Complete questionnaires without closing remediation

Vendor Risk users can now mark a questionnaire complete while leaving its remediation requests open, giving you more granular status to improve tracking. We’ve added a new setting, Allow changes to completed questionnaires in remediation, giving you the flexibility to define whether vendors can update responses to remediate risks after completion.

Search and filtering for Trust Center access management

Trust Center users can now search and filter the Access logs by name or email, eliminating the need to scroll through long lists. Additionally, denied access requests are now visible, allowing internal team members to track the access requests declined and when.

IRAP badge for Trust Center

Trust Center now displays an IRAP badge, so organizations assessed under the Infosec Registered Assessors Program can show that status to visitors reviewing their security posture.

Exclude Entra guest users from monitoring

User Risk users can now exclude Entra guest users from monitoring through the existing monitoring rules. After each scan or rule change, an audit event records which users were unmonitored.

Multiple approved apps in the browser extension

When User Risk nudges or blocks an app in the browser extension, it now lists all approved alternatives in alphabetical order.

Severity-first sorting for the Threat Monitoring queue

Breach Risk’s Threat Monitoring queue now sorts by severity by default, highest first (Critical to Low), so analysts see the most critical threats before the most recent. Within the same severity, threats fall back to newest first. Users can still change the sort manually.