Release notes

# Vendor Onboarding Portal now in Beta

Mark Barber January 29, 2026

Vendor Risk is introducing a new Onboarding Portal, now available in limited beta for customers on Professional plans and above. It gives organizations a dedicated web form where business users can submit vendor assessment requests, including for unmonitored vendors. Your team can then use an integrated workflow to triage, review and respond to each request, with every step tracked and communicated.

To learn more see [Vendor onboarding portal overview](https://help.upguard.com/en/vendor-portal-overview) and talk to your UpGuard representative to find out how to gain early access.

### Access Risk Portfolio data via API

We have released a new set of public APIs enabling access to data available on the Vendor Risk “Risk Portfolio” page. The APIs enable programmatic access to data, a list of all risks across all monitored vendors, a list of all vendors affected by a particular risk and the hostnames of a vendor affected by the risk.

### Security Profile Risk Assessment alert

A new alert informs users if a vendor’s Security Profile has changed since they began drafting a Security Profile Risk Assessment report.

### Expanded vendor security document coverage

Our monthly import of public vendor security documents has expanded coverage to include 43 new documents, enhancing the data available in vendor’s Security Profiles.

### Other improvements

* We have implemented version detection for n8n applications to identify instances vulnerable to CVE-2026-21858 (“Ni8mare”)
* This release includes several bug fixes

[View all release notes](/releases)

## UpGuard Release Notes

Learn about new features, changes, and improvements to UpGuard.

### PHP2Shell detection now live in UpGuard

Mark Barber October 21, 2026

[Read more](/releases/php2shell-detection-now-live-in-upguard)

### Close related exposed credential threats in one step

Mark Barber October 20, 2026

[Read more](/releases/close-related-exposed-credential-threats-in-one-step)

### Security Profile citations now include source control references

Mark Barber October 6, 2026

[Read more](/releases/security-profile-citations-now-include-source-control-references)

### Threat Posture: an executive view of external threat activity

Mark Barber September 22, 2026

[Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity)

### Brand impersonation detection across mobile app stores

Mark Barber September 9, 2026

[Read more](/releases/brand-impersonation-detection-across-mobile-app-stores)

### Clearer citations and timeline for Security Profile checks

Mark Barber August 26, 2026

[Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks)

### Subprocessors in Trust Center

Mark Barber August 12, 2026

[Read more](/releases/subprocessors-in-trust-center)

### Cloud and core infrastructure frameworks in Security Profile

Mark Barber July 29, 2026

[Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile)

[View all release notes](/releases)

### See UpGuard In Action

Book a free, personalized onboarding call with one of our cybersecurity experts.

[Free trial](https://www.upguard.com/demo)

[Get a demo](https://www.upguard.com/contact-sales)

Free instant security score

## How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.

* Instant insights you can act on immediately
* Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities

[Free score](https://www.upguard.com/instant-security-score?)