Ask HN: What do you look for in compliance reporting tools?

I’m building a web security monitoring platform and recently added branded compliance reporting for things like SOC 2 and ISO 27001.

The reports include:

- Your logo/colors or full whitelabel

- Mapped vulnerabilities (OWASP/CWE/WASC)

- Executive summaries for non-technical stakeholders

If you're responsible for security or reporting (internally or for clients), I'd love to know:

- What do you need to see in a compliance report?

- Who are you generating these for — clients, auditors, execs?

- What do you currently use (manual process, automated, third-party tools)?

- What’s still frustrating or slow about your current setup?

Curious how others are approaching this and what you'd actually want to see improved.