I use the scoring in UpGuard Vendor Risk to quickly establish whether a potential vendor is taking security seriously or not, which is crucial for assessing both vendors and my own organization’s security posture. I like how I can quickly evaluate a potential vendor, and if they pass the first test, I can send them detailed questionnaires for further evaluation. This helps ensure the vendor is not putting my company at unnecessary risk. I also appreciate being able to dive deeper than just a vendor’s attack surface with the option of using either out-of-the-box questionnaires or creating my own. Additionally, the initial setup of UpGuard Vendor Risk was quite easy for my team. Review collected by and hosted on G2.com.

Finding the time to develop questionnaires and get the flow right is a challenge. Having a more graphical interface, perhaps like a flow chart to move questions around, would be helpful. Review collected by and hosted on G2.com.

UpGuard Vendor Risk makes third-party risk management much easier to track and communicate. I like that it provides a clear view of vendor security posture, risk ratings, questionnaire status, and remediation items in one place. The external attack surface insights and continuous monitoring are especially useful because they help identify issues without waiting for a point-in-time review. It also makes vendor reviews more structured, with better visibility for both security teams and business stakeholders. Review collected by and hosted on G2.com.

A few areas could be improved. Some risk findings may need additional manual validation before they can be shared with vendors, especially when the issue depends on business context or compensating controls. The questionnaire and evidence review process can also feel time-consuming when dealing with many vendors. More flexible reporting, easier customization of risk scoring, and deeper integrations with GRC or ticketing tools would make the workflow even smoother. Review collected by and hosted on G2.com.

It makes third-party risk management simple by providing continuous vendor security monitoring, automated risk assessments, and an intuitive dashboard. I especially like how it streamlines vendor questionnaires, highlights security issues with actionable insights, and delivers clear reporting that helps me prioritize remediation efforts. Review collected by and hosted on G2.com.

It’s a feature-rich platform, so it can take some time for new users to become familiar with all of its capabilities. Reporting and customization options are very limited, and depending on the organization, it isn’t flexible enough for highly specific compliance requirements. Review collected by and hosted on G2.com.

It’s easy to use and offers really good tools, like Excel export/import and the AI assistance. The UI looks good and feels intuitive. Login and security are also straightforward and sufficient for a due diligence service. I also really like that it remembers past questionnaires we’ve done for other clients, which makes it much easier to create a new one. Review collected by and hosted on G2.com.

Something that worries me is how easy it is to submit responses even when we haven’t finished. For example, after importing an Excel file with some answers, it can go straight to submit immediately. I know it shows a message saying there are unfinished questions to review before submitting, but I don’t think that alert is alarming enough. Maybe it should use different colors or something more attention-grabbing that clearly says, “Hey, you’re about to submit—are you really, really, really sure you don’t want to finish the questions first?” Review collected by and hosted on G2.com.

I like UpGuard's clear visibility into security risks and third-party exposures through easy-to-understand security ratings. The security ratings make it easy to quickly understand the risk levels without having to analyze raw technical data. They help us prioritize remediation, communicate risk clearly to management and stakeholders, and make faster, more confident decisions about third-party vendors. I also found that initial setup was easy with creating users and setting up the domain to be scanned for vulnerabilities. Review collected by and hosted on G2.com.

While UpGuard is very effective overall, some findings occasionally require additional validation to confirm relevance and severity. More customization in reporting and deeper contextual detail on certain alerts would further improve prioritization and reduce follow-up effort. Review collected by and hosted on G2.com.

Vendor Risks is a tool we use in our organization to help gauge our overall risk, both internal and external. The system also helps us track vulnerabilities by explaining each one in detail, which makes it easier to understand what we’re dealing with. It’s also helpful that there are recommendations included on how to address these risks. Review collected by and hosted on G2.com.

I’m a fairly new user of Vendor Risk, but I’m at a loss as to how to export the list of vulnerabilities shown so we can use it to track each issue. It would be very helpful if there were a button on the page to easily generate and export this report. Review collected by and hosted on G2.com.

We use this Upguard to monitor our whole organisation, this includes over 200 websites, the product is easy to use, my team all speak well of it and sofar we have not had any negitive feedback from our team on implemention. Onboarding and support has been great, with all the available features I can only see our use of the product increasing. Review collected by and hosted on G2.com.

I can not think of a negitive to UpGaurd at this time. Review collected by and hosted on G2.com.

UpGuard is the best TPRM solution I've ever used. It shows all the external risks to my organization in a single dashboard, which is very helpful. I love its intuitive usability and the automated questionnaire feature. The platform's real-time monitoring is another big plus. It's incredibly user-friendly compared to traditional GRC tools, providing clear visibility into our security posture. This is especially helpful when explaining things to non-technical stakeholders. The UpGuard Trust Center's AI-powered analysis is fantastic, as it reduces noise and ensures our security teams focus on actual risk. The initial setup was very easy, making it even better. Review collected by and hosted on G2.com.

Everything is fine and best as per my experience with upguard Review collected by and hosted on G2.com.

UpGuard is an absolute solution in risk monitoring and this gives a continuous risk assessment to all stakeholders and vendors

The app has understandable cybersecurity implications and ratings and this equips stakeholders with information about risk levels

The dashboard has clear security insights and this makes it simple to navigate

The set up requires minimal infrastructure and this makes the process of scanning realtime

The risks reports and vulnerabilities alerts are issued in real time Review collected by and hosted on G2.com.

Upguard fails to meet the threshold of advanced users, who may need granular controls

Som alerts shared by UpGuard may be misleading and this makes some critical issues to be ignored Review collected by and hosted on G2.com.

I use UpGuard primarily for managing third-party risk and strengthening cybersecurity posture. It helps me monitor vendors, assess their security practices, and identify potential vulnerabilities that could impact my organization. The platform's automated risk assessments and security ratings make it easier to evaluate partners quickly and maintain continuous oversight. Additionally, I rely on UpGuard for internal security monitoring. It provides clear visibility into exposed assets, misconfigurations, and potential data leaks, allowing me to address issues proactively before they escalate. Its intuitive dashboard and reporting features make it simple to communicate risks and improvements to stakeholders. I like the clear, easy-to-understand security insights and automated monitoring, which save time and make managing risks simpler. The clear insights help me quickly understand risks without deep analysis, while automated monitoring keeps track of issues in real time, so I can act fast and avoid potential security problems. We switched to UpGuard from another tool for its more user-friendly interface and stronger automation features. Review collected by and hosted on G2.com.

Some reports can feel a bit high-level, so more detailed insights would help, and the initial setup can take some time to fully configure for specific needs. Review collected by and hosted on G2.com.