Release notes

# Ability to shortlist key risks in risk assessments

Annie Luu November 22, 2023

We’ve added the ability to create a shortlist of key risks as part of a risk assessment, allowing you to highlight important risks and those requiring follow-up. You can choose to include only key risks as part of your risk assessment report, in lieu of displaying the full list of risks. To learn more see [How to complete a risk assessment](https://help.upguard.com/en/articles/5795578-how-to-complete-a-risk-assessment).

### API flexible permissions

We’ve revised API permissions to allow a finer-grained set of permissions and visibility:

* Added a Read/Read\&Write flag to allow a given API key to only access GET functions or to be able to access GET/PUT/POST and DELETE functions.
* Expanded on the current Data Leaks permission to allow an API key to be defined by role.
* To protect existing integrations all existing API Keys will be granted full access. The new model will only relate to keys generated after this release.

To learn more see [UpGuard’s API documentation](https://cyber-risk.upguard.com/api/docs#).

### Vendor monitoring API changes

We’ve created specific API endpoints to start monitoring and stop monitoring a vendor. This allows us to follow more established and consistent API design practices as well as restrict the monitoring to only those API Keys that have Vendor Risk Read\&Write permissions. In subsequent releases, we will deprecate the “start\_monitoring” flag in the /vendor API endpoint and remove that feature:

* Vendor ID or Primary Host Name) to the list of monitored vendors. This supports the same functionality as our existing /vendor API when start\_monitoring = true, such as:

\- The ability to apply labels and tiers;

\- A wait for a scan feature that scans the vendor before returning the results;

\- Checks on UpGuard licenses maximum Vendor counts.

* /vendor/unmonitor – A new endpoint that will remove the specific vendor (based on Vendor ID or Primary Host Name) from the list of monitored vendors.

To learn more see [UpGuard’s API documentation](https://cyber-risk.upguard.com/api/docs#).

### SysAid vulnerability detection

We’ve added detection for the SysAid product, its version, and associated vulnerabilities, notably CVE-2023-47246 being exploited by the Clop group.

### Other improvements

* This release includes a number of bug fixes.

[View all release notes](/releases)

## UpGuard Release Notes

Learn about new features, changes, and improvements to UpGuard.

### PHP2Shell detection now live in UpGuard

Mark Barber October 21, 2026

[Read more](/releases/php2shell-detection-now-live-in-upguard)

### Close related exposed credential threats in one step

Mark Barber October 20, 2026

[Read more](/releases/close-related-exposed-credential-threats-in-one-step)

### Security Profile citations now include source control references

Mark Barber October 6, 2026

[Read more](/releases/security-profile-citations-now-include-source-control-references)

### Threat Posture: an executive view of external threat activity

Mark Barber September 22, 2026

[Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity)

### Brand impersonation detection across mobile app stores

Mark Barber September 9, 2026

[Read more](/releases/brand-impersonation-detection-across-mobile-app-stores)

### Clearer citations and timeline for Security Profile checks

Mark Barber August 26, 2026

[Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks)

### Subprocessors in Trust Center

Mark Barber August 12, 2026

[Read more](/releases/subprocessors-in-trust-center)

### Cloud and core infrastructure frameworks in Security Profile

Mark Barber July 29, 2026

[Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile)

[View all release notes](/releases)

### See UpGuard In Action

Book a free, personalized onboarding call with one of our cybersecurity experts.

[Free trial](https://www.upguard.com/demo)

[Get a demo](https://www.upguard.com/contact-sales)

Free instant security score

## How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.

* Instant insights you can act on immediately
* Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities

[Free score](https://www.upguard.com/instant-security-score?)