Release notes # Expanded API capabilities for greater workflow automation Mark Barber March 25, 2026 We are continuously expanding our API ecosystem to help security teams build deeper integrations and streamline your automated workflows. In this release, we’ve added: * **Centralized VIP Management (Breach Risk):** A new VIP Management API that allows for the programmatic management of VIP identities. By maintaining a centralized roster, users can ensure consistent prioritization across all current and future Identity Breaches involving critical individuals. * **Enhanced Identity Breaches Metadata (Breach Risk):** We have expanded the Identity Breaches API to surface deeper breach - and identity-level context. Responses now include critical details such as employee impact counts, notification statuses, overall breach status and VIP or ignored flags to power more comprehensive downstream reporting. * **Read-only Content Library and Trust Center APIs (Trust Exchange):** The read-only Content Library and Trust Center APIs are now generally available. These endpoints allow users to programmatically access published trust assets and Content Library data for use in automated workflows and external reporting systems. * **Due date field added to list vendor questionnaires API (Vendor Risk)**: We have updated the list vendor questionnaires API v2 to include the due date field. This enhancement allows users to manage vendor questionnaire follow ups using the API. ### Detection for Cisco Catalyst SD-WAN Vulnerability (CVE-2026-20127) We have implemented detection for the Cisco Catalyst SD-WAN authentication bypass (CVE-2026-20127) currently being exploited by attackers. This update enables security teams to check their own attack surface via Breach Risk or assess their supply chain via Vendor Risk for unpatched instances exposed to this critical vulnerability. ### Severity filtering for portfolio risk profiles We have added severity-based filtering to the Vendor Risk portfolio risk profile. Users can now filter their view and subsequent exports by specific severity levels, enabling more targeted risk analysis and streamlining reporting on critical vulnerabilities across their vendor portfolio. [View all release notes](/releases) ## UpGuard Release Notes Learn about new features, changes, and improvements to UpGuard. ### PHP2Shell detection now live in UpGuard Mark Barber October 21, 2026 [Read more](/releases/php2shell-detection-now-live-in-upguard) ### Close related exposed credential threats in one step Mark Barber October 20, 2026 [Read more](/releases/close-related-exposed-credential-threats-in-one-step) ### Security Profile citations now include source control references Mark Barber October 6, 2026 [Read more](/releases/security-profile-citations-now-include-source-control-references) ### Threat Posture: an executive view of external threat activity Mark Barber September 22, 2026 [Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity) ### Brand impersonation detection across mobile app stores Mark Barber September 9, 2026 [Read more](/releases/brand-impersonation-detection-across-mobile-app-stores) ### Clearer citations and timeline for Security Profile checks Mark Barber August 26, 2026 [Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks) ### Subprocessors in Trust Center Mark Barber August 12, 2026 [Read more](/releases/subprocessors-in-trust-center) ### Cloud and core infrastructure frameworks in Security Profile Mark Barber July 29, 2026 [Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile) [View all release notes](/releases) ### See UpGuard In Action Book a free, personalized onboarding call with one of our cybersecurity experts. [Free trial](https://www.upguard.com/demo) [Get a demo](https://www.upguard.com/contact-sales) Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](https://www.upguard.com/instant-security-score?)