I like mostly Security Ratings & Breach Incidents. With the help of UpGuard we can take action immediately & ask team to mitigate those risks on the basis of criticality & make our security posture better. UpGaurd is very easy tool to use & deployment is also a very good. It detects most of applications & domains automatically on basis of keyword & easy to add manually as well. Support after sales is also very good in terms of E-mail or via CSM, who always available to support. Review collected by and hosted on G2.com.
Least helpful part of UpGuard is that sometime it doesn't give complete granularity actionable points, which needs attention of related team & team needs more granular report on this. Review collected by and hosted on G2.com.
Video Reviews
350 out of 351 Total Reviews for UpGuard
Overall Review Sentiment for UpGuard
Log in to view review sentiment.
I've been using UpGuard for over 3 years now, and it has really improved our organization security posture. Easy to identify risks and vulnerabilities. The Breach risk features I use the most to work on identified vulnerability on owned domain, monitor the domain risk score and identity breach. The product is easy to use and UI is user-friendly. Review collected by and hosted on G2.com.
Notification preference setting need to be improved. Don't have option to make setting for all user together. Domain discovery need to be more effective, missed some subdomains. Review collected by and hosted on G2.com.

Upguard is a great product with lot of improvements constantly added. I also had some interaction with their product team and they took in account our feedback in adding new features.
We mostly use Upguard for the Breachsight score, to keep track of our own security posture. We also use it to do vendor assessment for our critical vendors. And recently we started to use the Trust Page more often to showcase to our customers how much focus we put on security. The new features on the Trust page are great (branding, industry average score, certification logos).
The support is really good, they respond fast and usually resolve any issues very fast too. Review collected by and hosted on G2.com.
Sometimes the speed of releasing feature mean that we miss some new functions and don't review them. For example the scoring of questionnaire had a few bugs ("not applicable" items couldn't as negative in the scoring). And then a customer asked us why our questionnaire score was low (as we leverage cloud provider we put the physical control as not applicable which made the score bad while in reality it's just irrelevant. Review collected by and hosted on G2.com.
"Breach sight" section is quite reliable and easy to understand.
We can easily get to know the vulnerabilities and CVEs associated with these. We can re-scan the application anytime we want to validate whether the vulnerability has been addressed or not.
It is easy to implement and as we can add and scan any custom domain also.
Remediation sub section is also a great way of tracking the vulnerabilities that are currently in progress of patching.
Additional sub section of identity breaches is a great feature as we can get to know if any data has been exposed over the deep and dark web.
Customer support is the backbone of every organization and UpGuard is perfect at customer support. We get revert for our query within 2-3 minutes of sending mail.
I have been using it daily to strengthen the security posture of all the web applications by automated scanning and ad-hoc scanning. Review collected by and hosted on G2.com.
Vendor risk module is not very useful.
Questionnaires require a lot of time to be filled up and to be checked.
It is a whole different module.
We majorly focus on the Vulnerability assessment of Web applications and vendor risk is quite out of scope thing. Review collected by and hosted on G2.com.
I began creating custom risk questionnaires before UpGuard came into existence and have found they are now creating solutions for me to my latest needs when addressing vendor risk. These tools include things that I did not anticipate having access to and have found them useful in other applications for the enterprise. UpGuard may focus on vendor risk, but once you get in the platform there are a number of features. The tools are easy to use and implementation is easy to understand. When the interface is confusing it is easy to setup time with the customer service team who always help me gain momentum. I use the tool at least twice a week and find it a primary tool when reviewing vendor risks and several internal company risks. They have put in a lot of work and the value can be seen. Review collected by and hosted on G2.com.
It takes time to learn to navigate the interface. There are no wizards to walk you step by step through what you want to do. The tool offers complex solutions and has a similar complex interface. I am a little salty about the recent interface changes and the update, while good changes, they impacted my productivity to the point I reached out to the account manager to help me with navigating. Easy conversation and back on track in 30 minutes, but this tool is not a fire and forget. Review collected by and hosted on G2.com.
Being a user of UpGuard I really apprciate it's user-friendly interface along with the efficient monitoring and detections.
Some key points to be noted are:
- Very much useful and easy for non-technical user too.
- Implementation of the UpGuard was easy, efficient and smooth.
- The support team makes the tasks and queries efficient and smooth for the customers.
- Along with the product itself, it also makes easy for integration of various other products to be placed and monitor.
Hence, this is used in my organization as the most frequent site for security monitoring. Review collected by and hosted on G2.com.
Being such strong and powerful site, it also lacks with few features as:
- Complex for the first time users
- Cost effectiveness Review collected by and hosted on G2.com.
I really like the ease of use. It provides very details risks and vulnerabilities for your domains but also vendors. Request remediation feature is very useful to track and enforce vendors to fix critical vulnerabilities and misconfigurations.
Questionnaires with AI capabilities to auto-fill out with SOC reports is a great way to save time for vendors
Identity breaches is a nice to have service to notify users abour compromised credentials.
New features are released every 2-3 weeks. They listen to their customers to offer a better experience.
Customer support is very responsive. Review collected by and hosted on G2.com.
It lacks of multi language support withing the platform. I don't believe web browser built-in translation is a suitable solution as a workaround so I hope multi language support will be available in 2025.
Custom notification does not provide granularity of which risk we want to be notified (example: Expired certificate or unnecessary port open). Review collected by and hosted on G2.com.
What isn't to love about UpGuard? From prebuilt questionnaires for practically every security standard on the planet, to at-a-glance understanding of any red flags associated with your existing vendor or one your considering doing business with, UpGuard has you covered. The ability to see your own business's risks is a great layer in you Defense In Depth and Attack Surface Management strategy.
And did I mention they have the greatest customer support of any company I've ever seen. Little chat box in the bottom right, click it, type a message, and normally Eduardo answers me in about 10 seconds. Never seen a problem this guy can't fix, whether it's odd behavior in their software, or some obscure detection in an HTTP Redirect header. He's awesome!! This is the best vendor I've ever dealt with. Review collected by and hosted on G2.com.
Absolutely Nothing. Go try them. You will not regret it. Review collected by and hosted on G2.com.

Ease of Use - User friendly, we can easily add the website and start immediate assessment.
Implementation - We can easily configure for the implentation.
Customer Support - We can reach them easily and they will respond.
We are using on daily basis to report the vulnerabilities to supplier.
We are using almost all the features in Upguard. It can be easily Integrated with other apps. Review collected by and hosted on G2.com.
This is really good tool. During the risk assessment, the remainders can be comsolidated rather than individual. Apart from that no negatives. Review collected by and hosted on G2.com.
What I like best is the Breach risk section as I am a red teamer, and I have the role of managing vulnerabilities and helping team to mitigate them.
UpGuard is really a very good consideration for ease of use, implementation, customer support.
Its easy integration with the help of API with jira was a good and easy task.
I use it on a daily basis.
Vendor risk assessment and identity breach sections are also very effective Review collected by and hosted on G2.com.
There is nothing that I dislike about this.
But I think there should be a customized dashboard dedicated for each country which can be easy to find out by country wise. Review collected by and hosted on G2.com.
UpGuard is a cybersecurity platform that provides a suite of tools to help organizations assess and manage their security posture. Below mentioned functionalities which are quite good and helpful for improving security posture. it also provide detailed mitigations for the identified risks which is really helpful.
1. Security Risk Assessment
2. Vendor Risk Management
3. Automated Security Monitoring
4. Data Breach Detection
5. User-Friendly Interface
6. Risk profile review Review collected by and hosted on G2.com.
Sometimes it happens that the risks are resolved but upguard fails to validate. Review collected by and hosted on G2.com.