vulkro report

Builds a self-contained executive HTML report from a scan. Open it in a browser, or print it to PDF.

vulkro report . -o report.html
vulkro report . --profile soc2 -o soc2-report.html
vulkro report exposure . -o exposure.html

The report loads nothing from the network when opened. Its counts match vulkro scan (same default confidence floor).

Flags

Flag	Description
-o, --output <FILE>	Write to a file instead of stdout.
--profile <PROFILE>	Add a compliance mapping: owasp-asvs, owasp-web, pci, soc2, hipaa, nist-ssdf, iso27001, cis, cwe-top25.
--all-confidence	Report every finding, not just the default set.

report exposure

One application's exposure and proof report: entry points by auth state, unauthenticated reach to sensitive sinks, and the proven Critical and High findings with their proof chains.

Flag	Description
--format <FORMAT>	html (default), md or json.
-o, --output <FILE>	Write to a file.
--summary	Counts, states and verdicts only (no paths, routes or proof steps), for sharing outside the team.

Exit codes

report: 0 rendered, 2 scan or IO error. It never returns 1. report exposure: 0 no exposure found, 1 exposure present, 2 error.

See also: vulkro compliance, vulkro summary.