Reports Center

How the Reports Center Works

The Reports Center is a unified reporting layer that sits on top of all 17 GuardFoxCopilot modules. It has four main parts:

Templates — 8 pre-built report templates covering every common use case:

• Weekly Executive Security Brief (SIEM + Alerts + Dark Web + Compliance + Vuln)
• Daily SOC Operations Report (Alerts + SIEM + EDR + AI Triage + SOAR)
• Monthly Compliance Report (Compliance + Alerts + EDR + Vuln)
• Board-Level Risk Report (Alerts + Compliance + Dark Web + Vuln + Red Team)
• Threat Intelligence Weekly, Vulnerability Status, BAS Detection Coverage, Endpoint Security

Report Builder — 4-step wizard: pick modules → configure sections and audience → choose formats → download. Multiple formats can be exported in a single run.

Report History — every report is saved with page count, file size, and recipients. Rerun any past report with one click.

Schedules — set reports to run automatically on a frequency (daily/weekly/monthly/real-time) and email to a recipient list.

Audience types

Export Formats

Selecting multiple formats

In the Report Builder Step 3, all 8 formats are shown as checkboxes. Select as many as you need — all are generated in a single run and available for download simultaneously.

STIX export

STIX reports include: threat indicators as indicator objects, alerts as observed-data objects, and MITRE techniques as attack-pattern objects with uses relationships. Import directly into Splunk Enterprise Security or OpenCTI.

Scheduling Recurring Reports

1. Go to Reports → 📅 Schedules → Add Schedule
2. Choose a base template (or build a custom one first)
3. Set frequency: Real-time | Daily | Weekly | Monthly
4. Choose format and audience
5. Enter email recipients (comma-separated)
6. Click Create Schedule

Recommended schedule set

Real-time reports

Real-time frequency fires immediately when a new Critical alert is created — ideal for a JSON webhook to your SIEM or PagerDuty. Configure the recipient as a webhook URL in your email field.

Delivery

Reports are emailed via Resend (configured in Settings → Integrations). The PDF is attached directly to the email, not a link. For large reports (>10MB), a download link is sent instead.

Reportable Modules

Every module in GuardFoxCopilot contributes metrics to reports. Here's what each one provides: