Getting started with QuoteCloud

Vulnerability scan reports your clients actually read

Every month's export becomes the same branded report: severity against last month, the findings that matter ranked, and the remediation quote alongside.

Start free 14-day trial Book a demo

QuoteCloud turns a vulnerability scanner's export into a branded monthly report: severity counts against last month, findings ranked with your recommendations, comments on any finding, and a remediation quote priced from the same findings. Your AI assistant can be set up to draft it through QuoteCloud's MCP service; an analyst reviews and sends.

Last reviewed by the QuoteCloud team

An engineered drawing of six server racks in a row on a plate, a fictional client's estate as the scanner sees it. A green scan plane passes along the row. Four racks lift numbered tags: the remote access gateway and the database server (critical), the portal server and the depot hosts (high). Beside the row the month's findings stand as a stack of four flat blocks whose heights are the counts: 31 low, 18 medium, 7 high and 2 critical. A report sheet lands at the end of the route. Below, the October scan report card for Tessaly Logistics against September: critical 2 (down 2), high 7 (down 3), medium 18 (down 3), low 31 (up 2), with the summary accepted by the analyst.

One monthly report, part by part

Tessaly Logistics' October scan report from Northlatch Security: drafted from the scanner's export, reviewed by an analyst, read by the Head of IT.

  1. Your brand on every month

    A cover from your report template: the client, the scan date, what's in scope. Every analyst's report looks the same, so the client knows where to look.

    Northlatch SecurityMonthly vulnerability scan report NL-VS-2611 Sample · fictional business
    Blue and grey network cables plugged into a numbered patch panel

    Monthly vulnerability scan report

    October vulnerability scan report

    Prepared for Tessaly Logistics · 16 October · Scan run Wed 14 Oct

    This month's external and internal scan of Tessaly's 212 assets: what changed since September, the findings ranked by severity, and what we recommend fixing first. The remediation quote that goes with it prices those fixes.

  2. AI draft · accepted

    Better or worse, in one glance

    Severity counts against last month, fixed and new findings, and a summary in plain language. Your AI assistant can be set up to draft it through QuoteCloud's MCP service; it stays flagged until your analyst accepts it.

    Executive summary October 2026 · scan run Wed 14 Oct

    • Critical 2 −2 since last
    • High 7 −3 since last
    • Medium 18 −3 since last
    • Low 31 +2 since last
    Scope
    External and internal · 212 assets · head office, Northgate and Lakeview depots
    Source
    From your scanner's export, reviewed by Dev Kapoor
    Fixed since last report
    14 · 9 new
    Drafted by AI · review Summary accepted

    Open critical and high findings fell from 14 to 9 since September. The two critical findings both sit at the edge of the network: the remote access gateway is missing a security update, and a database server can be reached from the guest Wi-Fi. We recommend fixing both this week, then the seven high findings, most of which are old software on depot PCs and printers.

  3. Your ratings

    What to fix first

    Findings ranked by your rating, not the scanner's default, each with the asset, its status and your recommendation. Accepted risks stay visible.

    Findings, highest first Severity is Northlatch's rating after review of the scanner's output

    RefFindingSeverityStatusRecommendation
    F-01 Remote access gateway missing a security updatevpn-gw-01 · external Critical Open Apply the vendor's update this week; limit the admin page to the office network.
    F-02 Database server reachable from the guest Wi-Fidb-02 · internal Critical Open Move the guest network to its own segment with no route to servers.
    F-03 Old TLS versions still enabled on the customer portalportal.tessaly.example.com High Open Disable TLS 1.0 and 1.1; keep 1.2 and 1.3.
    F-04 Default password on a warehouse label printerprn-lk-03 · Lakeview High Open Set a unique admin password; move printers to their own network.
    F-05 Unsupported operating system on two depot PCspc-ng-11, pc-ng-14 · Northgate High Open Replace or upgrade; until then, isolate them.
    F-06 Self-signed certificate on the intranetintranet · internal Medium Open Issue a certificate from your internal authority.

    2 more findings in the full report

  4. Client comment

    Questions where the finding is

    Rowan asks whether the weighbridge PCs can wait for December; Dev answers in the thread and adds the interim step to the remediation quote.

    About this report

    • Findings come from your scanner's export of Wed 14 Oct and were reviewed by a Northlatch analyst before this report was sent.
    • Severity is our rating for your environment, not the scanner's default.
    • Fixes are priced in the remediation quote NL-Q-2614 that goes with this report.

    Rowan PikeF-05: the two Northgate PCs run the weighbridge. Can they wait until the new ones arrive in December?

    Dev, NorthlatchYes, if they're on their own network until then. We've added that as a step in the quote.

  5. What happened to it

    Drafted, reviewed, sent with the quote, opened for 14 minutes. Tracking shows opens and reading time, so you know the report was read before the follow-up call.

