Skip to content
SPECIFICTION
Get listed

UpGuard

upguard.com

From $1,750/mo Free plan WebiOSAndroidAPIBrowser extension
Visit upguard.com
Spec score 8.6 #1 of 23 in Risk Intelligence Software

What it is

UpGuard is a cloud platform for managing cyber risk across an organization’s vendors, digital footprint, and workforce. Vendor Risk supplies continuous vendor insights, assessments, and AI-powered workflows. Attack Surface Management monitors an organization’s digital footprint to help detect threats, while Trust Exchange provides questionnaire automation, a Trust Page, and collaboration features. The platform supports remediation tracking and advanced risk prioritization, with access through web and API. Listed integrations include Jira Cloud, Slack, and ServiceNow, plus connections to more than 4,000 apps through Zapier. Vendor Risk tiers list API access and SSO. Standard covers 50 vendors; Enterprise+ includes unlimited vendors and platform users. The free plan is available, and paid plans start at $250/mo. Standard is listed at $1,750 a month when billed annually. UpGuard says customer data is encrypted at rest and in transit, and its security program aligns with ISO/IEC 27001; it also reports SOC 2 Type II compliance and annual attestation.

Spec sheet

What it does
UpGuard is a cloud platform for managing vendor risk and monitoring external attack surfaces, with questionnaires, security ratings, continuous monitoring and alerts.Read 15 Oct 2026 · getapp.com
Trial
The site offers a free trial but does not state its duration on the pages reviewed.Read 7 Oct 2026 · upguard.com
Integrations
Native integrations include Jira Cloud, Slack and ServiceNow, while Zapier connects UpGuard with more than 4,000 applications.Read 15 Oct 2026 · upguard.com
Support
The pricing comparison lists Standard Support in Standard, Professional, and Corporate, and Premium Assurance in Enterprise and Enterprise+.Read 7 Oct 2026 · upguard.com
Headquarters
Hobart, Tasmania, Australia; US headquarters in Mountain View, CaliforniaRead 28 Sep 2026 · upguard.com
Founded
UpGuard says it was founded in 2012.Read 7 Oct 2026 · upguard.com
API and SSO
The pricing comparison lists API access and SSO in all listed Vendor Risk tiers.Read 7 Oct 2026 · upguard.com
API capabilities
Official API tutorials cover bulk vendor import/export, questionnaire attachments, report generation and integrations.Read 15 Oct 2026 · help.upguard.com
API documentation
UpGuard publishes API documentation at cyber-risk.upguard.com/api/docs and provides a downloadable swagger.json specification for Postman.Read 15 Oct 2026 · help.upguard.com
Application security
UpGuard describes OWASP secure coding, vulnerability scanning of dependencies, fortnightly releases and annual third-party penetration tests.Read 15 Oct 2026 · upguard.com
Breach Risk
Breach Risk maps an organization’s attack surface and monitors threats before compromise.Read 15 Oct 2026 · upguard.com
Bug bounty
UpGuard says it has no bug-bounty program and offers no monetary rewards for vulnerability reports.Read 15 Oct 2026 · upguard.com
Company facts
LinkedIn lists UpGuard as privately held, founded in 2012, headquartered in Mountain View, California, with 201–500 employees.Read 15 Oct 2026 · linkedin.com
Company legal name
Crunchbase identifies the legal name as UpGuard, Inc. and the former name as ScriptRock.Read 15 Oct 2026 · crunchbase.com
Data protection
UpGuard says customer data is encrypted at rest and in transit and its SaaS platform runs on Google Cloud Platform.Read 7 Oct 2026 · upguard.com
Documentation and support
The Help Center provides getting-started guides, release notes, videos, webinars, API material and integration instructions.Read 15 Oct 2026 · help.upguard.com
Encryption
Customer data is encrypted both while stored and while transmitted.Read 15 Oct 2026 · upguard.com
Funding and ownership
Crunchbase classifies UpGuard as a private Series C company and lists eight funding rounds, with amounts partly obscured.Read 15 Oct 2026 · crunchbase.com
G2 product review counts
G2 lists 763 reviews for UpGuard Vendor Risk, 35 for Breach Risk and 4 for Trust Exchange.Read 15 Oct 2026 · g2.com
Hosting
The SaaS platform runs on Google Cloud Platform and is not documented as self-hosted software.Read 15 Oct 2026 · upguard.com
Identity controls
The service supports SAML and OIDC SSO, MFA and subscription-dependent audit logging.Read 15 Oct 2026 · upguard.com
Intended customers
The site presents solutions for education, financial services, technology, and healthcare organizations.Read 7 Oct 2026 · upguard.com
Limit: bulk reporting
A Gartner critical review says bulk actions for vendor reporting are unavailable in both the user interface and API.Read 15 Oct 2026 · gartner.com
Limit: pricing
A Capterra reviewer considers the product’s price somewhat steep, though still fair for the capability.Read 15 Oct 2026 · capterra.com
Limit: rating transparency
A Capterra reviewer says UpGuard could explain more openly how it scores risks and vulnerabilities.Read 15 Oct 2026 · capterra.com
Plan limits
The Standard plan includes monitoring 50 vendors, while Enterprise+ includes unlimited vendors and unlimited platform users.Read 7 Oct 2026 · upguard.com
Praise: integrations
A Capterra reviewer praises the intuitive interface and Jira integration, while another says deployment and use are straightforward.Read 15 Oct 2026 · capterra.com
Praise: onboarding
GetApp’s user-derived feature scores rate onboarding 5.0/5 and risk assessment 4.8/5.Read 15 Oct 2026 · getapp.com
Praise: usability
Gartner reviewers repeatedly describe the interface as easy to learn and say monitoring, alerts, assessment and reporting can be handled in one tool.Read 15 Oct 2026 · gartner.com
Public API
The public API uses API-key authorization at the cyber-risk.upguard.com/api/public base URL and supports vendor data access and other account operations.Read 15 Oct 2026 · help.upguard.com
Rating on Capterra
4.5 out of 5 from 4 reviewsRead 15 Oct 2026 · capterra.com
Rating on Chrome Web Store
5.0 out of 5 from 1 ratingRead 15 Oct 2026 · chromewebstore.google.com
Rating on G2
4.5 out of 5 from 802 reviewsRead 15 Oct 2026 · g2.com
Rating on Gartner Peer Insights
4.6 out of 5 from 243 reviewsRead 15 Oct 2026 · gartner.com
Rating on GetApp
4.5 out of 5 from 4 reviewsRead 15 Oct 2026 · getapp.com
Release update
An August 12, 2026 release made new Trust Exchange and Vendor Risk APIs generally available for supported automation workflows.Read 15 Oct 2026 · upguard.com
Risk Automations
Risk Automations connects risk systems to APIs to automate discovery, notifications and remediation.Read 15 Oct 2026 · upguard.com
SDKs
UpGuard documents curl, jq, Python Requests and Postman usage, but the reviewed pages do not identify an official SDK package.Read 15 Oct 2026 · help.upguard.com
Security compliance
UpGuard states that its security program aligns with ISO/IEC 27001 and that it is SOC 2 Type II compliant with annual attestation.Read 15 Oct 2026 · upguard.com
Trust Exchange
Trust Exchange provides AI questionnaire assistance and a customer-facing trust center for sharing security information.Read 15 Oct 2026 · upguard.com
Trust management
Trust Exchange offers questionnaire automation, a Trust Page, and collaboration features.Read 7 Oct 2026 · upguard.com
User Risk
User Risk surfaces shadow AI and other human-related security risks inside a workforce.Read 15 Oct 2026 · upguard.com
Vendor Risk
Vendor Risk provides continuous vendor insights, 360-degree assessments and AI-assisted workflows.Read 15 Oct 2026 · upguard.com
Webhooks
Webhook integrations can trigger on events such as score drops, vendor score changes and newly published data leaks.Read 15 Oct 2026 · help.upguard.com

