|
By Lance Turner
In January 2024, Craig Raw, the developer of the real Sparrow Wallet, a Bitcoin wallet app, warned that a fake version of his app was live on the Apple App Store. He reported it repeatedly, but the listing stayed up. By August 2025, three people had lost a combined $1.8 million to it: Jalen Delgado (about $120,000 in May 2025), James Ramirez (about $875,000 in July 2025), and Christopher Ellis (about $840,000 in August 2025). All three are now suing Apple. The complaint, Ramirez, et al. v.
|
By Shane Moosa
Security teams already know employees use generative AI. The harder problem is buying the right platform before unsanctioned apps move sensitive data outside your visibility and control. UpGuard research found 81% of employees and 88% of security leaders use unapproved AI tools, and 45% of workers find a workaround when their employer blocks an app. That last number should shape your buying criteria more than the first two. Demand doesn't disappear when you block it. It moves somewhere you can't see.
|
By Cassy van Eeden
When you search for IT risk management software, the results rarely agree on what the category is. Product pages pitch enterprise governance, risk, and compliance (GRC) suites. Tool roundups mix project trackers with cyber platforms, and review aggregators combine tools that solve different problems. If you're a security analyst or CISO trying to shortlist platforms, that ambiguity costs you weeks and often ends in a proof of concept with the wrong vendor.
|
By Edward Kost
At UpGuard, we believe your Trust Center should be the single place your prospects and customers go to get their trust questions answered. Today, we're excited to announce subprocessor listing in the Trust Center. This capability lets you publish your subprocessors directly where buyers already look for trust signals. You can also keep that list up to date and enable customers to subscribe to updates.
|
By Edward Kost
Trust center software is what helps you publish a branded, access-controlled security page so buyers can self-serve certifications, policies, and answers to previously completed questionnaires. The tool helps vendors proactively share their security posture with potential customers and efficiently address common security concerns that block sales. Don't confuse this with Microsoft Office Trust Center. That's an entirely different tool that governs macros and active content in Excel and Word.
|
By Lance Turner
Telecommunications providers sit at the center of modern life, carrying the calls, messages, locations, account credentials, and identity data that connect billions of people and businesses. Which makes them uniquely valuable targets: criminals want subscriber records they can monetize, while nation-state actors want access to the networks themselves. The biggest telecom data breaches show how quickly weak security measures can escalate from a customer privacy incident into a national security event.
|
By Shane Moosa
Security leaders can no longer treat workforce cyber risk as a quarterly phishing campaign. Shadow AI, sprawling SaaS adoption, generative AI-assisted social engineering, and siloed alerts leave many teams unable to answer a basic board question: which users and apps matter most this week? Answering that question is the job of the human risk management (HRM) software category, which is young and crowded.
|
By Revashni Moodley
If your security team runs on Jira, sprints and backlog included, UpGuard plugs straight into it: vendor findings, breach alerts, and user risk signals can all surface as issues your team is already triaging. With this integration, you can: Set the trigger once: a new risk detected for a monitored vendor, a risk score dropping below a threshold you’ve set, a credential breach turning up on a watched domain, or a questionnaire response coming in.
|
By Revashni Moodley
UpGuard connects to ServiceNow across the whole platform. Vendor risk findings, breach alerts, and user risk signals all land in the same ticket queue your team already works from, not a separate, siloed risk dashboard. With this integration, you can: Risk Automations makes this possible. You define the events that matter: a monitored vendor picks up a new risk, a risk score drops below a threshold you set, a credential breach turns up on a watched domain, or a questionnaire response comes in.
|
By Shane Moosa
In July 2026, two AI stories broke that appeared unrelated on the surface. But were they really? The first was an AI product's shared conversation links, meant for specific people, turning up in Google searches, some holding sensitive personal and company data. The second was a frontier AI lab's own model escaping a security sandbox during an internal evaluation and spending four and a half days inside three companies' systems. One involved ordinary users making a common mistake.
|
By UpGuard
In July 2026, OpenAI's own AI agents escaped their sandbox and reached Hugging Face's production systems during an internal cybersecurity evaluation. In its latest report, OpenAI called the incident "a warning shot for us and for the world." We asked cybersecurity leaders for their reactions to the breach and what it signals for every team racing to deploy AI. One detail stands out. Hugging Face's own systems detected the attack and traced its full shape, but the alert never escalated high enough for a human to act on it.
