Independent AI audit · 25 parameters across 5 domains · equal weight
Software development lifecycle
5 parameters · awaiting evidence
Product management
5 parameters · awaiting evidence
Organization
5 parameters · awaiting evidence
Security & privacy
5 parameters · awaiting evidence
Implementation & support
5 parameters · awaiting evidence
No audit on record yet. No score is not a low score.
UpGuard is a cybersecurity and third-party risk management platform designed to help organizations identify, assess, and continuously monitor cyber risks across their vendors, suppliers, and external digital assets. It provides security ratings that measure an organization’s external security posture using non-intrusive data collection, threat intelligence, and security checks. Ratings range from 0–950 and help security teams quickly understand potential weaknesses and prioritize remediation. UpGuard’s Vendor Risk capabilities help security and AppSec teams maintain vendor inventories, perform security assessments, review questionnaires, identify vulnerabilities, and monitor changes in vendor security posture. It supports frameworks such as NIST CSF and ISO 27001 and provides risk categorization, vendor comparison, compliance reporting, and remediation workflows. Continuous monitoring can alert teams when a vendor’s security posture deteriorates. For organizations, UpGuard helps reduce third-party and supply-chain cybersecurity risk by replacing manual spreadsheet-based assessments with centralized monitoring, automated assessments, reporting, and remediation workflows. It can be particularly useful for security, GRC, procurement, and AppSec teams that need visibility into external risks and vendor security before onboarding or throughout the vendor lifecycle.
Screenshots and product photos shared by UpGuard, Inc..
Mountain View, California, United States / Sydney, Australia
A world where an organisation continuously sees its own and its vendors' security exposure the way attackers do — where attack-surface and third-party risk are measured, rated and reduced in the open.
We build an attack-surface and third-party risk platform with security ratings, so organisations continuously discover, monitor and reduce their own and their vendors' external cyber exposure.
Meet the leaders shaping our vision, product, and growth.
Our certifications and compliance frameworks that keep your data safe.
SOC 2 Type IIAll plans include core features. Per month, billed annually.
Own attack-surface monitoring and ratingsThird-party ratings and monitoring by vendor countAttack surface + vendor riskLarge portfolios, SSO and supportAll capabilities grouped by category.