> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/sast-and-sca/prezero/ui/reporting.md).

# Reporting

The **Reporting** section allows you to view, report, and export findings and trends for specific applications or all the applications in the organization, for a specific period of time.

## Findings <a href="#findings" id="findings"></a>

The **Findings** tab, also known as **Organization Findings**, allows you to view findings for all applications and languages in the organization, for the selected time period.

![The Qwiet dashboard's findings page](/files/tN0Rnr0PHW1ucMcIvnqJ)

### Choosing a time period <a href="#choosing-a-time-period" id="choosing-a-time-period"></a>

The Findings tab shows results for all applications in the organization from the last 7 days by default. The Dashboard also uses this default setting. To view findings for a different time period (up to 90 days), use the date picker or enter dates in the **From** and **Until** fields.

### Filtering findings <a href="#filtering-findings" id="filtering-findings"></a>

You can filter the findings displayed by:

* Finding Type
* Apps
* Teams
* App Groups
* Language
* Severity
* Status
* Assigned To
* AutoFix
* Exploitability
* Reachability
* CVSS Score
* EPSS Score
* Package Group
* Package Component
* OWASP 2021 Category
* OWASP Category
* CWE Category
* CVE
* Category

### Exporting Results <a href="#exporting-results" id="exporting-results"></a>

You can generate a CSV file export that includes all the findings according to the different filters that have been applied. To do so, click on the **Export Results** button on the top right-hand side of the page and select or unselect columns you'd like included in the CSV export. The download will begin immediately.

## Reporting <a href="#reporting" id="reporting"></a>

The **Reporting** tab allows you to create and export reports featuring your applications' findings.

![The Qwiet dashboard's reporting page](/files/mM3WXUcks65Gi0DkIUhX)

You can display information for just one of your applications or multiple applications simultaneously. To do so, click **Select Applications** and check the applications you want included in your report.

### Setting the reporting dates <a href="#setting-the-reporting-dates" id="setting-the-reporting-dates"></a>

You can set the time frame for which you see data:

* Choosing **Weekly** will display findings for the past four weeks
* Choosing **Monthly** will display findings for the past twelve months
* Choosing **Quarterly** will display findings for the past four quarters
* Choose **Custom Date** will allow you to specify the date range in which you're interested

As you change your dates, you'll see the values for the data displayed change.

> To switch from a custom date filter back to a default date filter, click **Clear Custom Date**

### Reporting data <a href="#reporting-data" id="reporting-data"></a>

The reporting page displays:

* A **Findings Trends** graph, which shows how the number of findings for your applications changes over time;
* **Findings Summary**, which shows the total number of findings, critical vulnerabilities, secrets, and security insights present in your applications, along with the percentage change in each of these measures during your selected time frame;
* **Findings by Severity**, which shows the number of findings by severity
* **Findings Trends**, which shows the number of new findings, common findings, and regressions and the number of findings fixed over time.

## Configure App Branches <a href="#configure-app-branches" id="configure-app-branches"></a>

You can include only specific branches rather than all the data for a given application. For example, let's say that your report includes information for **App A** and **App B**. However, you can customize the report to include information for all branches scanned for **App A**. For **App B**, you could include only two branches: **fix-1** and **fix-2**.

![The Qwiet dashboard's configure app branch dialog](/files/M6too6rv1sXf6dp7CUEo)

## Export report <a href="#export-report" id="export-report"></a>

To export a copy of your data, click **Export**. You can choose to **Export as PDF** or to **Export as HTML**.

If you do not want to export all of your data, flip the **Custom** toggle to select the specific details you want to include in the report. Then, choose **Export as PDF** or **Export as HTML**.

## Reporting on OSS vulnerabilities <a href="#reporting-on-oss-vulnerabilities" id="reporting-on-oss-vulnerabilities"></a>

The reporting section features an **OSS Vulnerabilities** tab, which allows you to create and export data on vulnerabilities introduced to your applications via OSS libraries and packages.

### Selecting applications <a href="#selecting-applications" id="selecting-applications"></a>

You can display information for just one of your applications or multiple applications simultaneously. To do so, click **Select Applications** and check the applications you want included in your report.

### Setting the reporting dates <a href="#setting-the-reporting-dates-1" id="setting-the-reporting-dates-1"></a>

You can set the time frame for which you see data:

* Choosing **Weekly** will display findings for the past four weeks
* Choosing **Monthly** will display findings for the past twelve months
* Choosing **Quarterly** will display findings for the past four quarters
* Choose **Custom Date** will allow you to specify the date range in which you're interested

As you change your dates, you'll see the values for the data displayed change.

> To switch from a custom date filter back to a default date filter, click **Clear Custom Date**

### Viewing data <a href="#viewing-data" id="viewing-data"></a>

The **OSS Vulnerability Trends** chart shows how the number of OSS vulnerabilities has changed over the date range you selected. The top reachable issues in your selected applications are to the right of the graph.

![A view of the reporting functionality for OSS vulnerabilities](/files/ysVDfrRaYpcrmHOY8by3)

Underneath the summary information is a full list of packages that introduce vulnerabilities, as well as:

* Its version number
* Its type
* The total number of CVEs associated with that package
* The number of reachable CVEs
* When findings related to that package were first identified
* The number of applications affected

![A view of the OSS dependencies list](/files/Bs4SwGmNRxeoNqVml2rW)

### Configuring branches when viewing OSS vulnerabilities <a href="#configuring-branches-when-viewing-oss-vulnerabilities" id="configuring-branches-when-viewing-oss-vulnerabilities"></a>

You can include only specific branches rather than all the data for a given application. For example, let's say that your report includes information for **App A** and **App B**. However, you can customize the report to include information for all branches scanned for **App A**. For **App B**, you could include only two branches: **fix-1** and **fix-2**.

To do so, click **Configure Branches** in the top-right.

## Dependencies <a href="#dependencies" id="dependencies"></a>

The reporting section features a **Dependencies** tab, which lists the libraries, packages, and external tooling used by your org's apps.

In addition to showing the specific apps and the dependencies on which they rely, Qwiet's list also displays a CVE ID to help you find additional information about issues resulting from using a particular dependency.

The provided search filter allows you to look for apps with specific dependencies or patterns (e.g., `log4j`).