Report template properties

Report template properties give you control over the content of your report template in a different way. Define fields needed to validate your project, filter the contents of your project, or even change the title of your document.


Basic details

Quickly edit the Title of your template. The Template file field will always display the original name of the document at the time you uploaded it.

Dradis report template basic details with Title and Template file fields
  1. Log in as Administrator.
  2. From the Projects page, navigate to Templates > Reports.
  3. Click the Edit icon below the correct template.
  4. Edit the Title field.

The Title that you set in the report template properties will appear on the Export page along with the filename:

Screenshot of the Dradis Word report export view

Content blocks

Define the Content Blocks that your Word report is looking for so that Validate Export can check your document for any missing Block Groups.

Dradis content blocks section with Block Group fields

First, it's important to note that the Block Group is an identifier that you can use to categorize individual Content Blocks. For example, you could have 2 Content Blocks that are inside the Appendix Block Group if you needed 2 Notes in your report’s Appendix section. Name the Block Groups however it makes sense for you.

For the example below, we're going to define a Block group for the following Note template:

#[Title]#
Overall Risk Rating

#[Type]#
Risk

#[Risk]#
High | Medium | Low

#[Description]#
  1. Log in as Administrator.
  2. From the Projects page, navigate to Templates > Reports.
  3. Click the Edit icon below the correct template.
  4. In the Content blocks section, define all the fields within your Note Template. For the example template above, we need to define fields for Title, Type, Risk, and Description. Don't forget to give the Block Group a name!
    Risk Block Group with Title, Type, Risk and Description fields

Each content block field has a Type: List, Number, or Text. Set a field to List and define its values when the field has a fixed set of acceptable options (e.g. High, Medium, Low for Risk). This allows Dradis to flag any values that don't belong (e.g. Critical).


Document properties

Define the custom document properties in your Word report so that Validate Export can check your document for any missing properties on export.

Dradis document properties section with Add property button

For the example below, we're going to define the three fields in this simple report template:

Word report placeholders for client name and project dates

These fields are defined within Dradis as dradis.client, dradis.startdate, and dradis.enddate respectively.

To define these custom document properties:

  1. Log in as Administrator.
  2. From the Projects page, navigate to Templates > Reports.
  3. Click the Edit icon below the correct template.
  4. In the Document properties section, define all of the fields within your Project Properties template. For the example above, we would define custom properties for dradis.client, dradis.startdate, and dradis.enddate as shown below:
Dradis document properties for dradis.client, dradis.startdate and dradis.enddate

Issue fields

Define the fields within your Issues so that Validate Project knows what to look for on export and can warn you about any missing or incorrect fields in your project. And, this allows Dradis to automatically validate each Issue as you save it.

Dradis Issue fields section with Add field button

For the example below, we're going to define the Issue fields for this simple template:

Word Issue template with Title, Rating, Description and Recommendation controls
  1. Log in as Administrator.
  2. From the Projects page, navigate to Templates > Reports.
  3. Click the Edit icon below the correct template.
  4. In the Issue fields section, define all the fields within your Issue Template. For the example template above, we need to define fields for Title, Rating, Description, and Recommendation.

Each field has a Type:

  • List — a field with a fixed, ordered set of named values (e.g. High, Medium, Low). Use this type when the field drives sorting, filtering, or color-coded formatting in your Word report.
  • Number — a numeric field (e.g. a CVSS score).
  • Text — a free-text field with no fixed set of values.
Dradis Issue fields defined as Text, Number, and List

List field values

When the field type is set to List, you can define the acceptable values. This is important if your report template sorts or filters Issues by this field — any value that does not appear in the list will trigger a validation warning (e.g. entering Critical when only High, Medium, and Low are defined).

Each list value has a name and an optional color. The order of the values matters: it determines how Dradis sorts Issues when this field is used as an Issue sort field.

To add and configure list values:

  1. Set the field Type to List.
  2. Click Add value to add a new entry. Enter the value name (e.g. High).
  3. Use the color picker to assign a color to this value. The color is used in Word reports — see Color-coded content controls for details.
  4. Repeat for each value in the list.
  5. Drag the handle to reorder values. The order here is the sort order Dradis will use when this field is an Issue sort field.

