##### Press release # UpGuard Launches User Risk to Deliver the Industry’s First 360 Degree View of Cyber Risk ##### [UpGuard Team](#) November 18, 2025 **Mountain View, California – November 18, 2025** – UpGuard, a leader in cybersecurity and risk management, today announced the general availability of UpGuard User Risk, its innovative Human Risk Management solution. User Risk strengthens UpGuard's unified cyber risk posture management (CRPM) platform by combining internal workforce risk with established data on vendor and attack surface risk to deliver the industry's first true 360-degree view of an organization's security posture. Following a highly successful beta program of more than 100,000 users, User Risk is now available to augment existing security programs. Traditional approaches leave risk data trapped in silos and rely on infrequent training simulations. User Risk gives security leaders visibility by discovering hidden risks like Shadow AI and compromised credentials. It provides an AI Analyst to unify and prioritize the most critical risks, and offers real-time behavioral nudges to build secure habits across the workforce, transforming employees into a proactive line of defense. With [82% of breaches involving a human factor](https://cybermagazine.com/articles/82-of-all-cyberattacks-involve-the-human-element), managing employee risk is paramount. However, even organizations with robust training programs struggle with critical blind spots. This "Shadow AI" sprawl, combined with risky permissions, leaves organizations exposed. UpGuard's new "[State of Shadow AI](https://www.upguard.com/resources/the-state-of-shadow-ai)" report highlights this significant security gap - 8 out of 10 employees use unauthorized AI tools, and 70% know of sensitive data shared with AI tools at their workplace. "Our customers have successfully managed their external cyber risk with UpGuard’s Vendor Risk and Breach Risk products for years, but have consistently asked for a way to solve for the human element inside their organization," said **Jess Hooper, vice president, Product at UpGuard.** "User Risk addresses this by giving security teams a measurable, real-time solution. We are not just training people; we are transforming awareness into secure, habitual behavior." UpGuard User Risk augments existing security programs through three core pillars: * **Unified Visibility:** Eliminates blind spots by discovering an organization’s true SaaS and AI footprint (including Shadow IT used with personal credentials), uncovering risky application permissions, and correlating identity breach data to active employees—consolidating everything into a single, comprehensive view. * **AI-Powered Prioritization & Governance:** Turns noise into an actionable plan using an AI Analyst to automatically score and rank risks. Custom rules allow organizations to define and enforce their security policies, moving from reactive firefighting to proactive governance. * **Measurable Behavior Change:** Augments traditional training with real-time, in-workflow "nudges" that act as an automated coach. This creates lasting habits by guiding employees toward safer decisions at the exact moment of risk. User Risk is now available to all UpGuard customers. User Risk will be showcased at [UpGuard Summit](https://www.upguard.com/summit) November 18 and 20, the premiere virtual conference for global security leaders to focus on the future of cyber risk. To learn more about User Risk’s capabilities and to get started, visit: . **About UpGuard** Founded in 2012, UpGuard is a leader in cybersecurity and risk management. The company's AI-powered platform for cyber risk posture management (CRPM) provides a centralized, actionable view of cyber risk across an organization's vendors, attack surface, and workforce. Trusted by thousands of companies, UpGuard's platform is designed to help security teams manage cyber risk with confidence and efficiency. To learn more, visit [www.upguard.com](http://www.upguard.com). **Media Contact:** Julie Huang Julie.Huang\@upguard.com ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ## UpGuard blog Learn about the latest issues in cybersecurity. #### [PHP2Shell Is a Vendor Problem Too: How to Find and Close Third-Party Exposure](/blog/php2shell-third-party-exposure) Your vendors run PHP too. Here’s how to find which ones are exposed to PHP2Shell and prove they’ve patched, using scanning and a vendor questionnaire. [](/team/cassy-van-eeden) [Cassy van Eeden](#) November 2, 2026 #### [Find Out if You're Exposed on the Dark Web](/blog/find-out-if-youre-exposed-on-the-dark-web) Answer 5 quick questions to predict what a dark web scan will find about your company. Then run the free scan to see your real exposure. [](/team/lance-turner) [Lance Turner](#) October 14, 2026 #### [The Evidence Is In: UpGuard Named a Leader in the IDC MarketScape for Worldwide Third-Party Risk Management](/blog/upguard-named-leader-in-idc-marketscape) UpGuard has been named a Leader in the IDC MarketScape: Worldwide Third-Party Risk Management Services 2026 Vendor Assessment. Find out why. [](/team/cassy-van-eeden) [Cassy van Eeden](#) October 18, 2026 #### [Your First Dark Web Scan Report, Explained](/blog/your-first-dark-web-scan-report-explained) You scanned your domain. What do the results mean? [](/team/lance-turner) [Lance Turner](#) October 11, 2026 #### [We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.](/blog/ai-evidence-analysis-tools-for-tprm) We researched four AI evidence-parsing tools against four criteria that security teams often overlook. None nailed all four. [](/team/cassy-van-eeden) [Cassy van Eeden](#) September 29, 2026 #### [12 Cybersecurity Horror Stories of 2026 (No Costume Required)](/blog/cybersecurity-horror-stories-2026) A warning ignored once becomes a headline. Read more about these 12 real 2026 cybersecurity incidents, and the sign each one gave before it made the news. [](/team/revashni-moodley) [Revashni Moodley](#) October 14, 2026 [View all blog posts](/blog) ## See UpGuard In Action Book a free, personalized onboarding call with one of our cybersecurity experts. [Contact sales](/demo) [Free demo](/demo) ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)