Vendor Risk Reviews & Product Details

The granular reports for external vendors are nowadays golden chest. A lot of CTI and SIEM tools lacks of good reporting at the end, so I find this particular part of UpGuard very useful. Reports are important for monthly summary check. Also, User interface is easy to understand and user friendly. Integration is as easy as putting the domains and emails into tool to start seeing informations related to these companies and domains. I didnt see any issues related to technical performance, as is fully Saas platform, there is no configuration to be manually fine tuned. Support from internal stuff from UpGuard is fast and reliable, no need to wait long to get proper answer. Review collected by and hosted on G2.com.

Well, the tool sometimes associates domains or IP addresses with an organization that don’t actually belong to them. the price tag can be steep. It is often positioned as an enterprise-level tool, making it less accessible for smaller firms with tighter security budgets Review collected by and hosted on G2.com.

I like UpGuard's dynamic scoring system, which quickly identifies and reflects changes in our enumerable public infrastructure on its risk profile. This helps us prioritize their patching efficiently. I'm quite excited about the threat monitoring module and can see it becoming my favorite soon. I appreciate the use of AI to provide a summarized analysis of identified threats, along with relevant screenshots, allowing for swift action. The dynamic scoring system keeps everything under control, and any identified threat is usually high priority, treated with importance. Review collected by and hosted on G2.com.

Having more granularity whilst taking out exports to work offline would be good. For example, in the threat monitoring module, if I have analyzed 30 threats and closed them as false positives with appropriate comments, I want to be able to take out an export to show why I closed those threats as FPs to my manager. It's difficult to do these over a call and show every different analyzed threat. Review collected by and hosted on G2.com.

UpGuard is extremely user-friendly; unlike other platforms, navigating the tool is straightforward and intuitive. Generating reports is both convenient and hassle-free. The implementation process was quick, and the platform fits seamlessly into my organizational environment. Customer support has been excellent, and we receive timely updates about upcoming events and webinars. We rely on UpGuard daily to monitor our breach risk and to generate reports on detected vulnerabilities and compromised emails. Its easy integration makes it an outstanding option for any organization seeking effective attack surface management. Additionally, the platform’s scalability further distinguishes it among its peers. Review collected by and hosted on G2.com.

I would have appreciated the platform more if it offered some form of remediation for detected risks and vulnerabilities. One drawback I noticed is that the remediation process is entirely dependent on the organization, which I find to be a bit of a downside. Review collected by and hosted on G2.com.

It’s easy to use and offers really good tools, like Excel export/import and the AI assistance. The UI looks good and feels intuitive. Login and security are also straightforward and sufficient for a due diligence service. I also really like that it remembers past questionnaires we’ve done for other clients, which makes it much easier to create a new one. Review collected by and hosted on G2.com.

Something that worries me is how easy it is to submit responses even when we haven’t finished. For example, after importing an Excel file with some answers, it can go straight to submit immediately. I know it shows a message saying there are unfinished questions to review before submitting, but I don’t think that alert is alarming enough. Maybe it should use different colors or something more attention-grabbing that clearly says, “Hey, you’re about to submit—are you really, really, really sure you don’t want to finish the questions first?” Review collected by and hosted on G2.com.

We use this Upguard to monitor our whole organisation, this includes over 200 websites, the product is easy to use, my team all speak well of it and sofar we have not had any negitive feedback from our team on implemention. Onboarding and support has been great, with all the available features I can only see our use of the product increasing. Review collected by and hosted on G2.com.

I can not think of a negitive to UpGaurd at this time. Review collected by and hosted on G2.com.

UpGuard is an absolute solution in risk monitoring and this gives a continuous risk assessment to all stakeholders and vendors

The app has understandable cybersecurity implications and ratings and this equips stakeholders with information about risk levels

The dashboard has clear security insights and this makes it simple to navigate

The set up requires minimal infrastructure and this makes the process of scanning realtime

The risks reports and vulnerabilities alerts are issued in real time Review collected by and hosted on G2.com.

Upguard fails to meet the threshold of advanced users, who may need granular controls

Som alerts shared by UpGuard may be misleading and this makes some critical issues to be ignored Review collected by and hosted on G2.com.

I use UpGuard primarily for managing third-party risk and strengthening cybersecurity posture. It helps me monitor vendors, assess their security practices, and identify potential vulnerabilities that could impact my organization. The platform's automated risk assessments and security ratings make it easier to evaluate partners quickly and maintain continuous oversight. Additionally, I rely on UpGuard for internal security monitoring. It provides clear visibility into exposed assets, misconfigurations, and potential data leaks, allowing me to address issues proactively before they escalate. Its intuitive dashboard and reporting features make it simple to communicate risks and improvements to stakeholders. I like the clear, easy-to-understand security insights and automated monitoring, which save time and make managing risks simpler. The clear insights help me quickly understand risks without deep analysis, while automated monitoring keeps track of issues in real time, so I can act fast and avoid potential security problems. We switched to UpGuard from another tool for its more user-friendly interface and stronger automation features. Review collected by and hosted on G2.com.

Some reports can feel a bit high-level, so more detailed insights would help, and the initial setup can take some time to fully configure for specific needs. Review collected by and hosted on G2.com.

Honestly, what I like most is how it shows our external attack surface in a way that's easy to understand. I can see things like exposed subdomains, SSL problems, or open ports without having to check everything manually. It's really helpful when I need to explain security risks to people who are not from a technical background. Before UpGuard, this kind of overview took a lot of time to put together. Now it's much more straightforward. Review collected by and hosted on G2.com.

Nothing major so far. The learning curve at the beginning was a little steep, but once you get familiar with the interface it becomes much easier. Maybe the alert notifications could be a bit more customizable, but it's not a big deal for our daily workflow. Review collected by and hosted on G2.com.

I like that UpGuard provides a single platform for vendor risk management and external attack surface visibility, which includes detecting vulnerabilities like open ports, SSL issues, and leaked credentials. The platform makes complex data easy to understand through its dashboards. I appreciate the automated vendor risk assessment workflow that removes the manual complexity from managing third-party risks. Additionally, UpGuard improves consistency and audit readiness by centralizing vendor data and their responses, allowing us to track progress and review responses easily. The straightforward and quick initial setup, coupled with the well-guided onboarding process, allows us to see our security rating and external risk insights promptly. Review collected by and hosted on G2.com.

I think UpGuard would be more effective if its integration capabilities were expanded, especially with SIEM, Ticketing tools, and the M365 Security stack. Stronger and more seamless integration with existing enterprise security and IT ecosystems would help reduce manual efforts. Deeper integration with the M365/Defender ecosystem, like Defender for Endpoints, Defender for Cloud apps, and Entra ID, would add value and enable better collaboration with UpGuard findings. Review collected by and hosted on G2.com.

I use UpGuard for its clear and easy-to-understand risk insights that provide real-time visibility into security risks, which helps me quickly identify and prioritize what needs fixing. I appreciate its continuous monitoring that helps quickly identify and fix vulnerabilities without much manual effort. UpGuard integrates well with other security tools, helping to centralize risk insights from different systems, providing a more complete view of our overall security posture. The initial setup was quick and straightforward, with minimal configuration required. We switched to UpGuard for its better visibility, user-friendly interface, and more comprehensive risk monitoring compared to our previous solution. Review collected by and hosted on G2.com.

Sometimes the alerts can feel overwhelming and need better prioritization. It can improve alert prioritization by better grouping similar issues and highlighting the most critical risks first. Adding smarter filtering and customizable alert settings would help reduce noise and focus on what matters most. Review collected by and hosted on G2.com.