UpGuard Vendor Risk has made third-party security assessments much more efficient by bringing questionnaires, evidence collection, and vendor communications into a single platform. I particularly like the ability to assign questions to different stakeholders and track completion status without relying on long email threads. The platform also provides good visibility into vendor risk posture and simplifies the review process during security due diligence. Review collected by and hosted on G2.com.

The platform is easy to use overall, but navigating between different questionnaire sections can sometimes be confusing, especially when certain sections depend on others being completed first. Clearer workflow guidance and section dependencies would improve the user experience. Review collected by and hosted on G2.com.

I would be very likely to recommend UpGuard Vendor Risk to other security, GRC, and procurement teams looking to mature their third-party risk management process. The platform provides a good balance of vendor onboarding, assessment workflows, risk visibility, and continuous monitoring in one place. It has helped us move away from a highly manual process and establish a more structured and trackable VRM workflow. While there are still areas where deeper customization would be helpful, the overall platform is valuable and practical for managing vendor risk at scale. Review collected by and hosted on G2.com.

UpGuard Vendor Risk is useful overall, but some areas could be improved to better support mature VRM workflows. The questionnaire scoring model can feel rigid, especially when a few high or critical gaps significantly reduce the overall score even if most controls are satisfactory. More flexibility to customize scoring weightage, severity contribution, and assessment outcomes would help organizations align the platform with their internal risk methodology. Some workflow customization options could also be expanded, especially around onboarding forms, approvals, reporting views, and automation logic. Review collected by and hosted on G2.com.

UpGuard Vendor Risk has been very helpful in streamlining our vendor security review process. I appreciate having a centralized platform where we can manage vendor assessments, track questionnaire progress, review security ratings, and store vendor-related evidence all in one place. It has improved visibility across the vendor risk lifecycle and makes it easier to follow up with both internal stakeholders and vendors. The automated risk insights, questionnaire workflows, and reporting features save time and help us maintain a more consistent assessment process. Review collected by and hosted on G2.com.

While UpGuard Vendor Risk is helpful overall, one area that could be improved is the flexibility of workflows and questionnaire customization. Some assessment steps can feel repetitive, especially when handling multiple vendors with similar requirements. It would also be helpful to have more advanced filtering, bulk update options, and clearer tracking of pending actions across internal stakeholders and vendor contacts. Enhancements in notification controls and reporting customization would make the platform even more efficient for vendor risk management activities. Review collected by and hosted on G2.com.

I find the user interface of UpGuard Vendor Risk easy to browse through, which significantly reduces learning time, as even a first-time user can start using it within 5 minutes. The intuitive and straightforward interface is a big plus. The pre-defined questionnaire feature is very helpful, transforming a process that was once time-consuming and difficult into just a couple of clicks. Additionally, the incident and news portal is a great resource for summarizing what's happening globally without needing to visit multiple websites for the same information. I also appreciate the excellent onboarding experience facilitated by a dedicated customer success manager, which made the initial setup very easy. The AI / Intelligence feature inside of platform is also time saving for summarize the risk at executive level. Review collected by and hosted on G2.com.

The price is too expensive. Some advanced features are locked for higher-priced subscriptions, which I believe could have a lite version for customers to use. For example, Breach Risk is locked. I believe it can be available for a certain amount of breach alerts in a lite version. Review collected by and hosted on G2.com.

The granular reports for external vendors are nowadays golden chest. A lot of CTI and SIEM tools lacks of good reporting at the end, so I find this particular part of UpGuard very useful. Reports are important for monthly summary check. Also, User interface is easy to understand and user friendly. Integration is as easy as putting the domains and emails into tool to start seeing informations related to these companies and domains. I didnt see any issues related to technical performance, as is fully Saas platform, there is no configuration to be manually fine tuned. Support from internal stuff from UpGuard is fast and reliable, no need to wait long to get proper answer. Review collected by and hosted on G2.com.

Well, the tool sometimes associates domains or IP addresses with an organization that don’t actually belong to them. the price tag can be steep. It is often positioned as an enterprise-level tool, making it less accessible for smaller firms with tighter security budgets Review collected by and hosted on G2.com.

