Honestly, what I like most is how it shows our external attack surface in a way that's easy to understand. I can see things like exposed subdomains, SSL problems, or open ports without having to check everything manually. It's really helpful when I need to explain security risks to people who are not from a technical background. Before UpGuard, this kind of overview took a lot of time to put together. Now it's much more straightforward. Review collected by and hosted on G2.com.

Nothing major so far. The learning curve at the beginning was a little steep, but once you get familiar with the interface it becomes much easier. Maybe the alert notifications could be a bit more customizable, but it's not a big deal for our daily workflow. Review collected by and hosted on G2.com.

We have found Vendor risk so easy to setup and simple to use. Having used other products in this area I am glad we are using UpGuard now.

The support we have received on our journey has been excellent even into our second renewal. Review collected by and hosted on G2.com.

For us cost is slightly prohibitive, so have to reduce the number of 3rd parties we are able to continuously scan. But overall we see value in the product. Review collected by and hosted on G2.com.

I like that UpGuard provides a single platform for vendor risk management and external attack surface visibility, which includes detecting vulnerabilities like open ports, SSL issues, and leaked credentials. The platform makes complex data easy to understand through its dashboards. I appreciate the automated vendor risk assessment workflow that removes the manual complexity from managing third-party risks. Additionally, UpGuard improves consistency and audit readiness by centralizing vendor data and their responses, allowing us to track progress and review responses easily. The straightforward and quick initial setup, coupled with the well-guided onboarding process, allows us to see our security rating and external risk insights promptly. Review collected by and hosted on G2.com.

I think UpGuard would be more effective if its integration capabilities were expanded, especially with SIEM, Ticketing tools, and the M365 Security stack. Stronger and more seamless integration with existing enterprise security and IT ecosystems would help reduce manual efforts. Deeper integration with the M365/Defender ecosystem, like Defender for Endpoints, Defender for Cloud apps, and Entra ID, would add value and enable better collaboration with UpGuard findings. Review collected by and hosted on G2.com.

I use UpGuard for its clear and easy-to-understand risk insights that provide real-time visibility into security risks, which helps me quickly identify and prioritize what needs fixing. I appreciate its continuous monitoring that helps quickly identify and fix vulnerabilities without much manual effort. UpGuard integrates well with other security tools, helping to centralize risk insights from different systems, providing a more complete view of our overall security posture. The initial setup was quick and straightforward, with minimal configuration required. We switched to UpGuard for its better visibility, user-friendly interface, and more comprehensive risk monitoring compared to our previous solution. Review collected by and hosted on G2.com.

Sometimes the alerts can feel overwhelming and need better prioritization. It can improve alert prioritization by better grouping similar issues and highlighting the most critical risks first. Adding smarter filtering and customizable alert settings would help reduce noise and focus on what matters most. Review collected by and hosted on G2.com.

I like how UpGuard combines vendor risk management with external attack surface monitoring in one place. It's useful for vendor risk management, attack surface management, and automation and reporting. UpGuard helps us track exposed servers and misconfigurations and maintains compliance with ISO and SOC standards. I appreciate how it monitors my overall security posture and gives real-time actionable insights. The attack surface monitoring provides a continuously updated map of external risks and prioritizes what needs fixing. I find it helpful for discovering forgotten IT assets and monitoring vendor security risks. The initial setup was very easy, user-friendly, and straightforward for engineers to deploy. Overall, I find UpGuard's integration of various security features into a single workflow extremely valuable. Review collected by and hosted on G2.com.

As of now I haven't found anything of which I dislike UpGuard. Review collected by and hosted on G2.com.

I really like the graphical interface of UpGuard Vendor Risk, as it simplifies my work and makes it much more fluid and smooth. I also appreciate the remediation request feature and the ability to perform scans on a domain whenever I want. Review collected by and hosted on G2.com.

Some limitations due to additional packages required for a fee Review collected by and hosted on G2.com.

