What is the official website of UpGuard ?

The official website of UpGuard is https://www.upguard.com.

What is UpGuard's cybersecurity risk score?

UpGuard has an AI-generated cybersecurity risk score of 732 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has UpGuard experienced?

According to Rankiteo, UpGuard currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has UpGuard been affected by any supply chain cyber incidents ?

According to Rankiteo, UpGuard has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does UpGuard have SOC 2 Type 1 certification ?

According to Rankiteo, UpGuard is not certified under SOC 2 Type 1.

Does UpGuard have SOC 2 Type 2 certification ?

According to Rankiteo, UpGuard does not hold a SOC 2 Type 2 certification.

Does UpGuard comply with GDPR ?

According to Rankiteo, UpGuard is not listed as GDPR compliant.

Does UpGuard have PCI DSS certification ?

According to Rankiteo, UpGuard does not currently maintain PCI DSS compliance.

Does UpGuard comply with HIPAA ?

According to Rankiteo, UpGuard is not compliant with HIPAA regulations.

Does UpGuard have ISO 27001 certification ?

According to Rankiteo,UpGuard is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does UpGuard operate in ?

UpGuard operates primarily in the IT Services and IT Consulting industry.

How many employees does UpGuard have ?

UpGuard employs approximately 322 people worldwide.

Does UpGuard own any subsidiaries ?

UpGuard presently has no subsidiaries across any sectors.

How many LinkedIn followers does UpGuard have ?

UpGuard's official LinkedIn profile has approximately 25,320 followers.

What is the NAICS classification code for UpGuard ?

UpGuard is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does UpGuard have a Crunchbase profile ?

Yes, UpGuard has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/upguard.

Does UpGuard have a LinkedIn profile ?

Yes, UpGuard maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/upguard.

How many cybersecurity incidents has UpGuard experienced ?

As of July 2, 2026, Rankiteo reports that UpGuard has experienced 2 cybersecurity incidents.

How many peer or competitor companies does UpGuard have ?

UpGuard has an estimated 40,899 peer or competitor companies worldwide.

What types of cybersecurity incidents has UpGuard faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Data Leak.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UpGuard

Boost Score +25 with badge (5 left)

732

/1000

Moderate

757

/1000

Fair

UpGuard Vendor Cyber Rating & Cyber Score

upguard.com

cb in

Add Your Compliance Badge

UpGuard is a comprehensive cyber risk solution that combines third-party security ratings, vendor questionnaires, and threat intelligence capabilities to help businesses manage and improve their security posture.

UpGuard A.I CyberSecurity Scoring

Scoring History

UpGuard

UpGuard CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

UpGuard

Data Leak

09/2019

UPG7514423

UpGuard

Data Leak

07/2018

UPG12291122

Loading…

A.I.

UpGuard Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UpGuard

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for UpGuard in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for UpGuard in 2026.

Incident Types UpGuard vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for UpGuard in 2026.

Incident History - UpGuard (X = Date, Y = Severity)

Loading…

SUBSIDIARY

UpGuard Subsidiaries

Parent Company

UpGuard

IT Services and IT Consulting

Website: https://www.upguard.com

Company Size: 201-500 employees

No subsidiary data available for this company.

Loading…

UpGuard Similar Companies

Minsait

minsait.com

We are one of the world's leading consultancies in technological services for companies and the public sector. With headquarters in Spain and presence in more than 100 countries, we combine experience in AI, data, cloud and cybersecurity to help companies and organizations generate a positive impact on society. Tech for impact #Minsait

LTIMindtree

ltimindtree.com

LTIMindtree is a global technology consulting and digital solutions company that partners with enterprises across industries to reimagine business models, accelerate innovation, and drive AI-centric growth. Trusted by more than 700 clients worldwide, we use advanced technologies to enable operational excellence, elevated customer experiences, and long-term value creation. With a workforce of more than 86,000 talented and entrepreneurial professionals across over 40 countries, LTIMindtree — a Larsen & Toubro Group company — is dedicated to solving complex business challenges and delivering transformation at scale. LTIMindtree is proud to be an equal opportunity employer. We are committed to providing equal employment opportunities regardless of race, ethnicity, nationality, gender, gender identity, gender expression, language, age, sexual orientation, religion, marital status, veteran status, socio-economic status, disability, or any other characteristic protected by applicable law. Please note that neither LTIMindtree nor any of its authorized recruitment agencies/partners charge candidates any registration fees or other fees for appearing in interviews or securing employment/internships. Candidates are solely responsible for verifying the credentials of any agency or consultant claiming to work with LTIMindtree for recruitment purposes. Please note that anyone relying on representations made by fraudulent employment agencies/consultant does so at their own risk. LTIMindtree disclaims any liability for loss or damage suffered as a result of such actions. For more info, please visit www.ltimindtree.com.

