Skip to content
Dashboard

Dashboard

Overview

The dashboard is a single-page web application that gives a human-readable view over everything captured and scanned by Eon Insights. It talks exclusively to the insights REST API — it holds no database connection of its own — and authenticates against the configured identity provider, with optional two-factor authentication.

Running it

The dashboard is served as static files, fronted by nginx or similar, with the /api, /auth, and /oauth paths reverse-proxied to insights.

What it shows

The dashboard’s pages map fairly directly onto the insights API’s route groups:

  • Home — landing overview/dashboard summary
  • Hosts / Host Details — discovered hosts, their security level, TLS scan history, nmap scan results, and tags; can trigger a fresh TLS or nmap scan on demand
  • Clients / Client Details — discovered TLS clients (source IPs), their fingerprints, and tags
  • Handshakes / Connection Details — captured TLS handshake records, searchable and filterable, with per-connection detail (cipher, version, JA3/JA3S, certificate)
  • Certificates — the certificate inventory (deduplicated by SHA-256 fingerprint), including expiry status
  • Compliance / Compliance Rules — compliance framework scores and findings, and a rule editor (see Compliance)
  • Cbom — Cryptographic Bill of Materials generation, browsing, and download
  • Sca / Sca Repo — connected Git repositories, OAuth connections, scan history, and vulnerability findings (SCA)
  • Upload — PCAP file upload for offline analysis (processed by pcapworker)
  • Status — service and queue/worker health, driven by the /api/status endpoints and a WebSocket status feed
  • Chats — an AI assistant that answers ad-hoc questions about the data
  • Custom View — user-defined saved views (/api/views)
  • Settings / Profile / Two-Factor Settings — account and application configuration, including two-factor authentication setup
  • Login / Forgot Password — authentication flows against the identity provider
  • About — static copyright/info page

Custom periods and sharing

Time ranges used across charts and tables can be saved as reusable “custom periods” (/api/periods). Data views can be exported as PDF or sent elsewhere via the sharing endpoints (/api/sharing/pdf, /api/sharing/send).