We have introduced new entity-level risk detections for geopolitical and foreign influence risks. The platform now automatically flags risks such as sanctions list appearances, regulatory actions, and compliance violations, enabling users to better identify and manage complex regulatory and financial exposure within their supply chain.
These detections expand coverage across global regulatory and sanctions signals, helping organizations surface potential exposure to restricted entities, enforcement actions, and foreign state influence earlier. The new risks are available across both Vendor Risk and Breach Risk, providing security and risk teams with clearer visibility into geopolitical risk factors that may impact vendor relationships and an organization’s broader external attack surface.
Risk Automations is now in General Availability
We have released Risk Automations, a powerful new product that works as the "action layer" for the UpGuard platform, designed to move security teams from risk discovery to resolution in seconds. Risk Automations connects UpGuard with existing security tools through more than 100 native integrations, including Jira, ServiceNow, Slack and CrowdStrike, enabling teams to replace manual triage with intelligent automated resolution. Risk Automations eliminates manual bottlenecks while keeping the human-in-the-loop for critical decisions. Explore the full product announcement for more details.
Vendor onboarding portal is now in General Availability
The vendor onboarding portal is now available for all Vendor Risk customers on Professional plans and above. The portal provides a dedicated web form where business users can submit vendor assessment requests, including for unmonitored vendors. Security teams can then triage, review and respond to each request through an integrated workflow, with all actions tracked and communicated. This release includes single-sign-on (SSO) for the vendor onboarding portal. A centralised view for tracking of all onboarding requests is available on all plans. To learn more see the Vendor onboarding portal overview.
Updated vendor onboarding questionnaire
We've evolved our vendor onboarding questionnaire from a basic intake form into a comprehensive risk-intelligence tool. By expanding scope to include AI, APIs, and business resilience we've expanded the framework beyond data sensitivity to better understand vendor impact and right-size your assessment from the get go. Preview the updated version here, and follow the steps to update.
Trust Exchange questionnaire review hotkeys
We have added keyboard hotkeys to AI-generated questionnaire response suggestions to help you fly through the review process. You can now instantly Accept (A), Reject (R), or Edit (E) the recommendations, allowing you to move through the questions in the questionnaire faster than ever.
Vulnerability Assessment and Penetration Testing (VAPT) badge
We have introduced a new VAPT compliance badge for Trust Centers. This badge allows you to prominently display that your organization undergoes proactive testing to keep data safe.
Custom attributes for users and applications
We have added support for custom attributes within User Risk. Admins can now apply custom labels and metadata to their users and applications, enabling more precise filtering, identification, and reporting.
Other improvements
- We have expanded our publicly sourced evidence vendor document library with 62 new security documents added. This ongoing expansion gives users immediate access to the latest compliance and security evidence for most-monitored vendors.
- We have updated the Vendor List to surface the reassessment date of the most recently initiated risk assessment. This enhancement streamlines tracking for vendors with multiple assessments and ensures automated label queries run reliably against the latest data.
UpGuard Release Notes
See UpGuard In Action
Free instant security score
How secure is your organization?
