Release notes # New geopolitical and trade integrity risk indicators Mark Barber March 11, 2026 We have introduced new entity-level risk detections for geopolitical and foreign influence risks. The platform now automatically flags risks such as sanctions list appearances, regulatory actions, and compliance violations, enabling users to better identify and manage complex regulatory and financial exposure within their supply chain. These detections expand coverage across global regulatory and sanctions signals, helping organizations surface potential exposure to restricted entities, enforcement actions, and foreign state influence earlier. The new risks are available across both Vendor Risk and Breach Risk, providing security and risk teams with clearer visibility into geopolitical risk factors that may impact vendor relationships and an organization’s broader external attack surface. ### Risk Automations is now in General Availability We have released Risk Automations, a powerful new product that works as the “action layer” for the UpGuard platform, designed to move security teams from risk discovery to resolution in seconds. Risk Automations connects UpGuard with existing security tools through more than 100 native integrations, including Jira, ServiceNow, Slack and CrowdStrike, enabling teams to replace manual triage with intelligent automated resolution. Risk Automations eliminates manual bottlenecks while keeping the human-in-the-loop for critical decisions. Explore the [full product announcement](https://www.upguard.com/blog/announcing-risk-automations-by-upguard) for more details. ### Vendor onboarding portal is now in General Availability The vendor onboarding portal is now available for all Vendor Risk customers on Professional plans and above. The portal provides a dedicated web form where business users can submit vendor assessment requests, including for unmonitored vendors. Security teams can then triage, review and respond to each request through an integrated workflow, with all actions tracked and communicated. This release includes single-sign-on (SSO) for the vendor onboarding portal. A centralised view for tracking of all onboarding requests is available on all plans. To learn more see the [Vendor onboarding portal overview](https://help.upguard.com/en/vendor-portal-overview). ### Updated vendor onboarding questionnaire We’ve evolved our vendor onboarding questionnaire from a basic intake form into a comprehensive risk-intelligence tool. By expanding scope to include AI, APIs, and business resilience we’ve expanded the framework beyond data sensitivity to better understand vendor impact and right-size your assessment from the get go. Preview the updated version [here](https://help.upguard.com/en/onboarding-request-questionnaire#default), and follow the steps to update. ### Trust Exchange questionnaire review hotkeys We have added keyboard hotkeys to AI-generated questionnaire response suggestions to help you fly through the review process. You can now instantly Accept (A), Reject (R), or Edit (E) the recommendations, allowing you to move through the questions in the questionnaire faster than ever. ### Vulnerability Assessment and Penetration Testing (VAPT) badge We have introduced a new VAPT compliance badge for Trust Centers. This badge allows you to prominently display that your organization undergoes proactive testing to keep data safe. ### Custom attributes for users and applications We have added support for custom attributes within User Risk. Admins can now apply custom labels and metadata to their users and applications, enabling more precise filtering, identification, and reporting. ### Other improvements * We have expanded our publicly sourced evidence vendor document library with 62 new security documents added. This ongoing expansion gives users immediate access to the latest compliance and security evidence for most-monitored vendors. * We have updated the Vendor List to surface the reassessment date of the most recently initiated risk assessment. This enhancement streamlines tracking for vendors with multiple assessments and ensures automated label queries run reliably against the latest data. [View all release notes](/releases) ## UpGuard Release Notes Learn about new features, changes, and improvements to UpGuard. ### PHP2Shell detection now live in UpGuard Mark Barber October 21, 2026 [Read more](/releases/php2shell-detection-now-live-in-upguard) ### Close related exposed credential threats in one step Mark Barber October 20, 2026 [Read more](/releases/close-related-exposed-credential-threats-in-one-step) ### Security Profile citations now include source control references Mark Barber October 6, 2026 [Read more](/releases/security-profile-citations-now-include-source-control-references) ### Threat Posture: an executive view of external threat activity Mark Barber September 22, 2026 [Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity) ### Brand impersonation detection across mobile app stores Mark Barber September 9, 2026 [Read more](/releases/brand-impersonation-detection-across-mobile-app-stores) ### Clearer citations and timeline for Security Profile checks Mark Barber August 26, 2026 [Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks) ### Subprocessors in Trust Center Mark Barber August 12, 2026 [Read more](/releases/subprocessors-in-trust-center) ### Cloud and core infrastructure frameworks in Security Profile Mark Barber July 29, 2026 [Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile) [View all release notes](/releases) ### See UpGuard In Action Book a free, personalized onboarding call with one of our cybersecurity experts. [Free trial](https://www.upguard.com/demo) [Get a demo](https://www.upguard.com/contact-sales) Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](https://www.upguard.com/instant-security-score?)