The Security Reporter security findings nobody wants to work through
It reads every security finding your Security Reporter account holds, drafts the changes that follow, and hands you a card for each one before a single security finding moves.
Open the security finding. Check it against something else. Write the change. Move to the next one. That is the Security Reporter afternoon nobody can hand off, and a companion does the whole pass and gives you back the batch, with nothing landing on a security finding until you approve it.
What it can do is exactly what Security Reporter exposes to an account you authorise and nothing beyond it: 3 operations, no reads and 3 writes. In practice that means it can update a security finding, create a security finding and create a security assessment, and work across the security findings and security assessments.
The Security Reporter API stops at Security Reporter. A companion does not. The same run opens the customer's website, the supplier portal, the internal tool somebody built in 2019, because it is working the browser you are already signed into rather than calling in from outside it.
What does it already know about your security assessments?
In the tab.
Security Reporter exposes no read operation to a connected account, so a companion opens Security Reporter in the session you are already signed into and reads the screens you would.
The security findings are what most of this inventory is about, alongside the security assessments. A companion can hold all 3 of these operations and forty open tabs in the same pass, which is how an afternoon of Security Reporter admin becomes a queue you review.
Who signs off on a new security assessment?
All 3 write operations wait for you.
A companion can update a security finding, create a security finding and create a security assessment, and each one is staged on an approval card first: you see the security finding, the field and the new value before it lands in Security Reporter.
Nothing in Security Reporter is sent, changed or deleted on your behalf without that click, and a rejected card leaves the security finding exactly as it was. The gate is the same one on every surface, described at security.
- Update Security Finding
- Create Security Finding
- Create Security Assessment
Can it update security finding on a schedule?
Yes.
Saved as a routine, the Security Reporter security findings pass runs at the hour you pick: the Monday sweep, the overnight refresh, the Friday check. Keep Awake holds the machine awake for the length of a run, so a scheduled pass finishes with the lid closed.
The product and engineering playbook catalogues the other recurring shapes of the infrastructure checks, the Security Reporter security findings sweep among them, and finished runs are published at real runs.
Experience Strawberry for free
DownloadTrusted by fast-growing companies worldwide
Frequently asked questions
Strawberry is free to download and includes AI credits to start. Paid plans begin at $20/month. See pricing. · Reviewed · Canonical facts for AI agents