Clearer citations and timeline for Security Profile checks

The check drawer in Security Profile now opens as a whole page, showing which citations contribute to a pass or fail result and an explanation of why. Citations are now more easily excluded and restored giving users more control over the AI Security Profile scan results. A new timeline for evidence checks records every change to a check, including new citations, manual overrides, citation exclusions, and remediation requests, so users can audit the history of the check. The check drawer and citation updates are available now. The new timeline will be available from 27 August. For more information see Work with Controls and Checks.

N-able N-central verified vulnerability detection

We now have improved product detection for N-able N-central. Customers with N-able N-central in their attack surface will now see the product in Breach Risk Detected Products. Breach Risk & Vendor Risk now also include verified vulnerability detection for N-able N-central across 9 CVEs, including CVE-2026-18577 and CVE-2026-18556, authentication bypass vulnerabilities exploited in the wild; CVE-2025-8875, an insecure deserialization vulnerability; and CVE-2025-8876, a command injection vulnerability.

Other improvements

• Trust Center tabs now have direct URLs, allowing Trust Exchange users to easily share a single link directly to their security controls or subprocessor list with Trust Center viewers across both public and signed-in views.
• Importing security questionnaires is now significantly upgraded, delivering up to 10x faster processing to determine column mappings alongside smarter heading detection and enhanced accuracy for multi-sheet files and UpGuard exported workbooks.