Release notes # Vendor Risk AI-Powered Security Profile (Beta) – Ongoing Enhancements Toby Roger April 9, 2025 We’re continuing to roll out incremental improvements to the Vendor Risk AI-powered Security Profile (Beta) to give you greater flexibility, control, and clarity. * Custom Domain & IP selection: You can now customize the domains and IPs used in a vendor’s security profile. Your selection is saved between sessions and automatically applied to the Instant Risk Assessment, helping you tailor assessments to specific vendor engagements and use cases. * Excel document support: You can now upload and scan Excel documents as part of the evidence used in the security profile. * Manual check management: We’ve made it easier to manage checks and citations—users can now manually mark checks as “met” to better reflect their evaluation. * Add comments to all checks: Comments can now be added to both passed and unmet checks (previously, comments were only supported for identified risks). * Updated rating logic: The Security Profile rating will now default to the automated scanning score when no evidence has been provided. Once evidence is added, the rating will automatically update to reflect the combined impact of the automated scanning and evidence, against the Security Profile control set. More enhancements to come in upcoming releases. ### New in Breach Risk: Risk Waivers for Subsidiaries We’ve introduced Risk Waivers for Subsidiaries, a powerful new feature in Breach Risk that gives organizations greater control and flexibility in managing risk across their subsidiaries. With this enhancement, you can now create private risk waivers for risks associated with any of your subsidiaries. These waivers are visible only within your organization and ensure your internal risk posture reflects the controls and context you manage centrally. ### New in Trust Exchange: Trust Page enhancements We’ve rolled out a number of improvements to Trust Pages in this release: * Trust Page users can now add specific badges for their CSA STAR level, plus new badges for CSA TCP, CREST and URAC, so businesses who adopt these frameworks and standards can reflect that on their Trust Page. * Downloads data is now available in the Trust Page access log, giving you deeper insight into the documents that your prospects and customers find most valuable. * A preview mode for Trust Pages is now available, so you can see what your page will look like from an outside perspective prior to publishing. * You can now customize your security link titles on your Trust Page via **Settings** > **Content Library**. * We’ve made UI improvements to the Trust Page share modal, published status badges and settings page. ### Other improvements * For Vendor Risk customers who want to be notified when their vendors make changes to their Trust Page, we’ve made improvements to the notification, which you can enable via **Home** > **Manage Notifications** > **Configure custom notifications**. * We’ve added a new Vendor Risk custom attribute type *URL* so you can now add clickable links as custom attributes. * Users can now sort by percent complete when reviewing remediation requests in both Vendor Risk and Breach Risk. * We’ve added SOC3 report as default document type to Vendor Risk Additional Evidence. * This release includes a number of bug fixes. [View all release notes](/releases) ## UpGuard Release Notes Learn about new features, changes, and improvements to UpGuard. ### Security Profile citations now include source control references Mark Barber October 6, 2026 [Read more](/releases/security-profile-citations-now-include-source-control-references) ### Threat Posture: an executive view of external threat activity Mark Barber September 22, 2026 [Read more](/releases/threat-posture-an-executive-view-of-external-threat-activity) ### Brand impersonation detection across mobile app stores Mark Barber September 9, 2026 [Read more](/releases/brand-impersonation-detection-across-mobile-app-stores) ### Clearer citations and timeline for Security Profile checks Mark Barber August 26, 2026 [Read more](/releases/clearer-citations-and-timeline-for-security-profile-checks) ### Subprocessors in Trust Center Mark Barber August 12, 2026 [Read more](/releases/subprocessors-in-trust-center) ### Cloud and core infrastructure frameworks in Security Profile Mark Barber July 29, 2026 [Read more](/releases/cloud-and-core-infrastructure-frameworks-in-security-profile) ### Complete questionnaires without closing remediation Mark Barber July 15, 2026 [Read more](/releases/complete-questionnaires-without-closing-remediation) ### Company name aliases for smarter detection Mark Barber July 1, 2026 [Read more](/releases/company-name-aliases-for-smarter-detection) [View all release notes](/releases) ### See UpGuard In Action Book a free, personalized onboarding call with one of our cybersecurity experts. [Free trial](https://www.upguard.com/demo) [Get a demo](https://www.upguard.com/contact-sales) Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](https://www.upguard.com/instant-security-score?)