Transcript
Hi Mike Matchett Small World Big Data. We are here at RSAC 2025 and there are lots and lots of people still hanging around. There's thousands and thousands of people. There are over 600 security vendors here, but we are talking with some of the best. We've got Upguard here today. Welcome to our show. Thank you. Good to be here. Good to be here, sir. So I think our folks want to know, first of all, what role does Upguard play in the cybersecurity space? Yeah, Upguard plays a pretty big role in the cybersecurity space. We help organizations assess their third party vendors by way of daily scans, security questionnaires, security documentation. And we put that all together in a risk assessment. So organizations have a more cohesive process when it comes to reducing risk across their vendor supply chain, as well as looking at their own attack surface management and reducing risk there. So it's a collaborative measure, and we're working with our customers to help reduce risk in cybersecurity. All right. So this is is this a kind of posture looking at that or a compliance kind of role. Or is this more of an active seem kind of SOC kind of role. It's a little bit of both. I think, you know, we're reducing risk, which is number one. And then the second part is making sure that us and our vendors are compliant in the space. So everyone's kind of working together. I like to call it the good guys are teaming up against the bad guys, and that's what we're all about here at Upguard. So just just for the audience, what's one of the risks of not having a good idea of a good understanding of what the vulnerability is of one of your upstream vendors? Yeah. I mean, if you think about like an organization that's hosting employee data, right? They have Social Security numbers, they have banking information, and you're outsourcing it to another organization. You don't know how that vendor is performing from a security perspective without upguard, if you don't have someone like us, you you have to do it manually. You have to gather that information, and we put it all together and make you feel comfortable. And you can sleep at night knowing your vendors are doing what they can to protect your data. What if someone doesn't really understand their supply chain? Do you guys help them figure that out? Yeah, I mean, we are a pretty dynamic solution. We work with organizations that have tens of thousands of vendors, and we work with companies who have no they don't have a process in place, and they need to upgrade to kind of help them understand what they need to do, and then we help them get there. Is this a long process or something someone can implement in a shorter project? It's a subjective process to the organization and their vendor ecosystem, but it's pretty easy to stand up. We're we're web based. We can bulk import all your vendors in one instance. Um, so, you know, you can take it from my customers. It's a pretty easy process and they enjoy it. All right. And this definitely helps improve compliance and regulation and governance. Right. Yeah. Yeah that's exactly what we do. We help organizations make their vendors adhere to specific compliance. Yeah okay. If someone is looking around at this show and saying, oh, there's lots of security problems to attack and there's lots of things going on, what have you noticed as a theme that you particularly think upgrade would be a good solution for upgrades? Good for anyone? Honestly, you know, walking around here, I see a lot of vendors. The the main driver in the space. And what I'm seeing is everyone's worried about their vendors. Over 60% of data breaches come from third party vendors. You know, if you're not assessing them, you're not sleeping well at night. So that's really where Upguard comes in and where we support our customers. All right. And if someone wants to find out a little bit more information from Upguard, you've got some stuff on your website, no doubt. Where would you recommend they start? Give me a call. My cell phone. No, I mean, yeah, our website's great. We're very transparent with everything. Everything's up there. But our team is also very easy to work with so they can shoot me an email if they want to schedule a call. I'm happy to talk about it more in person. All right. Thank you very much. Supply chain. Secure it. Take care. Bye.
