Release notes

# Flexibility for domain inclusion in Risk Assessments

Annie Luu January 18, 2024

We have added the ability to customize which domains to include in risk assessments scope, giving you more flexibility to perform risk assessments on specific products or sub-set of an organization rather than the entire vendor. This is one of a broader set of improvements to add more flexibility to the risk assessment workflow delivered over the coming weeks.

To learn more see [How to complete a risk assessment](https://help.upguard.com/en/articles/5795578-how-to-complete-a-risk-assessment).

### Detections for Ivanti Connect Secure, Apache Superset, and Gitlab

To help with auditing for technologies affected by recent, high impact vulnerabilities, we have added detections for Ivanti Connect Secure, Apache Superset, and Gitlab. For Superset, any vulnerabilities associated with the affected version will appear. There is currently no patch for the Connect Secure vulnerability, only mitigations, so any detected instances should be investigated to ensure those protections are in place.

### Additional filtering for labels in Domains and IP Addresses

There are now more operators available when filtering the Domains and IPs pages based on labels. Similar to existing functionality in the Vendor Risk Portfolio, you can now choose to match any or all labels, exclude labels, and filter to assets with no labels.

### Other improvements

* This release includes a number of bug fixes

[View all release notes](/releases)

## UpGuard Release Notes

Learn about new features, changes, and improvements to UpGuard.

### PHP2Shell detection now live in UpGuard

Mark Barber October 21, 2026

[Read more](/releases/php2shell-detection-now-live-in-upguard)

### Close related exposed credential threats in one step

Mark Barber October 20, 2026

[Read more](/releases/close-related-exposed-credential-threats-in-one-step)

### Security Profile citations now include source control references

Mark Barber October 6, 2026

[Read more](/releases/security-profile-citations-now-include-source-control-references)

### Threat Posture: an executive view of external threat activity

Mark Barber September 22, 2026

[Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity)

### Brand impersonation detection across mobile app stores

Mark Barber September 9, 2026

[Read more](/releases/brand-impersonation-detection-across-mobile-app-stores)

### Clearer citations and timeline for Security Profile checks

Mark Barber August 26, 2026

[Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks)

### Subprocessors in Trust Center

Mark Barber August 12, 2026

[Read more](/releases/subprocessors-in-trust-center)

### Cloud and core infrastructure frameworks in Security Profile

Mark Barber July 29, 2026

[Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile)

[View all release notes](/releases)

### See UpGuard In Action

Book a free, personalized onboarding call with one of our cybersecurity experts.

[Free trial](https://www.upguard.com/demo)

[Get a demo](https://www.upguard.com/contact-sales)

Free instant security score

## How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.

* Instant insights you can act on immediately
* Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities

[Free score](https://www.upguard.com/instant-security-score?)