Vendor Risk Management Software
UpGuard review
Security ratings and vendor risk platform with public Standard-plan pricing and a free Trust Exchange.
UpGuard at a glance
- Category
- Vendor Risk Management Software
- Starting price
- $1,750 per month, billed annually
- Pricing model
- flat
- Public pricing
- Yes
- Free plan
- No
- Free trial
- Yes
- Contract
- annual
- G2 rating
- 4.5 (654 reviews)
- Founded
- 2012
- Headquarters
- Mountain View, California, US (operations in Sydney, Australia)
- Employees
- 201-500
Buying UpGuard: security, admin and contract
- SAML SSO
- All plans.
- SCIM provisioning
- Not mentioned on pricing page.
- Audit logs
- Professional and up (not on Standard)
- Data residency
- Enterprise and Enterprise+, additional cost under Premium Assurance.
- Contract
- Standard billed annually; free trials on Standard and Professional.
- Support
- Standard support; Premium Assurance on Enterprise and Enterprise+.
Questions to ask UpGuard before you sign
- Can we sign your standard DPA without changes?
- What will the price be at renewal, and is the increase capped?
Questions are listed where UpGuard's public pages leave the answer open.
Who UpGuard is for
Choose UpGuard if
- Mid-size security teams that want published entry pricing for vendor risk.
- Teams monitoring around 50 vendors who want SSO and API at the base plan.
Look elsewhere if
- Teams with only a few vendors on a tight budget (Standard is $21,000 per year before add-ons)
- Buyers needing data residency without extra cost.
UpGuard pricing
| Plan | Price | Unit | Notes |
|---|---|---|---|
| Standard | $1,750 | per month, billed annually | 50 vendors, 6 users, SSO, API; extra vendors $79/mo |
| Professional | Contact sales | 150 vendors, 6 users, adds RBAC, audit log, templates and automation | |
| Corporate | Contact sales | 500 vendors, 10 users, fourth parties | |
| Enterprise | Contact sales | Unlimited vendors, 30 users | |
| Enterprise+ | Contact sales | Unlimited users, multi-org |
Pricing page updated September 2026. Unlimited read-only users on all plans. Data residency is an extra cost on Enterprise tiers. Trust Exchange is described as free. G2 comparison pages show an older $5,999 per year entry figure.
UpGuard features by buying criteria
| Criterion | What we found |
|---|---|
| Questionnaires / assessments | Questionnaires and templates; automation from Professional. |
| Continuous monitoring | Security ratings based monitoring. |
| Remediation workflow | Templates and automation from Professional, onboarding portal. |
| Pricing / add-on | Vendor-count tiers. |
What reviewers say about UpGuard
Praised for
- Higher review volume and rating than peers per G2 comparison.
- Good support per reviewers.
Common complaints
- Reporting and dashboards feel rigid.
- Remediation tools are limited.
- Getting vendors to complete questionnaires is slow.
- Some features cost extra via add-on packages.
Themes paraphrased from public reviews on G2 and similar sites, not quotes.
What most UpGuard reviews leave out
- Plan limits are by vendors monitored: 50 / 150 / 500 / unlimited.
- Extra vendors on Standard cost $79 per month each.
- Role-based access, audit log and automation require Professional (contact sales)
- Fourth-party mapping starts at Corporate.
- Data residency is an add-on cost on Enterprise tiers.
UpGuard alternatives
SecurityScorecardSecurity teams that want outside-in continuous monitoring of many vendors.Contact sales
BitsightTeams that want outside-in security ratings to monitor many vendors continuously.Contact sales
ProcessUnityRegulated firms (banks, insurers) that need configurable assessment workflows and framework mapping.Contact sales
PanoraysSecurity teams monitoring a vendor base with outside-in cyber scoring.Contact sales
Mitratech PrevalentMid-market and enterprise risk teams running structured vendor assessment programs.Contact sales
WhisticSecurity and GRC teams that run questionnaire-based vendor assessments.Contact sales
Sources
Every fact on this page comes from UpGuard's own pricing, product or documentation pages, G2 and company records, checked on October 24, 2026. Unknown values are left out instead of estimated.