Release notes # Ability to conduct concurrent risk assessments for a single vendor Annie Luu February 28, 2024 To give you more flexibility when conducting risk assessments, we’ve added the ability to create multiple concurrent risk assessments for a single vendor. You can now add custom names and scope for each risk assessment, to correspond to the specific purpose and scope of each assessment, such as product or region-based risk assessments. To learn more about vendor risk assessments and these changes see [How to complete a risk assessment](https://help.upguard.com/en/articles/5795578-how-to-complete-a-risk-assessment). ### Introducing the UpGuard Trust Exchange and Content Library We’re consolidating our existing tools to answer security questionnaires, respond to requests for documentation and choose what to share in your Shared Profile under one banner: the **UpGuard Trust Exchange**. Plus, we’re introducing a [content library](https://help.upguard.com/en/articles/8973526-what-is-the-content-library), where you can manage and reuse previously uploaded documents. * New: “Trust Exchange” menu item in your navigation * New: Content library feature to [manage and reuse documents](https://help.upguard.com/en/articles/8998017-how-to-use-content-library-documents-in-security-questionnaires) uploaded as part of security questionnaires * Move: “My Shared Profile” moves into Trust Exchange ### Improved visibility into your asset inventory with Detected Products To extend the visibility into your asset inventory in BreachSight, we’ve added a new section called [Detected Products](https://help.upguard.com/en/articles/8663342-what-is-detected-products) that displays in depth information about the software and other products used on your domains and IPs. This information extends what is already available in Vulnerabilities – an inventory of software products with known vulnerabilities– to show products in use that may not yet have CVEs. Having this information allows you to audit for unapproved software and respond more quickly when a new vulnerability is discovered for one of the products you use. ### Added link to registrar’s abuse page to typosquatting When malicious domains impersonating your brand are detected by the Typosquatting module, the next step is to remediate the risk by contacting the domain registrar and reporting the abuse. You can now go straight to the page of the registrar or other relevant internet authority from Typosquatting to begin the takedown process. ### Other improvements * We have begun the process of rolling out credentials stolen by [infostealer malware](https://help.upguard.com/en/articles/8712678-what-is-infostealer-malware) as an enhancement to Identity Breaches for all customers on the Professional plan and above. * We have added detection for CVE-2024-1709 and other vulnerabilities in ConnectWise ScreenConnect. * To make it quicker to download reports we’ve added the ability for users to download multiple reports at the same time from the *Generated reports* page * This release includes a number of bug fixes. [View all release notes](/releases) ## UpGuard Release Notes Learn about new features, changes, and improvements to UpGuard. ### PHP2Shell detection now live in UpGuard Mark Barber October 21, 2026 [Read more](/releases/php2shell-detection-now-live-in-upguard) ### Close related exposed credential threats in one step Mark Barber October 20, 2026 [Read more](/releases/close-related-exposed-credential-threats-in-one-step) ### Security Profile citations now include source control references Mark Barber October 6, 2026 [Read more](/releases/security-profile-citations-now-include-source-control-references) ### Threat Posture: an executive view of external threat activity Mark Barber September 22, 2026 [Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity) ### Brand impersonation detection across mobile app stores Mark Barber September 9, 2026 [Read more](/releases/brand-impersonation-detection-across-mobile-app-stores) ### Clearer citations and timeline for Security Profile checks Mark Barber August 26, 2026 [Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks) ### Subprocessors in Trust Center Mark Barber August 12, 2026 [Read more](/releases/subprocessors-in-trust-center) ### Cloud and core infrastructure frameworks in Security Profile Mark Barber July 29, 2026 [Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile) [View all release notes](/releases) ### See UpGuard In Action Book a free, personalized onboarding call with one of our cybersecurity experts. [Free trial](https://www.upguard.com/demo) [Get a demo](https://www.upguard.com/contact-sales) Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](https://www.upguard.com/instant-security-score?)