Cyber Risk Report
The same data in three different documents: the summary for those who decide, the detail for those who act, the slides for those who have to report back.
A security report for every audience
The problem with a security report is not producing it: it is that it serves three different people, who do not read the same thing. The owner wants to know whether the company is exposed and how much it will cost to fix. The technician wants the list host by host. Whoever is going into a meeting wants a few slides that make sense.
The Cyber Risk Report is a document you put together, not a ready-made PDF. You choose the sections and the format, and Dottor Box generates it on the spot with the data from the latest scan. Only the sections for the services you have active appear, and none is preselected: the report contains what you asked for, not everything there is.
Every chapter opens with a methodology page that explains what was checked and why. So the document stays readable six months from now, even for people who were not there.
What you get
Only the sections you need
Choose the chapters from those of your active services: a full report for the audit, or one on a single topic for a meeting.
Three documents, one set of data
Executive, Technical and Presentation come from the same data set: no version contradicting another.
Slides you can really edit
The PowerPoint charts are native objects, not pasted images: change a title, remove a slide, adjust the colours.
An Excel file to work the data
Eight sheets to filter and sort, for the IT supplier planning the work.
Readable without being technical
The methodology at the start of each chapter turns the report into a document that explains, not just a list.
It arrives by itself every month
On the 1st of every month the periodic report is emailed to the addresses you have chosen.
Executive, Technical, Presentation and Excel
The descriptions are the ones you find in the platform, next to the button that generates the document.
| Format | What it is | Who it is for, in practice |
|---|---|---|
| Executive (PDF) | Summary for management: the main results, without the technical detail. | The owner, the board of directors, the risk committee: whoever decides on a budget, not whoever applies a patch. |
| Technical (PDF) | The full document: every vulnerability detected, host by host. | The IT manager or the IT supplier. It is the working document: items are closed one by one. |
| Presentation (PPTX) | The same information in PowerPoint, with pie, bar, radar, area and scatter charts. | Whoever has to report to someone else: a management meeting, a customer asking for an account, a board. |
| Excel (XLSX) | Eight sheets: general overview, internal network vulnerabilities, open shares, critical events, network addresses, hotfixes and patches, installed packages, vulnerabilities. | Whoever wants to filter, sort and cross-reference the data themselves. |
The chapters you can include
Divided into two areas. You see only those for the services included in your contract.
Cyber Security area
- Asset Management
- Internal network and external network
- Web application
- Open shares
- Dark Web Monitoring
- System administrator logs
- Incident Response
Compliance area
- GDPR, NIS2 essential and important entities, DORA
- ISO/IEC 27001, 27017 and 27018
- SOC 2 and NIST CSF 2.0
- CLUSIT and CIS Controls IG1, IG2, IG3
A chapter on a single topic. Attack Surface, Risk Assessment, CSIRT and questionnaires are generated from the page of the corresponding service. When you need a document on a single subject, you do not have to produce the whole report.
The periodic report you do not have to ask for
Two automatic processes work for you, without anyone having to remember them.
On the 1st of every month
At 2am the report in Technical format is emailed, with all the active sections.
The type follows the month
In December it is the annual report, in June the half-yearly, in March and September the quarterly, and in the other months the monthly.
Recipients chosen by you
In the notification settings you decide who receives it, address by address. One email per recipient, with no CC copies.
Weekly archive
Every week the full technical report is archived and remains available for download from the Time Machine.
Reports branded with the partner's name
If your Dottor Box is managed by a reseller, the reseller's logo and details appear on the cover. The customer receives a document consistent with whoever supports them every day, and the partner delivers a professional report under their own brand.
Scans are complemented by manual checks carried out by qualified staff, to remove the false positives and false negatives of automated tools.
Which standards it supports
Over time, the report documents the technical measures and the path of risk reduction.
Often activated together
Reporting
Executive, technical and presentation reports with editable charts, generated automatically too.
Learn more ProveTime Machine
The calendar of checks from the last 180 days and the archive of weekly reports.
Learn more SeeVulnerability Assessment
Six checks from inside and outside, with CVSS severity, history and alerts on what is new.
Learn moreDo you know what someone looking for a target can see of your company?
In a demo on your real systems we show you what is exposed, how much it matters and where to start. Then, if you need it, a tailored proposal.