Executive
Decision, owner, blocker, date
Use executive output when leadership needs business impact, decision points, accountable owners, blockers, and review timing.
Report Builder Path
Move from evidence to a report people can act on.
Choose the audience, build the brief, then assign follow-up.
Before You Build
Choose the audience before choosing the template
Technical
Evidence, scope, fix, detection
Use technical output when patch teams, SOC, or asset owners need exact versions, telemetry, controls, or closure proof.
Program
Trend, aging, exception, improvement
Use program output when the report should track recurring risk, stale work, exceptions, metrics, and next-week improvements.
Path
Five steps from example to owner follow-up
1Choose formatPick customer, executive, SOC, patch, vendor, or weekly review output.
2Build briefUse live signal, saved work, open actions, and caveats.
3Check leadership viewKeep decision points, owners, blockers, and limits clear.
4Assign ownersTurn the report into patch, SOC, risk, vendor, or leadership handoff.
5Track follow-upRecord action state, blockers, review timing, and closure evidence.
Outputs
Choose the report shape by audience
Show report formats
Customer / demo
CyberShield-style report
Score, key risks, fix order, technical appendix, and demo boundary language.
Leadership
Executive risk update
Business-readable themes, decisions needed, owners, timelines, and claim boundaries.
SOC
Detection handoff
What to hunt, what not to claim, which telemetry matters, and where follow-up goes.
Patch owner
Remediation brief
Affected scope, version proof, safe window, rollback, evidence, and closure expectations.
Vendor
Escalation note
Ambiguous product, version, fixed release, workaround, or support request language.
Program
Weekly vulnerability review
Trends, aging work, blockers, risk exceptions, ownership, and next-week improvements.
Quality Rules
A good report avoids false certainty
Separate loaded source signal, local validation, owner confirmation, and closure proof.
Every report should create an owner, decision, deadline, or review trigger.
Do not turn CVSS, KEV, EPSS, scanner output, or PoC chatter into proof of local compromise.
Use the same sections so reports are easy to scan across daily, weekly, SOC, and executive moments.
Recommended use: open Report Gallery first if you need inspiration, Brief Builder if you already have the evidence, and Action Tracker after the report creates follow-up.