UpGuard unveils Risk Automations to speed cyber fixes

UpGuard has launched Risk Automations, a feature that links cyber risk findings with operational security tools and workflows to shorten the time between identifying an issue and taking remedial action.

Risk Automations is positioned as the fifth element of UpGuard's Cyber Risk Posture Management (CRPM) platform, alongside Vendor Risk, Breach Risk, User Risk, and Trust Exchange. UpGuard describes it as an "action layer" that moves tasks from risk discovery to resolution through automation.

The launch follows UpGuard's disclosure of a USD $75 million Series C funding round, which it said will support increased investment in product development and expansion into more geographies.

Workflow focus

Risk Automations centres on workflow design and integration, connecting with more than 100 tools across security operations and IT service management. Named integrations include ServiceNow, Splunk, CrowdStrike, and Jira, along with Zendesk, Cloudflare, Entra, Slack, and Microsoft Teams.

The product includes a visual, node-based editor for building workflows, plus a library of templates for common security and governance use cases. UpGuard describes the interface as drag-and-drop, aimed at teams that need to adapt automation quickly without writing custom code.

The approach targets a common operational problem in security programmes: fragmented processes across risk platforms, ticketing systems, and communications tools. Staff often switch between dashboards and manually move information between systems, delaying triage and reducing consistency in risk handling.

Risk Automations aims to address this by connecting risk intelligence directly to operational systems. Customers can also filter and route information to specific groups through custom alerts and reporting in collaboration tools, ticketing platforms, or email-intended to reduce broad alert noise and focus attention on actionable items.

Automation scope

Risk Automations supports workflows spanning discovery, triage, and ticketing, and can extend to system-level actions such as blocking malicious IP addresses or resetting compromised credentials.

Teams can choose different levels of automation. Some workflows can run autonomously, while others can include human review steps for changes that require additional oversight.

In a statement, UpGuard Chief Executive Mike Baukes linked the product to the gap between identifying a risk and responding to it.

"We've always believed that the gap between knowing about a risk and acting on it is where breaches happen," said Mike Baukes, CEO, UpGuard. "Risk Automations closes that gap. Combined with our Series C investment, this launch signals a new phase for UpGuard, one where our CRPM platform doesn't just identify risk, it resolves it."

UpGuard Vice President of Product Jess Hooper described the product as a response to information overload in security teams and the manual effort required to turn findings into tasks.

"Risk Automations is the action layer every modern security team needs," said Jess Hooper, vice president of product, UpGuard. "Security teams are inundated with information, but prioritizing that information and taking action is manual and unrefined. We are changing that by connecting risk intelligence directly to ticketing and system execution so that organizations can move from discovery to resolution in seconds, turning a reactive burden into a proactive competitive advantage."

Platform positioning

Founded in 2012, UpGuard sells software focused on cyber risk assessment and monitoring. Its CRPM offering covers vendor risk, internet-facing attack surface signals, and workforce-related security posture. The company also runs a trust exchange product to support the sharing of security information between organisations.

By adding a workflow and integration layer, UpGuard is addressing a common buying theme in security and risk management. CISOs and security operations leaders have sought tighter links between risk monitoring tools and the systems teams already use for service management and incident response. Automation has also become a frequent requirement as organisations face skills shortages and growing volumes of alerts and assessments.

UpGuard said Risk Automations is available to all customers and will be demonstrated at the company's virtual UpGuard Summit event.