Setup›Connect data sources

Connect data sources

Stratacos assesses only the cryptography it has data on. These three methods supply that data. Each feeds the same inventory: one method works on its own, and the others widen its coverage.

The scanner installs nothing and returns results in minutes. Agents and passive sensors widen coverage where you need more.

1

On demand

Network scanner

Active discovery — connects to each system and reads its encryption.

The scanner opens the same kind of encrypted connection a browser would and records the cipher, protocol version, and certificate each system presents. Nothing is installed. Each scan captures a single point in time, not continuous coverage.

What it takesMinutes. No installation.
You'll needAddress ranges to scan, from your network administrator.
What you getAn initial inventory of encryption across your network.
Set up scans ›
2

On the host

Agents

Host-level inventory, collected from inside each machine.

An agent installed on a machine reports that machine's cryptography from the inside — the most complete inventory available for a single host, including details an external scan cannot reach. It covers only machines where it is installed. Deploy agents to the hosts that matter most.

What it takesInstalled on each machine, by you or IT.
You'll needAdministrative access to the machines you cover.
What you getA complete cryptographic inventory per covered host.
Open agents ›
3

Always on

Passive sensors

Continuous monitoring of mirrored network traffic.

A sensor inspects a mirrored copy of network traffic and records the encryption in use, without touching the systems themselves. Because it runs continuously, it captures devices and connections that scheduled scans miss. It provides ongoing coverage rather than point-in-time snapshots.

What it takesThe most setup. Plan with your network team.
You'll needA capture host running Zeek and a switch that mirrors traffic to a SPAN port.
What you getContinuous coverage of encryption that scheduled scans miss.
Register sensors ›

The scanner alone produces a usable inventory; the other methods extend coverage. All three are read-only and make no changes to your systems.

‹ Back to Setup