SOCFortress Reports

Your SIEM can now send its own reports

SOCFortress Reports turns the Grafana dashboards we build on Wazuh and Graylog into branded, scheduled PDF and Excel reports for your clients, leadership and auditors. Nothing else in your stack changes.

Book an intro call Book an intro call

Deployed and supported by SOCFortress. Powered by Skedler.

SOCFortressIllustrative example

Lands in the inbox

Monthly Security Report

  • Branded PDF and Excel reports
  • Built from your Grafana dashboards
  • Sent by email or to S3, on your schedule
The problem

The monthly security report shouldn’t take a day to build.

Grafana open source doesn’t include scheduled reporting. That’s a Grafana Enterprise and Cloud feature. So the monthly security report usually means someone exporting panels or taking screenshots by hand, and it gets harder with every client or tenant you add.

  • Hours lost every month to screenshots and exports.
  • Every new client or tenant adds one more report to build by hand.
  • Leadership only sees the SOC’s work when someone remembers to send it.

How much time would your team get back if those reports sent themselves?

How it fits the stack

Reporting sits on top of Grafana. Nothing underneath it moves.

    • CollectEndpointsWazuh agents
    • CollectNetwork and cloud sourcesSyslog, O365, AWS, EDR APIs
    • DetectWazuh manager / GraylogParsing, detection and alerting
    • StoreWazuh indexerAlerts and events
    • VisualizeGrafanaPer-customer dashboards
    • ReportNewSOCFortress ReportsScheduled PDF and Excel, powered by Skedler
    • DeliverMSSP client reportsPer tenant
    • DeliverExecutive summariesFor leadership
    • DeliverCompliance evidenceFor auditors
SOCFortress Reports sits on top of Grafana. Collection, detection, storage and CoPilot stay exactly as they are.
What you can do with it

One set of dashboards, a report for everyone who needs one.

The same Grafana dashboards become monthly client reports, weekly summaries for leadership and recurring evidence for auditors.

  • Monthly report

    MSSP client reporting

    Send every customer a branded monthly security report built from their own dashboards.

    • Every customer
    • Branded

  • Weekly PDF

    Executive summaries

    A weekly PDF with alert volume, top agents, top rules and open cases, so the SOC’s work is visible without logging into Grafana.

    • Alert volume
    • Top agents
    • Top rules
    • Open cases

  • Recurring export

    Compliance evidence

    Wazuh maps alerts to PCI DSS, HIPAA and NIST. A dated, recurring export of those dashboards gives you an audit trail on schedule.

    • PCI DSS
    • HIPAA
    • NIST

From dashboard to inbox

The Grafana dashboards you already use become a branded report, on a schedule, without anyone taking a screenshot.

How it works

Four steps, and our team handles them for you.

  1. Our team

    Deploy

    We deploy the reporting engine next to your stack (Linux, Docker, Kubernetes or Windows).

  2. Connect

    We connect it to your existing Grafana dashboards.

  3. Design

    We design your reports with your branding, from templates or from scratch.

  4. Deliver

    Reports go out by email or to S3 on the schedule you choose.

    On your schedule

Getting started

See it working on your own data first.

Our team handles the setup as part of your license, so there’s nothing extra for you to install or maintain. Start on a 15-day trial license and see reports built from your own data before you commit.

Book an intro call Book an intro call
New · SOCFortress Signals

Want the threat landscape in a report too?

SOCFortress Signals sends weekly intelligence briefings and monthly Patch Tuesday PDFs straight to your team’s inbox.

Get started free Explore Signals
Frequently asked questions
Search keywords..
Do I need Grafana Enterprise?
Does this change my SIEM?
What is Skedler?
Who supports it?
What does it cost?
Didn’t find the answer you were looking for?
Contact us, we’re here to help
Get in touch
Skedler

SOCFortress Reports is powered by Skedler. Skedler is a product of Guidanz Inc. SOCFortress is an authorized Skedler reseller.