Reports
BLACKOUT generates executive-ready reports for board, CFO, and legal consumption.
Weekly Brief
The Weekly Risk Brief is a 2-page PDF summarizing your security posture.
What's Included
Page 1 — Executive Summary:
- BTSS risk score with trend indicator (improving/stable/degrading)
- Total findings breakdown (critical, high, pending decisions)
- Week in review (new findings, resolved, unacknowledged drift)
- Critical/High findings table (top 8 vendors)
- Drift activity summary
Page 2 — Actions:
- Remediation status grid (pending, in progress, completed, overdue)
- Priority action items (auto-generated)
- Analyst recommendations (dynamic based on findings)
Generating Reports
From Console
- Navigate to Reports in the left nav
- Select Weekly Brief
- Choose site or "All Sites"
- Click Download PDF
Via API
# Current week, all sites
GET /api/reports/weekly-brief
# Specific site
GET /api/reports/weekly-brief?site_id=1
# Previous week
GET /api/reports/weekly-brief?weeks_ago=1
# Raw JSON data (for custom integrations)
GET /api/reports/weekly-brief?format=jsonReport Period
Reports follow ISO week boundaries (Monday to Sunday):
| Parameter | Week |
|---|---|
weeks_ago=0 | Current week (default) |
weeks_ago=1 | Last week |
weeks_ago=2 | Two weeks ago |
Response Headers
The PDF response includes metadata headers:
| Header | Example |
|---|---|
X-Report-ID | WB-2025-W50-A1B2 |
X-Period-Start | Dec 9, 2025 |
X-Period-End | Dec 15, 2025 |
Use X-Report-ID to uniquely identify reports for audit purposes.
Action Items
The report automatically generates priority action items based on:
| Condition | Priority | Action |
|---|---|---|
| Unclassified critical findings | Critical | Classify vendors |
| Unacknowledged drift events | High | Acknowledge drift |
| Overdue remediation (>7 days) | High | Review remediation |
| KILL decisions pending execution | Medium | Execute removals |
Best Practices
- Generate weekly — Schedule for Monday morning
- Share with stakeholders — CFO, Legal, Security leadership
- Track trends — Compare week-over-week risk scores
- Act on action items — Use as your weekly security standup agenda
- Archive reports — Store PDFs externally for compliance
Next Steps
- Evidence Packs — Export forensic bundles for specific findings
- Reference: API — Programmatic report generation