##### Press release

# Cybersecurity Report: S\&P 500 Security Trends and Improvements

##### [UpGuard Team](#)

April 20, 2023

UpGuard, the third-party risk and attack surface management platform, released the S\&P 500 Security Report, highlighting significant cybersecurity improvements across the top 500 companies listed on US stock exchanges.

The report provides an in-depth analysis of the scale and sources of cyber risk in the United States by examining the security posture of all S\&P 500 companies. The research compares data from 2023 with data from the previous year to identify industry trends and areas of improvement in cybersecurity. 

Key findings from the S\&P 500 Security Report include:

1. Over 75% of S\&P 500 companies improved their overall security ratings in 2023.
2. All 11 industries within the S\&P 500 improved their average overall security scores in 2023.
3. Email security remains the weakest risk category, although average scores have increased by 9% from 2022.

UpGuard collected publicly available data to assess risk factors known to contribute to data breaches, which were divided into six main areas: network security, email security, website security, brand security, phishing and malware, and questionnaire risks. The data was then aggregated and calculated by weight factors into an overall security rating.

The UpGuard platform generates security ratings based on how well companies configure their internet-facing systems to reduce the likelihood of being compromised. UpGuard’s proprietary scanning software monitors and collects billions of data points daily through trusted commercial, open-source, and proprietary methods.

“As the United States ranked as the world’s third most-breached country in 2022, it’s reassuring to see that S\&P 500 companies are adopting a more proactive approach to protecting their sensitive data,” said Kaushik Sen, Chief Marketing Officer at UpGuard.

“US businesses of all sizes should follow suit by reducing their critical risk areas to better defend against increasing cyber threats.”

The full report is[ available for download here.](https://www.upguard.com/lp/sp-500-security-report)

**About UpGuard**

UpGuard helps businesses manage cybersecurity risk. UpGuard’s integrated risk platform combines third-party risk management, security questionnaires, and threat intelligence capabilities to give businesses a full and comprehensive view of their attack surface.

**Contact us: **press\@upguard.com

### Sign up for our newsletter

UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.

## UpGuard blog

Learn about the latest issues in cybersecurity.

#### [PHP2Shell Is a Vendor Problem Too: How to Find and Close Third-Party Exposure](/blog/php2shell-third-party-exposure)

Your vendors run PHP too. Here’s how to find which ones are exposed to PHP2Shell and prove they’ve patched, using scanning and a vendor questionnaire.

[](/team/cassy-van-eeden)

[Cassy van Eeden](#)

November 2, 2026

#### [Find Out if You're Exposed on the Dark Web](/blog/find-out-if-youre-exposed-on-the-dark-web)

Answer 5 quick questions to predict what a dark web scan will find about your company. Then run the free scan to see your real exposure.

[](/team/lance-turner)

[Lance Turner](#)

October 14, 2026

#### [The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management](/blog/upguard-named-leader-in-idc-marketscape)

UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why.

[](/team/cassy-van-eeden)

[Cassy van Eeden](#)

October 18, 2026

#### [Your First Dark Web Scan Report, Explained](/blog/your-first-dark-web-scan-report-explained)

You scanned your domain. What do the results mean?

[](/team/lance-turner)

[Lance Turner](#)

October 11, 2026

#### [We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.](/blog/ai-evidence-analysis-tools-for-tprm)

We researched four AI evidence-parsing tools against four criteria that security teams often overlook. None nailed all four.

[](/team/cassy-van-eeden)

[Cassy van Eeden](#)

September 29, 2026

#### [12 Cybersecurity Horror Stories of 2026 (No Costume Required)](/blog/cybersecurity-horror-stories-2026)

A warning ignored once becomes a headline. Read more about these 12 real 2026 cybersecurity incidents, and the sign each one gave before it made the news.

[](/team/revashni-moodley)

[Revashni Moodley](#)

October 14, 2026

[View all blog posts](/blog)

## See UpGuard In Action

Book a free, personalized onboarding call with one of our cybersecurity experts.

[Contact sales](/demo)

[Free demo](/demo)

##### Free instant security score

## How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.

* Instant insights you can act on immediately
* Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities

[Free score](/instant-security-score)