UpGuard

UpGuard, formerly ScriptRock, is an Australian IT security company with offices in Mountain View, California and Sydney, Australia.[7][8] While working at investment firm Colonial First State, company founders Leo Venegas, Alan Sharp-Paul, and Mike Baukes met on-the-job in Sydney, Australia. Sharp-Paul was a web developer and Baukes was a systems administrator.[9] After spending years in financial services in Australia and the UK, the trio developed a system for corporations to understand business software portfolios and the consequent risk of breaches and outages due to poor configuration management.[10] The first release of the system was initially named guardrail and allowed for the automation of typical cybersecurity DevOps practices, focusing on deep analysis into all relevant servers and software applications settings.[11]

In 2016, the company raised $17m in a series B funding round co-led by Pellion that included August Capital, Square Peg Capital and Insurance Australia Group.[12] In early 2017, UpGuard then, signed an exclusive distribution partnership with ACA Pacific in order to establish a stronger presence in the APAC region[13] and Baukes and Sharp-Paul opened an UpGuard office in Sydney, Australia, bringing the company back to the region "where it all began."[14] In June 2017, UpGuard announced that it had found an unsecured server containing data from Deep Root Analytics, which contained information on almost 200 million American voters.[15][16]

UpGuard helps companies stand up securely configured systems and guard against outages and breaches.[17] The product uses a resilience supervisor that integrates checks into every step of the technology lifecycle whilst continuously assessing for risk factors such as misconfiguration, configuration drift, and process vulnerabilities.[18] The approach is unique as the platform's architecture allows the dynamic capture of large configuration datasets continuously in order to difference, visualise and report on potential breaches and outages proactively .

At the products core, configuration information can be transformed into security policies, procedural validations or automations to ensure the desired integrity of IT environments is maintained and auditable. This is further enhanced by identifying authorised change vs unauthorised change and dynamically reconciling entire environments against ticketing systems for ITSM processes or SDLC processes, UpGuard summarises key insights across this data dynamically and includes a proprietary risk modelling method called CSTAR that aggregates all relevant risk factors into a score between 0 and 950, similar to a credit score, allowing companies to effectively predict and prioritise high-risk impact areas, track risk hotspots over time, and compare scores to similar companies in like industries.[19]

UpGuard ships three products that interoperate to form a deployable cyber resilience strategy, Discover, Control, and Predict. Each aims to address a different source of risk related to information technology.