Capita

capita.com

Capita is an outsourcer, helping clients across the public and private sectors run complex business processes more efficiently, creating better consumer experiences. Operating across eight countries, Capita’s 34,000 colleagues support primarily UK and European clients with people-based services underpinned by market-leading technology. We’re a vital support service for our clients, enabling the everyday interactions that we expect to run seamlessly, to run seamlessly. A publicly listed business with adjusted revenue of £2.4bn, Capita’s areas of focus are Central Government, Local Public Service, Defence, Learning, Fire & Security, Contact Centres and Pensions Solutions. We’re embracing change to respond to the ever-changing needs of society, creating better outcomes for all our stakeholders.

GFT Technologies

gft.com

GFT Technologies is an AI-centric global digital transformation company. We design advanced data and AI transformation solutions, modernize technology architectures and develop next-generation core systems for industry leaders in Banking, Insurance, Manufacturing and Robotics. Partnering closely with our clients, we push boundaries to unlock their full potential. With deep industry expertise, cutting-edge technology, and a strong partner ecosystem, GFT delivers responsible AI-centric solutions that combine engineering excellence, high-performance delivery and cost efficiency. Our team of 12,000+ technology experts operate in 20+ countries worldwide offering career opportunities at the forefront of software innovation. Let’s Go Beyond_ Legal Disclaimer: https://www.gft.com/int/en/legal-disclaimer

NTT DATA, Inc.

global.ntt

NTT DATA, Inc. is a trusted global innovator of business and technology services. We're committed to helping clients innovate, optimize and transform for long-term success. Our R&D investments help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity.

Reply

reply.com

Reply [EXM, STAR: REY] specialises in the design and implementation of solutions based on new communication channels and digital media. As a network of highly specialised companies, Reply defines and develops business models enabled by the new models of AI, big data, cloud computing, digital media and the internet of things. Reply delivers consulting, system integration and digital services to organisations across the telecom and media; industry and services; banking and insurance; and public sectors.

Orange Business

orange-business.com

At Orange Business, our ambition is to become the leading european Network and Digital Integrator by leveraging our proven expertise in next-generation connectivity solutions, the cloud and cybersecurity. Our 30,000 women and men are present in 65 countries, where every voice counts. Together, we are driven by the same determination and the same team spirit, to build the digital solutions of today and tomorrow and create a positive impact for our customers, for their employees and for the planet. We offer exciting opportunities through innovative projects in data and digital, cloud, AI, cybersecurity, IoT, or digital workspace and big data. Join us and be part of this adventure!

Luxoft

cb luxoft.com

Luxoft, a DXC Technology Company (NYSE: DXC), is a digital strategy and software engineering firm providing bespoke technology solutions that drive business change for customers the world over. Acquired by U.S. company DXC Technology in 2019, Luxoft is a global operation in 44 cities and 21 countries with an international, agile workforce of nearly 18,000 people. It combines a unique blend of engineering excellence and deep industry expertise, helping over 425 global clients innovate in the areas of automotive, financial services, travel and hospitality, healthcare, life sciences, media and telecommunications. DXC Technology is a leading Fortune 500 IT services company which helps global companies run their mission critical systems. Together, DXC and Luxoft offer a differentiated customer-value proposition for digital transformation by combining Luxoft’s front-end digital capabilities with DXC’s expertise in IT modernization and integration. Follow our profile for regular updates and insights into technology and business needs.

Verizon

verizon.com

We get you. You want more out of a career. A place to share your ideas freely — even if they’re daring or different. Where the true you can learn, grow, and thrive. You’ll find all that here. Because we empower you. We power and empower how people live, work and play by connecting them to what brings them joy. The same is true inside our walls. We do what we love — driving innovation, creativity, and impact in the world. And wherever you go, we got your back. This is a team sport. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together— lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the V Team Life.

Loading…

NEWS

UpGuard CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 27, 2026 12:20 AM

Two Aussie startups that raised $132 million this week

This week's startup funding round-up includes new deals from a cybersecurity firm and a restaurant marketplace backed by a celebrity chef.

Read Article

February 26, 2026 07:00 PM

Tassie Cybersecurity Firm Upguard Raises $105M Series C Funding

UpGuard, a prominent player in the cybersecurity and risk management sector, has successfully garnered US$75 million (A$105 million) in its...

