Create vendor with no web presence

You can now add and assess vendors with no web presence. Prior to this release, vendors needed a website to be added to UpGuard. Now you can add any vendor you like, even if they don't have a website.

This is great for situations where you need to assess an independent contractor who doesn't have a web presence but will handle your organization's sensitive information. Once you've added them as a vendor with no web presence, you'll be able to send them a questionnaire and assess them based on their responses. You'll also be able to add contacts, upload additional evidence, and perform a risk assessment inside UpGuard.

This feature is currently in closed beta. If you would like to beta test the feature, please contact us.

Learn how to create a vendor with no web presence.

Improvements to the questionnaire process for customers

In May, we rolled out an improved questionnaire experience for vendors that was designed to reduce the time it takes for you to get a complete and accurate questionnaire.

In this release, we're taking what we've learned from that process and applying it to the customer-facing experience. The new page replaces, improves, and streamlines our previous questionnaire details page.

You can now quickly see the progress of the questionnaire, view unanswered questions, and view any associated remediation requests you have created. Messages now appear in the top-right corner of your screen which makes it simple to respond to any vendor queries.

The page has been split into three separate tabs:

1. Overview: Questionnaire metadata, progress, remediation requests, and unanswered questions.
2. Documents: Any attached documents
3. Timeline: The version history and timeline of the questionnaire

Other fixes and improvements

• Any users that are invited to a questionnaire or remediation request will now appear in the timeline
• Added support for retrieving all risks for an organization via the API
• Added support for IP addresses in the risks diff API
• Fixed issue causing domains parked at Gandi to be marked as active rather than inactive
• Added questionnaire designed to determine exposure to the recent supply chain ransomware attack that impacted Kaseya VSA
• Fixed issue causing questionnaire reminders to not be sent if one or more emails associated with the reminder bounced
• Added modal to inform you when you've hit your vendor limit
• Fixed issue causing security ratings and labels to not appear in domain view from a risk assessment