UpGuard Core simplifies security and compliance for your infrastructure in the cloud and on premises. This is accomplished through features that build on each other to provide a cyber security platform.


First, UpGuard Core allows you to Discover nodes in your environment. Nodes can be any server, network device, or cloud service that you manage and would like to monitor (for a full list of supported devices, see Supported Devices).

UpGuard Core will take daily snapshots of the configurations of all nodes in your environment and save them indefinitely. This allows you to be notified when devices change, get change reports emailed to you, or compare snapshots over time to see how a particular node has changed.

The Discover component allows you to know what is going on in your IT environment, and troubleshoot issues that arise from configuration drift.


After Discovering the nodes in your environment, UpGuard Core tracks changes across these nodes. The next step in Control is to create policies for your nodes, where you can specify how a particular node should be configured.

For example, you can setup a policy to make sure a certain version of anti-virus is installed through your IT infrastructure, or to make sure a configuration file is consistent across all apache servers in your environment.


The Report feature gives you some dynamic charts to see how your environment is doing. The types of reports provided in UpGuard Core:

  • Change Report
  • Policy Report
  • Benchmark Report (CIS Benchmarks)
  • Any custom report you can build using the API


Ideally, you don’t want to have to login to UpGuard Core each day to find how your nodes have changed. With our event and notification system, you can receive notifications (in forms such as email, incident management tickets, or syslog messages) so you are alerted to important changes before they cause downtime or a breach.