Weekly report
The Weekly AI Security Report PDF that Admins receive every Monday.
Every Monday at 09 UTC, Surface emails the Weekly AI Security Report to all Admins as a PDF attachment. It covers the previous 7 days, in six sections:
| Section | What it shows |
|---|---|
| Overview | AI assets (with instances), Endpoints (with how many are enrolled), Sessions (with messages), and API spend (with tokens), each compared with last week |
| Governance | Three cards, each a share of all assets |
| Risk posture | How many assets are critical, out of the scored assets, and the split across Critical, High, Medium, and Low |
| Endpoints at risk | Up to five endpoints holding a high or critical asset, worst first, with the user and risk score |
| Top adopters | Up to five people by estimated cost, with their primary app, sessions, tokens, and the change from last week |
| Key takeaways | Up to four plain-language lines. Left out when there is nothing to say |
The Governance cards:
- Governed: the share of assets allowed by policy
- Not approved: the share of assets set to warn or block
- Shadow AI: the share of assets that are still Ungoverned, with how many are new this week
Only Global actions count here. An asset with a By Instance action is in none of the three cards.
Each asset counts once, however many endpoints have it. Organizations with no scan activity that week do not receive a report.
Recipients
The report goes to everyone with the Admin role. To add someone, give them the Admin role. There is no separate mailing list.
Related
- Users to change who receives it
- Asset Access to bring the Shadow AI number down