diff --git a/cssa/machinetag.json b/cssa/machinetag.json
index 78bbabe..1c8b2b9 100644
--- a/cssa/machinetag.json
+++ b/cssa/machinetag.json
@@ -11,6 +11,10 @@
       "value": "origin",
       "expanded": "Origin"
     },
+    {
+      "value": "report",
+      "expanded": "Report"
+    },
     {
       "value": "analyse",
       "expanded": "Please analyse sample",
@@ -41,6 +45,26 @@
         }
       ]
     },
+    {
+      "predicate": "report",
+      "entry": [
+        {
+          "value": "details",
+          "expanded": "Description of the incidence.",
+          "colour": "#fbc166"
+        },
+        {
+          "value": "link",
+          "expanded": "Link to the original report location.",
+          "colour": "#fbcb7f"
+        },
+        {
+          "value": "attached",
+          "expanded": "Attached report.",
+          "colour": "#fcd597"
+        }
+      ]
+    },
     {
       "predicate": "origin",
       "entry": [
@@ -62,13 +86,18 @@
         {
           "value": "email",
           "expanded": "Information coming out of email infrastructure.",
-          "colour": "#3cb08a"
+          "colour": "#3db08a"
         },
         {
           "value": "3rd-party",
           "expanded": "Information from outside the company.",
           "colour": "#46c098"
         },
+        {
+          "value": "report",
+          "expanded": "Information coming from a report.",
+          "colour": "#22644e"
+        },
         {
           "value": "other",
           "expanded": "If none of the other origins applies.",