About UpGuard
UpGuard is a commercial cyber risk platform that security teams use to monitor the risk their vendors, their own internet-facing assets and their employees create. It brings these areas into one product rather than separate tools for vendor risk, exposure monitoring and user behavior.
Its Vendor Risk area covers assessments, vendor discovery and onboarding, security questionnaire automation, remediation tracking and continuous monitoring. Breach Risk covers threat monitoring, attack surface management and brand protection. User Risk focuses on shadow AI monitoring, policy and governance, and contextual guidance for staff. A Trust Exchange offers a trust center and AI questionnaire tool, with a free tier.
UpGuard is cloud delivered and aimed at security and risk teams in sectors such as financial services, healthcare, education and technology. Its pricing page lists plan details; none are reproduced here.
Key features
- Vendor risk assessments and continuous monitoring
- Security questionnaire automation
- Attack surface management
- Brand protection and threat monitoring
- Shadow AI monitoring for the workforce
- Trust center for sharing security posture
Good fit for
- →Monitoring third-party vendor risk
- →Answering customer security questionnaires faster
- →Finding unsanctioned AI use in a workforce
- Tags
- third-party-risk
- vendor-risk
- attack-surface
- security-ratings
- cyber-risk
- shadow-ai
- saas
UpGuard: questions and answers
- What is UpGuard used for?
- UpGuard is a commercial cyber risk platform combining third-party vendor risk management, attack surface monitoring and workforce AI governance. It is a good fit for monitoring third-party vendor risk, answering customer security questionnaires faster and finding unsanctioned AI use in a workforce.
- How much does UpGuard cost?
- Paid plans for UpGuard start at $1,750 per month, and there is no free plan. A free trial is available.
- Is UpGuard open source?
- No. UpGuard is proprietary (closed-source) software and can't be self-hosted. Open-source alternatives to UpGuard include CISO Assistant.
- What are some alternatives to UpGuard?
- UpGuard competes with SecurityScorecard, Bitsight and Recorded Future. For open-source options, see Enlisted's ranked list of open-source UpGuard alternatives.
Open-source alternatives to UpGuard
See all
CISO Assistant
Security
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & A
OSSvs Vanta★ 4.5k
Infisical
Security
Infisical is the open-source platform for secrets, certificates, and privileged access man
OSSvs Doppler★ 30k
SafeLine
Security
CyberServal open-source WAF is a self-hosted WAF with 20.9K GitHub stars. Block SQL inject
GPL-3.0vs Cloudflare★ 23k
fail2ban
Security
Daemon to ban hosts that cause multiple authentication errors
OSS★ 19k
Wazuh
Security
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints a
OSSvs Splunk★ 17k
CrowdSec
Security
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with
MITvs Cloudflare★ 15k
SaaS alternatives to UpGuard
See all
SecurityScorecard
Security
Security ratings and third-party risk management platform
SaaS
Bitsight
Security
Security ratings and cyber risk analytics platform
SaaS
Recorded Future
Security
Threat intelligence platform
SaaS
Adverse Monitor
Security
Cyber threat intelligence tool that watches the dark web for incident claims naming your company
SaaS
Mandiant
Security
Threat intelligence and incident response services and products from Google
SaaS
AttackerView
Security
Security auditor that shows what an attacker can see on your website
SaaS

