Drata vs UpGuard
Drata
drata.com
UpGuard
upguard.comSide by side
| Figure | Drata | UpGuard |
|---|---|---|
| Price from | — | $1,750/mo |
| Free plan | — | Yes |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| iOS | Yes | Yes |
| Android | Yes | Yes |
| API | Yes | Yes |
| Plans published | 12 | 6 |
| Spec score · Third-Party Risk Management Software | 8.7 (#1) | 8.7 (#2) |
| Founded | 2020 | UpGuard says it was founded in 2012. |
| Headquarters | San Francisco, California, United States | Hobart, Tasmania, Australia; US headquarters in Mountain View, California |
| Integrations | Drata lists hundreds of integrations across HRIS, cloud infrastructure, identity, ticketing, version control, security, training, and data-export categories. | Native integrations include Jira Cloud, Slack and ServiceNow, while Zapier connects UpGuard with more than 4,000 applications. |
| Public API | Drata provides a REST public API with V2 recommended, V1 legacy, interactive examples, code samples, recipes, regional endpoints, and a 500-requests-per-minute IP limit. | The public API uses API-key authorization at the cyber-risk.upguard.com/api/public base URL and supports vendor data access and other account operations. |
| Rating on Capterra | 4.8 out of 5 from 6 reviews. | 4.5 out of 5 from 4 reviews |
| Rating on Chrome Web Store | 5.0 out of 5 from 3 ratings. | 5.0 out of 5 from 1 rating |
| Rating on G2 | 4.7 out of 5 from 1,397 reviews. | 4.5 out of 5 from 802 reviews |
| Rating on Gartner Peer Insights | 4.1 out of 5 from 17 reviews. | 4.6 out of 5 from 243 reviews |
| Rating on GetApp | 4.8 out of 5 from 6 reviews. | 4.5 out of 5 from 4 reviews |
| Support | Drata provides support via chat and ticket Monday through Friday, 24 hours per day, excluding specified holidays, at no additional charge. | The pricing comparison lists Standard Support in Standard, Professional, and Corporate, and Premium Assurance in Enterprise and Enterprise+. |
| What it does | Drata is a cloud trust-management platform combining governance, risk, compliance, assurance, continuous monitoring, and customer security reporting. | UpGuard is a cloud platform for managing vendor risk and monitoring external attack surfaces, with questionnaires, security ratings, continuous monitoring and alerts. |
Plans
Drata
- Advanced (Assurance)Priced on request
- Advanced (Compliance Automation)Priced on request
- Assurance AdvancedPriced on request
- Assurance EnterprisePriced on request
- Assurance FoundationPriced on request
- Enterprise (Assurance)Priced on request
- Enterprise (Compliance Automation)Priced on request
- Foundation (Assurance)Priced on request
- Foundation (Compliance Automation)Priced on request
- GRC AdvancedPriced on request
UpGuard
- FreeFree
- Standard$1,750 a month
- CorporatePriced on request
- EnterprisePriced on request
- Enterprise+Priced on request
- ProfessionalPriced on request
In their own words
Drata
Drata helps companies manage compliance, internal and third-party risk, and customer assurance. It automates control monitoring, evidence collection, and framework mapping. Its Trust Center offers customers a secure self-service portal to review a company’s security posture and request document access. Vendor risk features include inventory synchronization, questionnaire automation, risk tiering, agentic risk scoring, and automated assessment reports. Drata says it integrates with hundreds of tools across a technology stack. Its Open API follows REST standards and allows granular read and write permissions for API keys. Framework support includes SOC 2, ISO 27001, ISO 42001, HIPAA, PCI DSS, GDPR, CCPA, and multiple NIST frameworks. Pricing is available on request, and there is no free plan. Approved customers may receive trial services until the communicated trial ends, a purchased subscription begins, or Drata terminates the trial. Support is provided by chat and ticket Monday through Friday, 24 hours per day, excluding specified holidays, at no additional charge. Trust Center Essential and Pro are not currently supported on mobile device screens.
UpGuard
UpGuard is a cloud platform for managing cyber risk across an organization’s vendors, digital footprint, and workforce. Vendor Risk supplies continuous vendor insights, assessments, and AI-powered workflows. Attack Surface Management monitors an organization’s digital footprint to help detect threats, while Trust Exchange provides questionnaire automation, a Trust Page, and collaboration features. The platform supports remediation tracking and advanced risk prioritization, with access through web and API. Listed integrations include Jira Cloud, Slack, and ServiceNow, plus connections to more than 4,000 apps through Zapier. Vendor Risk tiers list API access and SSO. Standard covers 50 vendors; Enterprise+ includes unlimited vendors and platform users. The free plan is available, and paid plans start at $250/mo. Standard is listed at $1,750 a month when billed annually. UpGuard says customer data is encrypted at rest and in transit, and its security program aligns with ISO/IEC 27001; it also reports SOC 2 Type II compliance and annual attestation.