UpGuard BreachSight

UpGuard BreachSight is a third-party risk and attack surface management platform designed to help organizations monitor their external attack surface, identify vulnerabilities, detect changes, and uncover potential threats. According to the vendor, this solution is suitable for companies of all sizes, from small businesses to large enterprises. It is utilized by IT security professionals, risk managers, compliance officers, vendor management professionals, and those in the financial services industry.

Key Features

Security ratings: UpGuard BreachSight provides data-driven and dynamic security ratings that aim to give organizations an objective measurement of their security posture. These ratings are updated multiple times a day and are based on the analysis of trusted threat intelligence feeds, according to the vendor.

Continuous security monitoring: UpGuard BreachSight offers real-time information on misconfigurations and vulnerabilities, aiming to enable organizations to understand their risk profile and take immediate action. It provides continuous monitoring of domains, IPs, and employee credentials, aiming to ensure complete visibility into external assets, according to the vendor.

Incidents & news feed: UpGuard BreachSight aims to keep organizations informed about important security trends and news related to their industry and vendors. Users can view recent security incidents and filter them based on severity, company, time, threat actor, threat actor location, or type of data exposed, according to the vendor.

Risk profile: The risk profile feature in UpGuard BreachSight aims to provide organizations with instant understanding of their risk profile and allows them to drill down into individual risks shared across their infrastructure. It is based on transparent security ratings and intelligent risk categories, aiming to provide real-time risk insights, according to the vendor.

Domains & IPs: UpGuard BreachSight enables organizations to view their domains and IP addresses along with their corresponding cyber risks. Users can see the security rating of each domain and associated risks, aiming to enable proactive measures to mitigate vulnerabilities, according to the vendor.

Asset Portfolios: Organizations can organize their domains and IP addresses into separate asset portfolios based on different use-cases. This feature aims to allow for better management and reporting of assets, with controlled user access for each portfolio, according to the vendor.

Attack surface reduction: UpGuard BreachSight aims to help organizations reduce their attack surface by discovering exploitable vulnerabilities and identifying domains at risk of typosquatting. It allows users to discover vulnerabilities in the software running on their websites and monitor permutations of their domains that are at risk of typosquatting, according to the vendor.

Data leak detection: UpGuard BreachSight includes a data leak detection feature that scans various sources to identify data leaks and exposures. It aims to help organizations protect their brand, intellectual property, and customer data by detecting sensitive documents, exposed employee credentials, and other data exposures, according to the vendor.

Remediation workflows: The platform in UpGuard BreachSight aims to simplify and accelerate the remediation process by providing inbuilt workflows to address identified risks. Users can fix various risks such as man-in-the-middle risks, insecure SSL/TLS certificates, email security issues, open ports, and vulnerable software, according to the vendor.

Security profile: UpGuard BreachSight offers a security profile feature that aims to eliminate the need for organizations to repeatedly answer security questionnaires. Users can create a security profile and securely share it, including the organization's security rating, industry comparison, completed security questionnaires, and supporting documents, according to the vendor.