Release notes # New and improved risk assessments and more Chris Schubert December 22, 2021 ### New and improved risk assessments Over 60% of cyber security incidents come from trusted vendors. Secure your data and prevent this from happening to your business with our new and improved risk assessments. You can now send questionnaires, request or use shared questionnaires and add additional evidence from inside a risk assessment. When the assessment is completed, set a reassessment date to make sure that you stay up to date with your vendor’s risk profiles. Check out ‘[How to complete a risk assessment’](https://help.upguard.com/en/articles/5795578-how-to-complete-a-risk-assessment) for assistance in completing a risk assessment. #### Apache Log4J - Critical Vulnerability Questionnaire and automated scanning Control your Log4J critical vulnerability risk by sending your vendors our new Log4J questionnaire. We’ve also added an automated scan and verified vulnerability for Log4j CVE-2021-44228. This uses a basic detection mechanism as part of a GET request to a scanned domain, in order to keep our scanning as non-invasive as possible. It is important to note that the absence of this verified vulnerability does not mean that you or your vendors are 100% safe from this vulnerability, but the presence of the vulnerability means that you are likely exposed. Please see[ our blog post](https://www.upguard.com/blog/apache-log4j-vulnerability) for more information on CVE-2021-44228 (Log4Shell) and how you can minimize your exposure. #### Custom Domain for outbound emails Tailor your workflow notifications to best represent your business, improving your vendors confidence and diligence at opening/fulfilling your requests. By default, notifications and invites to outside parties come from an UpGuard email address. Now customers with co-branding can set up a customized mailing address such as or set notifications to come directly from their own email address wherever possible. For help setting this up, check out the knowledge base article [‘Sending outbound emails from a custom address’](https://help.upguard.com/en/articles/5761550-sending-outbound-emails-from-a-custom-address). [View all release notes](/releases) ## UpGuard Release Notes Learn about new features, changes, and improvements to UpGuard. ### PHP2Shell detection now live in UpGuard Mark Barber October 21, 2026 [Read more](/releases/php2shell-detection-now-live-in-upguard) ### Close related exposed credential threats in one step Mark Barber October 20, 2026 [Read more](/releases/close-related-exposed-credential-threats-in-one-step) ### Security Profile citations now include source control references Mark Barber October 6, 2026 [Read more](/releases/security-profile-citations-now-include-source-control-references) ### Threat Posture: an executive view of external threat activity Mark Barber September 22, 2026 [Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity) ### Brand impersonation detection across mobile app stores Mark Barber September 9, 2026 [Read more](/releases/brand-impersonation-detection-across-mobile-app-stores) ### Clearer citations and timeline for Security Profile checks Mark Barber August 26, 2026 [Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks) ### Subprocessors in Trust Center Mark Barber August 12, 2026 [Read more](/releases/subprocessors-in-trust-center) ### Cloud and core infrastructure frameworks in Security Profile Mark Barber July 29, 2026 [Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile) [View all release notes](/releases) ### See UpGuard In Action Book a free, personalized onboarding call with one of our cybersecurity experts. [Free trial](https://www.upguard.com/demo) [Get a demo](https://www.upguard.com/contact-sales) Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](https://www.upguard.com/instant-security-score?)