Skip to content
Reports

Reports

kartis-scan turns a consolidated scan document — the aggregated JSON of a full discovery and scan (see Scanning) — into a customer-facing Markdown report. There is no report viewer in Kartis itself; the Markdown is meant to be read directly, converted with another tool, or consumed by Eon Center, Eon Aethis, or Eon Insights.

Generating a report

kartis-scan report [file] [flags]
  --lang <nl|en>       report language (default "nl")
  -o, --out <path>     output file (default: stdout)

The input is a file argument, or stdin when no argument (or -) is given:

kartis-scan report scan.json                # Dutch report to stdout
kartis-scan report --lang en scan.json       # English report
kartis-scan report -o report.md scan.json

What’s in the rendered document

The report contains, in order:

  • Header — domain, scan window, duration, host/service/finding counts.
  • Summary — an overall risk verdict plus a per-severity tally, and a short “top actions” list drawn from the highest-severity findings, plus a post-quantum key-exchange recommendation whenever no service offers hybrid PQ key exchange.
  • Post-quantum readiness — whether hybrid PQ key exchange (for example X25519MLKEM768) is present anywhere, and a per-TLS-service table of key exchange group, weakest certificate link, and PQC classification.
  • Findings — grouped by severity, each with its description, evidence, any associated CVE IDs, and a risk/mitigation block.
  • Appendix — a table of every discovered service (host, port, protocol, service, product/version), and for each TLS service, its certificate chain: subject, issuer, signature algorithm, key details, PQC classification, expiry, and SANs.
  • Methodology — a fixed disclosure paragraph: the scan is an authorized external perimeter scan, and the scanner identifies itself honestly and performs no evasion.

The document renders in Dutch (nl, the default) or English (en); all section headers, labels, and the methodology text are localized.

Output format

kartis-scan report produces GitHub-flavored Markdown. To get DOCX or PDF, convert the Markdown with a tool such as pandoc.