Reporting & Export

The Reports page (sidebar → Reports) provides two things: a scan summary you can export without any AI configuration, and an AI-powered narrative report when an LLM is configured.

Scan Summary Report

The summary section is always available — no AI or internet connection required. It loads from your local scan database and shows:

• Total Analyses — count of all scans across all analyzers
• Total Findings — sum of all findings (same counting logic as the Dashboard)
• PQC Vulnerabilities — findings classified as quantum-related
• Avg Risk Score — average 0–100 quantum risk score across Binary, Certificate, and Network scans
• Findings by Severity — Critical / High / Medium / Low breakdown from code scans
• By Analyzer — per-analyzer scan count and finding count (Code, Binary, Certificate, Network)
• Scan History table — most recent 50 scans with target, analyzer type, date, and a per-scan download button

Bulk Export

The Export CSV and Export JSON buttons at the top right of the summary card export all scan records (up to 500, most recent first) as a download.

Export formats

Both formats are available on all license tiers. The export endpoint is GET /api/reports/export?format=json|csv.

Per-Scan Export

Each row in the scan history table has a download button that exports the full scan record for that individual scan as JSON. This includes the complete scan_data payload — all findings, risk scores, and raw analysis output.

Per-scan exports are also available from within each analyzer's results view via the export menu. Supported formats per analyzer:

The per-scan export endpoint is GET /api/scan/export/{scan_id}?format=json|csv|html|sarif.

AI Report Generator

Below the scan summary, the AI Report Generator produces a narrative security assessment in Markdown. It requires an LLM provider configured in Settings → AI Configuration.

How it works

1. The page loads your scan history and groups scans by analyzer type (Code, Certificate, Binary, Network)
2. All analyzer types with at least one scan are pre-selected — deselect any you want to exclude
3. Optionally add context in the text box (e.g. "Executive summary for CISO review" or "Technical remediation plan for the backend team")
4. Click Generate Report — Rivet fetches the scan data for all selected analyzers, builds a structured prompt, and sends it to your LLM
5. The report appears in the output panel below

Report structure

The generated report follows this structure:

• Executive Summary — 2–3 sentences on the most critical quantum vulnerabilities and overall risk level
• Risk Overview — overall quantum risk assessment with key risk factors
• Key Findings by Category — critical quantum vulnerabilities, code security issues, infrastructure vulnerabilities, binary analysis results
• Post-Quantum Cryptography Recommendations — immediate actions (0–3 months), short-term migration (3–12 months), long-term strategy (1–3 years)
• Technical Implementation Guide — specific remediation steps
• Compliance and Business Impact — regulatory implications and business risk

Export options

Once generated, the report can be exported in three formats:

LLM providers

The AI report uses the same LLM configuration as AI Fixes. Configure in Settings → AI Configuration.

If AI is not configured, the AI Report Generator section shows a prompt to configure it in Settings. The scan summary and export buttons above it are unaffected.

API Endpoints