Exposure Management
Generating reports
This page walks through everything on the Reports workspace: finding and customizing templates, generating a report through the guided wizard, scheduling one to deliver itself, and working with the finished files in Results.
This page covers Reports under Exposure Management. Cyber Asset Management has its own Reports hub with the same shape, focused on your unified asset inventory — see SBOM & data exports and Evidence export. A software bill of materials for an individual application lives on its assessment in AppSec.
What it's for
- Pick a template — start from the built-in library or a copy you've tailored.
- Generate on demand — choose formats and scope, then produce the file.
- Schedule delivery — have a report run on a repeating cadence and email itself to recipients.
- Manage results — download, email, or delete the reports you've produced.
The screens in it
The Reports workspace has four tabs across the top:
| Tab | What it shows |
|---|---|
| My Templates | Templates you own or have copied. |
| All Templates | The full library — built-in templates plus your own. |
| Scheduled | Reports and exports set to run automatically. |
| Results | Every report and export you've generated. |
The template tabs
My Templates and All Templates share the same list, toolbar, and row menu. The difference is scope: My Templates hides the built-in library, while All Templates shows everything and marks the built-ins with a Built-in badge.
Toolbar controls
| Control | What it does |
|---|---|
| Search | Filters the list by template name or description as you type. |
| Categories | A multi-select that narrows the list to one or more report categories. |
| Schedule filter | Shows All, only Scheduled templates, or only On Demand ones. |
| Type filter | (All Templates only.) Shows All, only Built-in, or only Custom templates. |
| Count / Clear | Shows how many templates match; Clear resets every filter. |
| Refresh | Reloads the list. |
| Import | Loads a template from a file you previously exported (see Export as JSON below). |
| Create New Report | Opens the Create New Report gallery. |
Each row shows the template's name, category, description, whether it runs on a schedule or on demand, and when it was last updated.
The row menu
Open a template's ⋯ menu for its actions. Which actions appear depends on whether the template is built-in or your own:
| Action | What it does |
|---|---|
| Edit | (Your templates.) Opens the template editor to change what the report contains. |
| Fork & Edit | (Built-in templates.) Makes an editable copy and opens it in the editor — the original stays unchanged. |
| Generate | Produces the report immediately using the template's default format, then takes you to Results. |
| Schedule | Opens the schedule panel to set up automatic delivery. |
| Convert to Dashboard | Opens a dialog that turns the report's widgets into a new dashboard. See below. |
| Export as JSON | Downloads the template as a file you can re-import later or in another environment. |
| Fork (no edit) | (Built-in templates.) Makes a copy without opening the editor. |
| Delete | (Your templates.) Removes the template after you confirm. |
You can generate, schedule, and copy a built-in template, but you can't edit it in place. Fork & Edit gives you a copy to change freely.
Converting a report to a dashboard
Convert to Dashboard opens a dialog that turns a report's widgets into a standalone dashboard, independent of the report from then on.
| Field | What it does |
|---|---|
| Dashboard name | Pre-filled from the template's name; edit it before creating. |
| Who can see it | Only me or My team — sets who the new dashboard is visible to. |
Only the report's widgets carry over — cover pages, text, and other report-only sections are skipped, and the dialog warns you about this before you confirm. Click Convert to dashboard to create it, or Cancel to back out. The result appears in Dashboard.
Create New Report
Create New Report opens a gallery of report categories to help you find the right starting point.
Each card names a category and shows a live count of the templates it currently holds (or No templates yet if none match):
- CIS — Center for Internet Security benchmark compliance reports.
- DISA STIG — Security Technical Implementation Guide audits.
- Compliance Framework — PCI DSS, ISO 27001, NIST, HIPAA, GDPR, and SOC 2 posture reports.
- Host Audit Plugin Type — host audit findings grouped by check family.
- Best Practice Audits — curated best-practice audit policies.
- Vendor Based Audits — vendor-specific infrastructure audit reports.
- Vulnerability Management — severity breakdowns, top findings, remediation progress, and asset risk summaries.
- Web App Scanning — web application vulnerability reports.
- Cyber Insurance — executive-ready risk and exposure summaries.
Click a card to see the templates in that category, then click Generate on a template to start the wizard.
