UpGuard Vendor Risk

Formerly ScriptRock

Intuitive Interface: Reviewers have found the UpGuard user interface to be intuitive, making it easy to find reports and information quickly. Several users have praised the platform for its well-laid-out reporting and easy-to-visualize data.

Comprehensive Features: Users appreciate that the features and functionalities of UpGuard meet their needs, including identifying identity breaches, data leaks, domain discovery, typosquatting, vendors and fourth parties risk assessment. Many reviewers have also mentioned that the vulnerability management, vendor management, and risk assessment capabilities are well done in UpGuard.

Valuable Insights: The information provided by UpGuard is accurate and valuable to businesses. Reviewers appreciate being able to identify critical issues during the trial period and reach out to companies about domains that were no longer active. Additionally, several users have commented on how helpful it is that Upguard allows full licenses on all companies so they don't miss anything due to only half-following a company's activities.

Confusing User Interface: Several users have reported that the user interface of UpGuard is not very intuitive and can be confusing, making it difficult to locate features and completing tasks quickly.

False Positive Vulnerabilities: Some users have found false positive vulnerabilities identified by the system with respect to application security. These false positives can be frustrating and time-consuming for security engineers using the software.

Opaque Pricing and Bundling: The pricing structure of UpGuard has been criticized by some users for being opaque. Users find it confusing as they are not aware of the costs associated with certain modules and customizations.

UpGuard comes highly recommended for TPRM, Vendor Security, and Security Risk Analysis purposes. Users find the information provided about vendors actionable and effective in reducing company risk. They consider UpGuard a superior alternative to other products, particularly for third-party/vendor cyber security assessments. It is recommended for companies working with numerous vendors who need to assess their security. In today's cyber security landscape, UpGuard is considered an essential tool. Additionally, users suggest starting with GuardRail when transitioning to infrastructure as code. For monitoring configuration changes, trying out ScriptRock by installing it on a server and observing the reports over a few weeks is recommended to evaluate its formatting.