited by a third party to be assessed, I only saw the platform from the vendor side. I cannot assess the pricing or the backend administrative tools that the assessing company uses. Review collected by and hosted on G2.com.

Very detailed and helpful in monitoring, provides an insight regarding the vendor risk. Review collected by and hosted on G2.com.

To me there is nothing that I dislike as everything is very much straightforward. Review collected by and hosted on G2.com.

UpGuard is a trustworthy application for managing vendor risk. It provides automated risk reviews and grading, an intuitive UI for vendors, employees, reviewers, and auditors, and scales well while delivering clear value.

The tool integrates well with other risk management tools and securitytools and has better pricing models Review collected by and hosted on G2.com.

Unable to customize and lack of clear API and extensibility Review collected by and hosted on G2.com.

It provides us with a quick analysis of the third-party partners we work with. Review collected by and hosted on G2.com.

My budget doesn’t allow me to purchase additional services, so we have to juggle the vendors we’re able to monitor. Review collected by and hosted on G2.com.

I really like the reporting function in UpGuard Vendor Risk. It sends a detailed report directly to my email, and the presentation is visually appealing, which is a nice touch. I also appreciate the breach risk and risk profile features because that's where we find most of the data we need for our work. Review collected by and hosted on G2.com.

It's not obvious how to see new findings or when a finding disappears, but it's not the biggest issue. I'd like a section that displays changed findings and lets us see results over different timelines to track changes or remediations. Review collected by and hosted on G2.com.