The generate wizard
The wizard walks you through four steps and then queues the report. A stepper across the top shows where you are; you can jump back to any step you've completed.
- Template — search for and choose the template (already filled in when you started from a template's Generate action). Use Change to pick a different one.
- Format — choose one or more output formats. Selecting more than one produces a separate file per format. Only the formats a template supports are offered.
- Scope — name the report and set what it covers:
- Report name — required; used to identify the file in Results.
- Time range — Current state (snapshot) captures your data as of generation time. Last 7 days, Last 30 days, Last 90 days, and Custom range are all listed but marked Coming soon and can't be selected yet.
- Severity — limit the report to chosen severities, or leave all selected.
- Vulnerability state — limit to Active, New, Resurfaced, or Fixed findings, or leave all selected.
- Review — confirm the template, formats, and scope, then optionally add email recipients in a single free-text field — type addresses separated by commas or semicolons. Emailing is additive: recipients receive a link to the report, and the report still appears in Results either way.
Click Generate to queue it. You land on Results, where the report appears as it finishes running.
Report formats
| Format | Best for |
|---|---|
| Print-ready sharing. | |
| DOCX | An editable Word document. |
| HTML | An interactive web view. |
| XLSX | A spreadsheet. |
| CSV | Raw rows for import elsewhere. |
| JSON | A machine-readable file. |
Customizing a template
The template editor opens when you edit one of your templates (or fork a built-in one). It's a full-page designer with a live preview. A status chip next to the template name in the top bar shows whether it's Draft, Published, or Archived.
In the editor you can:
- Rename the report and edit its description.
- Add widgets from the widget library — charts, tables, and summaries — onto the report canvas.
- Arrange the report's sections and content.
- Preview an individual widget to see the live data it will show.
- Set the default export format so the one-click Generate action produces the format you expect. If the report contains chart widgets and you set the default format to CSV, the editor warns you that charts can't render in CSV and the file may be incomplete.
The properties panel
Alongside the canvas, the properties panel holds settings for the template and for whichever section is currently selected:
| Field | What it does |
|---|---|
| Description | A free-text summary of what the report covers. |
| Prepared for | The audience label shown on the report's cover page. |
| Default export format | The format the one-click Generate action uses. |
| Branding | Uploads or replaces the logo shown on the report, via Update Logo / Replace Logo. |
| Title (section) | Renames the currently selected section. |
| Edit Filter (section) | Opens the filter editor for the section's data, when the section type supports filtering. A badge shows how many filters are active. |
| Remove section (section) | Deletes the currently selected section, when the report has more than one. |
Click Save to keep your changes, or Cancel to discard them. Saving is available only for templates you own — a built-in template's Save stays disabled until you fork it.
Scheduling a report
The schedule panel opens from a template's Schedule action (or when you edit an existing schedule). It slides in from the right.
| Control | What it does |
|---|---|
| Schedule (On / Off) | Turns the schedule on or off without deleting it. |
| Start Date and Time | When the schedule first runs. |
| Time Zone | The zone the run time is interpreted in. |
| Repeat | On Demand (runs once) or Custom (recurring). |
| Repeat Every | (Custom.) Run every N days, weeks, or months. |
| Repeat On | (Custom, weekly.) The weekdays to run on. |
| Repeat Ends | (Custom.) Never, or on a chosen end date. |
| Password Protection | When on, protects the delivered file with a password (12+ characters, with upper, lower, digit, and symbol). The password is delivered in a separate email. |
| Add Recipients | The email addresses that receive each run. Type an address and press Enter or comma to add it. |
Click Save (or Create) to store the schedule. It then appears on the Scheduled tab.
The Scheduled tab
The Scheduled tab lists the reports and exports set to run automatically, with a row per schedule.
Each row shows the schedule's Name (with a {FORMAT} {TIME ZONE} subtitle,
for example PDF UTC), Type, Cadence (how often it runs — with an
Ends {date} line beneath it when the recurrence has an end date),
Next Run, Recipients, and Status (Active or Paused, with an inline
label for the last run's outcome when available). The per-row actions are:
| Action | What it does |
|---|---|
| Edit | Reopens the schedule panel to change any setting. |
| Run | Runs the report now, in addition to its schedule. |
| Pause / Resume | Stops or restarts automatic runs without deleting the schedule. |
| Delete | Removes the schedule after you confirm. |
Refresh reloads the list.
