Weekly email digest

What it is

A per-org email that summarises the workspace’s risk posture once a week. Same source of truth as the executive dashboard and the executive report, shaped for an inbox skim, so the SMB owner doesn’t need to open the dashboard to know whether anything important changed.

What it produces

One HTML+text email per week, containing:

• Posture tiles: critical open, high open, fixed this week, MTTR (median time-to-remediate, computed over the last 7 days)
• Top 5 open risks: same business-weighted ranking the executive dashboard uses (severity + asset criticality)
• Period header: explicit from → to so the recipient knows exactly what window the numbers cover
• Open the dashboard deeplink CTA

Inline-styled HTML so every email client renders identically: no external assets, no font fetches.

What to use it for

• Founder / owner gets a Friday morning brief without logging in.
• A non-Umbra-user stakeholder (board observer, vCISO) gets the same email; no second account needed.
• Cyber-insurance renewal evidence: auditors can ask to see the last 12 weeks of digests as a “you were watching” artefact.

Why it matters

Most SMB owners don’t want a Slack ping per finding. They want one email a week saying “here’s where things stand.” Without this, the only way to get the same answer is to log in and read the dashboard, which most people won’t do unless something’s on fire.

Why it’s valuable

• One subscription per org. Simple model, no per-user opt-in matrix.
• Operator picks the day + UTC hour. Local-tz label shown so you can pick “Friday 09:00 my time” without doing the conversion yourself.
• 12-hour dedupe guard. An API restart inside the same hour won’t double-send.
• Send-test-now button. Preview the layout in your inbox before enabling, no need to wait a week to see if it looks right.
• Same data as the dashboard. No spreadsheet to reconcile: the email’s “Critical open” matches the screen’s tile.

How to use it

1. Admin → Notifications → Email digest.
2. Tick Enable digest.
3. Pick a weekday + UTC hour (the UI shows your local-tz equivalent).
4. Set the recipient (a distribution list is fine if more than one person should receive it).
5. Click Save, then Send test now to preview.

That’s it. The scheduler will pick it up on the next matching (weekday, hour) window. To pause: untick Enable digest and save.