Social media monitoring for TikTok

We’ve expanded Social Media Threat Monitoring to include TikTok, adding brand impersonation detection on a rapidly growing social platform. Combined with existing coverage for Facebook, Instagram and X, this helps customers better identify impersonation and disinformation risks and strengthen protection against brand misuse across social media.

Filtered Threat Monitoring exports

Threat Monitoring exports now respect active UI filters, allowing users to export only the threats in their current view. This ensures exported reports accurately reflect the subset of threats under investigation and removes the need for manual post-export filtering.

White labeled Trust Centers

We have introduced white labeling for Trust Exchange paid customers. This update removes the UpGuard logo and account creation link from published Trust Centers, allowing organizations to communicate their security posture on a portal that looks and feels like their own.

Access to questionnaire data via APIs

We have released APIs to access detailed information on security questionnaires. Users can now integrate questionnaire metadata (like completion percentage), questions, answers, and comments into their internal systems, enabling further automation and custom reporting workflows for vendor assessments.

Relationship questionnaires renamed - Onboarding Requests

In preparation for release on the new Vendor Onboarding Portal feature (currently in beta), we have renamed the existing “Relationship questionnaire” feature to “Onboarding requests” to better reflect their primary use case.

The Vendor Onboarding portal gives eligible organizations a dedicated web form where business users can proactively submit vendor assessment requests, in addition to the existing functionality which allows you to send outbound requests. To learn more see Vendor onboarding portal overview and talk to your UpGuard representative to find out how to join the beta program.

Other improvements

• We have enhanced the Security Profile Risk Assessment AI commentary to factor in check comments made by users, making it more responsive to specific findings.
• We have enhanced the API for listing potential vulnerabilities of a vendor to include whether a vulnerability is a Known Exploited Vulnerability (KEV), allowing users to programmatically identify and prioritize vulnerabilities that are actively being exploited.
• Our monthly import of public vendor security documents has expanded coverage to include 47 new documents, enhancing the data available in vendor’s Security Profiles.
• We have enabled User Risk admins to manually update application details, including description, category, and domain. This flexibility ensures that application inventories remain accurate and reflect internal classifications, improving the organization and reporting of user risk data.
• We have added the ability to apply custom labels to users within User Risk, bringing this functionality in line with Vendor and Breach Risk. This feature allows for more granular organization and easier filtering of user identities, facilitating better risk management and reporting.
• This release includes several bug fixes.