Pros y Contras de UpGuard

I am a Head of Risk & Compliance working in a multinational financial services organisation.

UpGuard has been very useful in helping onboard, monitor and oversee our suppliers and vendors across several different jurisdictions. I found implementation to be straightforward, and subsequently the portal is easy to use. I particularly like how it generates a monthly report across all of our suppliers and vendors; that way I can be assured that the software is continuing to oversee the third parties we work with and ultimately rely on to do business.

As my role is focused on oversight, I will say that I only use it every so often (such as once a month) - but it has still proven useful and easy to integrate into my working pattern.

Finally, I have not been required to contact Customer Support with any queries; the software has been straightforward enough for me to use. I have not needed the assistance. Reseña recopilada por y alojada en G2.com.

I would say that a potential challenge that I did not personally experience but may prove to be a hurdle for some is UpGuard's general UI. Because the UI does not really look like any other software in use at my firm, it may mean that other new users may take some time to get used to it. As I say though, this was not an issue in my direct experience. Reseña recopilada por y alojada en G2.com.

I've been using UpGuard for over 3 years now, and it has really improved our organization security posture. Easy to identify risks and vulnerabilities. The Breach risk features I use the most to work on identified vulnerability on owned domain, monitor the domain risk score and identity breach. The product is easy to use and UI is user-friendly. Reseña recopilada por y alojada en G2.com.

Notification preference setting need to be improved. Don't have option to make setting for all user together. Domain discovery need to be more effective, missed some subdomains. Reseña recopilada por y alojada en G2.com.

Upguard is a great product with lot of improvements constantly added. I also had some interaction with their product team and they took in account our feedback in adding new features.

We mostly use Upguard for the Breachsight score, to keep track of our own security posture. We also use it to do vendor assessment for our critical vendors. And recently we started to use the Trust Page more often to showcase to our customers how much focus we put on security. The new features on the Trust page are great (branding, industry average score, certification logos).

The support is really good, they respond fast and usually resolve any issues very fast too. Reseña recopilada por y alojada en G2.com.

Sometimes the speed of releasing feature mean that we miss some new functions and don't review them. For example the scoring of questionnaire had a few bugs ("not applicable" items couldn't as negative in the scoring). And then a customer asked us why our questionnaire score was low (as we leverage cloud provider we put the physical control as not applicable which made the score bad while in reality it's just irrelevant. Reseña recopilada por y alojada en G2.com.

I like mostly Security Ratings & Breach Incidents. With the help of UpGuard we can take action immediately & ask team to mitigate those risks on the basis of criticality & make our security posture better. UpGaurd is very easy tool to use & deployment is also a very good. It detects most of applications & domains automatically on basis of keyword & easy to add manually as well. Support after sales is also very good in terms of E-mail or via CSM, who always available to support. Reseña recopilada por y alojada en G2.com.

Least helpful part of UpGuard is that sometime it doesn't give complete granularity actionable points, which needs attention of related team & team needs more granular report on this. Reseña recopilada por y alojada en G2.com.

"Breach sight" section is quite reliable and easy to understand.

We can easily get to know the vulnerabilities and CVEs associated with these. We can re-scan the application anytime we want to validate whether the vulnerability has been addressed or not.

It is easy to implement and as we can add and scan any custom domain also.

Remediation sub section is also a great way of tracking the vulnerabilities that are currently in progress of patching.

Additional sub section of identity breaches is a great feature as we can get to know if any data has been exposed over the deep and dark web.

Customer support is the backbone of every organization and UpGuard is perfect at customer support. We get revert for our query within 2-3 minutes of sending mail.

I have been using it daily to strengthen the security posture of all the web applications by automated scanning and ad-hoc scanning. Reseña recopilada por y alojada en G2.com.

Vendor risk module is not very useful.

Questionnaires require a lot of time to be filled up and to be checked.

It is a whole different module.

