Release notes

# Assess your posture with your own Security Profile, then publish it to your Trust Page

Mark Barber September 24, 2025

We’re making it easier than ever to communicate your security posture and commitment to transparency with Trust Exchange.

You can now perform a self assessment in the [Security Profile](http://cyber-risk.upguard.com/trustexchange/mysecurityprofile), using our AI analyst to scan your security documents and questionnaires and populate suggestions for our library of 500+ checks in minutes (the same as assessed in UpGuard’s Vendor Risk product). You can review the suggested responses and approve, reject or add manual answers.

Then, choose which passed checks you’d like to publish onto your Trust Page, where they’re presented in a searchable public format. You can also optionally include linked evidence, subject to the existing access and NDA settings you have in place.

Our FAQ-style list of controls enables you to transparently and proactively communicate your security posture to customers and partners, cutting down on the back and forth hassle of outdated security assessment processes.

This feature is now available to all Trust Exchange accounts. For more information visit [our help guide](https://help.upguard.com/en/how-to-complete-your-security-profile-trust-exchange).

### New threat detection for vibe coding tools

We’ve expanded Threat Monitoring with a new collector that captures signals from emerging “vibe coding” platforms, including v0.dev, lovable.dev, and Replit. This helps identify threats such as phishing sites created by attackers, as well as accidental leaks of IP, PII, or credentials by internal users. By monitoring these rapidly growing tools, we’re strengthening coverage of both external and insider risks associated with your Transforms.

### Risk details API: Port information now available

The Risk API endpoints can now return port numbers for affected assets, giving you more detailed context for each security risk. To enable this, add the optional parameter `include_sources=True` to your API call on the `/risks` and `/risksdiff` endpoints. This will add a new sources field in the JSON response containing both the hostname and port.

### Other improvements

* You can now export the Trust Page access log as an Excel file.
* This release includes a number of bug fixes.

[View all release notes](/releases)

## UpGuard Release Notes

Learn about new features, changes, and improvements to UpGuard.

### PHP2Shell detection now live in UpGuard

Mark Barber October 21, 2026

[Read more](/releases/php2shell-detection-now-live-in-upguard)

### Close related exposed credential threats in one step

Mark Barber October 20, 2026

[Read more](/releases/close-related-exposed-credential-threats-in-one-step)

### Security Profile citations now include source control references

Mark Barber October 6, 2026

[Read more](/releases/security-profile-citations-now-include-source-control-references)

### Threat Posture: an executive view of external threat activity

Mark Barber September 22, 2026

[Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity)

### Brand impersonation detection across mobile app stores

Mark Barber September 9, 2026

[Read more](/releases/brand-impersonation-detection-across-mobile-app-stores)

### Clearer citations and timeline for Security Profile checks

Mark Barber August 26, 2026

[Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks)

### Subprocessors in Trust Center

Mark Barber August 12, 2026

[Read more](/releases/subprocessors-in-trust-center)

### Cloud and core infrastructure frameworks in Security Profile

Mark Barber July 29, 2026

[Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile)

[View all release notes](/releases)

### See UpGuard In Action

Book a free, personalized onboarding call with one of our cybersecurity experts.

[Free trial](https://www.upguard.com/demo)

[Get a demo](https://www.upguard.com/contact-sales)

Free instant security score

## How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.

* Instant insights you can act on immediately
* Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities

[Free score](https://www.upguard.com/instant-security-score?)
