Exporting Reports
Export audit results to PDF, HTML, XLSX, CSV, JSON, or DISA STIG CKL/CKLB format.
Generate professional reports for auditors, documentation, and compliance tracking.
Export Formats
MACE can export audit results in seven formats:
Professional report format. Ideal for sharing with auditors, management, or for official documentation. Includes charts and formatted tables.
HTML
Interactive web report. Can be opened in any browser. Includes responsive design and expandable details. Great for internal review.
CSV
Spreadsheet format. Import into Excel, Google Sheets, or other tools. Useful for data analysis, filtering, and custom reporting.
XLSX
Excel spreadsheet with formatted table, auto-filters, and frozen header row. Ideal for compliance teams who need to sort, filter, and analyze results in a spreadsheet.
JSON
Structured data format containing audit results and summary statistics. Ideal for automation, custom dashboards, or feeding results into other tools and scripts.
STIG CKL
DISA STIG Checklist format (XML). Required for DoD compliance. Updates existing CKL templates with your audit results.
STIG CKLB
DISA STIG Viewer 3.x checklist format (JSON). The modern replacement for the XML-based CKL. Can update an existing CKLB template or generate one from an XCCDF benchmark.
Which Format Should I Use?
| 📄 | Share with auditors or management | |
| 🌐 | HTML | Review results in a browser |
| 📊 | CSV | Analyze data in Excel or Google Sheets |
| 📋 | XLSX | Pre-formatted Excel file with filters and frozen headers |
| 🧩 | JSON | Feed results into automation, dashboards, or other tools |
| 🛡️ | STIG CKL | Submit for DoD compliance (STIG Viewer 2.x) |
| 🛡️ | STIG CKLB | Submit for DoD compliance (STIG Viewer 3.x) |
Live Preview
When your audit finishes, click Export Preview in the results toolbar to open the live export preview. The preview renders your report exactly as it will export, and updates in real time as you change options — what you see is what you get.
Switch Formats Live
Toggle between HTML, PDF, XLSX, CSV, and JSON with the format tabs at the top — the preview re-renders instantly for each.
Theme & Zoom
Preview in light, auto, or dark mode and adjust the zoom level to check exactly how the report will look before exporting.
Configure Everything
The sidebar groups all options into Branding, Audit Info, Device Info, and Structure. Toggle content on or off and watch the preview update live.
Remember for Quick Export
Enable Remember for Quick Export to save your current settings, so future exports use the same configuration without reopening the preview.
When the preview looks right, click Export and choose a save location.
:::note STIG CKL & CKLB The live preview covers HTML, PDF, XLSX, CSV, and JSON. To produce a STIG CKL or CKLB checklist, use the STIG Checklist button in the results toolbar instead — these formats map your results onto a DISA checklist rather than a formatted report. :::
Export Options
Before exporting, you can configure what to include in your report:
Author and Metadata
Adds your name, organization, and benchmark name to the report header. Helps identify who performed the audit.
Your name and organization appear in the report header. Set these in the export options.
Device Information
Adds the audited Mac's serial number, model name, and macOS version to the report. Identifies which specific device was checked.
Adds the computer's hostname to the device information section.
Logo and Branding
Choose the logo shown in the report header:
M.A.C.E. — the built-in M.A.C.E. logo (default).
Custom — your own image, added with the Upload Logo button.
None — no logo.
Removes "Generated by M.A.C.E." attribution from the report. Use this for sanitized or white-labeled reports.
Removes the entire footer section from the report, including generation timestamp and any branding.
Content Options
Hides the Expected Output and Actual Output columns. Simplifies the report if these details aren't needed.
Hides the Discussion/Notes column. Reduces report length if rule explanations aren't needed.
Hides the time taken for each check. Simplifies the output if timing isn't relevant.
Shows the command that was run for each rule. Useful for technical reviewers who want to see exactly what was tested.
