Release notes # Remediate risks faster with built-in guidance Toby Roger September 25, 2024 We’re making it easier to understand and explain web risks by introducing Risk Remediation Guidance to Breach Risk and Vendor Risk. This update offers detailed explanations of each risk, its importance, and how to remediate it, enabling swift action even for non-technical users. With Risk Remediation Guidance, Breach Risk users can act more decisively, resolving risks efficiently with clear instructions, while vendors gain deeper insights to better understand and mitigate risks. ### Digital Operational Resilience Act (DORA) questionnaire We’ve introduced a new questionnaire to assess an organization’s adherence to the [Digital Operational Resilience Act](https://www.upguard.com/blog/what-is-the-digital-operational-resilience-act) in the EU. In effect from January 17 2025, DORA addresses gaps in EU financial regulation by requiring financial institutions to manage ICT-related risks and operational resilience alongside traditional capital allocation for risk management. ### Introducing Vendor Snapshots Vendor Snapshots (previously Instant Reports) allow you to view the external risks of an organization for 30 days without adding it to your monitored vendor list. It’s perfect for when you need a point-in-time view of a vendor’s security posture, such as when assessing or comparing potential vendors as part of a due diligence process. Improvements that have been implemented as part of this release: * Renamed feature to Vendor Snapshot to better reflect the functionality * Made it easier to convert a Vendor Snapshot to a monitored vendor including retaining a view of expired snapshots * Ability to include Vendor Snapshots in the vendor comparison tool and report * Inclusion of Vendor Snapshots in vendors page exports (Excel and PDF) * Changes to Vendor Snapshot entitlements: Enterprise plans will have unlimited Vendor Snapshots, Professional and Corporate plans will have a set number included, and all Vendor Risk plans will be eligible to purchase additional snapshots To learn more see [What is the difference between a Vendor Snapshot and a Monitored vendor?](https://help.upguard.com/en/articles/9912822-what-is-the-difference-between-a-vendor-snapshot-and-a-monitored-vendor) ### Configuration Leak Detection Our web scanner now detects client-side and server-side configuration leaks, enhancing protection against exposed API keys and configuration files. This update strengthens Breach Risk and Vendor Risk by improving proactive risk detection for customers and their vendors. ### Other improvements * Each page now has its own title tag, which makes it easier to differentiate between multiple tabs in your browser * This release includes a number of bug fixes [View all release notes](/releases) ## UpGuard Release Notes Learn about new features, changes, and improvements to UpGuard. ### PHP2Shell detection now live in UpGuard Mark Barber October 21, 2026 [Read more](/releases/php2shell-detection-now-live-in-upguard) ### Close related exposed credential threats in one step Mark Barber October 20, 2026 [Read more](/releases/close-related-exposed-credential-threats-in-one-step) ### Security Profile citations now include source control references Mark Barber October 6, 2026 [Read more](/releases/security-profile-citations-now-include-source-control-references) ### Threat Posture: an executive view of external threat activity Mark Barber September 22, 2026 [Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity) ### Brand impersonation detection across mobile app stores Mark Barber September 9, 2026 [Read more](/releases/brand-impersonation-detection-across-mobile-app-stores) ### Clearer citations and timeline for Security Profile checks Mark Barber August 26, 2026 [Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks) ### Subprocessors in Trust Center Mark Barber August 12, 2026 [Read more](/releases/subprocessors-in-trust-center) ### Cloud and core infrastructure frameworks in Security Profile Mark Barber July 29, 2026 [Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile) [View all release notes](/releases) ### See UpGuard In Action Book a free, personalized onboarding call with one of our cybersecurity experts. [Free trial](https://www.upguard.com/demo) [Get a demo](https://www.upguard.com/contact-sales) Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](https://www.upguard.com/instant-security-score?)