---
title: 'PDF Reports'
description: 'Structure, sections, and customization options for Panguard Scan PDF reports.'
icon: 'file-pdf'
---

Panguard Scan can generate professional PDF reports suitable for stakeholder review, compliance documentation, and audit evidence.

## Generating a Report

```bash
# English report (default)
panguard scan --output report.pdf

# Traditional Chinese report
panguard scan --output report.pdf --lang zh-TW

# Quick scan with report
panguard scan --quick --output quick-report.pdf
```

## Report Sections

Every PDF report contains five sections:

### 1. Cover Page

| Element            | Description                                  |
| ------------------ | -------------------------------------------- |
| Organization name  | Configurable via `--org` flag or config file |
| Scan date and time | UTC timestamp of when the scan was executed  |
| Panguard version   | CLI version used to generate the report      |
| Brand logo         | Panguard AI branding                         |

### 2. Executive Summary

A one-page overview designed for non-technical stakeholders:

- **Risk Score**: The 0--100 safety score with letter grade
- **Finding Counts**: Breakdown by severity (Critical / High / Medium / Low / Info)
- **Key Metrics**: Number of open ports, running services, security tools detected
- **Overall Assessment**: Plain-language summary of system security posture

### 3. Findings Detail Table

Each finding is presented as a row with the following columns:

| Column          | Description                                                  |
| --------------- | ------------------------------------------------------------ |
| **#**           | Sequential finding number                                    |
| **Severity**    | CRITICAL, HIGH, MEDIUM, LOW, or INFO with color coding       |
| **Title**       | Short description of the finding                             |
| **Category**    | Scanner category (Network, Authentication, Encryption, etc.) |
| **Description** | Detailed explanation of the risk                             |
| **Location**    | Affected resource (port, file path, service name)            |

### 4. Remediation Recommendations

For each finding, the report provides:

- Step-by-step fix instructions
- Platform-specific commands (Linux, macOS, Windows)
- Links to relevant documentation
- Priority ranking based on severity and effort

### 5. Compliance Mapping

Each finding is mapped to applicable compliance framework controls:

| Framework   | Control Reference                                         |
| ----------- | --------------------------------------------------------- |
| ISO 27001   | e.g., A.12.6.1 -- Management of technical vulnerabilities |
| SOC 2       | e.g., CC6.1 -- Logical and physical access controls       |
| Taiwan TCSA | e.g., Section 4 -- Access control                         |

## Bilingual Support

Reports support two languages. The language selection affects all text in the report including section headers, finding descriptions, and remediation steps.

| Flag           | Language            |
| -------------- | ------------------- |
| `--lang en`    | English (default)   |
| `--lang zh-TW` | Traditional Chinese |

## Remote Scan Reports

Reports can also be generated from remote target scans:

```bash
panguard scan --target 203.0.113.50 --output remote-report.pdf
```

Remote scan reports include the target hostname/IP and note which scanners were available remotely versus those requiring local access.

## Integration with Compliance Reports

Scan PDF reports can also serve as input evidence for compliance reports generated via the `panguard report` CLI command (a feature of Scan):

```bash
# Generate a scan report
panguard scan --output scan-findings.pdf

# Use findings as input for a compliance report
panguard report generate --framework iso27001 --format pdf
```

<Info>
  PDF generation uses server-side rendering and does not require any external PDF tools or browser
  dependencies.
</Info>
