Freedom251 › Third-Party Risk Management Software
UpGuard

What UpGuard is
UpGuard is a cloud cyber risk platform for organizations that need visibility into risks involving vendors, their digital footprint, and their workforce. Its Vendor Risk product provides ongoing vendor insights and assessments, with AI-powered workflows. Attack Surface Management gives continuous visibility into an organization’s digital footprint to help detect threats and strengthen its cybersecurity posture. Trust Exchange supports questionnaire automation, a Trust Page, and collaboration features.
The platform is available on the web and through an API. Its integrations include Jira Cloud, Slack, and ServiceNow, plus connections to more than 4,000 apps through Zapier. API access and SSO are included in all listed Vendor Risk tiers. Plans have different vendor and user allowances: Standard covers 50 vendors, while Enterprise+ includes unlimited vendors and platform users. UpGuard offers a free plan and a free trial; paid plans start at $250/mo. Standard is listed at $1,750 a month when billed annually. The company was founded in 2012 and presents solutions for education, financial services, technology, and healthcare organizations. UpGuard says it encrypts customer data at rest and in transit, is SOC 2 Type II compliant, and aligns its security program with ISO/IEC 27001.
Who it suits
UpGuard suits organizations that need to assess vendor risk, monitor their digital footprint, or manage security questionnaires and collaboration. Its listed sector solutions include education, financial services, technology, and healthcare.
What it does well
- Tracks vendor risk with continuous insights and assessments.
- Monitors digital footprint continuously for threats.
- Automates questionnaires and supports collaboration through Trust Exchange.
- Connects with Jira Cloud, Slack, ServiceNow, and over 4,000 apps through Zapier.
- All listed Vendor Risk tiers include API access and SSO.
What to know first
- Standard covers 50 vendors.
- Standard is listed at $1,750 a month when billed annually.
- The listed platforms are web and API.
Limits
Standard includes monitoring for 50 vendors, with six admin/general users and unlimited read-only users. Enterprise+ lists unlimited vendors and platform users.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free | 5 vendors · Vendor Security Ratings · Assessments · Remediation · 3 users · Custom Security Profiles | Free |
| Standard | billed annually · 50 vendors · Vendor Security Ratings · Assessment and Remediation Workflows · Additional vendors $79/month | $1,750 a month |
| Professional | 150 vendors · Role-Based Accounts · Custom Co-Branding | On request |
| Enterprise | unlimited vendors · 30 admin/general users · unlimited read-only users · premium assurance | On request |
| Corporate | 500 vendors · Fourth Parties · Audit Log | On request |
| Enterprise+ | Unlimited vendors · Unlimited platform users · Multi-Org Accounts · Enterprise Support | On request |
As upguard.com lists them, read 15 Oct 2026. The maker's own page has the final word.
Getting started
- Visit the UpGuard website.
- Use the web platform or API.
- Choose the free plan or review the paid tiers.
- Start a free trial if you want to try the platform.
Verdict
Choose UpGuard if your organization needs vendor assessments, attack surface visibility, or questionnaire workflows in one cyber risk platform. Organizations with more than 50 vendors should review the higher tiers; Enterprise+ lists unlimited vendors and platform users. The Standard plan is listed at $1,750 a month when billed annually.
Questions
Does UpGuard have a free plan?
Yes. UpGuard lists a free plan.
What does UpGuard cost?
Paid plans start at $250/mo. Standard is listed at $1,750 a month when billed annually.
Is there a free trial?
Yes, UpGuard offers a free trial.
Which platforms does UpGuard support?
The listed platforms are web and API.
What integrations are available?
The integrations page describes native Jira Cloud, Slack, and ServiceNow integrations, plus connections to over 4,000 apps through Zapier.
What does Standard include?
Standard includes monitoring for 50 vendors, six admin/general users, unlimited read-only users, and API access and SSO.
