Reporting

CapaOne includes built-in reporting under Management → Reporting for two common compliance and inventory needs: NIS2 security compliance and Endpoint inventory. Both reports can be exported to CSV or Excel.

NIS2 report

The NIS2 report summarises your endpoints’ security state against the controls relevant to the EU NIS2 Directive (Network and Information Security Directive). It covers:

• Missing updates per Windows endpoint — which devices are missing patches
• Endpoints per OS version — fleet breakdown by OS version, useful for identifying devices on unsupported or outdated versions
• System updates for Apple and Android endpoints — update compliance across mobile devices
• Windows Antivirus — antivirus protection status per endpoint
• Windows Encryption — disk encryption status per endpoint
• Firewall — firewall configuration status per endpoint
• Detected CVEs on Windows endpoints — vulnerability exposure from the Security Monitor

This report is intended to support periodic security reviews and provide evidence of control coverage for NIS2 compliance purposes. Export to Excel for distribution to auditors or management.

Endpoint inventory report

The Endpoint report is a snapshot of all managed devices, useful for asset inventory audits. It includes:

• Endpoint type (Desktop, Laptop, or Server)
• Endpoint name
• CapaOne Agent version installed
• Operating system
• Latest OS startup timestamp
• Service startup timestamp
• Available software updates

Export this report to CSV for integration with other asset management or CMDB tooling, or to Excel for a formatted inventory spreadsheet.

Archived reports

Previously exported reports are stored under the Archived button in each tab. If no reports have been exported yet, the archive is empty. Archived reports let you compare current state against a historical snapshot without re-generating the full report.

Good to know

• Both reports are cross-platform where applicable — the NIS2 report includes Apple and Android endpoints for update compliance, not just Windows.
• Export formats — CSV is better for importing into other systems or scripts. Excel is better for sharing with stakeholders.
• Reports reflect current data — the report generates based on the latest inventory data from enrolled endpoints. Endpoints that have not checked in recently may have stale data.
• NIS2 is an EU directive — if your organization is not subject to NIS2, the report still provides a useful security posture summary covering the most common endpoint security controls.