UpGuard
Hobart, Tasmania, Australia; US headquarters in Mountain View, California
What it is
UpGuard is a cloud platform for managing cyber risk across vendors, an organization’s digital attack surface, and its workforce. Vendor Risk provides continuous vendor insights, assessments, and AI-powered workflows. Attack Surface Management monitors an organization’s digital footprint for threats and supports cybersecurity posture improvement. Trust Exchange combines questionnaire automation, a Trust Page, and collaboration features. The service is available through the web and an API, with native Jira Cloud, Slack, and ServiceNow integrations plus connections to over 4,000 apps through Zapier. API access and SSO appear in all listed Vendor Risk tiers. Standard monitors 50 vendors, while Enterprise+ allows unlimited vendors and platform users. UpGuard lists remediation tracking and advanced risk prioritization. It says customer data is encrypted at rest and in transit, its SaaS platform runs on Google Cloud Platform, and its security program is SOC 2 Type II compliant and aligned with ISO/IEC 27001. Plans include a free option and trial; paid access starts at $250/mo.
For and against
For
- Continuous vendor insights and assessments
- Digital-footprint visibility through Attack Surface Management
- Questionnaire automation and Trust Page
- Native Jira Cloud, Slack, and ServiceNow integrations
- Free plan and free trial available
Against
- Standard plan monitors 50 vendors
- Standard is $1,750 a month billed annually
- Platform is cloud deployed
The verdict
UpGuard brings vendor risk, attack-surface visibility, and trust workflows together with broad integrations and API access. Its tier limits vary substantially, so organizations should match vendor and user allowances to their needs before choosing a plan.
Who it suits
UpGuard suits organizations managing vendor, attack-surface, and workforce cyber risk, including education, financial services, technology, and healthcare organizations. Teams needing API access, SSO, integrations, and vendor monitoring can evaluate its tiers.
Plans and prices
Free
5 vendors · Vendor Security Ratings · Assessments · Remediation
Read 15 Oct 2026 · getapp.com
Standard
50 vendors · Vendor Security Ratings · Assessment and Remediation Workflows · Additional vendors $79/month
Read 15 Oct 2026 · upguard.com
Corporate
500 vendors · Fourth Parties · Audit Log
Read 15 Oct 2026 · upguard.com
Enterprise+
Unlimited vendors · Unlimited platform users · Multi-Org Accounts · Enterprise Support
Read 15 Oct 2026 · upguard.com
Professional
150 vendors · Role-Based Accounts · Custom Co-Branding
Read 15 Oct 2026 · upguard.com
Enterprise
unlimited vendors · 30 admin/general users · unlimited read-only users · premium assurance
Read 7 Oct 2026 · upguard.com
On the record
- API and SSO
- The pricing comparison lists API access and SSO in all listed Vendor Risk tiers.upguard.com · read 7 Oct 2026
- API capabilities
- Official API tutorials cover bulk vendor import/export, questionnaire attachments, report generation and integrations.help.upguard.com · read 15 Oct 2026
- API documentation
- UpGuard publishes API documentation at cyber-risk.upguard.com/api/docs and provides a downloadable swagger.json specification for Postman.help.upguard.com · read 15 Oct 2026
- Application security
- UpGuard describes OWASP secure coding, vulnerability scanning of dependencies, fortnightly releases and annual third-party penetration tests.upguard.com · read 15 Oct 2026
- Breach Risk
- Breach Risk maps an organization’s attack surface and monitors threats before compromise.upguard.com · read 15 Oct 2026
- Bug bounty
- UpGuard says it has no bug-bounty program and offers no monetary rewards for vulnerability reports.upguard.com · read 15 Oct 2026
- Company facts
- LinkedIn lists UpGuard as privately held, founded in 2012, headquartered in Mountain View, California, with 201–500 employees.linkedin.com · read 15 Oct 2026
- Company legal name
- Crunchbase identifies the legal name as UpGuard, Inc. and the former name as ScriptRock.crunchbase.com · read 15 Oct 2026
- Data protection
- UpGuard says customer data is encrypted at rest and in transit and its SaaS platform runs on Google Cloud Platform.upguard.com · read 7 Oct 2026
- Documentation and support
- The Help Center provides getting-started guides, release notes, videos, webinars, API material and integration instructions.help.upguard.com · read 15 Oct 2026
- Encryption
- Customer data is encrypted both while stored and while transmitted.upguard.com · read 15 Oct 2026
- Funding and ownership
- Crunchbase classifies UpGuard as a private Series C company and lists eight funding rounds, with amounts partly obscured.crunchbase.com · read 15 Oct 2026
- G2 product review counts
- G2 lists 763 reviews for UpGuard Vendor Risk, 35 for Breach Risk and 4 for Trust Exchange.g2.com · read 15 Oct 2026
- Hosting
- The SaaS platform runs on Google Cloud Platform and is not documented as self-hosted software.upguard.com · read 15 Oct 2026
- Identity controls
- The service supports SAML and OIDC SSO, MFA and subscription-dependent audit logging.upguard.com · read 15 Oct 2026
- Integrations
- Native integrations include Jira Cloud, Slack and ServiceNow, while Zapier connects UpGuard with more than 4,000 applications.upguard.com · read 15 Oct 2026
- Intended customers
- The site presents solutions for education, financial services, technology, and healthcare organizations.upguard.com · read 7 Oct 2026
- Limit: bulk reporting
- A Gartner critical review says bulk actions for vendor reporting are unavailable in both the user interface and API.gartner.com · read 15 Oct 2026