Facts from UpGuard's own pages
- API and SSO
- The pricing comparison lists API access and SSO in all listed Vendor Risk tiers. · upguard.com, 7 Oct 2026
- API capabilities
- Official API tutorials cover bulk vendor import/export, questionnaire attachments, report generation and integrations. · help.upguard.com, 15 Oct 2026
- API documentation
- UpGuard publishes API documentation at cyber-risk.upguard.com/api/docs and provides a downloadable swagger.json specification for Postman. · help.upguard.com, 15 Oct 2026
- Application security
- UpGuard describes OWASP secure coding, vulnerability scanning of dependencies, fortnightly releases and annual third-party penetration tests. · upguard.com, 15 Oct 2026
- Breach Risk
- Breach Risk maps an organization’s attack surface and monitors threats before compromise. · upguard.com, 15 Oct 2026
- Bug bounty
- UpGuard says it has no bug-bounty program and offers no monetary rewards for vulnerability reports. · upguard.com, 15 Oct 2026
- Company facts
- LinkedIn lists UpGuard as privately held, founded in 2012, headquartered in Mountain View, California, with 201–500 employees. · linkedin.com, 15 Oct 2026
- Company legal name
- Crunchbase identifies the legal name as UpGuard, Inc. and the former name as ScriptRock. · crunchbase.com, 15 Oct 2026
- Data protection
- UpGuard says customer data is encrypted at rest and in transit and its SaaS platform runs on Google Cloud Platform. · upguard.com, 7 Oct 2026
- Documentation and support
- The Help Center provides getting-started guides, release notes, videos, webinars, API material and integration instructions. · help.upguard.com, 15 Oct 2026
- Encryption
- Customer data is encrypted both while stored and while transmitted. · upguard.com, 15 Oct 2026
- Founded
- UpGuard says it was founded in 2012. · upguard.com, 7 Oct 2026
- Funding and ownership
- Crunchbase classifies UpGuard as a private Series C company and lists eight funding rounds, with amounts partly obscured. · crunchbase.com, 15 Oct 2026
- G2 product review counts
- G2 lists 763 reviews for UpGuard Vendor Risk, 35 for Breach Risk and 4 for Trust Exchange. · g2.com, 15 Oct 2026
- Headquarters
- Hobart, Tasmania, Australia; US headquarters in Mountain View, California · upguard.com, 28 Sept 2026
- Hosting
- The SaaS platform runs on Google Cloud Platform and is not documented as self-hosted software. · upguard.com, 15 Oct 2026
- Identity controls
- The service supports SAML and OIDC SSO, MFA and subscription-dependent audit logging. · upguard.com, 15 Oct 2026
- Integrations
- Native integrations include Jira Cloud, Slack and ServiceNow, while Zapier connects UpGuard with more than 4,000 applications. · upguard.com, 15 Oct 2026
- Intended customers
- The site presents solutions for education, financial services, technology, and healthcare organizations. · upguard.com, 7 Oct 2026
- Limit: bulk reporting
- A Gartner critical review says bulk actions for vendor reporting are unavailable in both the user interface and API. · gartner.com, 15 Oct 2026
- Limit: pricing
- A Capterra reviewer considers the product’s price somewhat steep, though still fair for the capability. · capterra.com, 15 Oct 2026
- Limit: rating transparency
- A Capterra reviewer says UpGuard could explain more openly how it scores risks and vulnerabilities. · capterra.com, 15 Oct 2026
- Plan limits
- The Standard plan includes monitoring 50 vendors, while Enterprise+ includes unlimited vendors and unlimited platform users. · upguard.com, 7 Oct 2026
- Praise: integrations
- A Capterra reviewer praises the intuitive interface and Jira integration, while another says deployment and use are straightforward. · capterra.com, 15 Oct 2026
Where UpGuard stands on Freedom251
- Third-Party Risk Management Software#1 of 31
- Third Party & Supplier Risk Management Software#1 of 23
- Vendor Management#2 of 18
- Risk Intelligence Software#3 of 23
- Security Ratings Software#4 of 30
- Third Party Security Risk Management#2 of 15
- Vulnerability Management Software#5 of 33
