Release notes # Updated application usage policy controls Mark Barber June 17, 2026 User Risk administrators can now set a policy on any application: approve it, block it, nudge users toward alternatives, or mark it as tolerated. Role, team, and individual user exceptions layer on top of a base policy, with no parallel rule sets to manage. For example, Social Media apps can be blocked for everyone while remaining approved for the Marketing team. Newly discovered apps inherit the organization’s default state automatically. For more information see [App Usage Policies](https://help.upguard.com/en/app-usage-policies). ### Safer web controls with User Risk User Risk now gives administrators browser-level controls that govern what employees can do on a site, not just whether they can access it. Administrators can prevent employees from pasting or uploading sensitive data into shadow AI tools. Corporate sign-in can be enforced on approved apps. Predictable passwords are flagged before they’re set. For more information see [Browser Defense Policies](https://help.upguard.com/en/browser-defense-policies). ### Email notifications for expiring additional evidence In addition to in-app notifications, Vendor Risk users can now enable email notifications when additional evidence documents are approaching their expiry date. ### Other improvements * Vendor Risk users can now export Incidents and News data to Excel for their own organization and their vendors. * Vendor Risk risk assessment templates now support using merge tags within HTML content, allowing HTML styling to dynamically change based on vendor attributes. * Breach Risk and Vendor Risk now include Bootstrap version detection, enabling identification of assets running outdated or vulnerable Bootstrap versions. * When uploading documents to the Trust Center content library, duplicate files are now flagged inline with a blue pill indicator, allowing users to view and manage all duplicates at a glance rather than resolving them one by one. [View all release notes](/releases) ## UpGuard Release Notes Learn about new features, changes, and improvements to UpGuard. ### PHP2Shell detection now live in UpGuard Mark Barber October 21, 2026 [Read more](/releases/php2shell-detection-now-live-in-upguard) ### Close related exposed credential threats in one step Mark Barber October 20, 2026 [Read more](/releases/close-related-exposed-credential-threats-in-one-step) ### Security Profile citations now include source control references Mark Barber October 6, 2026 [Read more](/releases/security-profile-citations-now-include-source-control-references) ### Threat Posture: an executive view of external threat activity Mark Barber September 22, 2026 [Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity) ### Brand impersonation detection across mobile app stores Mark Barber September 9, 2026 [Read more](/releases/brand-impersonation-detection-across-mobile-app-stores) ### Clearer citations and timeline for Security Profile checks Mark Barber August 26, 2026 [Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks) ### Subprocessors in Trust Center Mark Barber August 12, 2026 [Read more](/releases/subprocessors-in-trust-center) ### Cloud and core infrastructure frameworks in Security Profile Mark Barber July 29, 2026 [Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile) [View all release notes](/releases) ### See UpGuard In Action Book a free, personalized onboarding call with one of our cybersecurity experts. [Free trial](https://www.upguard.com/demo) [Get a demo](https://www.upguard.com/contact-sales) Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](https://www.upguard.com/instant-security-score?)