---
title: Weekly report
description: The Weekly AI Security Report PDF that Admins receive every Monday.
---

Every Monday at 09:00 UTC, Surface emails the **Weekly AI Security Report** to all Admins as a PDF attachment. It covers the previous 7 days, in six sections:

| Section | What it shows |
| --- | --- |
| **Overview** | AI assets (with instances), Endpoints (with how many are enrolled), Sessions (with messages), and API spend (with tokens), each compared with last week |
| **Governance** | Three cards, each a share of all assets |
| **Risk posture** | How many assets are critical, out of the scored assets, and the split across Critical, High, Medium, and Low |
| **Endpoints at risk** | Up to five endpoints holding a high or critical asset, worst first, with the user and risk score |
| **Top adopters** | Up to five people by estimated cost, with their primary app, sessions, tokens, and the change from last week |
| **Key takeaways** | Up to four plain-language lines. Left out when there is nothing to say |

The **Governance** cards:

- **Governed**: the share of assets allowed by policy
- **Not approved**: the share of assets set to warn or block
- **Shadow AI**: the share of assets that are still Ungoverned, with how many are new this week

Only **Global** actions count here. An asset with a **By Instance** action is in none of the three cards.

Each asset counts once, however many endpoints have it. Organizations with no scan activity that week do not receive a report.

## Recipients

The report goes to everyone with the Admin role. To add someone, give them the Admin role. There is no separate mailing list.

## Related

- [Users](/surface/environment/users) to change who receives it
- [Asset Access](/surface/policies/asset-access) to bring the Shadow AI number down