Scheduled reports

Once a month, we email a bundle of reports to the recipients you’ve configured for the client. This is the standard “here’s how it’s going” rollup — training completion, phishing performance, risk, compliance. You choose which reports go in the bundle and who gets it.

The report types

These are the reports you can put in the monthly bundle. Mix and match for the client’s needs:

• Monthly Report — combined overview of training and phishing activity. The default for most clients.
• Executive Summary — high-level security posture overview for executives.
• User Risk Report — user risk analysis and metrics.
• Compliance Report — training completions and phishing tests over a time window.
• Framework Compliance — point-in-time standing for every assigned framework, with per-user course evidence for audits. Listed once the client has a framework assigned — see Assign a compliance framework.
• Risk Progress — how the client’s risk moved over the last 12 months: the client’s average score as a trend line, then a card for each person whose score moved most. Each change is split into what the person earned through training and phishing results and what simply aged out of the scoring window, so a rising score is only called improvement when it is one. It covers a full year from the first report — no need to wait for history to build up. Off unless you turn it on for the client.
• Training Overview — summary of training completion and engagement.
• Training Performance — user performance with completion rates and status tracking.
• Training Status — user-by-user training progress.
• Department & Manager Training — training status grouped by department and manager.
• Phishing Overview — phishing test results and trends.
• Dark Web Monitoring — users found in known data breaches. Listed when Dark Web Monitoring is on for the client.

Configure for a client

Open the client → Tailor → Automated Reports.

1. Tick the reports you want. Each report type has a checkbox. The first time you save, the client gets a custom configuration; before that, they inherit your partner default. A banner at the top tells you which state you’re in.

2. Add recipients. Under Client Recipients, search the client’s directory and click a person or shared mailbox to add them; they save as you go. Remove one with the ×. To add an address that isn’t in the directory, switch the list to email delivery first — see Choose who gets reports and alerts.

3. Save.

Partner defaults

The same report types (except Risk Progress, which you turn on per client) and recipient list also exist at the partner level — set them once under Settings → Automated Reports and every new client onboards with that configuration. The per-client view exists for overrides; most clients won’t need one. See Partner-level settings for the rest of the partner-default surface.

When you first open a client that’s never been customized, the banner reads “Using partner default report configuration. Changes here will create a custom configuration for this client only.” Once you save anything, that client switches to a custom configuration and stops inheriting future partner-default changes.

You’ll know it worked when

• The report checkboxes reflect what you saved (the banner no longer says “Using partner default” for this client).
• Recipients appear in the list with how they’ll get it — Into mailbox or By email.
• On the first of the next month, recipients receive the bundle by email.

Frequently asked

When exactly does the monthly report go out? First of the month for the preceding month’s activity. Recipients receive a PDF bundle of the report types you have enabled.

Can I send the monthly report to a partner-side mailbox in addition to client recipients? Yes — set up a partner-default recipient (your own mailbox or a security@ alias) so you get a copy alongside the client. Adding partner-side addresses at the partner-default level means every client’s monthly bundle CCs you automatically.

A new client should get reports immediately, not wait until next month. The monthly bundle is monthly — it runs on the 1st. For an immediate need, use Custom reports → Trigger Now on a configured schedule, or generate the relevant report on demand.

Can I change the cadence to quarterly? The bundled monthly report is monthly by design. For different cadences (quarterly, weekly), set up an equivalent custom report schedule.

A client wants no monthly reports at all. Turn off every report type for that client. They’ll keep their custom configuration (no reports), regardless of what partner defaults say.

One of my report types looks empty in the PDF. That’s typically because there’s nothing to report — no phishing tests in the window, no completed courses, no framework assignments. Verify there’s activity to summarize for that report type at this client before tagging it as a problem.

Related

• Custom reports — ad-hoc schedules outside the monthly bundle (different recipients, different cadence, single-course reports, phishing-click notifications).
• Tailor to your client — reports are a Tailor-time configuration.