- Attack Surface Management
- Data Breaches
Find Out if You're Exposed on the Dark Web
Answer 5 quick questions to predict what a dark web scan will find about your company. Then run the free scan to see your real exposure.
Lance Turner
Featured post
Most recent posts
-
- Cybersecurity
- Attack Surface Management
Security Posture Monitoring and Board Reporting Tools
Learn how continuous security posture monitoring helps track risk trends, decode posture scores, and deliver clear, executive-ready reports for your board.
Lance Turner -
- Attack Surface Management
- Data Breaches
Attack Surface Management Vendors Compared
We compared ASM vendors and helped you rate them before agreeing to a POC!
Lance Turner -
- Attack Surface Management
- Data Breaches
Find Out if You're Exposed on the Dark Web
Answer 5 quick questions to predict what a dark web scan will find about your company. Then run the free scan to see your real exposure.
Lance Turner -
- Cybersecurity
12 Cybersecurity Horror Stories of 2026 (No Costume Required)
A warning ignored once becomes a headline. Read more about these 12 real 2026 cybersecurity incidents, and the sign each one gave before it made the news.
Revashni Moodley
Attack Surface Management
-
- Attack Surface Management
Security Posture Monitoring and Board Reporting Tools
Learn how continuous security posture monitoring helps track risk trends, decode posture scores, and deliver clear, executive-ready reports for your board.
Lance Turner -
- Attack Surface Management
Attack Surface Management Vendors Compared
We compared ASM vendors and helped you rate them before agreeing to a POC!
Lance Turner -
- Attack Surface Management
Find Out if You're Exposed on the Dark Web
Answer 5 quick questions to predict what a dark web scan will find about your company. Then run the free scan to see your real exposure.
Lance Turner -
- Attack Surface Management
Everything Everywhere: Systemic Data Exposure in Supabase Apps
Supabase is a favorite of AI coding agents. It's also prone to misconfiguration. We studied more than 16,000 open databases to see what's leaking.
Greg Pollock
All Attack Surface Management posts
Company news
-
- Company news
UpGuard Q3 2025 Summit Recap: What Did You Miss?
A recap of all the major announcements and product updates at UpGuard Summit, Q3 2025.
Edward Kost -
- Company news
Cast a Wider Net: UpGuard Now Scans 5x More Sources
Introducing UpGuard’s enhanced news and incident coverage. 500% better coverage to keep you ahead of the latest security threats.
UpGuard Team -
- Company news
UpGuard Expands Vendor Risk Questionnaire Library with New DORA Questionnaire
Achieve compliance with DORA, UpGuard’s latest addition to its industry-leading Questionnaire Library.
Kyle Chin -
- Company news
G2 Names UpGuard #1 TPRM Software - Summer 2024
UpGuard has once again been recognized as a Leader in Third-Party and Supplier Risk Management Software by G2. Read on to discover more insights.
Kaushik Sen
All Company news posts
Compliance and Regulations
-
- Compliance and Regulations
Cyber Resilience Act Preparedness: Who's Ready, and Who Can't Be Reached
We surveyed 2,374 EU-registered devices and 226 listed software makers for a way to report a vulnerability. Market leaders are ready. Others, not so much.
Greg Pollock -
- Compliance and Regulations
AI Assurance: The Third Head of Your AI Governance Watchdog
AI governance needs three things: policy, enforcement, and assurance. Most organizations have built the first two. Here's why the third one matters now.
Shane Moosa -
- Compliance and Regulations
NIST compliance in 2026: A complete implementation guide
NIST compliance ensures alignment with leading cybersecurity frameworks. Explore how the NIST standards can safeguard sensitive data and manage third-party
Edward Kost -
- Compliance and Regulations
Introducing UpGuard’s DPDP Act Security Questionnaire
Discover the latest addition to UpGuard's industry-leading Questionnaire Library and learn how to achieve comprehensive DPDP compliance.
Nicholas Sollitto
All Compliance and Regulations posts
Cybersecurity
-
- Cybersecurity
Security Posture Monitoring and Board Reporting Tools
Learn how continuous security posture monitoring helps track risk trends, decode posture scores, and deliver clear, executive-ready reports for your board.
Lance Turner -
- Cybersecurity
12 Cybersecurity Horror Stories of 2026 (No Costume Required)
A warning ignored once becomes a headline. Read more about these 12 real 2026 cybersecurity incidents, and the sign each one gave before it made the news.
Revashni Moodley -
- Cybersecurity
Left Unsupervised: 10 Times Access Outlived Its Authorization
Access granted once shouldn’t mean access forever. Read more on how unmonitored access caused 10 of these real-life breaches and what they taught us.
