Elasticsearch Dashboard: Quantum Command Application Report

Fleet-wide application exposure and remediation prioritization across cryptographic activity.

The Quantum Command Application Report connects fleet-level posture to the applications responsible for cryptographic activity. It ranks processes by readiness and exposes weak or insecure cipher use, key-exchange prevalence, listening-port resilience, software package information, and certificate characteristics.

Use this dashboard to identify a problematic executable, assess the scope of its exposure across hosts, and then move to Application Detail for process-specific investigation.

Default time range: Last 90 daysData source: Application cryptography scan records

Operational guidance: Click a tier in one of the top charts to filter every table on the dashboard. Select a process when you are ready to move from fleet-wide comparison to host- and connection-level detail.

Panels

PanelTypeWhat It Shows
Navigation Links BarLinksProvides cross-dashboard navigation while preserving the investigation workflow.
Key Exchange TierInteractive Vega chartShows key-exchange readiness across observed application executables.
Application PQC ComplianceVega chartRanks executables by application-level key-exchange compliance.
Certificate Signature TierInteractive Vega chartShows certificate-signature readiness across application TLS sessions.
Web Server DistributionVega chartCompares key-exchange tiers across web server process families such as nginx, Apache, and IIS.
Weak Cipher per AppData tableRanks weak cipher values by the number of unique application executables using them.
Insecure Cipher per AppData tableRanks insecure cipher values by unique application count.
Port Quantum ResilienceData tableShows listening ports and processes with quantum-resilient and non-resilient counts.
Software PackageData tableRanks observed software packages or process names by occurrence.
Key Exchange vs. App CountData tableShows key-exchange algorithms and the number of unique applications associated with each.
Signature Algorithm vs. App CountData tableShows certificate-signature algorithms and their unique application counts.
Full Application Crypto InventoryPaginated data tableProvides a 14-column application inventory for audit, export, and remediation tracking.
Certificate InventoryData tableLists observed certificates with validity dates, algorithms, key curves, and key sizes.
Document SearchDiscover panelDisplays raw scan records matching the active dashboard filters.

Key Data Fields

FieldDescription
process.name / process.executableIdentifies the application process and executable observed making TLS connections.
omb.kex_tier / omb.kex_primaryProvides the readiness tier and primary key-exchange algorithm.
quantum_readyIndicates whether the process is using a PQC key exchange.
tls.weak_ciphers / tls.insecure_ciphersLists cipher values classified as weak or insecure.
tls.supported_key_exchangesLists the key-exchange algorithms supported by the application.
x509.*Provides certificate identity, validity, signature, key algorithm, curve, and size information.
omb.software_package_nameIdentifies the software package associated with the process.

Reading the Dashboard

Start with the three posture charts

Use key exchange, application compliance, and certificate signature to determine which cryptographic dimension is driving risk.

Separate weak from insecure

Weak ciphers should be hardened; insecure ciphers represent a higher-priority configuration problem and should be explicitly disabled.

Use the full inventory for scope

The 14-column table shows how an application's crypto configuration varies by port, OS platform, host, protocol, and certificate.

Validate with raw records

Use Document Search when a summarized count needs to be confirmed against the underlying scan documents.

Filtering and Performance

The dashboard opens with a default time range of Last 90 days. Global Elasticsearch dashboard filters apply to the panels unless a panel description states otherwise. Preserve relevant filters when navigating between related dashboards so the investigation remains scoped to the same application, host, tier, or certificate population.