Reports & compliance evidence
PDF report types, the 6-framework control matrix, risk acceptance register and CSV export.
Report types
- Findings report — prioritized findings with EPSS/KEV context, CWEs and remediation status
- Attack surface report — external posture, score trend and change history
- Audit & Compliance report (Growth+) — control matrices plus the accepted-risk register
- All reports on demand or scheduled by email
Deterministic control mapping
Every finding maps deterministically via CVE, CWE and scanner ruleKey to six frameworks — OWASP Top 10 (2021), PCI-DSS v4.0, SOC 2 (TSC), ISO/IEC 27001:2022, POPIA (Sec 19) and ACSC Essential Eight. The mapping is 100% rule-based: reproducible for auditors, with zero AI dependency.
This is control alignment and evidence mapping for prioritization and audit preparation — not a formal certification or legal compliance attestation.
Risk acceptance register
Suppressed findings require a mandatory reason and record the user, timestamp and justification. The register is exportable, so accepted risks survive the audit trail instead of disappearing.
CSV export
An audit-complete 34-column CSV export carrying CVE, CWE, ruleKey, framework controls, status and remediation metadata.
Ready to scan?