Reports
Reports generates point-in-time PDF and CSV documents from your latest scan data — an executive health summary, a security posture or reliability report, a cost-opportunity report if you’ve turned that on, or a SOC 2 / GDPR readiness report.
What’s on the page
A table of every report you’ve generated — type, status, when it was created, and download links for PDF and CSV. A Generate report button opens a modal with two choices: the report type, and an optional single target (leave it blank for a report across all connected accounts). The same modal is what opens when you click Export report from the dashboard.
Who can generate and download reports
Generating and downloading a report requires the Owner, Admin, or Engineer role. This is enforced by the API on every request, not just hidden in the interface.
Report types
- Executive health
- Security posture
- Reliability
- Cost opportunity — only offered once your tenant has the Cost Explorer capability turned on; otherwise it isn’t shown.
- SOC 2 readiness
- GDPR readiness
The target field is for scoping to one account; in the current release every report is effectively tenant-wide.
How to read it
- Generation happens immediately, inline, while you wait — it’s not a background job you come back to later. The only status a report reaches today is “Ready.”
- A double-click or a retried request replays the same report rather than generating a duplicate.
- Each download link is a fresh, short-lived signed URL generated at the moment you click — nothing is cached, and the link is never shown as text on the page.
- A report id that doesn’t exist and one that belongs to someone else’s organisation return the same not-found result, so neither response reveals whether the report is real.
- Every report carries a disclaimer that it is an automated assessment, not a guarantee or certification. The SOC 2 and GDPR readiness reports carry a stronger version of that disclaimer, spelling out that the document is notan audit, a certification, or an assertion of compliance — because a report titled “SOC 2 Readiness” is the one most likely to end up in front of an auditor or a customer. The interface itself only ever says “readiness,” never “compliance.”
Before your first scan
With nothing generated yet: “No reports yet — Generate an executive health, security posture, or reliability report from your latest scan data.” The Generate button still appears above the empty state for anyone who can use it.