Shows the remediation command for each rule. Helps teams understand how to fix failing items.
Analysis Options
Adds a breakdown of pass/fail rates by section. Highlights problem areas with lowest pass rates first.
Adds a column showing which results were manually modified. Important for audit trails where changes must be documented.
Adds a high-level overview at the beginning of the report. Summarizes key findings and critical areas for management review.
Includes results you've flagged for follow-up, along with any review comments you added. Useful for tracking items that need further investigation or stakeholder sign-off before final reporting.
Adds signature lines at the end of the report for auditor sign-off. Includes fields for Signature, Date, Printed Name, and Title/Role.
Format-Specific Options
Formats the PDF for US Letter paper with page breaks. When off, creates a continuous single-page document (better for digital viewing).
Displays STIG IDs (like APPL-15-005001) instead of Rule IDs in the table. Standard for STIG documentation.
Adds a column showing CIS Benchmark reference numbers (like 2.6.6).
PDF Export
The PDF export creates a professional compliance report suitable for auditors and official documentation.
What's Included
- Header: Logo, report title, author, organization, date
- Summary Statistics: Total rules, pass/fail counts, pass rate percentage
- Pie Chart: Visual breakdown of results by status
- Device Information (optional): Serial number, model, OS version
- Executive Summary (optional): High-level findings overview
- Section Summary (optional): Pass rates by category
- Results Table: All rules with status, expected/actual values, comments
- Signature Section (optional): Sign-off lines for auditors
- Footer: Generation timestamp, page numbers (if paginated)
How to Export PDF
- Complete your audit
- Click Export Preview in the results toolbar
- Select the PDF tab
- Configure export options in the sidebar
- Click Export and choose a save location
HTML Export
The HTML export creates an interactive web report that can be opened in any browser.
Features
- Responsive Design: Works on desktop, tablet, and mobile
- Dark Mode Support: Automatically adapts to system preferences
- Expandable Details: Click rows to see more information
- Status Color Coding: Visual pass/fail indicators
- Section Navigation: Jump to specific sections
- Pie Chart: SVG visualization of results
How to Export HTML
- Complete your audit
- Click Export Preview in the results toolbar
- Select the HTML tab
- Configure export options in the sidebar
- Click Export and choose a save location
Viewing the Report
Open the exported .html file in any web browser (Safari, Chrome, Firefox, etc.). The report is self-contained with all styles embedded.
CSV Export
The CSV export creates a spreadsheet-compatible file for data analysis.
What's in the File
- Summary info at the top with pass/fail counts
- Column headers based on your export options
- One row per rule with all the details
How to Export CSV
- Complete your audit
- Click Export Preview in the results toolbar
- Select the CSV tab
- Configure export options in the sidebar
- Click Export and choose a save location
Using the CSV
Import into:
- Microsoft Excel: File → Open → Select the CSV
- Google Sheets: File → Import → Upload the CSV
- Numbers: File → Open → Select the CSV
The CSV format allows you to:
- Create custom pivot tables
- Apply your own filtering and sorting
- Generate charts and graphs
- Combine with other data sources
XLSX Export
The XLSX export creates a formatted Excel spreadsheet ready to open in Microsoft Excel or Numbers.
What's in the File
- Formatted table with styled header row
- Auto-filters on every column for quick sorting and filtering
- Frozen header row so column names stay visible as you scroll
- One row per rule with status, rule ID, title, section, expected/actual output, and comments
- Status color coding to visually distinguish pass, fail, and other statuses
How to Export XLSX
- Complete your audit
- Click Export Preview in the results toolbar
- Select the XLSX tab
- Configure export options in the sidebar
- Click Export and choose a save location
Opening the File
Open the exported .xlsx file in:
- Microsoft Excel: Double-click or use File → Open
- Numbers: File → Open → Select the file
- Google Sheets: File → Import → Upload the file
XLSX is more structured than CSV — filters, column widths, and formatting are already set up when you open it.