|
By UpGuard
Chris O'Brien, Head of Sales Engineering at UpGuard, spent his lunch break at his local fair — carnival games, rides, and all. When we say work-life balance matters to us, we mean it. Sometimes that looks like stepping away from back-to-back meetings to grab a corn dog and a life-size plushie. UpGuard helps organizations manage third-party risk and monitor their attack surface — but great security work starts with a team that's supported enough to log off, recharge, and show up sharp.
|
By UpGuard
Eliminate manual handoffs. Learn how to build a self-executing third-party risk program that synchronizes internal teams across your organization’s tools and workflows to drive immediate, policy-aligned outcomes. Interested in finding out more about UpGuard?
|
By UpGuard
The browser is the primary attack surface of 2026. See how to enforce real-time Data Loss Prevention (DLP) and credential integrity to neutralize unauthorized data egress and password reuse in-session. Interested in finding out more about UpGuard?
|
By UpGuard
The Onboarding Blueprint: Engineering a Gold-Standard Process Learn how to leverage the Vendor Onboarding Portal to stop chasing shadow IT and mitigate risk before exposure. Our Customer Education team will provide a tactical framework to automate vendor tiering and transform manual bottlenecks into a self-executing intake engine. Interested in finding out more about UpGuard?
|
By UpGuard
The Supply Chain Uplift: Driving Ecosystem Maturity Stop acting as an auditor and start acting as a partner. Learn how Combe Inc. uses real-time telemetry to identify vendor risks before they are reported, creating a positive feedback loop that hardens the entire supply chain. Interested in finding out more about UpGuard?
|
By UpGuard
The MCP Exposure: Governing the Newest Entry Point, MCP has created a silent governance gap in the AI ecosystem. Learn how to gain the visibility needed to detect brand impersonation, identify malicious servers, and vet AI agent connections to prevent unauthorized data access. Interested in finding out more about UpGuard?
|
By UpGuard
The MCP Exposure: Governing the Newest Entry Point MCP has created a silent governance gap in the AI ecosystem. Learn how to gain the visibility needed to detect brand impersonation, identify malicious servers, and vet AI agent connections to prevent unauthorized data access. Interested in finding out more about UpGuard?
|
By UpGuard
The MCP Exposure: Governing the Newest Entry Point MCP has created a silent governance gap in the AI ecosystem. Learn how to gain the visibility needed to detect brand impersonation, identify malicious servers, and vet AI agent connections to prevent unauthorized data entry.
|
By UpGuard
The Zero-Lag Posture See how UpGuard is moving beyond static defense to a model that identifies emerging vectors like MCP servers and neutralizes browser-based threats in real time. Interested in finding out more about UpGuard?
|
By UpGuard
You understand the risks that third party vendors pose to your business, and you're ready to do something about it. What are the capabilities you need to understand your cyber risk, manage your vendors, and avoid data breaches?
|
By UpGuard
Perhaps your organization is looking to make a transition from traditional IT operations and development practices to DevOps, or you're looking to realign your career path with DevOps to position yourself more favorably to future opportunities. Whatever your motivations are, this eBook will provide you with foundation knowledge for boosting your career with DevOps.
|
By UpGuard
The fact that one has to "make a case" for Microsoft in the DevOps sphere puts them at a disadvantage, especially competing against major open source options with large community bases and proven performance. But, moving forward, one can expect the gap between Microsoft and other tools to close further, as they continue pressing their business in this direction.
|
By UpGuard
ServiceNow® customers optimizing their IT service delivery and management processes require deeper context and detail level behind IT asset changes--information the leading help desk automation and incident reporting platform does not provide. In this report you'll learn how UpGuard fills this visibility and awareness gap, keeping ServiceNow® in line with the true state of your environment.
|
By UpGuard
Cybersecurity is officially dead. Worldwide spending on security-related hardware, software and services rose to $73.7 billion in 2016 from $68.2 billion a year earlier, according to researcher IDC. This number is expected to approach $90 billion in 2018.
|
By UpGuard
Selecting a security provider is no easy feat-it includes months of designing a company's security strategy, evaluating different solutions, budgeting accordingly, and assuring stakeholders the investment will pay off by keeping their business safe.
