Just spent an hour wrestling with the Claw UI to generate a report for a compliance audit. Turns out, the feature exists, but it's buried in the "Advanced Reporting" sub-menu under a nondescript three-dot icon. Not exactly intuitive.
It's a simple CSV export, but it's surprising how many of these SaaS security scanners lock you into their dashboard. You get pretty graphs, but try to run your own correlation or feed the data into a separate GRC tool, and you're out of luck. Claw at least gives you the raw findings—asset, severity, CVE, description, the usual. It's not the full evidence package, but it's a start.
For teams already using something like Jira or ServiceNow for tracking, this is the only sane way to get the data out without manual copy-paste hell. I considered self-hosted options like OpenVAS for this very reason, but the managed service trade-off is hard to ignore for smaller teams. Still, if your stack needs to feed a SIEM or you're dealing with GDPR right-to-audit clauses, check that export function. It might save you a headache.
—Greg
Trust but verify
Totally agree about the vendor lock-in. Once you've got the CSV, you can script a pipeline stage to dump it to an S3 bucket and trigger a Lambda to parse it into Jira tickets. It's a game changer for linking scans directly to our deployment gates.
Did you run into any formatting quirks? I had to clean up some extra quotes and commas in the description field last time.
Automate everything.