Add a custom domain for your Trust Page

We’re introducing custom domain support for all Trust Pages, so that you can deliver a fully branded experience that builds trust and reinforces credibility with your prospects and customers. Paired with previous custom branding enhancements, your Trust Page can now feel like a natural extension of your existing web presence. This comes at no additional cost, and is available on all Trust Pages. Get started for free, or learn more about this feature.

Export vendor reports into Word documents

We’ve added support for generating editable versions of vendor reports, giving you greater flexibility to tailor content before sharing. You can now export the Vendor Summary, Vendor Detail, Vendor Risk Assessment, and Security Profile Risk Assessment reports in Microsoft Word format, making it easier to customize findings, add context, or apply your own branding. This option is in addition to the PDF option when generating reports.

Detection for exposed Llama.cpp instances

We have expanded our external attack surface monitoring to detect exposed llama.cpp instances, a popular open-source framework for running LLMs (eg Deepseek, LLaMa 2, Qwen…) locally. This enhancement helps organizations identify unintentionally exposed AI infrastructure, reducing the risk of unauthorized access to self-hosted language models and maintaining a secure AI deployment footprint.

PCI DSS Questionnaires

We’ve added a complete set of questionnaire templates to the Vendor Risk questionnaire library, aligned with the Payment Card Industry Data Security Standard (PCI DSS) v4. Each of the 10 official SAQ types is now available as a pre-built questionnaire ready to assess organizations against the requirements of PCI DSS. Note that these questionnaires are not a substitute for an Attestation of Compliance (AOC) or Report on Compliance (ROC).

Other improvements

• We’ve made it easier to waive risks in the Vendor Risk Security Profile (beta). You can now easily waive risks identified through document scans as soon as they are identified.
• This release includes a number of bug fixes