Reports

Controlio produces audit-ready reports from a single scan. The report text is a statement of the current state; it carries no commentary or speculation.

Report types

The Security Assessment Report covers the overall score, the executive summary, the category breakdown, the framework compliance bars and the findings. The License Report analyzes subscription and license usage.

What is inside

The executive summary describes the score and the highest-risk areas in plain language, and includes the Microsoft Secure Score comparison. Findings are tied to the CIS, NIST, ISO 27001 and Microsoft Security Baseline bars and to MITRE ATT&CK techniques. Each control comes with its status and a step-by-step fix.

Delivery

You can email the report to the recipients you define. Delivery is limited per day, and the email carries an honest timestamp. If you schedule delivery on a monitored tenant, the latest summary goes out on the day and time you set.

Notification language

You choose the language of the emails Controlio sends you at the organisation level. The setting in Settings covers both the scan summary report and continuous monitoring alerts, meaning TrueState deviations, VIP Guard events and approval requests. It is an organisation-level setting rather than a per-person one, because these emails go to the recipient list you define and a scheduled delivery has no triggering user behind it. Until you choose, the language stays Turkish.

Changing the panel's interface language does not change the email language; they are separate settings. Evidence lines inside a report do follow the language you selected in the panel.

Partners

For MSP partners the reports appear under the partner brand. "powered by Controlio Security®" stays at the bottom. See White-Label.