Plans and prices

Free Free 5 vendors · Vendor Security Ratings · Assessments · Remediation · 3 users · Custom Security Profiles Read 15 Oct 2026 · getapp.com
Standard $1,750 a month billed annually 50 vendors · Vendor Security Ratings · Assessment and Remediation Workflows · Additional vendors $79/month Read 15 Oct 2026 · upguard.com
Corporate Priced on request 500 vendors · Fourth Parties · Audit Log Read 15 Oct 2026 · upguard.com
Enterprise Priced on request unlimited vendors · 30 admin/general users · unlimited read-only users · premium assurance Read 7 Oct 2026 · upguard.com
Enterprise+ Priced on request Unlimited vendors · Unlimited platform users · Multi-Org Accounts · Enterprise Support Read 15 Oct 2026 · upguard.com
Professional Priced on request 150 vendors · Role-Based Accounts · Custom Co-Branding Read 15 Oct 2026 · upguard.com

Every UpGuard plan and price →

Strong points and limits

Strong points

  • Free plan and free trial are available.
  • Vendor, attack-surface, and workforce risk coverage.
  • Standard includes monitoring for 50 vendors.
  • Enterprise+ allows unlimited vendors and platform users.
  • API access and SSO listed in Vendor Risk tiers.

Limits

  • Standard is listed at $1,750 a month, billed annually.
  • Standard includes six admin/general users.

Who it suits

UpGuard suits organizations managing third-party, digital-footprint, and workforce cyber risk, including education, financial services, technology, and healthcare organizations. Its tier limits may also suit teams that need defined vendor and user allowances.

Verdict

UpGuard combines vendor assessments, attack-surface visibility, and trust-management tools in a cloud platform. Buyers should check the listed vendor and user limits alongside the price details for the tier they need.

Where Specifiction places it

Alternatives to UpGuardAll alternatives →