Skip to main content
SAFE Security

Course Catalog

All Topics

Release Notes 2026- September

  • By SAFE Security
  • Published: Oct 14, 2026
  • Rating
    Average rating: 5.0 1 review

Outline

Release Notes (v4.1.141)

Sep 29th, 2026

1. Configurable Exposure Score

In SAFE TPRM, Exposure Score calculation has been enhanced so SAFE admins can set how much Questionnaire and Outside-In (OI) data each contribute to the score. You can tune scoring to match your TPRM approach and see exactly how each source shapes a third party's risk.

Key highlights

  • New Exposure Score Composition setting: Available under Primary Output Metric settings, with presets like Questionnaire Only, Outside-In Only, Balanced (50/50) and Custom Weighting.

  • Custom weighting slider: Users can set their own percentage split between Questionnaire and Outside-In. When one value changes, the other adjusts automatically, so the total always stays at 100%.

  • Automatic recalculation: When you apply a change, Exposure Scores are recalculated for all applicable third parties. The previous configuration is kept for audit and history.

2. New Set Variable Node for Math and Data Operations in Workflows

The Workflow Builder now has a Set Variable node for creating, updating and calculating values that later workflow steps can use.

Key highlights

  • Flexible variables: You can define several variables in one node, typed as String, Number, Boolean, Date, DateTime, Array or Object.

  • Dynamic inputs: A variable's value can be a static value, an earlier node's output, an existing workflow variable, or a system value such as the current date and time.

  • Math operations: Supports add, subtract, multiply, divide, percentage, average, min/max, round, absolute value, increment/decrement and upper/lower limits. You can chain operations one after another.

  • Expression builder: Combine variables, node outputs and numbers using operators and brackets, then preview and validate the expression before you publish.

3. Enhanced Issue Assignment Node and Email Template Validation in Workflows

The Issue Assignment node has been enhanced to only assigns issues, and a separate Email node sends the notification. Email template validation has also been improved, so missing or undefined variables are caught before an email is sent.

4. Custom Domain for Email Delivery

You can now send emails from SAFE using your own verified domain without configuring a custom SMTP server. Domain ownership is verified using SPF and DKIM, helping improve deliverability and meet enterprise email security requirements.

5. Microsoft Defender for Cloud Integration Now Supports AWS

The Microsoft Defender for Cloud integration now brings in AWS assets and security recommendations, not just Azure. If your AWS environment is monitored through Defender for Cloud, you can now see and quantify its cloud exposure in SAFE alongside Azure, all from one integration.

Key highlights

  • Multi-cloud ingestion: In the Cloud Type field, choose Azure only, AWS only, or both Azure and AWS.

  • Azure stays the default: To ingest AWS data, you have to select AWS in the Cloud Type field.

Release Notes (v4.1.140)

Sep 10th, 2026

1. Visualize and Manage Third-Party Inventory with Kanban View

Manage third parties through a new Kanban board view that provides a clear, visual view of portfolio status, and lifecycle progression. Switch seamlessly between Table and Kanban views while retaining your preferred view and filters.

Key Highlights

  • Available across Third Party, Questionnaire and issues tabs.

  • View third parties as cards organized by status or lifecycle stage.

  • See key details such as exposure score, tier, coverage, breaches, and issues at a glance.

  • Drag and drop third parties between lanes to update their status.

  • Retain the last-used view, filters, and search criteria when navigating between views.

2. Collaborative Questionnaire Assessment Access

Enable multiple third-party users to collaborate securely on the same questionnaire assessment. Analysts and third-party users can manage assessment participants while maintaining controlled, email-verified access.

Key Highlights

  • Analysts can send an assessment request to multiple third-party assignees.

  • Add or remove assignees and resend assessment invitations.

  • Vendors can invite additional collaborators to contribute to the assessment.

  • Add a personalised comment when inviting a collaborator.

  • Each participant receives an email-specific assessment link secured through OTP verification.

  • Cancelling an assessment request automatically revokes access for all assignees and collaborators.

3. Enhanced Third-Party Details Page

Manage third-party information through a redesigned profile page with a flexible metadata panel. Easily customize the layout, update fields, and access an AI-generated summary of the vendor’s services and business context.

Key Highlights

  • View third-party metadata in a dedicated side panel.

  • Click metadata fields to edit them directly.

  • Choose which fields appear in the panel.

  • Drag and reorder fields based on your preferences.

  • Collapse or expand sections for easier navigation.

  • Scroll the metadata panel independently from the main page.

Did this article help?

Let us know by leaving a star rating at the top of this article.