UpGuard

UpGuard is a cybersecurity platform that helps organizations manage and reduce their cyber risk. Its products cover third-party vendor risk management (Vendor Risk), attack surface management and external threat monitoring (Breach Risk), and AI-powered security questionnaire automation and trust center tooling (Trust Exchange). The UpGuard CyberRisk API exposes the platform programmatically — vendors and security ratings, risks and vulnerabilities, domains and IPs, data leak disclosures, identity breaches, typosquatting, questionnaires, subsidiaries, labels, notifications, and webhooks — authenticated with an API key from CyberRisk account settings.

UpGuard publishes 18 APIs on the APIs.io network, including breaches API, bulk API, dataleaks API, and 15 more. Tagged areas include Company, Cybersecurity, Third-Party Risk Management, Attack Surface Management, and Vendor Risk.

The UpGuard catalog on APIs.io includes 1 event-driven AsyncAPI specification.

UpGuard’s developer surface includes authentication, documentation, API reference, support, engineering blog, pricing, signup flow, and 26 more developer resources.

🌐 Visit website 📡 Source on GitHub
55.2/100 developing ▬ flat Agent 75/100 agent native Full breakdown ↓
scored 2026-07-27 · rubric v0.5
AccessSelf serve
18 APIs 1 MCP Servers
CompanyCybersecurityThird-Party Risk ManagementAttack Surface ManagementVendor RiskSecurity RatingsData LeaksThreat Intelligence

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 55.2/100 · developing
Contract Quality 15.1 / 25
Developer Ergonomics 10.9 / 20
Commercial Clarity 12.1 / 20
Operational Transparency 7.2 / 13
Governance 0.0 / 12
Discoverability 10.0 / 10
Agent readiness — 75/100 · agent native
Machine-Readable Contract 18 / 18
Agentic Access Contract 15 / 15
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 6 / 6
Agent Skills 5 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 0 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/upguard: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 18

Individual APIs this provider publishes, each with its own machine-readable definition.

UpGuard breaches API

The breaches API from UpGuard — 5 operation(s) for breaches.

UpGuard bulk API

The bulk API from UpGuard — 4 operation(s) for bulk.

UpGuard dataleaks API

The dataleaks API from UpGuard — 2 operation(s) for dataleaks.

UpGuard domains API

The domains API from UpGuard — 3 operation(s) for domains.

UpGuard ips API

The ips API from UpGuard — 4 operation(s) for ips.

UpGuard labels API

The labels API from UpGuard — 1 operation(s) for labels.

UpGuard notifications API

The notifications API from UpGuard — 1 operation(s) for notifications.

UpGuard organisation API

The organisation API from UpGuard — 1 operation(s) for organisation.

UpGuard reports API

The reports API from UpGuard — 3 operation(s) for reports.

UpGuard risks API

The risks API from UpGuard — 13 operation(s) for risks.

UpGuard subsidiaries API

The subsidiaries API from UpGuard — 8 operation(s) for subsidiaries.

UpGuard threatmonitoring API

The threatmonitoring API from UpGuard — 9 operation(s) for threatmonitoring.

UpGuard trust_exchange API

The trust_exchange API from UpGuard — 15 operation(s) for trust_exchange.

UpGuard typosquat API

The typosquat API from UpGuard — 2 operation(s) for typosquat.

UpGuard userrisk API

The userrisk API from UpGuard — 15 operation(s) for userrisk.

UpGuard vendors API

The vendors API from UpGuard — 32 operation(s) for vendors.

UpGuard vulnerabilities API

The vulnerabilities API from UpGuard — 2 operation(s) for vulnerabilities.

UpGuard webhooks API

The webhooks API from UpGuard — 3 operation(s) for webhooks.

Scroll for all 18

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

upguard-mcp.yml

MCP SERVER

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Upguard Webhooks

ASYNCAPI

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Upguard Authentication

apiKey · 1 scheme

SECURITY

Upguard Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Upguard Vulnerability Disclosure

contact published

SECURITY

Upguard Trust Center

SOC 2 Type II

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Upguard Agentic Access

133 operations · 37 acting · 1 human-in-the-loop

133 operations · 37 acting

AGENTIC

Resources

Get Started 2

Portal, sign-up, and the first successful call

SignUp
SignUp
 Login
Login

Documentation 2

Reference material describing how the API behaves

Documentation
Documentation
 APIReference
APIReference

Agent Surfaces 5

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess
AgenticAccess
 LLMsTxt
LLMsTxt
 WellKnown
WellKnown
 MCPServer
MCPServer
 AgentSkill
AgentSkill

