

We’ve made some improvements to make it easier for you to track and manage Identity Breaches. We’ve improved filtering so you can now filter the list of breaches by severity, specific data types exposed, number of people involved, and date. This follows on from recent changes to assign an identity breach to users within your organization, and add comments to the breach to track your progress and activity.
To learn more see How to collaborate on Identity Breaches.
Improved risk assessments including pre-filled commentary template - now in BETA
We’ve made improvements to the risk assessment workflow to make it more intuitive and flexible including:
- Improvements to the commentary section, by providing a more flexible template, divided into sections to give you more flexibility to present the risk assessment report according to your needs.
- Addition of more merge tags so you can pre-fill vendor information including scores, tiers and attributes so you can generate comprehensive pre-filled commentary for your risk assessment.
To learn more see How to use the vendor risk assessment framework (BETA).
These improvements are now available in limited release to our BETA customer group. Talk to your account manager if you would like to get early access to these features.
Configure risk visibility for questionnaire recipients
Vendor Risk customers now have the option to disable risks from questionnaires, or configure how the risk is shown to the vendor. This allows greater flexibility in both custom questionnaires and UpGuard template questionnaires. To learn more see How to configure risk visibility within questionnaires.
Other improvements
- Additional vulnerabilities. We’ve added support for detecting the version and associated vulnerabilities for many more products.
- Schedule a report for generation using the public API. Report types supported are Board Summary Report, Board Summary Presentation, BreachSight Summary, BreachSight Detailed, VendorRisk Executive Summary, Vendor Summary, Vendor Detailed. Generated reports can be retrieved through the use of supplied email address(es), a webhook URL or via a secondary API call to obtain a download URL.
- This release also includes a number of bug fixes
UpGuard Release Notes


