UpGuard

UpGuard is a cybersecurity and risk management company founded in 2012. It describes itself as a leader in cybersecurity and risk management, and its AI-powered platform for Cyber Risk Posture Management (CRPM) provides a centralized, actionable view of cyber risk across an organization's vendors, attack surface, and workforce. The company states that its platform is trusted by thousands of companies, and its homepage claims it is trusted by 45,000+ companies worldwide. UpGuard's mission is stated as "protecting the world's data." The company operates as a distributed team with offices in Hobart and Sydney, Australia, and a postal address in Mountain View, California, United States. Its product portfolio centers on third-party risk management (TPRM), attack surface management, and related cybersecurity services. UpGuard also offers managed TPRM services in which a designated UpGuard analyst manages vendor assessments on behalf of a client's security team, gathering documentation, liaising with vendors, and producing actionable risk reports aligned to industry standards such as ISO 27001. UpGuard has been recognized as a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Its blog covers topics including attack surface management, data breaches, compliance and regulations, cybersecurity, DevOps, risks and vulnerabilities, third-party risk management, and vendor risk management. Recent product developments highlighted on its site include a Breach Risk Threat Posture and User Risk Action Center, an AI Security Center, and brand impersonation detection that scans app stores such as the Apple App Store and Google Play.

UpGuard was founded in 2012 and has since grown into a cybersecurity and risk management company. According to its About page, its mission is "protecting the world's data," and it describes itself as a leader in cybersecurity and risk management. The company's AI-powered platform for Cyber Risk Posture Management (CRPM) provides a centralized, actionable view of cyber risk across an organization's vendors, attack surface, and workforce. UpGuard operates as a distributed team with offices in Hobart and Sydney, Australia, and a postal address in Mountain View, California, United States. Its platform is used by thousands of companies, and its homepage states it is trusted by 45,000+ companies worldwide. The company has been recognized as a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment, a recognition highlighted on its blog and homepage. Over time, UpGuard has expanded its offerings beyond core third-party risk management to include attack surface management, breach risk monitoring, and AI security governance. Recent product announcements referenced on its site include a Breach Risk Threat Posture and User Risk Action Center, an AI Security Center, and brand impersonation detection that scans app stores such as the Apple App Store and Google Play. UpGuard also provides managed TPRM services in which a designated analyst manages vendor assessments for clients, gathering documentation, liaising with vendors, and delivering actionable risk reports aligned to standards such as ISO 27001.

• 2026

  Named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment.

• 2012

  UpGuard founded.

AI-powered Cyber Risk Posture Management (CRPM) platform providing a centralized, actionable view of cyber risk across vendors, attack surface, and workforce; recognized as a Leader in the IDC MarketScape 2026 for Worldwide Third-Party Risk Management Services.

• Cyber Risk Posture Management (CRPM) platform

  AI-powered platform providing a centralized, actionable view of cyber risk across vendors, attack surface, and workforce.

• Third-Party Risk Management (TPRM) services

  Managed vendor risk assessments performed by a designated UpGuard analyst, including documentation collection, vendor liaison, and actionable reporting aligned to ISO 27001.

• Attack Surface Management

  Monitoring and management of an organization's external attack surface.

• Breach Risk Threat Posture

  Feature for monitoring breach risk and threat posture, including brand impersonation detection in app stores.

• User Risk Action Center

  Feature for managing user-related risk.

• AI Security Center

  Tool for governing workforce AI usage and generating tailored AI policies.

• 2026

  UpGuard research finds around 16,000 Supabase-hosted databases publicly exposing personal data

  Cybersecurity firm UpGuard published security research finding that thousands of databases hosted by development platform Supabase expose sensitive information to the public web. UpGuard told TechCrunch it found around 16,000 databases on which some degree of personal data was exposed while hosted by Supabase, including publicly accessible names, addresses, phone numbers and user passwords, and a smaller number of passwords and authentication tokens. The findings highlight how AI-generated and vibe-coded apps can spill or expose sensitive data through basic misconfigurations and improper security.

  Source

• 2021

  Microsoft Power Apps portals expose personal data

  Researchers at UpGuard reported that Microsoft Power Apps portals configured to allow public access exposed 38 million records containing personal information. The report said the data breaches had been fixed.

  Source

Read more

• Unconfirmed

  Reported2026.09.25

  UpGuard research finds around 16,000 Supabase-hosted databases publicly exposing personal data[5]UpGuard research finds around 16,000 Supabase-hosted databases publicly exposing personal datatechcrunch.com

  Cybersecurity firm UpGuard published new security research finding that thousands of databases hosted by development platform Supabase are exposing people's sensitive information to the public web. UpGuard told TechCrunch it found around 16,000 databases on which some degree of personal data was exposed while hosted by Supabase, including publicly accessible names, addresses, phone numbers and user passwords, and a smaller number of passwords and authentication tokens. The findings highlight how AI-generated and vibe-coded apps can spill or expose sensitive data through basic misconfigurations and improper security.

• 2021.10.13

  Reported2021.10.13

  UpGuard appoints Casey Altieri as VP of Sales, North America[7]UpGuard任命Casey Altieri为北美销售副总裁prweb.com

  UpGuard announced that Casey Altieri would join its leadership team as Vice President of Sales, North America, overseeing regional sales operations, strategy and development.

• Unconfirmed

  Reported2021.08.24

  Microsoft Power Apps portals expose personal data[6]Microsoft Power Apps portals expose personal datahngn.com

  Researchers at UpGuard reported that Microsoft Power Apps portals configured to allow public access exposed 38 million records containing personal information. The report said the data breaches had been fixed.

• 2021.02.16

  Reported2021.02.16

  UpGuard launches CyberResearch managed service[8]UpGuard推出CyberResearch托管服务prweb.com

  UpGuard launched CyberResearch, a managed service combining third-party risk management and data leak detection; it was available for early access.

Read more

1. 1The #1 Cyber Risk Posture Management Platform | UpGuardupguard.com
2. 2UpGuard Blog | UpGuardupguard.com
3. 3About Us | UpGuardupguard.com
4. 4TPRM Services | Vendor Assessments Done For You | UpGuardupguard.com
5. 5UpGuard research finds around 16,000 Supabase-hosted databases publicly exposing personal datatechcrunch.com
6. 6Microsoft Power Apps portals expose personal datahngn.com
7. 7UpGuard任命Casey Altieri为北美销售副总裁prweb.com
8. 8UpGuard推出CyberResearch托管服务prweb.com