Generate Client Security Assessment Reports

Every assessment has a Reports tab. You generate client-facing reports there, and it keeps the earlier versions of each one.

​

Generating a report

To refresh every report at once, use Generate All Reports in the same picker. It takes a snapshot of what the Security tab currently shows, rebuilds each report, and packages them into a ZIP file. Telivy emails you when the reports are ready.

​

Which reports are available

The list depends on the assessment type, because most reports need data that an External Scan never collects.

​

From an External Scan

• External Scan Executive Report (PDF)
• External Scan Detailed Report (PDF)
• Questionnaire Report (PDF)
• Progress Report (PDF and DOCX)

​

From a Risk Assessment

All of the External Scan reports, plus the ones built on agent and cloud data:

​

What the Complete Report contains

The Complete Report is the full cyber security risk assessment (CSRA) for a client. Its table of contents is built from the data available, so a section with nothing to say is left out. In order, it can contain:

1. CSRA Methodology
2. Executive Summary, when the assessment has an AI summary
3. Progress Since Last Assessment, when there is an earlier assessment to compare with
4. Overview
5. Data Breach Cost Breakdown, when a breach cost estimate is available
6. One section per CIS control category, with the controls in it
7. Detailed Recommendations
8. Top Remediation Actions
9. Top Critical Assets & Why
10. Strategic & Operational Priorities
11. Addendums

Progress Since Last Assessment shows whether the client’s posture is Improving, Stable, or Declining, a short narrative, how many findings were resolved and how many are new since the previous assessment, and a list of specific changes labelled Resolved, New, Risk Reduction, or Compliance. The trend and counts come from the finding history itself, and any AI-written statement that contradicts those counts is left out.

​

What the Executive Summary contains

The Executive Summary (PDF) is the short version for people who won’t read the full report. It covers issue severity, the score with a summary, CIS compliance, key findings, suggested actions, strategic and operational priorities, and next steps. Pages without data are skipped.

​

Report versions

The reports table has one row per report type, with Last Generated At and the number of Versions. Click a row, or Expand All, to see every version with its file name and generation time. Download Latest Version in the row’s Actions menu downloads the newest copy.

​

Which report to send

For a prospect who hasn’t bought anything yet, send the External Scan Executive Report. It is short and needs no agent. Once they’re a client and the first full scan is done, send the Complete Report, and add the Executive Summary for readers who won’t get through the full report. For monitoring reviews, send the Progress Report, which shows what changed since the last scan instead of restating the whole posture. The Complete Report also carries a progress section once there is an earlier assessment. When you’re talking to the client’s IT team, send the CSV exports, which are meant for a spreadsheet.