Vendor Onboarding Portal enhancements

We have introduced key improvements to the Vendor Onboarding Portal to further streamline the intake process. New requests can now be initiated from the Onboarding Requests page in addition to the external link. Furthermore, security teams can now reassign onboarding requests to a different vendor during the review stages, making it easy to ensure accurate record-keeping before an assessment begins. To learn more about the Vendor Onboarding Portal and how it can help streamline your intake process see vendor onboarding process.

Access Fourth Party Vendors via API

We have made the List Fourth Party Vendors API generally available. Security teams can now leverage this endpoint to programmatically retrieve data on their vendors’ dependencies, unlocking deeper visibility into their extended supply chain and streamlining custom reporting workflows.

Comments and attachments against individual risks in remediation requests

In addition to recent improvements to allow users to comment on individual risks within remediation requests, we have added the ability for users to attach evidence to substantiate their comments. This update simplifies the remediation process by ensuring that discussions and documentation are directly linked to specific findings, providing clarity for both requestors and respondents.

Comprehensive timestamps in Threat Monitoring exports

We have expanded Threat Monitoring data exports to include event, detection and alert date fields, mirroring the granular visibility available in the platform interface. This update provides security teams with a complete and consistent timeline for each threat, enabling more accurate incident reporting and correlation analysis.

Improved NDA visibility for Trust Center viewers

We have updated how Non-Disclosure Agreements (NDA) are presented to Trust Center viewers. Viewers are now prompted to scroll through the entire agreement before they can agree to the NDA and access sensitive Trust Center assets, ensuring that your NDA terms are fully visible and communicated.

Other improvements

• We have improved the accuracy of our Vendor Risk Security Profile document scanning AI. This includes a change from using OpenAI GPT to Google Gemini.