📋 GRC compliance for CMMC 2.0, CPCSC, CPA Canada, IIROC…SaaS discovery for data governanceFree enriched web chat widget🚀 Enriched remote support without your laptop

Build a cybersecurity assessment report

Produce a cybersecurity assessment report for a client from what Lavawall already knows, with a Nessus scan and your own findings as optional extras.

A Lavawall® task guide: 6 steps across 7 console pages.

Before you start

  • Who can do this: Anyone who can see the page
  • Plan: Domain Attack-Surface Scanner (included in every plan). SaaS Discovery (included in Professional and Complete). Vulnerability Assessment (included in Grow, Professional, and Complete). Patch Monitoring (included in Grow, Professional, and Complete) or Patch Reporting (add-on, or included in Complete). RMM Agent (Windows / Mac / Linux; included in Grow, Professional, and Complete) or System Monitoring (included in Grow, Professional, and Complete). Configuration Monitoring (add-on, or included in Complete) or System Monitoring (included in Grow, Professional, and Complete). See pricing.
  • Where to start: open Domain Scan Results in your console.
Scan the client's domains, turn on SaaS discovery, optionally upload a Nessus scan, then configure, optionally add findings to, and export the Cybersecurity Assessment.
The same steps are listed below, with links to each page's article.

Steps

  1. Scan the client's domains. Domain and email findings appear in the report only after a scan

    Scan a domain from the outside, the way an attacker would see it, and get a clear list of website, email and DNS issues to fix.

    From the article: How to scan a domain

    1. Select the company the domain belongs to.
    2. Type the domain in Scan a domain (for example example.com). Web addresses are trimmed to the domain automatically.
    3. Leave Include admin services (SSH, RDP) on to also check for exposed administrative services.
    4. Turn on Scan exact hostname / subdomain to scan, for example, a staging site exactly as typed instead of the main domain.
    5. Click Scan and watch the progress bar. Sections fill in as results arrive.

    Open Domain Scan Results in your console →

  2. Turn on SaaS discovery. Click Enable Scanning, then confirm or reject apps

    Find the cloud services and apps your people actually use, including AI tools, so nothing sensitive runs outside your view.

    From the article: How to turn on email scanning

    1. Select the company in the company picker.
    2. Click Enable Scanning and confirm.
    3. A progress banner shows the initial scan. Apps appear as they are found; click Refresh to update the list.
    4. To stop, click Disable and confirm.

    Open SaaS Discovery in your console →

  3. Upload a Nessus scan Optional. Adds the vulnerability scan sections

    Bring your Tenable Nessus scan results into Lavawall so every vulnerability is matched to the devices you already manage.

    From the article: How to upload a scan

    1. Select the company in the company picker at the top of the console.
    2. In Upload Nessus Scan, choose a Scan Type: Detect automatically, LAN (Internal) Scan, WAN (External) Scan or Other.
    3. Optionally enter a Description and Notes.
    4. Drag a .nessus file onto the drop area, or click it to browse. The upload starts as soon as you pick the file.
    5. When processing finishes, the scan appears in the Scans list.

    Open Nessus Scanner in your console →

  4. Configure the report. Report Config: audit period, scope

    Turn everything Lavawall knows about a company into a single security assessment report you can review, edit and hand to the client.

    From the article: How to set the audit period

    1. In Security Assessment Report, click Report Config.
    2. Under Audit Period, type a label (for example "2026-Q1") and click the check button.
    3. Enter a Start and End date and click the check button. The report uses this range to show which Macs were out of date during the assessment and how many were updated by the end. Resolved issues stay in the report for the whole period.

    Open Cybersecurity Assessment in your console →

  5. Add your own findings Optional. Add Finding, use Guide me for severity

    From the article: How to add your own finding

    1. In Report Config, under Custom Report Sections & Findings, click Add Finding.
    2. Choose a Report Section, or pick New section heading and choose a preset (such as Physical Security or Backup & Recovery) or type your own, then choose its Position in Report.
    3. Enter the Finding Title and choose a Severity. Click Guide me to answer a few questions and get a CVSS-aligned rating, or (what each level means) for definitions.
    4. Write the Description, Recommendation, Management Response and Mitigating Controls.
    5. Click Save Finding. Use Add Heading to create an empty section first if you prefer.

    Open Cybersecurity Assessment in your console →

  6. Export the report. Export .docx and review with the client

    From the article: How to produce a report

    1. If you have not already, scan the company's domains on the Domain Scan Results page, so the domain and email findings are included.
    2. Select the company in the company picker.
    3. Wait for "Gathering security data..." to finish, then read the Executive Summary.
    4. Use Expand/Collapse All or click a section heading to review each area.
    5. Open Security Assessment Report and click Export .docx for a Word document, or Copy Report to paste it elsewhere. Print prints the whole page.

    Open Cybersecurity Assessment in your console →

What the report includes

These are included automatically. You do not need to open their pages to build the report:

The report also covers devices and infrastructure, identity and account issues, cloud security, suspicious IP addresses, active threats and ransomware hunting when the company has data for them. A section only appears when there is data for it.

When you are done

You have a reviewed assessment report to go through with the client.

Articles for the pages in this guide

  • Domain Scan Results: Scan a domain from the outside, the way an attacker would see it, and get a clear list of website, email and DNS issues to fix.
  • SaaS Discovery: Find the cloud services and apps your people actually use, including AI tools, so nothing sensitive runs outside your view.
  • Nessus Scanner: Bring your Tenable Nessus scan results into Lavawall so every vulnerability is matched to the devices you already manage.
  • Cybersecurity Assessment: Turn everything Lavawall knows about a company into a single security assessment report you can review, edit and hand to the client.
  • Patchable Package Summary: See which software packages are missing updates, how many computers each one affects and how serious the gap is.
  • Replacement Priority: Rank your computers by how urgently they need replacing, so hardware budgets go where they help most.
  • Configuration Summary: See which security settings fail most often across your computers, ranked by risk.

Still need help?

Search the support centre, or contact our support team and tell us which step you are on:

← All task guides

We use privacy-friendly, cookieless analytics to count visits, and one cookie to run our live chat. Both load only if you accept. We do not use advertising trackers, and we do not profile you across other websites. The essential cookies that keep the site working are always on. See our privacy policy.