Skip to main content

Exposure Management

Generating reports

This page walks through everything on the Reports workspace: finding and customizing templates, generating a report through the guided wizard, scheduling one to deliver itself, and working with the finished files in Results.

Reports elsewhere in ThreatWeaver

This page covers Reports under Exposure Management. Cyber Asset Management has its own Reports hub with the same shape, focused on your unified asset inventory — see SBOM & data exports and Evidence export. A software bill of materials for an individual application lives on its assessment in AppSec.

What it's for

  • Pick a template — start from the built-in library or a copy you've tailored.
  • Generate on demand — choose formats and scope, then produce the file.
  • Schedule delivery — have a report run on a repeating cadence and email itself to recipients.
  • Manage results — download, email, or delete the reports you've produced.

The screens in it

The Reports workspace has four tabs across the top:

Reports — the My Templates / All Templates / Scheduled / Results tab bar
TabWhat it shows
My TemplatesTemplates you own or have copied.
All TemplatesThe full library — built-in templates plus your own.
ScheduledReports and exports set to run automatically.
ResultsEvery report and export you've generated.

The template tabs

My Templates and All Templates share the same list, toolbar, and row menu. The difference is scope: My Templates hides the built-in library, while All Templates shows everything and marks the built-ins with a Built-in badge.

The template list — a search bar, filters, and a row per template

Toolbar controls

ControlWhat it does
SearchFilters the list by template name or description as you type.
CategoriesA multi-select that narrows the list to one or more report categories.
Schedule filterShows All, only Scheduled templates, or only On Demand ones.
Type filter(All Templates only.) Shows All, only Built-in, or only Custom templates.
Count / ClearShows how many templates match; Clear resets every filter.
RefreshReloads the list.
ImportLoads a template from a file you previously exported (see Export as JSON below).
Create New ReportOpens the Create New Report gallery.

Each row shows the template's name, category, description, whether it runs on a schedule or on demand, and when it was last updated.

The row menu

Open a template's menu for its actions. Which actions appear depends on whether the template is built-in or your own:

ActionWhat it does
Edit(Your templates.) Opens the template editor to change what the report contains.
Fork & Edit(Built-in templates.) Makes an editable copy and opens it in the editor — the original stays unchanged.
GenerateProduces the report immediately using the template's default format, then takes you to Results.
ScheduleOpens the schedule panel to set up automatic delivery.
Convert to DashboardOpens a dialog that turns the report's widgets into a new dashboard. See below.
Export as JSONDownloads the template as a file you can re-import later or in another environment.
Fork (no edit)(Built-in templates.) Makes a copy without opening the editor.
Delete(Your templates.) Removes the template after you confirm.
Built-in templates are read-only

You can generate, schedule, and copy a built-in template, but you can't edit it in place. Fork & Edit gives you a copy to change freely.

Converting a report to a dashboard

Convert to Dashboard opens a dialog that turns a report's widgets into a standalone dashboard, independent of the report from then on.

The Convert to dashboard dialog — name, visibility, and a skipped-sections warning
FieldWhat it does
Dashboard namePre-filled from the template's name; edit it before creating.
Who can see itOnly me or My team — sets who the new dashboard is visible to.

Only the report's widgets carry over — cover pages, text, and other report-only sections are skipped, and the dialog warns you about this before you confirm. Click Convert to dashboard to create it, or Cancel to back out. The result appears in Dashboard.

Create New Report

Create New Report opens a gallery of report categories to help you find the right starting point.

Create New Report — a grid of category cards, each showing how many templates it holds

Each card names a category and shows a live count of the templates it currently holds (or No templates yet if none match):

  • CIS — Center for Internet Security benchmark compliance reports.
  • DISA STIG — Security Technical Implementation Guide audits.
  • Compliance Framework — PCI DSS, ISO 27001, NIST, HIPAA, GDPR, and SOC 2 posture reports.
  • Host Audit Plugin Type — host audit findings grouped by check family.
  • Best Practice Audits — curated best-practice audit policies.
  • Vendor Based Audits — vendor-specific infrastructure audit reports.
  • Vulnerability Management — severity breakdowns, top findings, remediation progress, and asset risk summaries.
  • Web App Scanning — web application vulnerability reports.
  • Cyber Insurance — executive-ready risk and exposure summaries.

