UpGuard
Cyber risk posture management platform combining external attack surface scanning with vendor/third-party risk ratings in one product.
Visit Website ↗ + Add to CompareOverview
UpGuard’s Cyber Risk Posture Management platform combines external attack-surface scanning of an organization’s own internet-facing assets with security-ratings-based third-party and vendor risk assessment, so teams can monitor both their own exposure and their vendor ecosystem’s risk from one product rather than separate ASM and TPRM tools. It uses AI to help teams triage and prioritize the resulting findings and questionnaire responses.
Founded in 2012 by Mike Baukes and Alan Sharp-Paul, UpGuard is headquartered in Australia with a US headquarters in Mountain View, California. In February 2026 the company raised a $75 million Series C round to expand its position in cyber risk posture management, bringing total funding to roughly $150 million.
UpGuard’s differentiator is treating attack surface monitoring and vendor risk scoring as a single connected discipline instead of two separate product categories, though like other security-ratings vendors it competes in a segment where ratings methodologies are frequently debated across the industry for accuracy and comparability.
Innovation Matrix Assessment
Has expanded from security ratings into combined attack-surface and third-party risk management with AI-assisted triage, showing steady rather than rapid iteration.
Gives security and risk teams one place to monitor both their own external exposure and vendor risk, reducing tool sprawl for organizations managing both disciplines.
Independently verified $75M Series C (Feb 2026) shows continued investor confidence, though total funding remains modest relative to larger security-ratings competitors.
Merging attack surface management and vendor risk scoring into one platform is a sensible product consolidation rather than a fundamentally new approach to either discipline.
Security-ratings-based approaches to risk assessment are a widely used but debated methodology industry-wide; no independent efficacy benchmark specific to UpGuard was found, so this is scored conservatively.
Third-party and supply-chain risk visibility remains an ongoing compliance and security requirement, keeping the category relevant.
Why CISOs Should Care
Consolidates external attack surface monitoring and vendor risk scoring into a single workflow instead of requiring separate tools and processes for each.
What Makes It Different
Connects an organization's own attack-surface data directly to its vendor risk ratings within one platform rather than treating the two as separate products.
The Matrix Verdict
58/100 — INCREMENTAL INNOVATOR
An Incremental Innovator: UpGuard has real, independently verified funding momentum and a sensible product consolidation, but operates in a security-ratings category where independent efficacy evidence is thin industry-wide.
Editorial Note: Claims vs. Verified Findings
Funding figures are independently reported via PRNewswire; security-ratings accuracy claims are UpGuard's own and were not independently benchmarked in this research.
Sources
- PRNewswire (Series C) — https://www.prnewswire.com/news-releases/upguard-raises-75m-in-series-c-funding-to-accelerate-market-leadership-in-cyber-risk-posture-management-302697786.html
- UpGuard press page — https://www.upguard.com/press/upguard-raises-75m-in-series-c-funding-to-accelerate-market-leadership-in-cyber-risk-posture-management
Alternatives to UpGuard
CybelAngel
External attack surface management and digital risk protection platform that scans the open, deep, and dark web for…
watchTowr
Singapore-based platform combining external attack surface management with continuous automated red teaming to validate whether exposures are actually…
CyCognito
Agentless attack surface management platform that maps organizations' entire external footprint, including subsidiaries and shadow assets, using graph-based…
Armis (a ServiceNow company)
Agentless asset intelligence platform discovering and assessing every connected IT, OT, IoT and medical device, now part of…
Axonius
New York-based CAASM pioneer that aggregates data from hundreds of existing tools to build a unified, agentless asset…
Doppel
San Francisco AI-native digital risk protection platform that detects and automatically takes down phishing sites, impersonation accounts, and…