UpGuard
UpGuard is a Third-party risk tool. It describes itself as "Cyber risk and attack-surface management across vendor supply chain, attack surface, and workforce".
Key facts
- Category
- Third-party risk
- Describes itself as
- Cyber risk and attack-surface management across vendor supply chain, attack surface, and workforce
- Headquarters
- Mountain View, CA, United States
- Founded
- 2012
- Pricing
- Contact sales
- Funding
- $75M Series C, Feb 2026, led by Springcoast Partners
- Website
- upguard.com
- Others in this category
- 5
Identity confirmed
On 2026-09-12 the address above was checked against a primary source and does belong to UpGuard. Own company page names UpGuard, Inc. and gives the postal address 650 Castro St, Suite 120-387, Mountain View CA 94041. The product on the site is cyber risk posture management across vendor risk, attack surface and workforce, matching the listed category. HQ recorded as Mountain View rather than Hobart because that is the primary postal address on the company page; Hobart and Sydney are listed as additional offices. Evidence.
Frameworks UpGuard claims
Read from https://www.upguard.com/product/security-questionnaires on 2026-09-12. This records what the vendor states, not a certification and not an assessment.
Claims coverage
ISO 27001, GDPR, HIPAA, PCI DSS, NIST CSF / 800-53, DORA
Does not claim
ISO 42001, FedRAMP, CMMC, EU AI Act, NIS2. That means the page above does not claim these, not that the product cannot handle them. Ask.
Mentioned, but not as a claim
- SOC 2: The questionnaire library on this page has no SOC 2 questionnaire and SOC 2 is not listed as a supported standard, yet SOC 2 appears across UpGuard blog content; no coverage claim on this page.
Best fit for
Security teams unifying external attack-surface monitoring with vendor and third-party risk management in one platform
What stands out
Core technology is continuous external attack-surface and security-ratings scanning, the same category as BitSight and SecurityScorecard, applied specifically to vendor risk rather than sold as a separate ratings product
Worth knowing
Its architecture is attack-surface scanning first; buyers wanting a pure compliance-workflow or questionnaire-automation tool should compare it carefully against category peers built for that specifically
About Third-party risk
Assesses and monitors the vendors you buy from, from onboarding due diligence through continuous monitoring. See all 6 in this category.
Questions
- What does UpGuard do?
- UpGuard is a Third-party risk tool. It describes itself as "Cyber risk and attack-surface management across vendor supply chain, attack surface, and workforce". Assesses and monitors the vendors you buy from, from onboarding due diligence through continuous monitoring.
- Who is UpGuard best suited for?
- Security teams unifying external attack-surface monitoring with vendor and third-party risk management in one platform
- What are the alternatives to UpGuard?
- This directory lists 5 other Third-party risk tools, including Censinet, Certa, Kollate-it.
Alternatives to UpGuard
Sources
Category is our editorial call; the vendor's own wording is above. This entry reflects public information and is not an assessment of the product. How this is built · Disclaimer