UpGuard provides AI-powered Cyber Risk Posture Management software that helps organizations understand and reduce cyber risk across third parties, internet-facing assets, workforce behavior, and trust relationships. Its platform is designed to give security and risk teams a centralized view of exposures, translate large volumes of technical signals into prioritized insights, and support faster remediation across distributed environments.
UpGuard’s positioning centers on replacing fragmented point tools and manual processes with a unified operating layer for cyber risk. The platform combines continuous monitoring, assessment workflows, trust-sharing capabilities, and automation so organizations can move from identifying issues to resolving them with clearer context and less operational overhead.
Offerings, Capabilities, and Integrations
UpGuard’s core offering is a unified CRPM platform that brings together external attack surface visibility, third-party risk oversight, workforce risk monitoring, and trust management. Across these areas, it emphasizes continuous monitoring, security ratings, AI-assisted analysis, questionnaire automation, prioritized remediation, and reporting designed for both practitioners and business stakeholders.
The platform is built to fit into existing security and risk operations rather than stand apart from them. UpGuard supports native integrations across ticketing, IT service management, communications, SIEM, identity, and cloud environments, and also offers API-based extensibility. Its broader capabilities include framework-aligned assessments, audit-friendly workflows, and service options that help customers expand assessment capacity without adding equivalent internal headcount.
Products and Services
- Vendor Risk: Third-party cyber risk management software for monitoring vendors continuously, running assessments, automating questionnaires, prioritizing remediation, and managing fourth-party exposure and compliance reporting.
- Breach Risk: Attack surface management and threat monitoring software for discovering internet-facing assets, identifying vulnerabilities and typosquatting risks, detecting leaked credentials and data exposure, and tracking external security posture over time.
- User Risk: Human risk management software that unifies identity, behavior, and threat signals to surface risky SaaS and AI usage, compromised credentials, excessive permissions, and other workforce-related exposures.
- Trust Exchange: Trust management and security questionnaire automation offering that helps organizations answer questionnaires faster, publish a Trust Center, and share security documentation with customers and partners.
- Risk Automations: An automation layer for orchestrating discovery, notification, and remediation workflows across connected security and risk tools through native integrations and API-based automation.
- TPRM Services: Analyst-led vendor assessment services that help customers outsource vendor communication, evidence gathering, and report preparation to scale third-party risk programs more efficiently.
Target Customers
UpGuard primarily serves security, risk, governance, compliance, and third-party risk teams that need continuous visibility into cyber exposure across suppliers, digital assets, and internal users. Its platform is well suited to organizations that manage large vendor estates, operate internet-facing environments, or need to coordinate remediation across multiple internal stakeholders.
Its customer base spans companies from startups to global enterprises, with especially strong relevance for regulated and security-conscious sectors such as financial services, healthcare, and technology. UpGuard also fits organizations that want to speed customer security reviews, strengthen procurement and onboarding controls, or add assessment capacity without building a large in-house analyst team.
Cloud Integrations and Marketplace
- Microsoft Azure: UpGuard has a Microsoft Marketplace listing for its CRPM platform, and Risk Automations includes native connectivity for Microsoft Azure environments.
- AWS: Risk Automations includes native integrations for AWS, allowing cloud and infrastructure signals to feed automated risk workflows.
- Google Cloud: Risk Automations includes native integrations for Google Cloud to connect cloud telemetry and workflows into UpGuard’s automation layer.
Key People
- Mike Baukes: Co-Founder & CEO
- Daniel Bradbury: Chief Product Officer
- Harsh Sureka: Chief Operating Officer
- Kevin Levine: Chief Financial Officer
- Jackie Ariston: Chief Revenue Officer
- Phil Ross: Chief Information Security Officer
- Kaushik Sen: Chief Marketing Officer
- Sarah Catford: Chief of Staff
Key Facts
- Headquarters: Hobart, Tasmania, Australia; U.S. headquarters in Mountain View, California, United States
- Employees: Approximately 300-350
- Annual Revenue: Undisclosed
- Parent Company: None
- Subsidiaries: UpGuard Pty Ltd
- Publicly Listed: Private
Analyst Recognitions
- Gartner: Representative Vendor in Gartner Market Guide for Third-Party Risk Management Technology Solutions (2025).
- Forrester: Contender in The Forrester Wave™: Cybersecurity Risk Ratings Platforms, Q2 2024.
