Start with onboarding
A defined customer scope
Choose Active tenant data for the report you are preparing.
MSSP/MDR · Process
Give each customer a report of their own.
Set the scope and the schedule.
Build a security report around the customer's review, with branding set per template and data scoped to the tenant. Schedule delivery through the deployment's email service, or generate a file for your team to review, using the data available at generation time.
Branding per templateActive tenant dataScheduled email delivery
ReportsNorthstarAll Tenants
Templates
Executive Summary
SOC Daily Brief
Incident Response
Compliance
MSSP
Threat Landscape
AI Performance
MSSP
- Scope
- Active tenant data
- Customer
- Northstar
- Format
- Branding
- Per template
- Delivery
- Email service required
Report Builder
Choose the widgets for the customer review.
Report Builder
Report Builder
- Template
- MSSP
- Scope
- Active tenant data
- Customer
- Northstar
Branding
Set per template.
Data
Reports read data at generation time.
Northstar report
NorthstarPrepared by your MSSP
Executive summaryCustomer review
CasesRecorded investigation outcomes
AlertsSecurity activity for the selected scope
PDF
Northstar report
NorthstarPrepared by your MSSP
Executive summaryCustomer review
CasesRecorded investigation outcomes
AlertsSecurity activity for the selected scope
ScopeActive tenant data for Northstar
Data
Reports read data at generation time.
Subscriptions
ScheduleWeekly
FormatPDF
Recipients
E. Vos, 
T. Bakker
E. Vos, T. BakkerEmail service
Required for subscription delivery.
Reports read data at generation time
History
NorthstarWeekly / PDF
SentJuniperMonthly / PDF
SentNorthstarIncident Response / PDF
SentJuniperExecutive Summary / PDF
SentCustomer scope
Each sample report uses its own tenant context.
Northstar report
NorthstarPrepared by your MSSP
- Template
- MSSP
- Scope
- Active tenant data
- Schedule
- Weekly
- Format
Review the generated report
Cross-tenant reporting requires additional authorization. A report or audit export supplies records for your review.
Choose MSSP from the report templates as the starting point for the customer review.
Use Active tenant data for Northstar and set branding per template.
Choose Weekly and PDF for E. Vos and T. Bakker. Subscriptions require the deployment email service.
History records generated reports. The customer examples use separate tenant scopes.
Illustrative customer workflow
01 - What it does
Build the report around the customer review.
Start with a report template and choose the customer scope. Branding is set per template, so your reporting setup can reflect the audience as well as the security work you need to discuss.
Keep the reporting setup reusable.
Use the MSSP template as a starting point, then arrange the widgets your customer review needs in Report Builder. Set the report scope to Active tenant data for that customer and configure branding per template. A subscription carries the schedule and delivery format, so the reporting setup remains available for the next review instead of starting from a blank document each time. Before saving the schedule, check the customer scope and content with your team. The selected data is read when the report is generated.
Spend the review on what the records mean for the customer.
Northstar: weekly reportExample
- Template
- MSSP
- Scope
- Active tenant data
- Format
- Schedule
- Weekly
Illustrative customer and values. Not customer performance data.
A repeatable reporting setup
Keep the template and delivery schedule ready for the next review.
02 - How it works in the product
Choose the content, then arrange delivery.
Use Reports in Settings to prepare the template and its subscription. Check the customer scope and generation setup before the report becomes part of your regular service review.
- 01Templates
Choose a general or framework-specific template for the review.
- 02Report Builder
Arrange widgets, choose the data scope and set branding per template.
- 03Subscriptions
Choose Daily, Weekly, Monthly or Custom (Cron), with the recipients and format.
- 04History
Review generated reports and use the output for the customer discussion.
Reports read data at generation time. Subscriptions require the deployment's email service. PDF output requires a PDF renderer; generation can produce HTML when it is unavailable.
03 - How it connects
Turn operational records into a service review.
Casebook supplies the investigation context your team needs to explain an outcome. Core reporting organizes records for review, while The Portal keeps provider operations centered on the customer.
Works with
In the editions
The Portal, Autonomous SOC and SecOps PlatformIncluded
Reports are part of the core workspace. Check delivery configuration and permitted tenant scope.
04 - What it means for your service
Service reviews on a schedule, branded per template.
Set the template, scope, branding and schedule once, and each customer's report is generated on time and delivered by email. Your team spends the review on what the records mean, not on assembling them.
Less report assembly
Reuse the template and schedule instead of rebuilding the reporting setup.
An explicit audience
Set tenant scope before generating the customer report.
A familiar review format
Brand the template and keep the review organized around the customer.
Start with one customer
- 01Choose the review
Pick one customer and the security questions its report needs to address.
- 02Generate a sample
Check scope, branding and output before scheduling delivery.
- 03Confirm delivery
Verify the email service and recipients, then save the subscription.
Questions about Reports built with AI.
1Can each customer get a different report?
Yes. Use report templates and widgets to choose the content, select Active tenant data for the customer and configure the subscription schedule. Reports read data at generation time; cross-tenant reporting requires additional authorization.
2Can we brand the reports?
Branding is set per report template. Review the branding configuration and license requirements with the Imperum team when planning your customer reports.
3What does scheduled delivery require?
Report subscriptions require the deployment's email service. Choose Daily, Weekly, Monthly or Custom (Cron) and the delivery format. Reports support PDF, Excel or CSV; without a PDF renderer, generation can produce HTML.
Have any other questions? Talk to our team
Give the customer review
a repeatable starting point.
Explore report templates, customer scope and delivery setup with the Imperum team.