# OneTrust Third-Party Risk vs UpGuard

**Leader by vioscaleAI score:** UpGuard

| Attribute | OneTrust Third-Party Risk | UpGuard |
|---|---|---|
| **vioscaleAI score** | 46.1 (44% (low)) | 66.1 (54% (medium)) |
| content.faq | `[{"answer":"Helps organizations oversee vendor risk and maintain regulatory compliance through automated questionnaires, continuous security assessment of vendors, and centralized documentation of vendor relationships and security measures. It is indexed under Vendor Risk Management.","source":"https://www.onetrust.com/products/third-party-risk/","question":"What is OneTrust Third-Party Risk?","confidence":0.6},{"answer":"OneTrust Third-Party Risk does not publish its prices. Pricing is quoted on request, so the figure depends on your seat count and requirements. We record this as a pricing-transparency signal rather than guessing a number. Pricing changes often, so verify at source before relying on it.","source":"https://www.onetrust.com/products/third-party-risk/","question":"How much does OneTrust Third-Party Risk cost?","confidence":0.6},{"answer":"We have only confirmed a cloud / SaaS deployment for OneTrust Third-Party Risk, so it appears to be vendor-hosted. If a self-hosted option exists we have not found it documented publicly.","source":"https://www.onetrust.com/products/third-party-risk/","question":"Can OneTrust Third-Party Risk be self-hosted?","confidence":0.6},{"answer":"We have confirmed 5 integrations for OneTrust Third-Party Risk, including Microsoft Purview, Microsoft Intelligent Data Platform, Databricks, AWS Bedrock and Microsoft Foundry. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://www.onetrust.com/products/third-party-risk/","question":"What does OneTrust Third-Party Risk integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2 and GDPR for OneTrust Third-Party Risk. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as OneTrust Third-Party Risk not holding them. Always confirm compliance directly before you rely on it.","source":"https://www.onetrust.com/products/third-party-risk/","question":"What security certifications does OneTrust Third-Party Risk have?","confidence":0.48},{"answer":"OneTrust Third-Party Risk is available worldwide. Its primary markets are the United States, the United Kingdom and the EU.","source":"https://www.onetrust.com/products/third-party-risk/","question":"Where is OneTrust Third-Party Risk available?","confidence":0.75}]` | `[{"answer":"A security platform that monitors external attack surfaces, detects compromised credentials on the dark web, and prevents brand impersonation attacks. Includes automated threat analysis and integrates with existing security tools. It is indexed under Vendor Risk Management.","source":"https://www.upguard.com","question":"What is UpGuard?","confidence":0.6},{"answer":"UpGuard does not publish its prices. Pricing is quoted on request, across 4 plans (Standard, Professional, Corporate and Enterprise+), so the figure depends on your seat count and requirements. We record this as a pricing-transparency signal rather than guessing a number. Pricing changes often, so verify at source before relying on it.","source":"https://www.upguard.com/pricing","question":"How much does UpGuard cost?","confidence":0.6},{"answer":"We have confirmed browser-based access to UpGuard. That is the extent of what we could verify from public sources, so it may well offer desktop or mobile clients we have not indexed.","source":"https://www.upguard.com","question":"What platforms does UpGuard support?","confidence":0.6},{"answer":"We have only confirmed a cloud / SaaS deployment for UpGuard, so it appears to be vendor-hosted. If a self-hosted option exists we have not found it documented publicly.","source":"https://www.upguard.com","question":"Can UpGuard be self-hosted?","confidence":0.6},{"answer":"We have confirmed 22 integrations for UpGuard, including ServiceNow, Jira, Freshservice, Zendesk, HaloPSA, Slack, Microsoft Teams and Mattermost, plus 14 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://www.upguard.com","question":"What does UpGuard integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2, ISO 27001 and GDPR for UpGuard. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as UpGuard not holding them. Always confirm compliance directly before you rely on it.","source":"https://www.upguard.com/compliance/nist-cybersecurity-framework","question":"What security certifications does UpGuard have?","confidence":0.48}]` |
| deployment.options | `{"cloud":true}` | `{"cloud":true}` |
| description.long | OneTrust provides a unified governance platform that automates third-party risk management from initial vendor assessment through ongoing monitoring and compliance reporting. The platform combines AI-driven assessments, continuous risk monitoring, and integrated intelligence on vendor security posture to help organizations manage vendor relationships at scale. | A unified platform that combines vendor risk assessment, breach detection, attack surface monitoring, and workforce security to help organizations reduce cyber risk and maintain compliance. |
