New Vendor Summary page

This release includes some exciting enhancements to make it easier to manage and assess your vendors.

Vendor summary page redesign

We’ve redesigned the vendor summary page to make it easier to see all the information that’s critical to understanding and assessing the security posture of your vendors. This includes consolidating all risk assessment activities and evidence together under the risk assessment framework to help you quickly determine the assessment state of the vendor, manage your workflow, and follow up on any outstanding activities.

To learn more about this change and how to use the risk assessment framework check out using the risk assessment framework within the UpGuard platform.

Invite vendors to access their full security profile

UpGuard Vendor Risk customers can now provide their vendors with 14 days of access to the UpGuard Platform. This will give them free access to proactively review and improve their cyber security posture, and help you to build stronger and safer business partnerships with your vendors.

To learn more check out Inviting a vendor to access their full security profile in UpGuard

Other improvements

• When business email addresses are found in the analysis of documents leaked from ransomware blogs, they will now be published through the Identity Breaches module. Access to this information can help identify the impact of breaches of third or fourth parties. To learn more check out Identity breaches from ransomware leak blogs.
• This release includes UI improvements to Shared Profile settings and Shared Profile access pages. This includes a new status pill that indicates whether the existing Access Protection option is on or off, and an expanded Settings page replacing the old slide-out modal.
• We’ve added detection of CVE-2022-36804, a critical severity command injection vulnerability in Atlassian BitBucket Server and Data Center.
• This release also includes a number of bug fixes.