Access User Risk data via APIs

We have released the first set of public APIs for User Risk, a Human Risk Management solution from UpGuard that provides a complete and unified picture of workforce cyber risk. The APIs enable programmatic access to data regarding users, applications, permissions, and identity breaches. This functionality allows users to integrate User Risk insights into their internal systems and reporting workflows.

Detection for open MCP servers

We have added detection for exposed Model Context Protocol (MCP) servers as an informational risk. This new risk helps customers identify if their own infrastructure or that of vendors has open MCP Servers, allowing them to verify if the exposure is intentional or requires stricter access controls.

Remediation management for automated scan risks

Trust Exchange customers can seamlessly integrate their Breach Risk automated scan findings directly into their Security Profile. This update allows users to initiate and manage risk waivers and remediation requests for identified risks within their existing Trust Exchange profile workflow.

Proactive alerts for custom domain misconfiguration

We have introduced automated email reminders and in-app banners to notify Trust Exchange users when their custom domain is misconfigured. Users will now receive alerts at 7 and 30-day intervals if an issue persists, ensuring they can promptly resolve DNS connection problems and maintain Trust Center availability.

Other improvements

• Adding a custom domain or IP address in Breach Risk is now faster and more responsive: the dialog closes immediately while the initial scan runs in the background, and the domain is marked inactive until scanning completes.
• We have resolved an Outlook display issue where questionnaire links appeared as raw text.
• We have renamed Trust Exchange ‘Trust Page’ to ‘Trust Center’ to reflect its role as the central hub for managing and sharing users’ security posture and compliance documentation with customers.
• This release includes several bug fixes.