Design & Contract 6

Pagination, idempotency, versioning, errors, and events

Lifecycle
Lifecycle
 ErrorCatalog
ErrorCatalog
 Conventions
Conventions
 Conformance
Conformance
 Webhooks
Webhooks
 DataModel
DataModel

Build 3

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization
 Packages
Packages
 SDKs
SDKs

Access & Security 6

Authentication, authorization, and security posture

TrustCenter
TrustCenter
 DomainSecurity
DomainSecurity
 Authentication
Authentication
 Compliance
Compliance
 Security
Security
 VulnerabilityDisclosure
VulnerabilityDisclosure

Operate 4

Status, limits, changes, and where to get help

Support
Support
 StatusPage
StatusPage
 ChangeLog
ChangeLog
 ChangeLog
ChangeLog

Commercial 3

Pricing, plans, and the legal terms of use

Pricing
Pricing
 TermsOfService
TermsOfService
 PrivacyPolicy
PrivacyPolicy

Company 2

The organization behind the API

Website
Website
 Blog
Blog

Source (apis.yml)

apis.yml Raw ↑ 
aid: upguard
name: UpGuard
description: UpGuard is a cybersecurity platform that helps organizations manage and reduce their cyber risk. Its products
  cover third-party vendor risk management (Vendor Risk), attack surface management and external threat monitoring (Breach
  Risk), and AI-powered security questionnaire automation and trust center tooling (Trust Exchange). The UpGuard CyberRisk
  API exposes the platform programmatically — vendors and security ratings, risks and vulnerabilities, domains and IPs, data
  leak disclosures, identity breaches, typosquatting, questionnaires, subsidiaries, labels, notifications, and webhooks —
  authenticated with an API key from CyberRisk account settings.
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://content.upguard.com/hubfs/open-graph/home.png
url: https://raw.githubusercontent.com/api-evangelist/upguard/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- 500-global
x-tier: enriched
x-tier-reason: cyberrisk-api-provider
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-21'
tags:
- Company
- Cybersecurity
- Third-Party Risk Management
- Attack Surface Management
- Vendor Risk
- Security Ratings
- Data Leaks
- Threat Intelligence
apis:
- aid: upguard:upguard-breaches-api
  name: UpGuard breaches API
  description: The breaches API from UpGuard — 5 operation(s) for breaches.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - breaches
  properties:
  - type: OpenAPI
    url: openapi/upguard-breaches-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-bulk-api
  name: UpGuard bulk API
  description: The bulk API from UpGuard — 4 operation(s) for bulk.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - bulk
  properties:
  - type: OpenAPI
    url: openapi/upguard-bulk-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-dataleaks-api
  name: UpGuard dataleaks API
  description: The dataleaks API from UpGuard — 2 operation(s) for dataleaks.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - dataleaks
  properties:
  - type: OpenAPI
    url: openapi/upguard-dataleaks-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-domains-api
  name: UpGuard domains API
  description: The domains API from UpGuard — 3 operation(s) for domains.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - domains
  properties:
  - type: OpenAPI
    url: openapi/upguard-domains-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-ips-api
  name: UpGuard ips API
  description: The ips API from UpGuard — 4 operation(s) for ips.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - ips
  properties:
  - type: OpenAPI
    url: openapi/upguard-ips-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-labels-api
  name: UpGuard labels API
  description: The labels API from UpGuard — 1 operation(s) for labels.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - labels
  properties:
  - type: OpenAPI
    url: openapi/upguard-labels-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-notifications-api
  name: UpGuard notifications API
  description: The notifications API from UpGuard — 1 operation(s) for notifications.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - notifications
  properties:
  - type: OpenAPI
    url: openapi/upguard-notifications-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-organisation-api
  name: UpGuard organisation API
  description: The organisation API from UpGuard — 1 operation(s) for organisation.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - organisation
  properties:
  - type: OpenAPI
    url: openapi/upguard-organisation-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-reports-api
  name: UpGuard reports API
  description: The reports API from UpGuard — 3 operation(s) for reports.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - reports
  properties:
  - type: OpenAPI
    url: openapi/upguard-reports-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-risks-api
  name: UpGuard risks API
  description: The risks API from UpGuard — 13 operation(s) for risks.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - risks