Upguard makes it easy and convenient to manage TPRM. I’ve created multiple custom cybersecurity questionnaires, and each one used programmable logic to make the experience more interactive. It feels similar to no-code programming, which is one of my favorite ways to build tools.

I also use Upguard frequently to check our risk score, and it makes it straightforward to compare it against competitors. SSO integrated easily with our environment. In addition, customer support has been consistent and prompt, and our implementation period was swift. Review collected by and hosted on G2.com.

Upguard could add more functionality to make it easier to export data into formats like CSV. In addition, I’d like to see a feature that scans vendor websites for publicly listed email addresses, so we can stay in touch if we’re no longer able to reach our original contacts. Review collected by and hosted on G2.com.

I like UpGuard's dynamic scoring system, which quickly identifies and reflects changes in our enumerable public infrastructure on its risk profile. This helps us prioritize their patching efficiently. I'm quite excited about the threat monitoring module and can see it becoming my favorite soon. I appreciate the use of AI to provide a summarized analysis of identified threats, along with relevant screenshots, allowing for swift action. The dynamic scoring system keeps everything under control, and any identified threat is usually high priority, treated with importance. Review collected by and hosted on G2.com.

Having more granularity whilst taking out exports to work offline would be good. For example, in the threat monitoring module, if I have analyzed 30 threats and closed them as false positives with appropriate comments, I want to be able to take out an export to show why I closed those threats as FPs to my manager. It's difficult to do these over a call and show every different analyzed threat. Review collected by and hosted on G2.com.

Ease of use and remediation tracking. It’s straightforward to implement and set up, and the account manager is consistently supportive—not only during the initial commercial stage. I use it at least three times per week to keep an eye on vendors and on our own rating.

I haven’t integrated it yet, but I plan to look into that in the future. It’s a great tool, but it still needs a solid process to work well. We also haven’t done any integrations yet, as most of the features we need are already easy to use entirely within the app. The AI and intelligence features save a tremendous amount of time and are incredibly useful. The system is always available when I need it and peforms as expected too - no system latency or issues accessing any of the features - reliable! Review collected by and hosted on G2.com.

Previously the licences were limited to 3, but Upguard increased these to 6 now, at no additional cost. Which is great. The only other thing, I've been asking for is the abuility to add vendors, without monitoring them so that all vendors can be added to the platform, and becomes more integretyed as part of our vendor onboarding process, rather than isolated to where data or technology matters. Review collected by and hosted on G2.com.

I use the scoring in UpGuard Vendor Risk to quickly establish whether a potential vendor is taking security seriously or not, which is crucial for assessing both vendors and my own organization’s security posture. I like how I can quickly evaluate a potential vendor, and if they pass the first test, I can send them detailed questionnaires for further evaluation. This helps ensure the vendor is not putting my company at unnecessary risk. I also appreciate being able to dive deeper than just a vendor’s attack surface with the option of using either out-of-the-box questionnaires or creating my own. Additionally, the initial setup of UpGuard Vendor Risk was quite easy for my team. Review collected by and hosted on G2.com.

Finding the time to develop questionnaires and get the flow right is a challenge. Having a more graphical interface, perhaps like a flow chart to move questions around, would be helpful. Review collected by and hosted on G2.com.

UpGuard Vendor Risk makes third-party risk management much easier to track and communicate. I like that it provides a clear view of vendor security posture, risk ratings, questionnaire status, and remediation items in one place. The external attack surface insights and continuous monitoring are especially useful because they help identify issues without waiting for a point-in-time review. It also makes vendor reviews more structured, with better visibility for both security teams and business stakeholders. Review collected by and hosted on G2.com.

A few areas could be improved. Some risk findings may need additional manual validation before they can be shared with vendors, especially when the issue depends on business context or compensating controls. The questionnaire and evidence review process can also feel time-consuming when dealing with many vendors. More flexible reporting, easier customization of risk scoring, and deeper integrations with GRC or ticketing tools would make the workflow even smoother. Review collected by and hosted on G2.com.