UpGuard Vendor Risk Reviews & Product Details

I liked the clear visibility into supplier security, and I found the setup quick. Review collected by and hosted on G2.com.

I’d like a more customizable risk assessment template in UpGuard Vendor Risk. Review collected by and hosted on G2.com.

I like how Vendor Risk helps minimize and identify risks related to company data and security. It assists in building a strong posture and makes risk loopholes more visible. Vendor Risk management identifies and reduces security, compliance, and operational risks from third-party vendors, improves security, protects sensitive data, ensures regulatory compliance, and helps prevent business disruptions or cyber incidents. Review collected by and hosted on G2.com.

Vendor Risk can be time-consuming and manual. Better automation, continuous monitoring, and easier reporting would improve efficiency and visibility. Review collected by and hosted on G2.com.

It is easy to navigate and gives us a clear overview of the risk state and score of each vendor. Review collected by and hosted on G2.com.

Nothing really. It is as good as it gets. Review collected by and hosted on G2.com.

I primarily use UpGuard for vendor risk management. It helps our team automate the security assessment process, monitor our third-party attack surfaces in real-time, and streamline the questionnaire process to ensure our supply chain remains secure. UpGuard solves the lack of visibility into our digital footprint by identifying hidden vulnerabilities and data leaks across our external attack surface that we wouldn't be able to track manually. I appreciate the ability to fully customize questionnaires to fit our specific needs. It's incredibly easy to build tailored assessments that gather exactly the data we need from our vendors without any friction. This customization is valuable because it allows us to focus only on relevant risks for each vendor, eliminates unnecessary questions, speeds up the assessment process, and significantly improves response rates from our partners. Review collected by and hosted on G2.com.

I would like to see more native, out-of-the-box integrations with niche ticketing systems, for example. More flexible reports and dashboard customization. Review collected by and hosted on G2.com.

Using UpGuard is easy and very user friendly. Similar to any form eg: Google or MS form.

The vendor risk assessment has been made easy with its implementation which was very easy as well.

Usage is very frequent to regularly check for associated IT, data risks which are being processed with Third party vendors, ease of integration of this tool with vendors IT subsystems makes it soothing for both ends.

It has AI, collaboration features and auto save which makes it easy for Vendors to collect the responses before submission. Review collected by and hosted on G2.com.

The autofill of SOC2 and related fields are captured incorrectly, while AI implementation is fantastic this was a pain point identified. It consumes a lot of time and still was unable to do anything.

Tried chat for customer support however it was just another version of AI answering. Review collected by and hosted on G2.com.

I like that Vendor Risk provides handy reports that are easily generated and cover all the basic information, which is great. I also find the inclusion of current risks that a vendor has, along with a graph showing the general trend of the UpGuard score, to be very useful. Review collected by and hosted on G2.com.

Some vendors have inaccurate information, which requires us to reach out to the vendor directly to get clearer answers. For example, it might indicate a vendor is based in the US when they are actually an Australian organization. Review collected by and hosted on G2.com.

It was sent over to me from another organisation so that we could fill in some Infosec questions. Being a part of a global company, i needed some help from teams abroad and i was able to get them to jump in and collaborate on the document very easily. Review collected by and hosted on G2.com.

Not being a person who is paying for UpGuard, i dont know anything about the user side but as a 3rd party being asked to use the service and it has been very simple to use and bring in collaborators on the document. It has been smooth performance and very intuitive. Review collected by and hosted on G2.com.

I like that UpGuard has a very innovative approach and uses artificial intelligence to analyze documents. The support team is very responsive and quick, which I appreciate. I also like that the platform is continuing to be developed; it's not just a set and done. There are a lot of features being developed and released, and even though it's not perfect, it's getting better constantly. At least that's what I think in the very short time I've used it, over the past several months. Review collected by and hosted on G2.com.

I think the bulk features don't work so well. There's no good feature to reach out to several vendors at once about their risks or send out remediation requests in bulk. The additional document request feature needs a revamp to be more easily usable and allow sending to more users, editing requests easily, and sending reminders automatically or manually. Also, I think all assessments should be tied to a vendor profile, whether the profile is monitored or not. The onboarding process was a bit slow, and we didn't have our training calls until a month or a month and a half after starting with the product, and those sessions were quite brief compared to other competitors. Review collected by and hosted on G2.com.

From an operational perspective, UpGuard fits well into daily vendor risk activities. The platform centralizes vendor assessments, external risk monitoring, and breach insights in a single place, which reduces the need to jump between multiple tools.

The risk scoring model is easy to interpret and useful for tracking trends over time, especially when monitoring vendors with changing infrastructure or cloud footprints. The ability to reach out to vendors directly and manage questionnaires at scale saves considerable time compared to manual follow‑ups. Setup was straightforward, and we were able to start onboarding vendors quickly without a steep learning curve. Review collected by and hosted on G2.com.

The automated scanning that influences risk scores could be more customizable. Adding options for ad‑hoc scans and targeted vulnerability‑specific assessments would improve efficiency and help teams investigate specific vendor risks more effectively. Review collected by and hosted on G2.com.

I use UpGuard Vendor Risk for third-party risk management. I appreciate the AI risk assessment feature that reads SOC2 reports and compliance reports, which helps us to do vendor risk assessment in very less time. The initial setup was very easy. Review collected by and hosted on G2.com.

Right now for some risks we cannot modify its rating which is annoying and not a good feature to have. Review collected by and hosted on G2.com.