  properties:
  - type: OpenAPI
    url: openapi/upguard-risks-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-subsidiaries-api
  name: UpGuard subsidiaries API
  description: The subsidiaries API from UpGuard — 8 operation(s) for subsidiaries.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - subsidiaries
  properties:
  - type: OpenAPI
    url: openapi/upguard-subsidiaries-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-threatmonitoring-api
  name: UpGuard threatmonitoring API
  description: The threatmonitoring API from UpGuard — 9 operation(s) for threatmonitoring.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - threatmonitoring
  properties:
  - type: OpenAPI
    url: openapi/upguard-threatmonitoring-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-trust-exchange-api
  name: UpGuard trust_exchange API
  description: The trust_exchange API from UpGuard — 15 operation(s) for trust_exchange.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - trust_exchange
  properties:
  - type: OpenAPI
    url: openapi/upguard-trust-exchange-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-typosquat-api
  name: UpGuard typosquat API
  description: The typosquat API from UpGuard — 2 operation(s) for typosquat.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - typosquat
  properties:
  - type: OpenAPI
    url: openapi/upguard-typosquat-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-userrisk-api
  name: UpGuard userrisk API
  description: The userrisk API from UpGuard — 15 operation(s) for userrisk.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - userrisk
  properties:
  - type: OpenAPI
    url: openapi/upguard-userrisk-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-vendors-api
  name: UpGuard vendors API
  description: The vendors API from UpGuard — 32 operation(s) for vendors.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - vendors
  properties:
  - type: OpenAPI
    url: openapi/upguard-vendors-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-vulnerabilities-api
  name: UpGuard vulnerabilities API
  description: The vulnerabilities API from UpGuard — 2 operation(s) for vulnerabilities.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - vulnerabilities
  properties:
  - type: OpenAPI
    url: openapi/upguard-vulnerabilities-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
- aid: upguard:upguard-webhooks-api
  name: UpGuard webhooks API
  description: The webhooks API from UpGuard — 3 operation(s) for webhooks.
  humanURL: https://cyber-risk.upguard.com/api/docs
  baseURL: https://cyber-risk.upguard.com/api/public
  tags:
  - webhooks
  properties:
  - type: OpenAPI
    url: openapi/upguard-webhooks-api-openapi.yml
  - type: Documentation
    url: https://cyber-risk.upguard.com/api/docs
  - type: APIReference
    url: https://cyber-risk.upguard.com/api/docs
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: TrustCenter
  url: security/upguard-trust-center.yml
- type: DomainSecurity
  url: security/upguard-domain-security.yml
- type: AgenticAccess
  url: agentic-access/upguard-agentic-access.yml
- type: Authentication
  url: authentication/upguard-authentication.yml
- type: Website
  url: https://www.upguard.com
- type: Documentation
  url: https://cyber-risk.upguard.com/api/docs
- type: APIReference
  url: https://cyber-risk.upguard.com/api/docs
- type: Support
  url: https://help.upguard.com
- type: Blog
  url: https://www.upguard.com/blog
- type: Pricing
  url: https://www.upguard.com/pricing
- type: SignUp
  url: https://www.upguard.com/demo
- type: Login
  url: https://cyber-risk.upguard.com/login
- type: TermsOfService
  url: https://www.upguard.com/terms-and-conditions
- type: PrivacyPolicy
  url: https://www.upguard.com/company/privacy
- type: GitHubOrganization
  url: https://github.com/ScriptRock
- type: Integrations
  url: https://www.upguard.com/integrations
- type: StatusPage
  url: https://status.upguard.com
- type: ChangeLog
  url: https://www.upguard.com/releases
- type: ChangeLog
  url: changelog/upguard-changelog.yml
- type: LLMsTxt
  url: llms/upguard-llms.txt
- type: WellKnown
  url: well-known/upguard-well-known.yml
- type: Lifecycle
  url: lifecycle/upguard-lifecycle.yml
- type: ErrorCatalog
  url: errors/upguard-problem-types.yml
- type: Conventions
  url: conventions/upguard-conventions.yml
- type: Conformance
  url: conformance/upguard-conformance.yml
- type: Compliance
  url: https://www.upguard.com/security
- type: Security
  url: https://www.upguard.com/security
- type: VulnerabilityDisclosure
  url: security/upguard-vulnerability-disclosure.yml
- type: Packages
  url: packages/upguard-packages.yml
- type: SDKs
  url: packages/upguard-packages.yml
- type: MCPServer
  url: mcp/upguard-mcp.yml
- type: Webhooks
  url: asyncapi/upguard-webhooks.yml
- type: AgentSkill
  url: skills/_index.yml
- type: DataModel
  url: data-model/upguard-data-model.yml
x-enrichment:
  date: '2026-07-21'
  status: enriched
  artifacts_added: 23
  pass: local-v1