Dashboard Overview

# PQCrypta Enterprise Discovery Agent Configuration
# This file controls the behavior of the crypto asset discovery agent

# API endpoint configuration
api_url = "https://api.pqcrypta.com"
api_key = "your-api-key-here"

# Filesystem paths to scan for certificates and keys
scan_paths = [
    "/etc/ssl/certs",
    "/etc/pki",
    "/usr/local/share/ca-certificates",
    "/opt/",
]

# Enable deep scanning (slower but more thorough)
deep_scan = false

# Paths to exclude from scanning
excluded_paths = [
    "/proc",
    "/sys",
    "/dev",
    "/tmp",
]

# Database connections to scan
[[database_connections]]
name = "Production PostgreSQL"
db_type = "postgres"
dsn = "postgres://user:password@localhost/dbname"

# Network services to inspect for TLS certificates
[[network_targets]]
host = "example.com"
port = 443

Quick Start Guide

1. Download the agent for your platform above
2. Make executable (Linux/macOS): chmod +x pqcrypta-discovery
3. Run with your API key:

   ./pqcrypta-discovery \
     --api-url https://api.pqcrypta.com \
     --api-key YOUR_API_KEY

Common Options

• --deep-scan - Thorough scanning (slower)
• --allow-paths /path1,/path2 - Specific paths only
• --output results.json - Save locally instead of API
• --verbose - Detailed logging
• --config agent-config.toml - Use config file

What It Scans

• X.509 Certificates (PEM, DER, CRT, CER)
• Private Keys (RSA, ECC, Ed25519)
• Java KeyStores (JKS, PKCS12)
• TLS/SSL configurations
• Certificate bundles and chains