Executive Reports
The Executive Report provides a high-level summary of your organization’s security posture over a selected time period. It highlights key trends, risk areas, and performance indicators across business units and their associated applications.
You can export the report as a PDF as follows:
Summary version: Includes only the high-level information shown in the left section of the Executive Reports page.
Full version: Includes the detailed data from the right section, based on the selected item on the left.

The report provides the following information:
Organizational-wide metrics on active issues and SLA performance
Severity breakdowns and trend indicators
Grouped summaries by business units
Optional filtering by severity, category, and scan type
Before you begin
Before filtering data or generating a report, decide what information you want the report to include:
Creating business units
A business unit in the OX platform is a way to group applications based on your organizational structure by team, department, product area, or similar criteria.
Creating business units and sub-units helps you focus on specific parts of the organization and understand how each group is performing. Each unit in the report shows how well that group is handling security issues and meeting SLA targets.
The grouping is based on application tags assigned to OX applications. You can define units and sub-units to achieve the level of detail that fits your needs.
To create a new business unit:
In the Executive Report page, select Executive report settings.

In the Executive Reports Settings dialog, select + New business unit and define the following:
Business unit name: Add a clear and meaningful name.
Tags: To determine which data appears in the report and help generate more focused security insights, select tags that help to characterize the best the type of information you are willing to display in the report.
To add a sub-unit, select + Add Sub-unit, add the name and the tags.
Select SAVE. The new business units appear in the Executive Reports page, and the number of sub-units nested under the business unit appears in the upper right corner of the unit.

To display a specific unit with nested sub-units, select the nested units number. The selected business unit and all its nested levels appear.

Enabling SLA data in Executive Reports
You can decide whether you want to display SLA trends and data in the report. By default, SLA data is not displayed, but you can enable this option at any time.
To enable displaying SLA data in the report:
In the Executive Report page, select Executive report settings.

Note: Before enabling SLA data display in the Executive Report, make sure the SLA capability is enabled in the OX platform. Go to Settings > SLA.
In the Executive Reports Settings dialog, enable Add SLA to Executive Report and select SAVE.
Excluding applications from the report
You can exclude from the report specific applications that do not contribute to your understanding of the security posture.
To exclude applications:
In the Executive Report page, select Executive report settings.

Specify application you want to exclude using application tags and select SAVE.
Working with Executive Reports
Executive Report dashboard is divided into the following sections:
Filtering report information
The filtering options let you customize the report to focus on the data that matters most. You can filter by:
Severity
Show only issues of selected severity levels, such as Critical, High and so on.
Category
Include only specific security categories, such as Container Security, SBOM, or Code Security.
Date Range
Your Organization
This section summarizes security and SLA trends across your entire organization, including the number of business units, applications, issue severity breakdowns, and recent changes.

Parameter
Description
AppSec org
Name of the organization being analyzed.
2 Business units
Number of business units under the organization.
14 Applications
Total applications managed within the organization.
10 Developers
Number of developers linked to the organization: currently 10.
Last Change
Days since the last change to code or security configuration.
Issues Trend
Indicates whether the number of issues increased or decreased compared to the previous period.
SLA Trend
Indicates whether SLA adherence improved or declined compared to the previous period.
Appoxalypse
Number of Appoxalypse-class issues (most critical).
Critical
Number of critical severity issues.
High
Number of high severity issues.
Medium
Number of medium severity issues.
Breakdown by Business Units
This section provides a summary for each business unit within the organization, including application count, issue trends, SLA performance, and issue severity levels. It also highlights application tags to help classify assets.

Parameter
Description
[Business Unit]
Name of the business unit (e.g., Backend dev, Frontend dev).
[N] Applications
Number of applications in this unit.
Last Change
Days since the last update affecting this business unit.
Issues Trend
Indicates whether issue volume increased or decreased compared to the previous period.
SLA Trend
Indicates whether SLA adherence improved or declined compared to the previous period.
Appoxalypse
Number of Appoxalypse-class issues in this unit.
Critical
Number of critical severity issues.
High
Number of high severity issues.
Medium
Number of medium severity issues.
App Tags
Labels describing app characteristics (e.g., PII, Cloud, Login, etc.).
Detailed view
Each section in the Executive Report summary on the left has a corresponding detailed view on the right.
This view gives you a deeper breakdown of your organization’s security data, including SLA tracking, issue distribution, and application grouping.
It's designed to help you analyze trends, track progress, and focus remediation efforts where they matter most.

Total Open Issues
The total number of unresolved issues in the selected scope.
Active Issues
Count of currently active issues by severity: Appoxalypse, Critical, High, Medium.
Last Change
Shows when the last code and security changes were detected.
Issue Trend
Graph showing issue volume by severity across the selected date range compared to the previous period.
SLA
SLA tracking table showing how many issues are overdue, approaching due, or on track by severity.
Issues by Severity
Count of issues broken down by severity level.
Issues by Category
Count of issues grouped by scan category (e.g., SBOM, Git Posture, CI/CD).
Application Overview
Lists how applications are grouped under business, security, and development teams.
App Tags
Tags assigned to applications (not shown in detail if no tags exist).
Staff
Number of developers linked to the selected organization or unit.
Last updated