The Results tab
Results lists every report and export you've generated, newest first. Rows for runs still in progress update on their own as they finish — while any row is queued or running, Results silently polls for updates every few seconds.
A link that points at a specific report (for example, from a notification) opens Results with a banner for that report and, when the file is ready, downloads it automatically.
The columns are Name, Start Time, End Time, Status, Format, Size, and Actions.
Filters and actions
| Control | What it does |
|---|---|
| Search | Filters results by name, type, format, or status. |
| Status filter | Limits to Completed, Running, Failed, or Queued. |
| Type filter | Limits to Vulnerability, Asset, Scan, Dashboard, or Exports. |
| Clear | Resets the filters (shown when a filter is active). |
| Refresh | Reloads the list. |
| Create New Report | Opens the Create New Report gallery. |
Per-row actions
| Action | What it does |
|---|---|
| Download | Saves the finished report in its generated format. Available once the file is ready. |
| Opens a dialog to send the report to one or more recipients. | |
| Delete | Removes the report. You get a few seconds to Undo before it's gone for good. |
Select the checkboxes on multiple rows to reveal a bulk bar with Download and Delete for all selected reports at once.
Delivery & Evidence settings
Beyond templates and schedules, the Reports workspace has a settings screen for how automated deliveries are configured: Delivery & Evidence. It's organized into four sub-tabs.
Channels
Configured Channels lists the delivery channels your workspace can send reports through — Slack, Microsoft Teams, a generic webhook, or an email distribution group. Each row shows the channel's name and type, an Active / Disabled badge, a sensitivity level, and its last test result. Administrators can Add Channel, then per row Test the connection, Edit it inline, or Delete it.
Groups
Distribution Groups lists named groups of email addresses you can reuse across schedules and subscriptions. Administrators use New Group to name a group and list its Email Addresses (comma-separated); each existing group shows its member count and can be deleted.
Secure Links
Active Secure Links lists shareable links generated for individual reports, each with badges for One-time access and password protection, an expiry date, and an access count — with a Copy action to grab the link again. When creating one, you set an Expiry (hours) and choose whether it's one-time access only and/or password-protected.
Failures
Delivery Failures logs deliveries that didn't go through, showing the report, the channel and failure reason, and how long ago it failed. Retry re-attempts a failed delivery.
Report Subscriptions
Report Subscriptions lets you subscribe a recipient to a report source so it's delivered automatically going forward, independently of any one schedule.
Add Subscription opens a form with:
| Field | What it does |
|---|---|
| Target Type | What you're subscribing to — a Scheduled Report, a Template, or a Dashboard Publication. |
| Target ID / Display Name | Identifies the specific target, with an optional friendly name. |
| Recipient Type | Who receives it — User, Group, Slack, Teams, or Webhook. |
| Recipient | The address, channel, or webhook URL for that recipient type. |
| Format | PDF, DOCX, XLSX, HTML, or CSV. |
| Frequency | As Published, Daily Digest, or Weekly Digest. |
Each subscription can be independently paused or deleted without affecting the underlying schedule, template, or dashboard it's attached to.
Common workflows
Workflow: generate a report from a built-in template
-
Open Reports and go to All Templates.
Step 1 — the All Templates list -
Find the template you want, open its ⋯ menu, and choose Generate for a one-click run — or click Generate and step through the wizard to choose formats and scope.
Step 2 — the generate wizard's Format step -
On the wizard's Review step, add any email recipients and click Generate. You land on Results, where the report appears as it finishes.
Step 3 — the finished report in Results, ready to download
Workflow: schedule a monthly report by email
- On a template's ⋯ menu, choose Schedule.
- Set Repeat to Custom, Repeat Every to 1 month, and pick a Start Date and Time.
- Under Add Recipients, enter the email addresses that should receive it.
- Click Save. The schedule appears on the Scheduled tab and delivers itself each month.
Workflow: email a report you already generated
- Go to Results and find the report.
- Click its Email action.
- Add one or more recipients and click Send.