Release notes

# NIS 2 supplier due diligence questionnaire

Toby Roger December 6, 2024

We’ve introduced a new security questionnaire to help assess an organization’s security controls in line with the supplier risk management requirements of the NIS 2 Directive. This questionnaire integrates and expands on the controls from ISO 27001:2022 and NIST CSF 2.0, addressing the alignment with international standards and key components of NIS 2 supplier risk management requirements such as incident response, contractual safeguards, compliance with data protection laws and regulations, and cross-border data flows.

### SIG Core and Lite questionnaires updated to 2025 versions

We’ve updated our SIG Core and SIG Lite questionnaires to the 2025 versions, incorporating the latest review and updates driven by industry standards and regulatory requirements for enhanced risk assessment. You can also now choose which sections of the SIG questionnaires to send, removing unnecessary sections and streamline the vendor’s response.

### Other improvements

* We’ve added vulnerability detection for vulnerabilities in Palo Alto PAN-OS and FortiManager to our passive scanners, broadening our scanning capabilities for both Breach Risk and Vendor Risk.
* We’ve continued to expand our sources for News and Incidents.

[View all release notes](/releases)

## UpGuard Release Notes

Learn about new features, changes, and improvements to UpGuard.

### PHP2Shell detection now live in UpGuard

Mark Barber October 21, 2026

[Read more](/releases/php2shell-detection-now-live-in-upguard)

### Close related exposed credential threats in one step

Mark Barber October 20, 2026

[Read more](/releases/close-related-exposed-credential-threats-in-one-step)

### Security Profile citations now include source control references

Mark Barber October 6, 2026

[Read more](/releases/security-profile-citations-now-include-source-control-references)

### Threat Posture: an executive view of external threat activity

Mark Barber September 22, 2026

[Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity)

### Brand impersonation detection across mobile app stores

Mark Barber September 9, 2026

[Read more](/releases/brand-impersonation-detection-across-mobile-app-stores)

### Clearer citations and timeline for Security Profile checks

Mark Barber August 26, 2026

[Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks)

### Subprocessors in Trust Center

Mark Barber August 12, 2026

[Read more](/releases/subprocessors-in-trust-center)

### Cloud and core infrastructure frameworks in Security Profile

Mark Barber July 29, 2026

[Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile)

[View all release notes](/releases)

### See UpGuard In Action

Book a free, personalized onboarding call with one of our cybersecurity experts.

[Free trial](https://www.upguard.com/demo)

[Get a demo](https://www.upguard.com/contact-sales)

Free instant security score

## How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.

* Instant insights you can act on immediately
* Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities

[Free score](https://www.upguard.com/instant-security-score?)