Cyber risk posture management for vendors, attack surface and workforce
UpGuard sells a cyber risk platform spanning third-party vendor risk, attack surface monitoring and workforce exposure. Hiring tilts sales-heavy with a notable legal build-out, matching projects around a scalable RFP function and modernized contracting tools. On the data side, a Go, PostgreSQL and Kubernetes core on GCP and AWS pairs with dbt adoption alongside SQLMesh and LookML, consistent with pressure to scale processing of 100B risk signals.
UpGuard, founded in 2012 and headquartered in Mountain View, California, is a privately held cybersecurity company with 201–500 employees. Its platform combines security ratings for third parties, vendor questionnaires and threat intelligence to give organizations a consolidated view of cyber risk. Core areas include vendor and supply chain risk, attack surface exposure, vulnerability management and IT compliance, with relevance to cyber insurance use cases. The company hires across the United States, Australia, the United Kingdom, Brazil and the Philippines.
UpGuard's stack includes Go, Python, React, PostgreSQL, Kubernetes, Terraform, GCP and AWS, with dbt, SQLMesh and LookML for data, plus Salesforce, HubSpot, Gainsight and Outreach for go-to-market.
Yes. Sales is UpGuard's largest hiring area, followed by engineering, with legal, marketing, support and product also recruiting across the US, Australia, UK, Brazil and the Philippines.
Job posts point to its cyber risk posture management (CRPM) platform, AI-native automations for revenue teams, a scalable RFP function, Cloudflare Zero Trust improvements and modernized legal tooling.
Other companies in the same industry, closest in size
UpGuard's technology stack, projects, and hiring signals are inferred from public hiring and company data — career pages, public listings, and company web presence — then clustered and de-duplicated. Figures are estimates that refresh over time. Read our full methodology →
This is not an official vendor or customer list. It is a technology-adoption signal inferred from public data, intended for B2B research.