Click a card to see the templates in that category, then click Generate on a template to start the wizard.

The generate wizard

The wizard walks you through four steps and then queues the report. A stepper across the top shows where you are; you can jump back to any step you've completed.

The generate wizard — the Template, Format, Scope, Review stepper
  1. Template — search for and choose the template (already filled in when you started from a template's Generate action). Use Change to pick a different one.
  2. Format — choose one or more output formats. Selecting more than one produces a separate file per format. Only the formats a template supports are offered.
  3. Scope — name the report and set what it covers:
    • Report name — required; used to identify the file in Results.
    • Time rangeCurrent state (snapshot) captures your data as of generation time. Last 7 days, Last 30 days, Last 90 days, and Custom range are all listed but marked Coming soon and can't be selected yet.
    • Severity — limit the report to chosen severities, or leave all selected.
    • Vulnerability state — limit to Active, New, Resurfaced, or Fixed findings, or leave all selected.
  4. Review — confirm the template, formats, and scope, then optionally add email recipients in a single free-text field — type addresses separated by commas or semicolons. Emailing is additive: recipients receive a link to the report, and the report still appears in Results either way.

Click Generate to queue it. You land on Results, where the report appears as it finishes running.

Report formats

FormatBest for
PDFPrint-ready sharing.
DOCXAn editable Word document.
HTMLAn interactive web view.
XLSXA spreadsheet.
CSVRaw rows for import elsewhere.
JSONA machine-readable file.

Customizing a template

The template editor opens when you edit one of your templates (or fork a built-in one). It's a full-page designer with a live preview. A status chip next to the template name in the top bar shows whether it's Draft, Published, or Archived.

The template editor — the report canvas on the left, the widget library and settings alongside

In the editor you can:

  • Rename the report and edit its description.
  • Add widgets from the widget library — charts, tables, and summaries — onto the report canvas.
  • Arrange the report's sections and content.
  • Preview an individual widget to see the live data it will show.
  • Set the default export format so the one-click Generate action produces the format you expect. If the report contains chart widgets and you set the default format to CSV, the editor warns you that charts can't render in CSV and the file may be incomplete.

The properties panel

Alongside the canvas, the properties panel holds settings for the template and for whichever section is currently selected:

FieldWhat it does
DescriptionA free-text summary of what the report covers.
Prepared forThe audience label shown on the report's cover page.
Default export formatThe format the one-click Generate action uses.
BrandingUploads or replaces the logo shown on the report, via Update Logo / Replace Logo.
Title (section)Renames the currently selected section.
Edit Filter (section)Opens the filter editor for the section's data, when the section type supports filtering. A badge shows how many filters are active.
Remove section (section)Deletes the currently selected section, when the report has more than one.

Click Save to keep your changes, or Cancel to discard them. Saving is available only for templates you own — a built-in template's Save stays disabled until you fork it.

Scheduling a report

The schedule panel opens from a template's Schedule action (or when you edit an existing schedule). It slides in from the right.

The schedule panel — timing, recurrence, recipients, and password protection
ControlWhat it does
Schedule (On / Off)Turns the schedule on or off without deleting it.
Start Date and TimeWhen the schedule first runs.
Time ZoneThe zone the run time is interpreted in.
RepeatOn Demand (runs once) or Custom (recurring).
Repeat Every(Custom.) Run every N days, weeks, or months.
Repeat On(Custom, weekly.) The weekdays to run on.
Repeat Ends(Custom.) Never, or on a chosen end date.
Password ProtectionWhen on, protects the delivered file with a password (12+ characters, with upper, lower, digit, and symbol). The password is delivered in a separate email.
Add RecipientsThe email addresses that receive each run. Type an address and press Enter or comma to add it.

Click Save (or Create) to store the schedule. It then appears on the Scheduled tab.

The Scheduled tab

The Scheduled tab lists the reports and exports set to run automatically, with a row per schedule.

The Scheduled tab — a table of schedules with per-row actions

Each row shows the schedule's Name (with a {FORMAT} {TIME ZONE} subtitle, for example PDF UTC), Type, Cadence (how often it runs — with an Ends {date} line beneath it when the recurrence has an end date), Next Run, Recipients, and Status (Active or Paused, with an inline label for the last run's outcome when available). The per-row actions are:

ActionWhat it does
EditReopens the schedule panel to change any setting.
RunRuns the report now, in addition to its schedule.
Pause / ResumeStops or restarts automatic runs without deleting the schedule.
DeleteRemoves the schedule after you confirm.

