UpGuard Core

UpGuard Core simplifies security and compliance for your infrastructure in the cloud and on premises.



Complex Digital Surfaces

Security needs to keep up with new technologies and support legacy infrastructure.

Too Many Agents

Large scale agent installations create a new layer of software for security teams to monitor.

Cloud Migrations

Moving to and between clouds requires analysis of operational and security settings.

Our Solution

Universal Blueprints

The UpGuard Core platform manages any node type from mainframes to containers.

Agentless Monitoring

First class agentless scanning provides complete capabilities without the overhead of agents.

Customizable Benchmarks

UpGuard transforms existing assets into automated tests to validate your entire fleet.

download data sheet


Change Monitoring

UpGuard tracks changes to file contents, packages, ports, services, users, and more.

CIS Benchmarks

Out-of-the box benchmarks automate your security and compliance assessments.

Network Devices

UpGuard parses the configuration state of each device into testable semantic units.


Windows, Linux, and Unix servers are all fully supported by the Core platform.


Schemas, stored procedures, users, and more can all be continuously monitored.


Application configurations can be compared across servers for consistency and security.

Group Differencing

Compare the configuration state across clusters to discover drift and close security gaps.

Differencing Over Time

Compare your current state to any time in the past to pinpoint changes and solve problems fast.

200+ Integrations

UpGuard was built to integrate– with DevOps tools, ticketing systems, alerting, and more.

Custom Policies

Transform golden images into customized tests for the configurations that matter to you.

Cloud Configuration

UpGuard audits critical security settings to ensure that data in the cloud remains private.

Cloud Migration

UpGuard compares and verifies the configuration state of instances running on-premises and in the cloud.

Case Study

"Before, we needed an army to reconcile all of our changes. Now, we have an automated, scalable process that strengthens our regulatory stance, expands our coverage, reduces operational risk, and allows us to continuously improve our IT operation process."

Chuck Adkins
VP of Technology
New York Stock Exchange


Does Core use agents or agentless methods for monitoring?

UpGuard Core offers both agents and agentless monitoring options. Whether agents or agentless monitoring is used, all capabilities are supported.

How does Core collect data on managed nodes?

Agentless monitoring is done using SSH, WinRM, or APIs, depending on the node type. Installed agents execute locally using native utilities to gather the desired data for configuration assessment.

Is there a hosted version of Core?

Yes, UpGuard offers a hosted, single tenant version of Core. These instances are hosted in Google Compute Engine for the highest level of security.

Can I deploy Core on premises?

Yes, in addition to hosted instances, UpGuard Core can be deployed on premises as a virtual appliance.

Can Core support hybrid environments?

Yes, UpGuard can federate data collected on premises or in the cloud to one integrated view.

Does Core perform vulnerability assessments?

UpGuard assesses security configurations and integrates with tools like Nessus for enriched vulnerability scanning.

How well does Core scale?

UpGuard Core can be purchased in environments as small as one hundred nodes and can scale to monitoring hundreds of thousands of nodes. Core uses tooling developed by Google, like Kubernetes, specifically designed to handle massive scalability.

Who uses UpGuard Core?

Customers of Core are typically Security, Compliance, Risk, and Operations managers in regulated industries looking to streamline their toolchain. Many of our customers are in the financial services, energy, and healthcare industries. UpGuard's ease of deployment, maintenance, and integration make it an effective solution for forward-looking technologists in risk-averse businesses.

Why do customers choose Core?

UpGuard Core satisfies audit requirements, saves money, and provides peace of mind to administrators and executives that all systems are configured securely.

How is Core priced?

Core is licensed per node monitored. For example, each server managed by UpGuard would be one node and use one license. For on premises deployments, there is no additional charge for the appliance. Core is licensed annually.