Release notes

# Vendor Onboarding Portal enhancements

Mark Barber April 8, 2026

We have introduced key improvements to the Vendor Onboarding Portal to further streamline the intake process. New requests can now be initiated from the Onboarding Requests page in addition to the external link. Furthermore, security teams can now reassign onboarding requests to a different vendor during the review stages, making it easy to ensure accurate record-keeping before an assessment begins. To learn more about the Vendor Onboarding Portal and how it can help streamline your intake process see [vendor onboarding process](https://help.upguard.com/en/vendor-onboarding-process).

### Access Fourth Party Vendors via API

We have made the List Fourth Party Vendors API generally available. Security teams can now leverage this endpoint to programmatically retrieve data on their vendors’ dependencies, unlocking deeper visibility into their extended supply chain and streamlining custom reporting workflows.

### Comments and attachments against individual risks in remediation requests

In addition to recent improvements to allow users to comment on individual risks within remediation requests, we have added the ability for users to attach evidence to substantiate their comments. This update simplifies the remediation process by ensuring that discussions and documentation are directly linked to specific findings, providing clarity for both requestors and respondents.

### Comprehensive timestamps in Threat Monitoring exports

We have expanded Threat Monitoring data exports to include event, detection and alert date fields, mirroring the granular visibility available in the platform interface. This update provides security teams with a complete and consistent timeline for each threat, enabling more accurate incident reporting and correlation analysis.

### Improved NDA visibility for Trust Center viewers

We have updated how Non-Disclosure Agreements (NDA) are presented to Trust Center viewers. Viewers are now prompted to scroll through the entire agreement before they can agree to the NDA and access sensitive Trust Center assets, ensuring that your NDA terms are fully visible and communicated.

### Other improvements

* We have improved the accuracy of our Vendor Risk Security Profile document scanning AI. This includes a change from using OpenAI GPT to Google Gemini.

[View all release notes](/releases)

## UpGuard Release Notes

Learn about new features, changes, and improvements to UpGuard.

### PHP2Shell detection now live in UpGuard

Mark Barber October 21, 2026

[Read more](/releases/php2shell-detection-now-live-in-upguard)

### Close related exposed credential threats in one step

Mark Barber October 20, 2026

[Read more](/releases/close-related-exposed-credential-threats-in-one-step)

### Security Profile citations now include source control references

Mark Barber October 6, 2026

[Read more](/releases/security-profile-citations-now-include-source-control-references)

### Threat Posture: an executive view of external threat activity

Mark Barber September 22, 2026

[Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity)

### Brand impersonation detection across mobile app stores

Mark Barber September 9, 2026

[Read more](/releases/brand-impersonation-detection-across-mobile-app-stores)

### Clearer citations and timeline for Security Profile checks

Mark Barber August 26, 2026

[Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks)

### Subprocessors in Trust Center

Mark Barber August 12, 2026

[Read more](/releases/subprocessors-in-trust-center)

### Cloud and core infrastructure frameworks in Security Profile

Mark Barber July 29, 2026

[Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile)

[View all release notes](/releases)

### See UpGuard In Action

Book a free, personalized onboarding call with one of our cybersecurity experts.

[Free trial](https://www.upguard.com/demo)

[Get a demo](https://www.upguard.com/contact-sales)

Free instant security score

## How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.

* Instant insights you can act on immediately
* Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities

[Free score](https://www.upguard.com/instant-security-score?)