Revashni Moodley -
- Cybersecurity
No Hackers Required: 10 Shadow AI Leaks Hiding in Plain Sight
No hackers or malware, just employees using AI tools IT never approved. Read about 10 real Shadow AI incidents and the controls that could've stopped them.
Revashni Moodley
All Cybersecurity posts
Data Breaches
-
- Data Breaches
Attack Surface Management Vendors Compared
We compared ASM vendors and helped you rate them before agreeing to a POC!
Lance Turner -
- Data Breaches
Find Out if You're Exposed on the Dark Web
Answer 5 quick questions to predict what a dark web scan will find about your company. Then run the free scan to see your real exposure.
Lance Turner -
- Data Breaches
The Blind Spot in Brand Protection: Why App Stores Slip Past Standard Monitoring
Do Brand Protection Solutions scan the Apple App Store and Google Play? Don't wait to find out.
Lance Turner -
- Data Breaches
Your First Dark Web Scan Report, Explained
You scanned your domain. What do the results mean?
Lance Turner
All Data Breaches posts
DevOps
-
- DevOps
Boost Your Cybersecurity with DevSecOps
Explore how DevSecOps can significantly enhance your organization's cybersecurity posture by integrating security into your development process.
Leah Sadoian -
- DevOps
Bitbucket vs GitHub (Updated for 2026)
Bitbucket and Github are two of the largest web-based hosting services for source code and development projects.
Abi Tyas Tunggal -
- DevOps
What Is Configuration Management and Why Is It Important?
Configuration management (CM) is a systems engineering process for establishing and maintaining consistency of a system's attributes.
UpGuard Team -
- DevOps
The Windows Server Hardening Checklist
Follow these 10 simple steps to harden your Windows server against the most common cyber attacks and exploits before you put them into production.
UpGuard Team
All DevOps posts
Risks and Vulnerabilities
-
- Risks and Vulnerabilities
Everything Everywhere: Systemic Data Exposure in Supabase Apps
Supabase is a favorite of AI coding agents. It's also prone to misconfiguration. We studied more than 16,000 open databases to see what's leaking.
Greg Pollock -
- Risks and Vulnerabilities
Oracle Just Shipped 1,449 Security Patches in One Quarter. We Checked How Much of It Is Actually New.
Oracle's July 2026 update shipped 1,449 security patches — 2.8x its all-time record. We parsed 23 quarters of advisories to find out how much is truly new.
Greg Pollock -
- Risks and Vulnerabilities
Data leakage risks with DBHub MCP servers
UpGuard found exposed DBHub servers leaking live databases to the open internet—an early sign that MCP exposure is becoming a systemic data risk.
Greg Pollock -
- Risks and Vulnerabilities
25 Security Vulnerabilities That Have Defined the 2020s (Thus Far)
From Log4j to SolarWinds, discover the 25 critical security vulnerabilities that have reshaped cybersecurity thus far in the 2020s.
Nicholas Sollitto
All Risks and Vulnerabilities posts
Third-Party Risk Management
-
- Third-Party Risk Management
The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management
UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why.
Cassy van Eeden -
- Third-Party Risk Management
We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.
We researched four AI evidence-parsing tools against four criteria that security teams often overlook. None nailed all four.
Cassy van Eeden -
- Third-Party Risk Management
How to Map Vendor Tiers to Inherent Risk
Map vendors to inherent risk using five observable criteria — data access, continuity, regulatory, strategic, and security.
Cassy van Eeden -
- Third-Party Risk Management
The Best Vendor Performance Management Tools and Software (2026)
Compare the best vendor performance management tools for 2026. SLAs, KPIs, and how performance data connects to vendor security monitoring.
Cassy van Eeden
All Third-Party Risk Management posts
Vendor Risk Management
-
- Vendor Risk Management
The Best IT and Cyber Risk Management Software
Discover the best IT and cyber risk management software, including UpGuard, Riskonnect, Diligent, Optro, ServiceNow, Archer, and MetricStream.
Cassy van Eeden -
- Vendor Risk Management
Best Vendor Risk Management Software for 2026
Compare top vendor risk management software solutions and learn how to choose, implement, and integrate the right tool for your organization’s needs.
Cassy van Eeden -
- Vendor Risk Management
Shadow IT: Tiering the Unseen to Manage Vendor Risk
Invisible apps become riskier with time. Use real-time user signals to categorize every vendor in your ecosystem based on its true risk profile.
Revashni Moodley -
- Vendor Risk Management
Vendor Tiering That Scales: A Weighted-Model Implementation Guide
UpGuard's guide to vendor tiering at scale: a weighted risk model that tiers vendors objectively and routes high-risk vendors for review automatically.
Cassy van Eeden
All Vendor Risk Management posts
