UpGuard Reviews & Product Details

We use this Upguard to monitor our whole organisation, this includes over 200 websites, the product is easy to use, my team all speak well of it and sofar we have not had any negitive feedback from our team on implemention. Onboarding and support has been great, with all the available features I can only see our use of the product increasing. Review collected by and hosted on G2.com.

I can not think of a negitive to UpGaurd at this time. Review collected by and hosted on G2.com.

Where to begin? The onboarding process was painless, especially with the help we received from UpGuard. We’re also on a monthly schedule with a dedicated rep who checks in on our progress, answers questions, and shares the latest updates on the software. If there’s anything he can’t answer directly, he schedules time with an engineer so we can get the right information. Adding new companies to our ever-growing list is about as simple as it gets. Everyone we’ve added so far was already part of UpGuard’s list, and it takes less than five minutes to add them. Review collected by and hosted on G2.com.

The only issue I have is that creating our own security questionnaires within the platform isn’t very easy. The way we’d like to ask certain specific questions can be difficult to configure. We have a home-built questionnaire that we still continue to use. Review collected by and hosted on G2.com.

UpGuard is extremely user-friendly; unlike other platforms, navigating the tool is straightforward and intuitive. Generating reports is both convenient and hassle-free. The implementation process was quick, and the platform fits seamlessly into my organizational environment. Customer support has been excellent, and we receive timely updates about upcoming events and webinars. We rely on UpGuard daily to monitor our breach risk and to generate reports on detected vulnerabilities and compromised emails. Its easy integration makes it an outstanding option for any organization seeking effective attack surface management. Additionally, the platform’s scalability further distinguishes it among its peers. Review collected by and hosted on G2.com.

I would have appreciated the platform more if it offered some form of remediation for detected risks and vulnerabilities. One drawback I noticed is that the remediation process is entirely dependent on the organization, which I find to be a bit of a downside. Review collected by and hosted on G2.com.

UpGuard has introduced new Security Profile control templates for ISO 27001 and NIST CSF 2.0, allowing users to instantly evaluate vendor compliance with these standards. The update enables automated, right-sized assessments, gap-based questionnaires that drastically reduce question volume, and reports aligned with ISO or NIST domains for simpler, clearer reviews. Review collected by and hosted on G2.com.

A better executive overview of the maturity improvement since tool adoption where we can show case Executive Management about our security posture progress and how the solution is helping - some sort of benefits realization. Review collected by and hosted on G2.com.

I like the scores that it gives and the reports. The ability to take the reports to senior management and show them the score going from red to green is a big selling point. It is easy to resolve issues when given clear reasons why certain software or machines could be compromised if we do not implement fixes. Review collected by and hosted on G2.com.

I wish there were ways to dismiss certain machines that are not affected by the internet or don't interact with our network. There are some machines that are 3rd party that we are not in control of that decrease our score and we would like a way to remove them from our reports. Review collected by and hosted on G2.com.

I primarily use UpGuard for vendor risk management. It helps our team automate the security assessment process, monitor our third-party attack surfaces in real-time, and streamline the questionnaire process to ensure our supply chain remains secure. UpGuard solves the lack of visibility into our digital footprint by identifying hidden vulnerabilities and data leaks across our external attack surface that we wouldn't be able to track manually. I appreciate the ability to fully customize questionnaires to fit our specific needs. It's incredibly easy to build tailored assessments that gather exactly the data we need from our vendors without any friction. This customization is valuable because it allows us to focus only on relevant risks for each vendor, eliminates unnecessary questions, speeds up the assessment process, and significantly improves response rates from our partners. Review collected by and hosted on G2.com.

I would like to see more native, out-of-the-box integrations with niche ticketing systems, for example. More flexible reports and dashboard customization. Review collected by and hosted on G2.com.

Using UpGuard is easy and very user friendly. Similar to any form eg: Google or MS form.

The vendor risk assessment has been made easy with its implementation which was very easy as well.

Usage is very frequent to regularly check for associated IT, data risks which are being processed with Third party vendors, ease of integration of this tool with vendors IT subsystems makes it soothing for both ends.

It has AI, collaboration features and auto save which makes it easy for Vendors to collect the responses before submission. Review collected by and hosted on G2.com.

The autofill of SOC2 and related fields are captured incorrectly, while AI implementation is fantastic this was a pain point identified. It consumes a lot of time and still was unable to do anything.

Tried chat for customer support however it was just another version of AI answering. Review collected by and hosted on G2.com.

I like that UpGuard has a very innovative approach and uses artificial intelligence to analyze documents. The support team is very responsive and quick, which I appreciate. I also like that the platform is continuing to be developed; it's not just a set and done. There are a lot of features being developed and released, and even though it's not perfect, it's getting better constantly. At least that's what I think in the very short time I've used it, over the past several months. Review collected by and hosted on G2.com.

I think the bulk features don't work so well. There's no good feature to reach out to several vendors at once about their risks or send out remediation requests in bulk. The additional document request feature needs a revamp to be more easily usable and allow sending to more users, editing requests easily, and sending reminders automatically or manually. Also, I think all assessments should be tied to a vendor profile, whether the profile is monitored or not. The onboarding process was a bit slow, and we didn't have our training calls until a month or a month and a half after starting with the product, and those sessions were quite brief compared to other competitors. Review collected by and hosted on G2.com.

From an operational perspective, UpGuard fits well into daily vendor risk activities. The platform centralizes vendor assessments, external risk monitoring, and breach insights in a single place, which reduces the need to jump between multiple tools.

The risk scoring model is easy to interpret and useful for tracking trends over time, especially when monitoring vendors with changing infrastructure or cloud footprints. The ability to reach out to vendors directly and manage questionnaires at scale saves considerable time compared to manual follow‑ups. Setup was straightforward, and we were able to start onboarding vendors quickly without a steep learning curve. Review collected by and hosted on G2.com.

The automated scanning that influences risk scores could be more customizable. Adding options for ad‑hoc scans and targeted vulnerability‑specific assessments would improve efficiency and help teams investigate specific vendor risks more effectively. Review collected by and hosted on G2.com.

As a vendor who frequently responds to security assessments, I find UpGuard’s portal far more user-friendly than the traditional Excel-based questionnaires. The interface feels clean and straightforward, and the progress tracking makes it easy to see what’s left to complete. My favorite feature is the 'Shared Profile' (Trust Page). It lets us proactively share our security documentation—such as SOC 2 reports and ISO certificates—which often meets customer requirements before they even send a manual questionnaire. Overall, it saves us a significant amount of repetitive work. Review collected by and hosted on G2.com.

The automated scanning (Security Ratings) can sometimes feel a bit rigid. At times, the platform flags external risks that we view as false positives or very low risk, and it can be time-consuming to submit disputes or provide explanations for every single finding just to satisfy the customer’s dashboard. I’d also love to see stronger AI-assisted auto-filling for questionnaires, especially when it can draw from evidence we’ve already uploaded. Review collected by and hosted on G2.com.