Reports
Reports turn the activity AgentSOC handles into shareable summaries—for your SOC, for compliance, and for executives. Browse generated reports at /reports, and open a single report at /reports/:id to read it, preview it, or send it on.
What gets generated
AgentSOC produces a few kinds of reports:
- SOC digests — periodic roll-ups of alerts, incidents, and response activity over a window.
- Compliance and executive reports — higher-level summaries suitable for auditors and leadership.
- Incident reports — per-incident artifacts generated by the reporting agent, capturing what happened, the linked alerts, the response taken, and the audit trail.
Incident report artifacts are written as Markdown and can be exported to PDF, so you can attach them to a ticket, an audit package, or an email.
Scheduling
Reports run on a schedule rather than only on demand. Your organization can configure daily and weekly digests, each aligned to your organization's timezone so the reporting window matches your working day. You can also generate a digest manually for the current period, using the same window rules the scheduled run would apply.
Per-organization configuration
Report behavior is configured per organization. The schedule, timezone, report types, and SLA targets used to measure response performance all live at the organization level, so every member sees consistent reports. Report delivery can also be wired into your notification channels, so a finished report reaches the right people automatically.