|
By UpGuard
DevOps and ITIL should be compared with an eye towards the problem you're trying to solve, with a focus on the tangible benefits you and your team would see from using each.
|
By UpGuard
With the enterprise so dependent on technology and digitized assets, how can it prevent data-related disasters from sinking the business? The answer is by taking a new approach to managing cyber risk as a function of business risk at large. McKinsey calls this "Digital Resilience", but it can simply be thought of as conducting business safely in today's connected environments.
|
By UpGuard
Software engineering is changing and DevOps is at the heart of it. An organization's ability to be responsive to the business requires better collaboration, communication, and integration across IT.
|
By UpGuard
There is no doubt that the DevOps movement has gone mainstream. When even IBM and HP are dedicating sites to it there is no longer any question. If we were to place it on the Gartner Hype Cycle even the most devoted proponents would have to admit that it's rapidly approaching the "Peak of Inflated Expectations".
- September 2026 (7)
- August 2026 (14)
- July 2026 (10)
- June 2026 (15)
- May 2026 (11)
- April 2026 (7)
- March 2026 (8)
- February 2026 (1)
- January 2026 (4)
- December 2025 (11)
- November 2025 (14)
- October 2025 (8)
- September 2025 (14)
- August 2025 (7)
- July 2025 (2)
- June 2025 (13)
- May 2025 (13)
- April 2025 (11)
- March 2025 (11)
- February 2025 (9)
- January 2025 (4)
- December 2024 (5)
- November 2024 (9)
- October 2024 (4)
- September 2024 (6)
- August 2024 (12)
- July 2024 (11)
- June 2024 (15)
- May 2024 (20)
- April 2024 (28)
- March 2024 (24)
- February 2024 (11)
- January 2024 (22)
- December 2023 (22)
- November 2023 (11)
- October 2023 (23)
- September 2023 (27)
- August 2023 (37)
- July 2023 (23)
- June 2023 (19)
- May 2023 (17)
- April 2023 (17)
- March 2023 (15)
- February 2023 (15)
- January 2023 (9)
- December 2022 (7)
- November 2022 (23)
- October 2022 (13)
- September 2022 (28)
- August 2022 (32)
- July 2022 (6)
- June 2022 (21)
- May 2022 (20)
- April 2022 (16)
- March 2022 (15)
- February 2022 (8)
- January 2022 (12)
- December 2021 (16)
- November 2021 (11)
- October 2021 (9)
- September 2021 (12)
- August 2021 (13)
- July 2021 (6)
- June 2021 (4)
- May 2021 (14)
- April 2021 (7)
- March 2021 (11)
- February 2021 (10)
- January 2021 (4)
- December 2020 (15)
- November 2020 (7)
- October 2020 (17)
- August 2020 (9)
- July 2020 (2)
- June 2020 (8)
- May 2020 (12)
- April 2020 (17)
- March 2020 (19)
- February 2020 (15)
- January 2020 (15)
- December 2019 (10)
- November 2019 (13)
- October 2019 (14)
- September 2019 (10)
- August 2019 (10)
- July 2019 (2)
- June 2019 (1)
- May 2019 (2)
- March 2019 (1)
- November 2018 (4)
- October 2018 (1)
- September 2018 (12)
- August 2018 (2)
- July 2018 (3)
- June 2018 (2)
- May 2018 (5)
- April 2018 (6)
- March 2018 (1)
- February 2018 (1)
- January 2018 (1)
- December 2017 (1)
- November 2017 (1)
A better, smarter way to protect your data and prevent breaches. Our products help security, risk and vendor management teams take control of cyber risk and move faster with confidence.
UpGuard gathers complete information across every digital surface, stores it in a single, searchable repository, and provides continuous validation and insightful visualizations so companies can make informed decisions.
UpGuard then aggregates this information into an industry standard cyber risk score called CSTAR. The CSTAR score is a single, easy-to-understand value representing an organization's aptitude in monitoring compliance, tracking unwanted change, and detecting vulnerabilities in their infrastructure.
Businesses depend on trust, but breaches and outages erode that trust. UpGuard is the world’s first cyber resilience platform, designed to proactively assess and manage the business risks posed by technology.