I like UpGuard for its ease of use, especially the vendor assessment module which is a breeze to use. We are very happy with the nested questionnaires, and the initial risk scoring based on the answers is a good time saver. The vendor threat intelligence is very useful and has proven to be quite accurate over the past year. I found the initial setup extremely easy. The integration with Jira and email notifications is also beneficial for us. Review collected by and hosted on G2.com.

The module for risk approvals and waivers needs a bit of tweaking. The more you use it, the harder it becomes to see what is pending. So sorting and organizing can be improved. Review collected by and hosted on G2.com.

As a client invited to complete a vendor assessment, these types of audits can easily feel overwhelming. UpGuard structures the onboarding questionnaire in a logical way, breaking what is usually a tedious process into manageable, easy-to-follow sections. That said, I found the initial onboarding flow—and locating the security questionnaire—somewhat unintuitive. I was taken to the full dashboard rather than being directed straight to the questionnaire, and it took me a few minutes to figure out what I needed to click.

Once I got past the initial dashboard layout, the interface itself felt incredibly clean, modern, and visually polished. It comes across as a contemporary tool rather than a clunky legacy system.

The AI-assisted autofill feature is genuinely helpful. Uploading our existing security artifacts and having the platform pre-populate answers saved us hours of repetitive manual data entry.

Integrating our existing compliance documents (like our SOC 2 reports and policies) into the assessment workflow was straightforward. We didn't need to lean heavily on customer support because, despite the initial dashboard confusion, the core mechanics work exactly as intended with the little onboarding guide in the dash itself.

The platform also feels snappy and fast. We didn’t run into lag or frustrating load times while working to get our assessment submitted.

I can’t accurately assess the cost of the platform or whether it’s worth it overall, since we were invited to use the system by a third party that was assessing us. However, from an operational standpoint, the time saved through the automated questionnaire features provided an immediate return on our time investment. Review collected by and hosted on G2.com.

The icons on the left-hand menu are surprisingly pixelated and completely unintuitive—it's honestly hard to guess what they are supposed to represent. Coupled with the fact that it took me a while to realize "Start Assessment" was the primary button I needed to click, the initial dashboard experience is definitely lacking.

Being introduced to the Trust Centre right away makes no sense for my specific use case. Since I was simply onboarded onto the platform by a client to fill out an assessment, pitching or showing me broader platform features just distracted from the task at hand and added to the confusion.

While I like the logical categories of the security questionnaire, the actual progression could be better. I would suggest organizing the questionnaire into more of a guided "flow" structure, which would make navigating from start to finish feel much more seamless.

Because I was invited by a third party to be assessed, I only saw the platform from the vendor side. I cannot assess the pricing or the backend administrative tools that the assessing company uses. Review collected by and hosted on G2.com.

UpGuard is a trustworthy application for managing vendor risk. It provides automated risk reviews and grading, an intuitive UI for vendors, employees, reviewers, and auditors, and scales well while delivering clear value.

The tool integrates well with other risk management tools and securitytools and has better pricing models Review collected by and hosted on G2.com.

Unable to customize and lack of clear API and extensibility Review collected by and hosted on G2.com.

I find UpGuard very helpful in providing continuous visibility into our risk surface, especially concerning vendor risk assessments. It allows us to monitor domains, cloud services, and other credentials effectively. Automating vendor assessments and questionnaires streamlines things considerably for us. It helps us identify shadow IT and other risky user behaviors. The unified platform helps in efficiently identifying or understanding risks by replacing multiple tools with one source of truth. The setup is not complicated, and integrations are very easy to establish, taking less than a few hours. Review collected by and hosted on G2.com.

One challenge I have with UpGuard is that it would be helpful if they can aggregate the information about vendor assessments and questionnaires, like if there are other vendors who have recently gone through assessments. I wish that information is available publicly, so we don't have to run those assessments over and over again. It helps monitor the vendor's security rating and alerts, instead of individual affiliates going in and checking if those assessments have been completed or not. I don't see this feature currently, maybe they're working on it in the backend, but I'm not sure. Review collected by and hosted on G2.com.