Release notes

# Add a custom domain for your Trust Page

Toby Roger March 27, 2025

We’re introducing custom domain support for all Trust Pages, so that you can deliver a fully branded experience that builds trust and reinforces credibility with your prospects and customers. Paired with previous custom branding enhancements, your Trust Page can now feel like a natural extension of your existing web presence. This comes at no additional cost, and is available on all Trust Pages. [Get started for free](https://cyber-risk.upguard.com/trustpage), or [learn more about this feature](https://help.upguard.com/en/articles/trust-page-custom-url).

### Export vendor reports into Word documents

We’ve added support for generating editable versions of vendor reports, giving you greater flexibility to tailor content before sharing. You can now export the Vendor Summary, Vendor Detail, Vendor Risk Assessment, and Security Profile Risk Assessment reports in Microsoft Word format, making it easier to customize findings, add context, or apply your own branding. This option is in addition to the PDF option when generating reports.

### Detection for exposed Llama.cpp instances

We have expanded our external attack surface monitoring to detect exposed llama.cpp instances, a popular open-source framework for running LLMs (eg Deepseek, LLaMa 2, Qwen…) locally. This enhancement helps organizations identify unintentionally exposed AI infrastructure, reducing the risk of unauthorized access to self-hosted language models and maintaining a secure AI deployment footprint.

### PCI DSS Questionnaires

We’ve added a complete set of questionnaire templates to the Vendor Risk questionnaire library, aligned with the Payment Card Industry Data Security Standard (PCI DSS) v4. Each of the 10 official SAQ types is now available as a pre-built questionnaire ready to assess organizations against the requirements of PCI DSS. Note that these questionnaires are not a substitute for an Attestation of Compliance (AOC) or Report on Compliance (ROC).

### Other improvements

* We’ve made it easier to waive risks in the Vendor Risk Security Profile (beta). You can now easily waive risks identified through document scans as soon as they are identified.
* This release includes a number of bug fixes

[View all release notes](/releases)

## UpGuard Release Notes

Learn about new features, changes, and improvements to UpGuard.

### PHP2Shell detection now live in UpGuard

Mark Barber October 21, 2026

[Read more](/releases/php2shell-detection-now-live-in-upguard)

### Close related exposed credential threats in one step

Mark Barber October 20, 2026

[Read more](/releases/close-related-exposed-credential-threats-in-one-step)

### Security Profile citations now include source control references

Mark Barber October 6, 2026

[Read more](/releases/security-profile-citations-now-include-source-control-references)

### Threat Posture: an executive view of external threat activity

Mark Barber September 22, 2026

[Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity)

### Brand impersonation detection across mobile app stores

Mark Barber September 9, 2026

[Read more](/releases/brand-impersonation-detection-across-mobile-app-stores)

### Clearer citations and timeline for Security Profile checks

Mark Barber August 26, 2026

[Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks)

### Subprocessors in Trust Center

Mark Barber August 12, 2026

[Read more](/releases/subprocessors-in-trust-center)

### Cloud and core infrastructure frameworks in Security Profile

Mark Barber July 29, 2026

[Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile)

[View all release notes](/releases)

### See UpGuard In Action

Book a free, personalized onboarding call with one of our cybersecurity experts.

[Free trial](https://www.upguard.com/demo)

[Get a demo](https://www.upguard.com/contact-sales)

Free instant security score

## How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.

* Instant insights you can act on immediately
* Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities

[Free score](https://www.upguard.com/instant-security-score?)
