What I like the most about UpGuard is how it simplifies vendor risk management. It gives a clear view of third-party security posture and helps identify risks early with continuous monitoring. The dashboard is easy to navigate, and the automated questionnaires save a lot of time during audits like ISO 27001 and SOC. Overall, it reduces manual effort and makes compliance tracking much more manageable. Review collected by and hosted on G2.com.

Reporting could be more flexible, since it sometimes needs manual adjustments for audit use. There are also a few false positives in the risk findings that still need to be validated. Integration options are good but could be expanded further for smoother workflows. Performance is generally stable, though occasional delays can happen when handling larger datasets. Pricing can feel a bit on the higher side for smaller teams, especially when scaling. Support is helpful, but response times could be improved in some cases. The platform provides useful insights, but there is room to enhance AI-driven recommendations for more actionable outputs. Overall, it’s a solid tool, but improving these areas would make it even more efficient. Review collected by and hosted on G2.com.

I like that UpGuard is reliable and provides a lot of information about vendor profiles that we don't have access to otherwise, allowing us to score vendors as high risk or low risk. Their vulnerability scanning is also reliable, and I appreciate the value we get with multiple services bundled into one, such as monitoring for Tyosquatting. It's helpful for scanning vulnerabilities in our public IPs and websites and allows us to survey the score of prospective vendors. UpGuard also alerts us if any user passwords are detected in the dark web or in a leak, which helps us ensure our users' safety by advising them to reset their passwords. Review collected by and hosted on G2.com.

Nothing Review collected by and hosted on G2.com.

Uploading our SOC and having it fill out answers was awesome! These reports take forever and this made it much less awful as any security or compliance officer will attest. Review collected by and hosted on G2.com.

Need to have a "Policy" file type on the file upload. Review collected by and hosted on G2.com.

One new aspect I really like about UpGuard is its continuous attack surface monitoring, which provides real-time visibility into exposed assets across the internet. Instead of relying on periodic scans, UpGuard constantly tracks changes, alerting you the moment something becomes publicly visible — such as a misconfigured S3 bucket, expired SSL certificate, or exposed domain.

Another standout is the built-in data leak detection engine. UpGuard scans the web, dark web, GitHub, forums, and paste sites to identify leaked credentials or sensitive information related to your organisation — something traditional security tools often miss.

I also appreciate how UpGuard makes security questionnaires and vendor assessments extremely streamlined. Their questionnaire library, automation, and workflow tools eliminate the repetitive back-and-forth usually required with vendors, improving compliance and reducing friction.

Finally, the platform’s risk rating transparency is impressive. It provides clear, easy-to-understand explanations of every risk factor, how the score is calculated, and recommended fixes — making it easier for both security and non-security teams to take action quickly. Review collected by and hosted on G2.com.

Although UpGuard is a robust platform overall, there are a few areas where it could evolve further:

Greater pricing flexibility: The current pricing structure may pose a barrier for startups and smaller businesses. Offering scaled-down tiers or a modular pricing approach could broaden its accessibility.

Expanded platform customization: While the dashboards are effective, users often seek more in-depth customization options — especially for reporting, risk scoring, and automated workflows — to better align with their internal requirements.

Stronger integration capabilities: Some users face challenges when connecting UpGuard with older systems or specific SIEM/SOAR tools. Broadening its integration options, particularly with plug-and-play solutions, would streamline implementation.

More sophisticated analytics and predictive features: UpGuard delivers solid visibility, but adding advanced analytics — like predictive risk trends or proactive vendor assessments — could enhance strategic planning.

Easier onboarding for advanced features: Despite its intuitive design, some complex functionalities can be difficult to navigate. Embedding more in-product guidance, step-by-step walkthroughs, or interactive tutorials would improve the user experience. Review collected by and hosted on G2.com.

I really appreciate how quickly UpGuard allows you to scan after remediation. I like the details it provides, making it easy to check if issues are resolved after making necessary changes. I also like how easy it is to see and understand vulnerabilities, why they exist, and potential solutions. The ease of rescanning to make sure the solution accurately corrected the vulnerability is a big plus for me. The initial setup was easy too. Review collected by and hosted on G2.com.

Thoroughness of scanning, detailed reason for the vulnerability, detailed resolution steps and ease of rescanning. Review collected by and hosted on G2.com.

It's really helpful to identify the risks of the vendors while dealing with those vendors. The insights are really clear and forward to the customers. Review collected by and hosted on G2.com.

I found nothing dislike about the vendor risk. Review collected by and hosted on G2.com.

I use UpGuard for completing security questionnaires because it speeds things up and keeps all the information in one place, making it easy to reply and consolidate information. I like that it simplifies and streamlines the whole process. It's a useful tool that's all-encompassing. The platform makes evaluations and reviewing straightforward and user-friendly. The user interface is good and simple to use, and setting it up was very easy. I think it's a very useful product that streamlines our processes and eliminates the need for spreadsheets, which is great from an automation and time-saving perspective. Review collected by and hosted on G2.com.

The initial set up process can be cumbersome. I needed to access support as I was stuck in a look of verification Review collected by and hosted on G2.com.

I use UpGuard for monitoring and improving our company's cybersecurity. It helps us track vulnerabilities and misconfigurations. It's easy to pick up, especially with our team handling multiple tools. UpGuard assists us in managing our monitoring capabilities to the fullest extent. The process was easy as we were guided by our manager in helping us set up, especially during work from home. Review collected by and hosted on G2.com.

Reporting can be a pain, but with an improved way of reporting these alerts, it will help us greatly, especially as part of the SOC team. Review collected by and hosted on G2.com.

The main thing I like about UpGuard is its auto mapping and answering feature, which has been really valuable for us. It does a great job at understanding when customers or vendors ask essentially the same question using different language. It's really good and smart at mapping those questions competitively and ensuring we're covering the answers correctly. This saves me a lot of time in terms of interpreting what's being required. Additionally, the initial setup was easy; after the initial effort, it has been great. Review collected by and hosted on G2.com.

When two people are working on the same document at the same time, it can become a little tricky, especially from a track changes point of view. Review collected by and hosted on G2.com.

I think Vendor Risk is a good product and it's amazing for assessing my vendors. I like that it helps me determine whether it's safe or not to work with them, allowing me to choose vendors with conviction. The integrations are something I enjoy, and the AI-powered questionnaires are features I value. I found the initial setup pretty straightforward and easy to walk through. Review collected by and hosted on G2.com.

Sometimes there are glitches within the platform. Review collected by and hosted on G2.com.