JSON Export
The JSON export creates a structured data file containing your audit results and summary statistics — ideal for automation, custom dashboards, or feeding results into other tools.
What's in the File
- Summary with total rules, pass/fail/manual counts, and pass rate
- Audit metadata (platform, baseline version, framework, device info)
- One entry per rule with status, expected/actual output, and comments
How to Export JSON
- Complete your audit
- Click Export Preview in the results toolbar
- Select the JSON tab
- Configure export options in the sidebar
- Click Export and choose a save location
Using the JSON
Parse the file in any language or pipeline to build dashboards, track compliance trends over time, or integrate results with ticketing and SIEM tools.
STIG Checklist Export (CKL & CKLB)
For DoD security assessments, MACE can export your results as a DISA STIG checklist in two formats:
- CKL — the XML format used by STIG Viewer 2.x
- CKLB — the JSON format used by STIG Viewer 3.x (the modern replacement for CKL)
Both are produced from the STIG Checklist button in the results toolbar (rather than the live Export Preview).
What's in a Checklist?
Both formats are the standard for DISA STIG checklists and contain:
- Device identification
- Vulnerability assessments
- Finding details and status
- Comments and notes
How Checklist Export Works
For CKL and for updating an existing CKLB, MACE merges your results into a template:
- You provide a template (CKL or CKLB, from DISA or your organization)
- MACE matches STIG IDs between your audit and the template
- Results are merged into the template
- The updated checklist is saved with your findings
For CKLB, MACE can also generate a checklist from scratch — including directly from an XCCDF benchmark, which supplies authoritative DISA metadata.
Status Mapping
MACE audit statuses map to checklist statuses:
| ✅ | Pass | NotAFinding / not_a_finding |
| ❌ | Fail | Open / open |
| ➖ | N/A | Not_Applicable / not_applicable |
| ⚠️ | Error | Not_Reviewed / not_reviewed |
| 👁️ | Manual Review | Not_Reviewed / not_reviewed |
| ⏳ | Pending | Not_Reviewed / not_reviewed |
(CKL uses the capitalized XML statuses; CKLB uses the lowercase JSON statuses.)
How to Export a Checklist
- Complete your audit (must use a STIG baseline)
- Click STIG Checklist in the results toolbar
- Choose CKL or CKLB
- Select a template file (or, for CKLB, generate from scratch / an XCCDF benchmark)
- Choose where to save the checklist and export
What Gets Updated
For each matching STIG ID:
- STATUS: Updated to match audit result
- FINDING_DETAILS: Populated with check command and output
- COMMENTS: Filled with user comments or rule discussion
- HOST_NAME: Set from device information
Requirements
- Audit must use a STIG baseline
- STIG IDs must match between your audit and the template
- A template file is required for CKL and for updating an existing CKLB (CKLB can also be generated from scratch or from an XCCDF benchmark)
Custom Logo
To use your organization's logo in reports, open the Branding section of the export preview:
- Set Logo Source to Custom
- Click Upload Logo and choose your image
- The logo appears in the preview immediately and is used in the export
MACE saves your uploaded logo as logo.png in the project folder, so it's reused across exports. If a logo.png already exists in the project folder, MACE detects it automatically and offers it as the Custom logo. Use the trash button next to Upload Logo to remove a custom logo (Logo Source falls back to M.A.C.E.).
Logo recommendations:
- Format: PNG with transparency
- Size: 200-400 pixels wide
- Aspect ratio: Horizontal works best
Best Practices
Create a "before" snapshot of your compliance state. This documents your starting point for comparison after fixes.
When sharing with auditors, enable "Include Override Indicators" so they can see which results were manually changed.
Enable "Section Summary" when creating reports for management. It highlights problem areas at a glance.
Export to CSV if you need to do custom analysis, create charts, or combine audit data with other systems.
If you're submitting to a DoD security assessment, the CKL format is required. Keep your template CKL up to date.