Refresh reloads the list.

The Results tab

Results lists every report and export you've generated, newest first. Rows for runs still in progress update on their own as they finish — while any row is queued or running, Results silently polls for updates every few seconds.

A link that points at a specific report (for example, from a notification) opens Results with a banner for that report and, when the file is ready, downloads it automatically.

The Results tab — generated reports with download, email, and delete actions

The columns are Name, Start Time, End Time, Status, Format, Size, and Actions.

Filters and actions

ControlWhat it does
SearchFilters results by name, type, format, or status.
Status filterLimits to Completed, Running, Failed, or Queued.
Type filterLimits to Vulnerability, Asset, Scan, Dashboard, or Exports.
ClearResets the filters (shown when a filter is active).
RefreshReloads the list.
Create New ReportOpens the Create New Report gallery.

Per-row actions

ActionWhat it does
DownloadSaves the finished report in its generated format. Available once the file is ready.
EmailOpens a dialog to send the report to one or more recipients.
DeleteRemoves the report. You get a few seconds to Undo before it's gone for good.

Select the checkboxes on multiple rows to reveal a bulk bar with Download and Delete for all selected reports at once.

Delivery & Evidence settings

Beyond templates and schedules, the Reports workspace has a settings screen for how automated deliveries are configured: Delivery & Evidence. It's organized into four sub-tabs.

Delivery & Evidence — the Channels / Groups / Secure Links / Failures sub-tabs

Channels

Configured Channels lists the delivery channels your workspace can send reports through — Slack, Microsoft Teams, a generic webhook, or an email distribution group. Each row shows the channel's name and type, an Active / Disabled badge, a sensitivity level, and its last test result. Administrators can Add Channel, then per row Test the connection, Edit it inline, or Delete it.

Groups

Distribution Groups lists named groups of email addresses you can reuse across schedules and subscriptions. Administrators use New Group to name a group and list its Email Addresses (comma-separated); each existing group shows its member count and can be deleted.

Active Secure Links lists shareable links generated for individual reports, each with badges for One-time access and password protection, an expiry date, and an access count — with a Copy action to grab the link again. When creating one, you set an Expiry (hours) and choose whether it's one-time access only and/or password-protected.

Failures

Delivery Failures logs deliveries that didn't go through, showing the report, the channel and failure reason, and how long ago it failed. Retry re-attempts a failed delivery.

Report Subscriptions

Report Subscriptions lets you subscribe a recipient to a report source so it's delivered automatically going forward, independently of any one schedule.

Report Subscriptions — the subscription list and Add Subscription form

Add Subscription opens a form with:

FieldWhat it does
Target TypeWhat you're subscribing to — a Scheduled Report, a Template, or a Dashboard Publication.
Target ID / Display NameIdentifies the specific target, with an optional friendly name.
Recipient TypeWho receives it — User, Group, Slack, Teams, or Webhook.
RecipientThe address, channel, or webhook URL for that recipient type.
FormatPDF, DOCX, XLSX, HTML, or CSV.
FrequencyAs Published, Daily Digest, or Weekly Digest.

Each subscription can be independently paused or deleted without affecting the underlying schedule, template, or dashboard it's attached to.

Common workflows

Workflow: generate a report from a built-in template

  1. Open Reports and go to All Templates.

    Step 1 — the All Templates list
  2. Find the template you want, open its menu, and choose Generate for a one-click run — or click Generate and step through the wizard to choose formats and scope.

    Step 2 — the generate wizard's Format step
  3. On the wizard's Review step, add any email recipients and click Generate. You land on Results, where the report appears as it finishes.

    Step 3 — the finished report in Results, ready to download

Workflow: schedule a monthly report by email

  1. On a template's menu, choose Schedule.
  2. Set Repeat to Custom, Repeat Every to 1 month, and pick a Start Date and Time.
  3. Under Add Recipients, enter the email addresses that should receive it.
  4. Click Save. The schedule appears on the Scheduled tab and delivers itself each month.

Workflow: email a report you already generated

  1. Go to Results and find the report.
  2. Click its Email action.
  3. Add one or more recipients and click Send.