Read Article

February 26, 2026 06:23 PM

UpGuard Raises $75M in Series C to Boost Cybersecurity Growth.

UpGuard secures $75M in Series C funding to expand cybersecurity solutions, strengthen risk management tools, and accelerate global growth.

Read Article

February 26, 2026 02:27 PM

UpGuard: $75 Million Series C Raised For Cyber Risk Posture Management Expansion

UpGuard, a cybersecurity and risk management company, has raised $75 million in a Series C funding round led by Springcoast Partners.

Read Article

February 26, 2026 01:44 PM

UpGuard Raises $75M in Series C Funding

UpGuard, a Hobart, Australia- and Mountain View, CA-based cybersecurity and risk management, company, raised $75M in Series C funding.

Read Article

February 26, 2026 01:06 PM

UpGuard Raises $75M in Series C Funding to Accelerate Market Leadership in Cyber Risk Posture Management

PRNewswire/ -- UpGuard, a leader in cybersecurity and risk management, today announced it has raised a Series C funding round of $75M from...

Read Article

February 26, 2026 04:51 AM

Cybersecurity scaleup UpGuard raises $105m in Series C led by Springcoast

Cybersecurity scaleup UpGuard has raised USD75 million ($105 million) in Series C funding led by New York'-based growth equity firm...

Read Article

February 26, 2026 01:40 AM

Tassie cybersecurity scaleup Upguard pockets $105 million Series C

The round was lead by New York private equity firm Springcoast Partners with support from existing investors.

Read Article

February 25, 2026 11:45 PM

Aussie cybersecurity firm UpGuard ascends with $105 million raise

Exclusive: NY-based Springcoast Partners led the round, joined by Australia's Square Peg, which has partnered with the firm since inception,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-57995

SUMMARY

phpMyFAQ before 4.1.5 contains a privilege escalation vulnerability in GroupController::updatePermissions that allows GROUP_EDIT administrators to grant arbitrary rights to groups without verifying they hold those rights themselves. A delegated administrator can exploit this by assigning high-value permissions to a group they belong to, inheriting those rights and escalating privileges up to full administrative control.

Published

Date2026-06-30

Updated

Date2026-06-30

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-56777

SUMMARY

n8n before 2.25.7 and 2.26.x before 2.26.2 contains an abstract syntax tree (AST) security validator bypass in the Python Code node. An authenticated user with permission to create or modify workflows containing a Python Code node can bypass the validator and access the task executor module namespace. The issue only affects self-hosted instances where the Python Task Runner is enabled; where N8N_BLOCK_RUNNER_ENV_ACCESS is configured to allow it, this can disclose environment variables accessible to the task runner process.

Published

Date2026-06-30

Updated

Date2026-06-30

RISK INFORMATION (Score: 5)

cvss3

Base Score: 5.0

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.1

REFERENCES

CVE-2026-56700

SUMMARY

Grav CMS before 2.0.0-beta.2 contains multiple code-execution vulnerabilities. Three unsafe unserialize() calls - in Scheduler\JobQueue, Framework\Cache\Adapter\FileCache, and Session - deserialize untrusted data without restricting allowed classes, enabling PHP object injection and, via a gadget chain, arbitrary code execution where an attacker controls the serialized input. Additionally, InstallCommand's git clone operation passes the branch, url, and path parameters into a shell command without escaping, allowing OS command injection via plugin/theme installation (which requires admin access). A Twig security blocklist bypass (server-side template injection) is also present. The issues are fixed in 2.0.0-beta.2.

Published

Date2026-06-30

Updated

Date2026-06-30

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-56415

SUMMARY

Storage Concentrator (SC & SCVM) contains a command injection vulnerability within the debug.pl script that is reachable without authentication. A remote attacker can submit a specially crafted HTTP request containing a malicious payload that is processed without adequate input sanitization, resulting in arbitrary command execution with root-level privileges on the underlying system.

Published

Date2026-06-30

Updated

Date2026-06-30

RISK INFORMATION (Score: 10)

cvss3

Base Score: 10.0

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 10.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

3.9

REFERENCES

CVE-2026-56413

SUMMARY

Storage Concentrator (SC & SCVM) contains a command injection vulnerability in the ms_service.pl service, which listens on TCP port 9000 by default and accepts custom network packets to perform device actions. An unauthenticated remote attacker can send a specially crafted packet containing a malicious payload that is processed without adequate sanitization, resulting in arbitrary command execution with root-level privileges.

Published

Date2026-06-30

Updated

Date2026-06-30

RISK INFORMATION (Score: 10)

cvss3

Base Score: 10.0

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 10.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…