📋 GRC compliance for CMMC 2.0, CPCSC, CPA Canada, IIROC…SaaS discovery for data governanceFree enriched web chat widget🚀 Enriched remote support without your laptop

Progress Report

See how open security issues, missing patches, configuration issues, cloud findings and suspected breaches have changed over the last 30 days to 12 months.

Open Progress Report in your console

Where to find it
Reports › Summary Reports › Progress, and Compliance › Progress Report
Who can use it
Anyone who can see the page
For
Everyone
Plan
Included with plans that have monitoring, patching, vulnerability assessment or compliance. Each measure appears when the organization uses that service. See pricing

What the page is for

Progress Report is a page in the Lavawall® console, in the Reports and Compliance areas. Lavawall is the RMM, security, and compliance platform from ThreeShield, built and hosted in Canada.

The Cybersecurity Assessment shows what is open today. Progress Report shows how that has changed: for each kind of issue, how many were open at the start of the period, how many are open now, and the trend in between. Use it to show a client the effect of remediation work, to check that patching is keeping up, or to spot a measure that is getting worse.

Lavawall records the number of open issues once a day for each organization. The first figures appear the day after a service, scan or computer is connected, and trends after a few days.

What you see

  1. Organization and period: the organization the report covers (or all organizations), when counts were last recorded, the Period list, Show and Print.
  2. Measure cards: one card per measure, with what is open now in large type, a badge saying Improved, Increased or No change with the difference and percentage, the figures on the first and last day, and a trend line. A falling line means progress.
  3. Summary: a table of every measure with Start of period, Now, Change, Lowest, Highest and Last recorded, which you can sort and filter.

The measures

  • Domain scan findings: issues the domain scan found on the organization's websites, email and DNS settings.
  • All security issues: domain scan, vulnerability scan, network scan, device configuration, missing patches, Microsoft 365 and Google Workspace issues, added together.
  • Critical patches missing: missing updates rated critical.
  • Critical and high patches missing: missing updates rated critical or high.
  • All patches missing: every missing update on the organization's computers and servers.
  • Configuration issues: failed security configuration checks on Windows, macOS and Linux computers.
  • Internet-exposed services: risky services the domain scan found reachable from the Internet.
  • Microsoft 365 security issues: Microsoft 365 security settings that are failing or need attention.
  • Google Workspace security issues: Google Workspace security settings and posture findings that are still present.
  • Vulnerability scan findings: open findings from vulnerability scans, counted once per machine and port, so scanning the same machine again does not add to it.
  • Network scan security issues: open security issues the network scan found on devices in the organization's offices.
  • Suspected breaches: accounts in Microsoft 365 or Google Workspace with an open suspected breach.

How to use Progress Report

How to review progress

  1. Open Reports › Summary Reports › Progress, or Compliance › Progress Report.
  2. Choose the organization in the company picker, or leave it on all organizations to see the total for everyone you manage.
  3. Choose a Period (last 30 days, 90 days, 6 months or 12 months) and click Show.
  4. Read each card: the number in large type is what is open now, and the badge says whether it has improved or increased since the start of the period, by how many and by what percentage.
  5. Use the Summary table to compare every measure. Click a column heading to sort, or type in Filter to narrow the list.

How to give a client a copy

  1. Set the Period you want to report on and click Show.
  2. Click Print. The menus and buttons are left off the printout.
  3. Choose your printer, or Save as PDF to send the report to the client.

Tips

  • Every measure counts open issues, so lower is better and a falling line means progress.
  • A service, domain or set of computers added part-way through the period counts from its first figure, so connecting something new does not look like issues appearing.
  • Domain scan measures change when a domain is scanned. Between scans they keep the last result.
  • If a service stops reporting for more than a week, it is left out of the totals until it reports again.
  • Dates are calendar days in Coordinated Universal Time (UTC). The Last recorded time at the top is shown in your own time zone.

Troubleshooting

A measure says Not recorded for this organization yet.
Counts are recorded once a day by the service that holds the data. A measure appears after the first daily count for a connected service, scan or computer. Measures for services the organization does not use stay empty.
There is only a number and no line.
A line needs at least two days of counts. Check again after a few days.
Domain scan findings did not change after we fixed something.
Domain scan figures change when the domain is scanned again. Rescan it on the Domain Scan Results page, or wait for its next scheduled scan.
A number went up although nothing new was added.
Every source counts what is open on the day. A new finding type, a new device with missing updates, or a scan that covered more machines can raise a count. Open the matching page to see the items.

Still need help?

Search the support centre, or contact our support team and tell us which page you were on:

We use privacy-friendly, cookieless analytics to count visits, and one cookie to run our live chat. Both load only if you accept. We do not use advertising trackers, and we do not profile you across other websites. The essential cookies that keep the site working are always on. See our privacy policy.