| features.capabilities | `{"continuous_vendor_monitoring":true,"custom_questionnaire_builder":true,"remediation_workflow_ticketing":true,"external_passive_security_rating":true}` | `{"soc2_type_ii":true,"pricing_model":"flat_subscription","dark_web_breach_monitoring":true,"sig_caiq_standard_templates":true,"continuous_vendor_monitoring":true,"custom_questionnaire_builder":true,"vendor_trust_exchange_network":true,"remediation_workflow_ticketing":true,"ai_questionnaire_intake_parsing":true,"external_passive_security_rating":true}` |
| integrations.count | 200 | 400 |
| integrations.list | `[{"name":"Microsoft Purview"},{"name":"Microsoft Intelligent Data Platform"},{"name":"Databricks"},{"name":"AWS Bedrock"},{"name":"Microsoft Foundry"}]` | `[{"name":"ServiceNow"},{"name":"Jira"},{"name":"Freshservice"},{"name":"Zendesk"},{"name":"HaloPSA"},{"name":"Slack"},{"name":"Microsoft Teams"},{"name":"Mattermost"},{"name":"Email"},{"name":"AWS"},{"name":"Microsoft Azure"},{"name":"Google Cloud"},{"name":"Cloudflare"},{"name":"Splunk"},{"name":"Datadog"},{"name":"Dynatrace"},{"name":"Elastic"},{"name":"CrowdStrike"},{"name":"Okta"},{"name":"Zscaler"},{"name":"Carbon Black"},{"name":"Rapid7 InsightVM"},{"name":"Zapier","native":false,"direction":"bidirectional"},{"name":"Google Sheets","native":false,"direction":"bidirectional"},{"name":"Google Docs","native":false},{"name":"Trello","native":false,"category":"ticketing","direction":"outbound"}]` |
| market.availability | `{"primaryMarkets":["US","GB","EU"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"web":true}` | `{"web":true}` |
| pricing | `{"type":"quote","freeTier":false,"sourceUrl":"https://www.onetrust.com/products/third-party-risk/","retrievedAt":"2026-08-19T22:23:56.551Z"}` | `{"type":"subscription","plans":[{"free":false,"name":"Standard","summary":"$1,750/month (billed annually) for 50 vendor slots; $79/month for additional vendors","features":["Monitor 50 vendors","Vendor Security Ratings","Assessment & Remediation Workflows","Security Questionnaires","Continuous vendor monitoring","Instant risk assessments","Risk & Remediation Management","Vulnerability Management","Role-Based Access","API Access","Questionnaire Builder","Questionnaire Library","Templates & Automation","Custom Notifications","Vendor Summary","News & Incidents","3 Organizations","Ticket-Only Support"],"commitment":"annual","components":[{"kind":"fixed","amount":1750,"period":"month","currency":"USD"},{"kind":"per_unit","unit":"vendor","amount":79,"period":"month","currency":"USD"}],"contactSales":false,"includedLimits":{"vendor_monitoring_slots":"50"}},{"free":false,"name":"Professional","summary":"Contact sales","features":["All Standard features","Monitor 150 vendors","10 Vendor Snapshots","Role-Based Accounts","Custom Co-Branding","Standard Support"],"description":"Start to scale your third-party risk program","contactSales":true,"includedLimits":{"vendor_snapshots":"10","vendor_monitoring_slots":"150"}},{"free":false,"name":"Corporate","summary":"Contact sales","features":["All Professional features","Monitor 500 vendors","Fourth Party monitoring","Audit Log"],"description":"Strengthen governance and oversight across your ecosystem","contactSales":true,"includedLimits":{"vendor_monitoring_slots":"500"}},{"free":false,"name":"Enterprise+","summary":"Contact sales","features":["All Corporate features","Monitor unlimited vendors","Unlimited Vendor Snapshots","Unlimited Platform Users","Multi-Org Accounts","Enterprise Support","Data residency options"],"description":"Orchestrate risk management across complex ecosystems","contactSales":true,"includedLimits":{"vendor_monitoring_slots":"Unlimited"}}],"summary":"From $1,750/month (Standard, billed annually). Professional, Corporate, and Enterprise+ by contact. 14-day free trial, no credit card required.","currency":"USD","freeTier":false,"sourceUrl":"https://www.upguard.com/pricing","retrievedAt":"2026-08-25T15:37:32.231Z","freeTrialDays":14,"startingPrice":{"amount":1750,"period":"month","currency":"USD"},"billingPeriods":["month","year"]}` |
| pricing.free_tier | no | no |
| pricing.model | quote | commercial |
| pricing.price_level | unknown | high |
| pricing.starting_price | - | `{"amount":1750,"currency":"USD"}` |
| pricing.transparent | no | yes |
| security.gdpr | yes | yes |
| security.iso27001 | - | yes |
| security.soc2 | yes | yes |
| security.trust_center | https://www.onetrust.com/blog/security-focused-sales/ | - |

## Capabilities (Vendor Risk Management)

| Capability | OneTrust Third-Party Risk | UpGuard |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Custom questionnaire builder | ✓ | ✓ |
| AI questionnaire intake parsing | - | ✓ |
| External passive security rating | ✓ | ✓ |
| Vendor trust exchange network | - | ✓ |
| Dark web breach monitoring | - | ✓ |
| Sig caiq standard templates | - | ✓ |
| Procurement coupa ariba integration | - | - |
| Continuous vendor monitoring | ✓ | ✓ |
| Remediation workflow ticketing | ✓ | ✓ |
| SOC2 type ii | - | ✓ |
| ISO 27001 | - | - |
| Pricing model | - | Flat subscription |

*Source: vioscaleAI. Generated 2026-10-16T20:03:14.035Z. "-" = undocumented, not absent.*