Release notes

# Severity filtering for risk profiles

Mark Barber February 25, 2026

We have introduced severity-based filtering for Vendor Risk, Breach Risk and User Risk risk profiles. Users can now filter risks by Critical, High, Medium, or Low severity directly from the sidebar or by clicking on summary widgets, streamlining triage and allowing faster focus on the most critical issues. Filtered severity selections will also carry through to exported risk profile PDF and XLSX reports.

### Extended audit log filtering

We’ve increased the maximum date range for audit log filtering from 30 days to 18 months, with the default view now set to 90 days. This update gives customers greater flexibility for investigating past activities and meeting compliance needs. As always, the Audit Log export feature remains unlimited, allowing you to download your entire historical log at any time.

### Vendor Onboarding Portal (Beta) updates

We’ve introduced several new features to streamline the workflow and improve collaboration:

* Add collaborators: Add teammates to contribute directly to onboarding requests.
* Resend capability
* Exports: Full request list and individual form responses
* Email notifications: Stay informed with automated email alerts whenever a new request is submitted.
* Enhanced List View: Main dashboard improvements, including a new “Filter by Request Status” option.

The Vendor Onboarding portal gives eligible organizations a dedicated web form where business users can proactively submit vendor assessment requests, in addition to the existing functionality which allows you to send outbound requests. To learn more, explore the [Vendor onboarding portal overview](https://help.upguard.com/en/vendor-portal-overview) and talk to your UpGuard representative about joining the beta program.

### 2026 SIG Core & Lite questionnaire updates

We have updated our questionnaire library to include the 2026 SIG Core and Lite questionnaires. This release replaces the 2025 versions, ensuring your assessments reflect the most recent security controls and risk vectors.

### Enhancement to add comments to individual risks in remediation requests

To enhance traceability and collaboration we’ve added the ability to add comments at a risk level (rather than a request level) in remediation requests for both Vendor Risk and Breach Risk.

### Enhanced social media threat detection

We’ve expanded Threat Monitoring’s social media capabilities to include LinkedIn and Reddit. Customers can now detect potential data leaks, impersonation attempts, and emerging risks across an even wider set of platforms, strengthening visibility into their organization’s digital footprint.

### Custom document ordering in Trust Center

We have introduced the ability to manually reorder documents and questionnaires within Trust Centers using a simple drag-and-drop interface. This feature allows Trust Center owners to prioritize critical assets such as security policies or SOC 2 reports at the top of the list, ensuring viewers can find high-value information instantly.

[View all release notes](/releases)

## UpGuard Release Notes

Learn about new features, changes, and improvements to UpGuard.

### PHP2Shell detection now live in UpGuard

Mark Barber October 21, 2026

[Read more](/releases/php2shell-detection-now-live-in-upguard)

### Close related exposed credential threats in one step

Mark Barber October 20, 2026

[Read more](/releases/close-related-exposed-credential-threats-in-one-step)

### Security Profile citations now include source control references

Mark Barber October 6, 2026

[Read more](/releases/security-profile-citations-now-include-source-control-references)

### Threat Posture: an executive view of external threat activity

Mark Barber September 22, 2026

[Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity)

### Brand impersonation detection across mobile app stores

Mark Barber September 9, 2026

[Read more](/releases/brand-impersonation-detection-across-mobile-app-stores)

### Clearer citations and timeline for Security Profile checks

Mark Barber August 26, 2026

[Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks)

### Subprocessors in Trust Center

Mark Barber August 12, 2026

[Read more](/releases/subprocessors-in-trust-center)

### Cloud and core infrastructure frameworks in Security Profile

Mark Barber July 29, 2026

[Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile)

[View all release notes](/releases)

### See UpGuard In Action

Book a free, personalized onboarding call with one of our cybersecurity experts.

[Free trial](https://www.upguard.com/demo)

[Get a demo](https://www.upguard.com/contact-sales)

Free instant security score

## How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.

* Instant insights you can act on immediately
* Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities

[Free score](https://www.upguard.com/instant-security-score?)