    Activity

    1. Draft created by your AI assistantThrough QuoteCloud's MCP service
    2. Summary reviewed and acceptedDev Kapoor
    3. Sent with the remediation quoteRowan Pike
    4. OpenedRowan Pike · 14 min reading

This month against the last five

Clients renew managed scanning when they can see it working. Northlatch writes each month's counts into a chart and table block in the report template, so October's report shows critical and high findings falling from 17 in June to 9.

The figures are the firm's own, from each month's export. QuoteCloud doesn't track findings between scans: the trend is content your analyst (or your assistant, for review) adds.

  • Five months on one page
  • Critical + high above each bar
  • The same figures as a table
Monthly managed security reports
Northlatch SecurityMonthly vulnerability scan report NL-VS-2611 Sample · fictional business

Five months of open findings Northlatch's counts from each month's scan, written into the report

Five months of open findings
MonthCriticalHighMediumLow
Jun5122630
Jul4112431
Aug6122528
Sep4102129
Oct271831

Critical and high findings are down from 17 in June to 9. Low findings stay level: we recommend accepting most of them as risks.

One template, a separate report for every client

Each client's scan is different, so each report is its own document from the same template: Tessaly's, Quenby & Hart's, Oakhurst's. The documents list shows where each one is.

Oakhurst's report is still Creating: the assistant drafted it and Priyanka hasn't reviewed the summary yet. Nothing about it reaches the practice until she does.

  • Statuses: Creating, Sent, Opened, Accepted
  • Opens and reading time
  • Comments and replies in the document

Templates and tracking: Essentials and up

Documents · Northlatch SecurityNorthlatch Security Sample data

Documents

Template: Monthly scan report
  • All
  • Creating
  • Sent
  • Opened
  • Accepted
  • Tessaly LogisticsOctober vulnerability scan report · NL-VS-2611 Dev Kapoor Opened
  • Quenby & Hart LawyersOctober vulnerability scan report · NL-VS-2617 Dev Kapoor Sent
  • Oakhurst Health PartnersOctober vulnerability scan report · NL-VS-2620 Drafted by your AI assistant · summary to review Priyanka Dass Creating
  • Tessaly LogisticsSeptember vulnerability scan report · NL-VS-2598 Dev Kapoor Opened

One template, a separate document for each client: each report has its own findings, summary and quote.

What goes in a scan report template

Build it once in the editor; every month's report fills the same order.

  • Cover and scope

    Client, scan date, assets in scope and who reviewed it, in your branding.

  • Executive summary

    Severity counts against last month and a short summary a director can read.

  • Trend

    Your monthly counts as a chart and table block, written in each month.

  • Findings table

    Ranked by your rating, with asset, status and recommendation.

  • Comments

    Clients ask about a finding in the document; your analyst replies there.

  • The fix, priced

    A link to the remediation quote, sent at the same time.

Turn next month's export into a report clients read

Free for 14 days, no credit card. Send us a past scan report and we'll convert it into a template during the trial.

Start free 14-day trial Book a demo

What QuoteCloud does, and doesn't

Your scanner finds it. Your analyst rates it. QuoteCloud makes it readable.

QuoteCloud doesn't scan, test or monitor anything. It turns the export and your team's judgement into a branded report, prices the fix and collects the signature.

How the report gets drafted

The monthly cycle

Scan day to a report the client has read, the same way every month.

  1. Export the scan

    Your scanner runs as usual and exports its results.

  2. Draft the report

    From your template, by your analyst or by your AI assistant, as a draft.

  3. Review and rate

    Check counts, confirm severities, accept or rewrite the summary.

  4. Send with the quote

    The report and its remediation quote go out together.

  5. Answer and follow up

    Reply to comments, and see when the client opened it.

Scan report questions

Can QuoteCloud import my scanner's results?

Not as a scanner integration. Your scanner exports its results; your analyst, a Zapier or Make step, or your AI assistant through QuoteCloud's MCP service puts the figures into a report created from your template. QuoteCloud never runs scans itself.

Whose severity ratings appear in the report?

Yours. The findings table shows the rating your analyst gives each finding for that client's environment, not the scanner's default, and the summary is reviewed before it's sent.

Can I show the trend across months?

Yes, as content. Write each month's counts into a chart and table block in the report template. QuoteCloud doesn't track findings between scans, so the figures are your own records.

Can I send the same report to every client at once?

Each client's findings are different, so each report is its own document created from the same template. Bulk send suits identical offers; monthly scan reports are better sent one by one after review.

Will I know the client read it?

Tracking shows when a document is opened and how long it's read, and the status moves from Sent to Opened. Comments and replies sit in the document. Tracking is on Essentials and up.

Can the report and the remediation quote go together?

Yes. Many firms send the scan report and a remediation quote priced from the same findings at the same time, so the client can approve the fix while the report is fresh.

More questions from security firms

More for security firms

The other reports, and the quote that prices the fix.

Next month's scan, as a report worth opening

Start a free 14-day trial: build your scan report template and send the first one from QuoteCloud.

Start free 14-day trial Book a demo

See pricingCybersecurity templatesAll industries