UpGuard Pros and Cons

-Easy to use GUI

-The integration with Breachsight and providing scores for each vendor helps a lot

-Great customer service

-Cuts workload of the team for vendor assessment and ROI is fast Review collected by and hosted on G2.com.

-Breachsight module: Passive scanning is limited if web app is behind an IDP such as Okta, etc. Review collected by and hosted on G2.com.

I've been using UpGuard's VSA tool for a few months now, and I must say, it's been a game-changer for our team. The interface is incredibly user-friendly, making it easy for even the less tech-savvy members of our team to navigate and utilize its features effectively.

What stands out the most is the comprehensive security assessments it provides. We've been able to identify and address potential vulnerabilities before they become issues, which has significantly boosted our overall security posture. The detailed reports are clear and actionable, helping us prioritize our efforts efficiently.

Customer support has also been top-notch. Whenever we've had questions or needed assistance, the UpGuard team has been responsive and helpful, ensuring we get the most out of the tool.

Overall, UpGuard's VSA tool has exceeded our expectations and has become an essential part of our security toolkit. Highly recommend it to any organization looking to enhance their security measures! Review collected by and hosted on G2.com.

Some modules are too expensive when compared to other competitors Review collected by and hosted on G2.com.

UpGuard is easy to use with clear results, it allows us to easily see what our vendors and ourselves do well and need to improve, resulting in fast decisions about who we can share data with and with what degree of trust. Review collected by and hosted on G2.com.

The API is still in development which excludes some of the functions from being automated with our processes. That said, I do see constant updates. Review collected by and hosted on G2.com.

UpGuard offers several features related to third-party vendor risk management that help organizations mitigate potential risks. These features include:

-Vendor Risk Assessment

-Continuous Monitoring

-Third-Party Audits

-Risk Scoring Review collected by and hosted on G2.com.

Dependence on Vendor Participation when we have raise to Vendor for Assessment . Review collected by and hosted on G2.com.

UpGuard shows us how peer organizations are secured compared to mine by comparing our ratings to them.

It also provides detailed information about vulnerabilities found in subdomains so that we can fix these vulnerabilities to secure our organization. Review collected by and hosted on G2.com.

We noticed that some vulnerabilities discovered by UpGuard were false positives, which affected our organization's rating. We then had to manually identify and correct these false positive vulnerabilities. Review collected by and hosted on G2.com.

We have been using the Upguard solution for the past year and have found it extremely valuable in strengthening our security.It helps us detect exposed credentials, automate monitoring of our external facing assets based on domain and IP range, and maintain continuous visibility into potential risks. The tool generates an organizational risk score by benchmarking against industry standards and provides actionable insights to enhance our security posture. With this, we planned to continue the engagement for next year too. Review collected by and hosted on G2.com.

sometimes flags non-critical issues as risks, which require manual review and take extra time to resolve. Review collected by and hosted on G2.com.

I like the ease-of-use and organization of the site overall. It makes for easy navigation and for quick assessments and notifications for instances such as data/identity breaches. It's very easy to implement and I think the number of features can be quite useful - especially with an organization of our size and the different departments that find use from it. Review collected by and hosted on G2.com.

I find that sometimes the findings are not relevant depending on discovered breach dates. Some discoveries are well over 6 months old and this leaves the actionable intel a little too far behind, given that most passwords in organizations will rotate on a 90-120 day basis. Review collected by and hosted on G2.com.

Upguard allows full licenses on all companies which makes sure you don't miss anything due to only "half" following the company. You still get access to data breaches and vulnerability reports on your own company. During the trial we were able to identify critical issues and reach out to companies about domains we were pointing to that were no longer active. Great benefit for the value. Onboarding was fantastic and helps to make sure you stay on track. Review collected by and hosted on G2.com.

Nothing. The features are very robust and help us do our best at monitoring our exposed attack surface with third parties. Review collected by and hosted on G2.com.

Upgard was great at showing how other amc's were secured in respect to my amc by comparing both of our ratings. Also it gives detailed information about the vulnerabilites found in the sub- domain, which helps in remediation Review collected by and hosted on G2.com.

We have recognised that some of the vulnerabilties discovered by upgard was false positive, due to which it affects our amc's rating, which we later have to manually identify and flag them. Review collected by and hosted on G2.com.

UpGuard evaluates your external security posture by scanning public assets for vulnerabilities, misconfigurations, and breaches. It assigns a Security Rating (0-950) based on risks like open ports, SSL issues, DNS security, and third-party exposure. A higher score indicates a stronger, more secure perimeter. Review collected by and hosted on G2.com.

Sometimes vulnerabilities are false positive but that's understandable. Review collected by and hosted on G2.com.