We majorly focus on the Vulnerability assessment of Web applications and vendor risk is quite out of scope thing. Reseña recopilada por y alojada en G2.com.

I began creating custom risk questionnaires before UpGuard came into existence and have found they are now creating solutions for me to my latest needs when addressing vendor risk. These tools include things that I did not anticipate having access to and have found them useful in other applications for the enterprise. UpGuard may focus on vendor risk, but once you get in the platform there are a number of features. The tools are easy to use and implementation is easy to understand. When the interface is confusing it is easy to setup time with the customer service team who always help me gain momentum. I use the tool at least twice a week and find it a primary tool when reviewing vendor risks and several internal company risks. They have put in a lot of work and the value can be seen. Reseña recopilada por y alojada en G2.com.

It takes time to learn to navigate the interface. There are no wizards to walk you step by step through what you want to do. The tool offers complex solutions and has a similar complex interface. I am a little salty about the recent interface changes and the update, while good changes, they impacted my productivity to the point I reached out to the account manager to help me with navigating. Easy conversation and back on track in 30 minutes, but this tool is not a fire and forget. Reseña recopilada por y alojada en G2.com.

Being a user of UpGuard I really apprciate it's user-friendly interface along with the efficient monitoring and detections.

Some key points to be noted are:

- Very much useful and easy for non-technical user too.

- Implementation of the UpGuard was easy, efficient and smooth.

- The support team makes the tasks and queries efficient and smooth for the customers.

- Along with the product itself, it also makes easy for integration of various other products to be placed and monitor.

Hence, this is used in my organization as the most frequent site for security monitoring. Reseña recopilada por y alojada en G2.com.

Being such strong and powerful site, it also lacks with few features as:

- Complex for the first time users

- Cost effectiveness Reseña recopilada por y alojada en G2.com.

I really like the ease of use. It provides very details risks and vulnerabilities for your domains but also vendors. Request remediation feature is very useful to track and enforce vendors to fix critical vulnerabilities and misconfigurations.

Questionnaires with AI capabilities to auto-fill out with SOC reports is a great way to save time for vendors

Identity breaches is a nice to have service to notify users abour compromised credentials.

New features are released every 2-3 weeks. They listen to their customers to offer a better experience.

Customer support is very responsive. Reseña recopilada por y alojada en G2.com.

It lacks of multi language support withing the platform. I don't believe web browser built-in translation is a suitable solution as a workaround so I hope multi language support will be available in 2025.

Custom notification does not provide granularity of which risk we want to be notified (example: Expired certificate or unnecessary port open). Reseña recopilada por y alojada en G2.com.

What isn't to love about UpGuard? From prebuilt questionnaires for practically every security standard on the planet, to at-a-glance understanding of any red flags associated with your existing vendor or one your considering doing business with, UpGuard has you covered. The ability to see your own business's risks is a great layer in you Defense In Depth and Attack Surface Management strategy.

And did I mention they have the greatest customer support of any company I've ever seen. Little chat box in the bottom right, click it, type a message, and normally Eduardo answers me in about 10 seconds. Never seen a problem this guy can't fix, whether it's odd behavior in their software, or some obscure detection in an HTTP Redirect header. He's awesome!! This is the best vendor I've ever dealt with. Reseña recopilada por y alojada en G2.com.

Absolutely Nothing. Go try them. You will not regret it. Reseña recopilada por y alojada en G2.com.

Ease of Use - User friendly, we can easily add the website and start immediate assessment.

Implementation - We can easily configure for the implentation.

Customer Support - We can reach them easily and they will respond.

We are using on daily basis to report the vulnerabilities to supplier.

We are using almost all the features in Upguard. It can be easily Integrated with other apps. Reseña recopilada por y alojada en G2.com.

This is really good tool. During the risk assessment, the remainders can be comsolidated rather than individual. Apart from that no negatives. Reseña recopilada por y alojada en G2.com.