Executive Report
The Executive Report is a high-level security dashboard that provides team leads, security officers, and executives with an at-a-glance view of your vault's security posture.
It aggregates data from across QuantumVault — keys, secrets, certificates, access policies, and detected risks — into a single, exportable report.
What is the Executive Report?
A read-only dashboard that collects and visualises key security metrics from your vault in real time. It is not a configuration screen — it surfaces data already present in your vault to aid decision-making.
What is it for?
The Executive Report serves multiple audiences and use cases:
Security posture overview
Get a single-page summary of vault health without drilling into individual resources.
Risk awareness
Spot active threats and unresolved risk patterns at a glance.
Key & secret hygiene
Monitor rotation rates and expiration timelines to stay ahead of compliance deadlines.
PDF & CSV export
Export the report for board presentations, audits, or compliance evidence packages.
Key concepts
| Metric | Description |
|---|---|
| Vault Health Score | The overall Vault Score (0–100) displayed prominently at the top of the report. |
| Risk Level | Aggregated severity of all open risk patterns: Critical, High, Medium, or Low. |
| Key Expiration | Number of cryptographic keys expiring within the next 30, 60, or 90 days. |
| Secret Rotation Rate | Percentage of secrets rotated within their recommended rotation window. |
| Active Threats | Number of unresolved risk patterns with severity Critical or High. |
| Compliance Status | Pass/fail indicator against configured compliance policies. |
How to use the Executive Report
Navigate to the report
In the left sidebar, click QuantumVault → Executive Report. The dashboard loads with the latest data automatically.
Read the widgets
Each widget displays a single metric with a trend arrow and colour indicator (green = healthy, amber = warning, red = critical).
Filter by date range
Use the date picker in the top-right to filter historical data for any 30-, 60-, or 90-day window.
Export PDF or CSV
Click the Export button and select PDF for a formatted report or CSV for raw metric data.
qapi vault report export --format pdf --output report.pdfField reference
| Metric | Description | Unit | Normal range | Alert threshold |
|---|---|---|---|---|
| Vault Health Score | Overall security score | 0–100 | 80–100 | < 70 triggers alert |
| Risk Level | Highest open risk severity | enum | Low / Medium | Any Critical |
| Keys Expiring (30d) | Keys expiring in 30 days | count | 0–5 | > 10 |
| Rotation Rate | Secrets rotated on schedule | % | ≥ 90% | < 75% |
| Active Threats | Unresolved Critical/High risks | count | 0 | ≥ 1 |
| Compliance Status | Policy compliance indicator | pass/fail | Pass | Any fail |
Relationships
Vault Score
The Vault Score widget in the Executive Report is sourced directly from the Vault Score page.
Risk Patterns
Active Threats and Risk Level widgets reflect data from the Risk Patterns engine.
Vault
All metrics are scoped to the currently selected vault.
Keys
Key expiration widgets pull from the Keys inventory.
Settings › Usage
API call and storage usage metrics are sourced from the Settings › Usage page.
FAQ
How often is the data refreshed?
The Executive Report refreshes automatically every 15 minutes. You can force a refresh by clicking the Refresh button.
Can I schedule automatic exports?
Scheduled exports (weekly PDF via email) can be configured in Settings › Notifications. On-demand export is always available from the report page.
Can I filter the report by resource group or environment?
Yes. Use the Resource Group and Environment dropdowns at the top of the report to scope all widgets to a specific subset of your vault.
Will I be notified when metrics cross alert thresholds?
Yes. Configure alert channels in Settings › Notifications. You can set per-metric thresholds and choose email, Slack, or webhook delivery.
Who can see the Executive Report?
Any user with the Viewer role or above can access the report. Sensitive resource values are never shown — only aggregated metrics.
API & CLI reference
The Executive Report is also available via the REST API for programmatic access:
| Method | Endpoint | Description |
|---|---|---|
| GET | /api/v1/vault/report | Retrieve the current executive report metrics. |
| GET | /api/v1/vault/report/export | Export the report as PDF or CSV. |
| GET | /api/v1/vault/report/history | Retrieve historical metric snapshots. |