Release notes # Risk waivers added to the risk assessment workflow Annie Luu October 13, 2022 In this release we have streamlined the risk assessment process by incorporating risk waivers into the risk review section. The feature allows you to document justifications and approvals for waiving known risks, in addition to requesting remediation. This streamlines the risk assessment workflow so that you have all the relevant information when managing the risks presented. Learn all about[ using the risk assessment framework in UpGuard](https://help.upguard.com/en/articles/6504360-using-the-risk-assessment-framework-within-the-upguard-platform). ### HIPAA questionnaire with risk mapping We have added a new risk-mapped security questionnaire to the questionnaire library: the Health Insurance Portability and Accountability Act (HIPAA) questionnaire. The HIPAA questionnaire allows organizations to determine if their vendors are compliant with the US Federal HIPAA standard, which relates to the secure handling of Protected Health Information (PHI). Simply send this security questionnaire to your vendor and UpGuard will automatically generate risks based on the responses. They can save time by using our new auto-fill functionality to complete the same questionnaire at the touch of a button: [Learn more about using questionnaire autofill](https://help.upguard.com/en/articles/6434680-how-to-autofill-a-questionnaire-based-on-your-previous-responses). ### Other improvements * We’ve added unverified checks for Microsoft Exchange ProxyNotShell vulnerabilities (CVE-2022-41040 and CVE-2022-41082). * We’ve made improvements to our detection of Windows Server versions. * Creating a risk waiver will now close associated remediation request risks. * Additional audit log events for shared profiles: \- Revoking a user or organization access \- Adding, editing or removing assets on the profile \- Customizing the public info on the profile * This release includes a number of bug fixes. [View all release notes](/releases) ## UpGuard Release Notes Learn about new features, changes, and improvements to UpGuard. ### PHP2Shell detection now live in UpGuard Mark Barber October 21, 2026 [Read more](/releases/php2shell-detection-now-live-in-upguard) ### Close related exposed credential threats in one step Mark Barber October 20, 2026 [Read more](/releases/close-related-exposed-credential-threats-in-one-step) ### Security Profile citations now include source control references Mark Barber October 6, 2026 [Read more](/releases/security-profile-citations-now-include-source-control-references) ### Threat Posture: an executive view of external threat activity Mark Barber September 22, 2026 [Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity) ### Brand impersonation detection across mobile app stores Mark Barber September 9, 2026 [Read more](/releases/brand-impersonation-detection-across-mobile-app-stores) ### Clearer citations and timeline for Security Profile checks Mark Barber August 26, 2026 [Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks) ### Subprocessors in Trust Center Mark Barber August 12, 2026 [Read more](/releases/subprocessors-in-trust-center) ### Cloud and core infrastructure frameworks in Security Profile Mark Barber July 29, 2026 [Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile) [View all release notes](/releases) ### See UpGuard In Action Book a free, personalized onboarding call with one of our cybersecurity experts. [Free trial](https://www.upguard.com/demo) [Get a demo](https://www.upguard.com/contact-sales) Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](https://www.upguard.com/instant-security-score?)