Generating Reports

A report is the deliverable. It's generated from an engagement and pulls in the findings, scope, evidence, and methodology you've assembled.

The seven templates

ATHELOS ships with seven report templates:

Each template defines its own sections and structure.

Generating a report

From an engagement, open the Reports tab. Click Generate report.

A dialog appears. Pick a template. Click Generate.

ATHELOS creates a new report with:

• Cover page populated from the engagement and client data
• Executive summary drafted from critical and high findings
• Scope section from the engagement's scope items
• Methodology section from the loaded playbook (if any)
• Findings section containing every finding
• ATT&CK coverage heatmap from finding tags
• Recommendations section
• Signature block (for templates that support it)

The report starts in status Draft.

Editing sections

Open the report. You'll see the sections laid out in order.

Sections that are simple rich text — executive summary, methodology, recommendations — can be edited inline. Click into the text and type.

Sections that are populated from data — findings, scope, ATT&CK — are computed. To change them, edit the underlying data. For example, to change which findings appear, use the report's finding selection controls.

Every edit auto-saves.

Selecting findings

The findings section of the report has a selection panel:

• Every finding on the engagement is listed
• Check or uncheck to include or exclude
• Reorder with up/down controls
• Sort by severity with one click

A finding excluded from one report is still available for another. The selection is per-report, not per-finding.

Special sections

Depending on the template, a report may have special sections:

Timeline

A chronological view of activity on the engagement, generated from the audit log. Shows findings logged, evidence uploaded, status changes, and lifecycle phase transitions.

ATT&CK coverage

A heatmap of the ATT&CK techniques covered by the report's findings. Useful for showing clients where their detection may have gaps.

Signature block

For attestation letters and other formal documents. Contains:

• Operator name (from your user profile)
• Date
• Signature reference

Click Sign to apply the signature. This is logged in the audit trail.

Preview mode

The report editor has two modes: Edit and Preview.

Preview renders the report exactly as the client will see it:

• Real typography
• Real section ordering
• Real cover page
• Real footer with the company branding

Use Preview before every delivery.

Exporting to PDF

With the report open, click Download PDF.

ATHELOS renders the preview page headlessly, produces a PDF, and downloads it. The PDF matches the preview pixel-for-pixel — same fonts, same layout, same pagination.

Each PDF download is recorded in the audit log.

Status workflow

Reports move through three states:

• Draft — being edited, not yet shared
• In review — sent internally for QA
• Delivered — sent to the client

Change status from the report header. Status changes are logged.

Versioning

To create a new version of a report — for example, after remediation — click New version.

ATHELOS:

1. Copies the current report
2. Increments the version number
3. Preserves the finding selection and order
4. Starts the new version in status Draft

The old version remains accessible. Reports are versioned by integer: v1, v2, v3. The chain is implicit — all versions share the same engagement.

Use case: after the client remediates, you retest, update findings, and generate v2. Both v1 (original) and v2 (retest) remain in the engagement.

Delivering

Once the report is final:

1. Switch to Preview and confirm it's correct
2. Click Download PDF and archive the file
3. Create a delivery link — see Delivering to clients
4. Send the link to the client
5. Mark the report as Delivered

Where to go next

• Delivering to clients — signed delivery links
• Managing findings — what goes in the report
• Your first engagement — the full workflow