“We used UpGuard because it was an easily-delegated, easily-deployed product which did what we needed it to do."

“Before UpGuard, we had to juggle the vendors we could monitor due to our limited-licensing structure. If we partnered with a new vendor, we had to evaluate which vendors to remove to make room.”

"UpGuard to quickly assess the security profile of new company acquisitions to determine their impact on the company’s own security posture. The CIO notes that with so many third-party vendors to manage, immediate security score feedback is instrumental in providing accurate risk assessment."

“If they had a potential accounting impact, then we would insist on a SOC 1, Type 2 or SOC 2, Type 2. If they did not have an accounting impact, we had a phone call or sent a questionnaire.”

“I take a deep dive into the technical features to help the vendor when I send a remediation request.”

“I look at the newsfeed to see if any companies we do business with have had a cybersecurity incident.”

“We had basic questions regarding business processes and security controls, but wanted to go deeper to provide high-level reporting that provided clarity into the vendor.”

“We check the dashboard daily. Our score reflects how well we are doing. The higher the score, the more confident we are in our security posture.”

“UpGuard’s Cyber Risk scoring helps us understand which of our vendors are most likely to breach so we can take action now, before something happens."

“We knew no one tool would be a silver bullet, but we were looking for a solution that met the majority of our requirements without too much extra customization. When we compared the tools, UpGuard came out on top.”

"Before UpGuard, our vendor risk management activities were less effective and comprehensive, even began after a vendor was onboarded. Now it's easy to monitor them via the dashboard, and it starts before they even sign the agreement."

“Our previous vendor assessment process required a significant amount of time and also lacked the capability to identify specific types of risks that may be present across our supply chain.”

“You see relevant information about a vendor in one place, including their location, security score.”

"We’re not just asking our vendors security questions. We’re also performing scans to confirm there are no security concerns. This helps us automate the security questionnaire process."

"UpGuard catches things that penetration testing misses and helps Xinja automate our vendor risk management processes."