Evidence fields

Define the different fields that each instance of Evidence in your project should contain. This lets the Project Validator know what to look for on export and can warn you about any missing or incorrect fields in your project. And, this allows Dradis to automatically validate each piece of Evidence as you save it.

Dradis Evidence fields section with Add field button

For the example below, we're going to define the Evidence fields for this simple template:

Word Evidence template with Title, Request and Response controls
  1. Log in as Administrator.
  2. From the Projects page, navigate to Templates > Reports.
  3. Click the Edit icon below the correct template.
  4. In the Evidence fields section, define all the fields within your Evidence Template. For the example report template above, we need to define fields for Status, Request, and Response.
    Dradis Evidence fields defined for Status, Request and Response

As with Issue fields, each Evidence field has a Type: List, Number, or Text. When the type is set to List, you can define an ordered set of acceptable values. For example, setting Status to a List with values Open and Closed means Dradis will flag any piece of Evidence whose Status field contains a value that is not in that list (e.g. Pending).


Issue sorting

Sort the Issues in your project by any of the Issue Fields you've defined. Both numeric fields and List fields with a defined order can be used as sort fields. Issues are sorted before being exported to your Word report.

You can add multiple sort fields in priority order. For example, to sort by Severity first (a List field), then CVSSv4.BaseScore as a tiebreaker (a Number field), add both fields here in that order.

Dradis Issue sorting section with list and numeric fields
  1. Log in as Administrator.
  2. From the Projects page, navigate to Templates > Reports.
  3. Click the Edit icon below the correct template.
  4. Under the Issue sorting tab, click Add sort field and select the field you want to sort by. For List fields, sorting follows the order in which values are defined in the List field (highest priority first).
  5. Add additional sort fields if you want a secondary sort order.

Issue sorting will only apply to Word reports and will not apply to Excel or HTML reports. Excel reports can be sorted with a post-export macro. HTML reports can be sorted by different Ruby code approaches in the report template.


Auto-generate properties on upload

When you upload your report template, you can select Auto-generate properties from the uploaded template. Behind the scenes, Dradis will scan your report template during the upload process and generate the report template properties based on the content controls and fields in the document.

Dradis report template upload with auto-generate properties option

Please review the properties after upload to ensure that all fields, values, and types appear as expected.

Dradis auto-generated Issue fields after report template upload

Validation

Issue and Evidence fields: validate your projects

The Issue and Evidence fields are used to validate your project during the export process. Plus, they automatically check every Issue and instance of Evidence in your project as you save them.

Now when you validate your project on export, you'll know immediately whether your project's Issue and Evidence fields match the fields that your report template is looking for.


Automatically validate Issue and Evidence fields

When your project is associated with a report template with Issue and Evidence fields defined, Dradis will automatically validate each Issue and each instance of Evidence in your project as you save it.

When you create your project, make sure that it is associated with the correct report template that has the Issue and Evidence fields defined.

Then, every time you update an Issue or piece of Evidence, Dradis will check to make sure that the fields match the expected fields you set in the report template properties.

In this example, Dradis is expecting a Rating field with a value of High, Medium, or Low within the Issue. We misspelled the field value and entered Hgih so we will see the following error message:

Dradis Issue validation error for invalid Rating field value

In this next example, we have an instance of Evidence that contains a Status field but has an invalid value. Dradis is expecting a Status field value of Open or Closed but this piece of Evidence has the Status set to Pending so we will see the following error message:

Screenshot of the Dradis failed Evidence validation view

Next help article: Note templates →

Seven Strategies To Differentiate Your Cybersecurity Consultancy

You don’t need to reinvent the wheel to stand out from other cybersecurity consultancies. Often, it's about doing the simple things better, and clearly communicating what sets you apart.

  • Tell your story better
  • Improve your testimonials and case studies
  • Build strategic partnerships

Loading form...

Your email is kept private. We don't do the spam thing.