Cyber risk platform unifying vendor, attack surface, and workforce risk
UpGuard operates a cyber risk posture management platform designed to centralize vendor risk, attack surface monitoring, and internal threat signals. The tech stack (React, Go, PostgreSQL, BigQuery, AWS/Azure, dbt, LookML) reflects a data-heavy analytics foundation, while active hiring heavily skews toward sales (50 roles) and marketing (15), with engineering at just 4 open positions — a signature pattern of a sales-led company scaling GTM rather than product velocity. The repeated infrastructure scaling challenge (processing 100 billion risk signals daily) suggests they're hitting capacity walls faster than engineering can address them.
UpGuard provides cyber risk posture management for mid-market and enterprise organizations managing third-party and supply chain security. The platform integrates vendor security ratings, questionnaire data, and threat intelligence to surface actionable risk across three domains: vendor supply chain, external attack surface, and internal workforce. Founded in 2012 and based in Mountain View, the company operates at 201–500 employees and is actively hiring across sales, marketing, and data teams in the US, Australia, and UK. Current work centers on expanding the core platform, improving trial-to-customer conversion, and scaling infrastructure to handle signal processing at scale.
UpGuard builds on React (frontend), Go (backend), PostgreSQL and BigQuery (data), AWS/Azure (cloud), dbt and LookML (analytics), and integrates HubSpot, Okta, and Segment for operations.
Core projects include scaling risk signal processing (100 billion signals daily), improving trial/POC experience, building structured onboarding, and expanding outbound prospecting and sales pipeline generation.
UpGuard's technology stack, projects, and hiring signals are inferred from public hiring and company data — career pages, public listings, and company web presence — then clustered and de-duplicated. Figures are estimates that refresh over time. Read our full methodology →
This is not an official vendor or customer list. It is a technology-adoption signal inferred from public data, intended for B2B research.