What’s new in VendRisk360

1. Release 1.1210 October 2026Latest

   Integrations, documentation and financial condition monitoring

   Connect VendRisk360 to the tools your teams already use, find guidance without leaving the platform, and track the financial health of every vendor's corporate group.

   • New

     Coupa integration

     Keep Coupa suppliers and VendRisk360 vendors aligned with a daily sync and a preview before any change. Risk rating, assessment status and last assessed date are written back to the supplier fields you choose. Enabled per customer.

   • New

     Financial condition monitoring

     Bankruptcy filings and insolvency records for each vendor and its group, from official sources including the SEC, GLEIF and government insolvency registers, reviewed in three audited steps: relevance, impact on your organization and response, with an owner and a due date.

   • New

     Vendor locations

     Global headquarters and group entities for each vendor, the legal entity you contract with, and a contracting entity view on the executive dashboard.

   • New

     In-product documentation

     A searchable library under Settings > Docs covers every area of the platform, the risk methodology, integration setup, a glossary and release notes, with links straight to the screen each article describes.

   • Enhanced

     Microsoft Teams and Slack alerts

     Post alerts to Teams through Teams Workflows or to Slack channels, with a delivery log and automatic retry for any post that fails.

   • Enhanced

     Sharper monitoring

     Parent company and group visibility in Company Intelligence, immediate alerts for records about the vendor or its parent, fewer news matches for similarly named companies, and the option to set aside an event that does not apply to your organization.

   • Enhanced

     Everyday workflow

     Remediation reminders that list only open findings, a Sign-offs card on the executive dashboard, one list of report schedules, and bulk vendor import of up to 1,000 rows with validation first.

2. Release 1.104 October 2026

   Evidence-based continuous monitoring

   Monitoring findings show how they were verified, who reports a vulnerability as exploited and how each vendor's assets are hosted, with stronger platform security throughout.

   • New

     Verified and unverified findings

     A vulnerability confirmed against the exact software version is marked Verified. One inferred from a version banner is marked Unverified, listed for checking, and does not affect the vendor's score or raise an alert.

   • New

     Exploitation intelligence

     Each finding names the sources that report a vulnerability as exploited and any public exploit, with attribution.

   • New

     Assets view and remediation speed

     How each vendor asset is hosted and by whom, where each address sits, and how quickly the vendor resolves what monitoring finds, alongside the score.

   • Enhanced

     Broader checks, fairer scores

     New checks for weak legacy encryption, exposed staging sites, malicious infrastructure, partial email protection and unverified third-party scripts. Fourth parties identified from DNS records now appear in each vendor's supply chain.

   • Enhanced

     Your decisions, your view

     Acknowledgements, remediation requests, waivers and false positives apply to your organization's view and score only, and each organization monitoring a company receives alerts on its own vendor record.

   • New

     Messages to the VendRisk360 team

     Customers using managed assessments can address a comment to the VendRisk360 team on any vendor, even when no assessment is in progress.

   • Security

     Security enhancements

     Progressive lockout after repeated failed verification codes, immediate session termination when an organization is suspended, stricter role-based permission checks, and every data export recorded in the audit trail.

3. Release 1.72 October 2026

   Vendor lifecycle management

   Run onboarding, ongoing oversight and offboarding as one governed lifecycle, with evidence and reporting at every stage.

   • New

     Lifecycle views

     Onboarding, Ongoing, Offboarding and Closed views of the vendor list, a lifecycle card on the dashboard, and a Lifecycle tab on each vendor with its journey, checklist and status history.

   • New

     Evidence-backed offboarding

     Offboard with a reason, target date and checklist, require evidence of data return and access revocation before completion, and collect destruction certificates through the vendor portal.

   • New

     Vendor Lifecycle Report

     A PDF and a branded Excel workbook for any quarter, year to date or the last 12 months, available on a schedule.

   • Enhanced

     Branded exports and any screen size

     The vendor list exports as a branded workbook with complete details, and the application adapts from phones to large displays.

   • Security

     Additional safeguards

     Stronger protection against cross-site requests, additional permission checks and further safeguards for audit trail integrity.

4. Release 1.528 September 2026

   Program governance and a redesigned assessment experience

   Govern your risk program through versioned, approved changes, and assess vendors with a redesigned portal, questionnaire workflow and report.

   • New

     Program Studio

     Draft, approve and publish changes to your risk program with full version and change history. Each assessment is pinned to the program version it used.

   • New

     Framework mappings

     Controls mapped to 44 regulatory and industry frameworks, including DORA, verified against the official texts.

   • New

     Questionnaire review workflow

     Per-question conversations with vendors, versioned answers, reviewer verdicts and findings, and a conclusion approved by someone other than the reviewer before a decision is recorded.

   • New

     Redesigned assessment report

     The Comprehensive Vendor Risk Assessment report adds an executive dashboard, risk trend, remediation register, risk treatment and acceptance, sign-off and attestation, and framework mapping.

   • Enhanced

     Vendor portal

     A guided Evidence, Questions and Review flow, an offline Excel questionnaire, bulk document upload, validity checks with bridge letter prompts, and a named declaration on submission.

5. Release 1.428 September 2026

   Portfolio oversight, notifications and breach advisories

   The foundation of the platform: a portfolio view for leadership, automated vendor follow-up, and timely notice when a breach reaches your supply chain.

   • New

     Executive dashboard

     A vendor risk heat map with drill-down, assessment pipeline, findings aging, contract notice deadlines, a vendor location map and continuous monitoring alerts.

   • New

     Breach advisories

     When a breach affects a provider in your supply chain, an advisory shows the impact on your vendor portfolio for you to review and acknowledge.

   • New

     Notifications and scheduled reports

     In-app or email delivery for each event, immediately or as a digest, with Teams and Slack channels, and reports scheduled to people, roles and additional recipients.

   • New

     Vendor follow-up cadence

     Automatic invitation, reminder and final notice to vendors on working days, followed by escalation with the full email history.

   • New

     Vendor Directory and focused reviews

     A curated directory of well-known vendors and their product lines, and focused reviews of a vendor's SOC report, security program or business continuity program.

   • New

     Free trial and single sign-on

     A 14-day free trial requested from the website, and Google and Microsoft sign-in, with multi-factor authentication on every password sign-in.

Want to see it in action? Start a free trial