Reports
Reports
kartis-scan turns a consolidated scan document — the aggregated JSON of a
full discovery and scan (see Scanning) — into a
customer-facing Markdown report. There is no report viewer in Kartis itself;
the Markdown is meant to be read directly, converted with another tool, or
consumed by Eon Center, Eon Aethis, or Eon Insights.
Generating a report
kartis-scan report [file] [flags]
--lang <nl|en> report language (default "nl")
-o, --out <path> output file (default: stdout)The input is a file argument, or stdin when no argument (or -) is given:
kartis-scan report scan.json # Dutch report to stdout
kartis-scan report --lang en scan.json # English report
kartis-scan report -o report.md scan.jsonWhat’s in the rendered document
The report contains, in order:
- Header — domain, scan window, duration, host/service/finding counts.
- Summary — an overall risk verdict plus a per-severity tally, and a short “top actions” list drawn from the highest-severity findings, plus a post-quantum key-exchange recommendation whenever no service offers hybrid PQ key exchange.
- Post-quantum readiness — whether hybrid PQ key exchange (for example
X25519MLKEM768) is present anywhere, and a per-TLS-service table of key exchange group, weakest certificate link, and PQC classification. - Findings — grouped by severity, each with its description, evidence, any associated CVE IDs, and a risk/mitigation block.
- Appendix — a table of every discovered service (host, port, protocol, service, product/version), and for each TLS service, its certificate chain: subject, issuer, signature algorithm, key details, PQC classification, expiry, and SANs.
- Methodology — a fixed disclosure paragraph: the scan is an authorized external perimeter scan, and the scanner identifies itself honestly and performs no evasion.
The document renders in Dutch (nl, the default) or English (en); all
section headers, labels, and the methodology text are localized.
Output format
kartis-scan report produces GitHub-flavored Markdown. To get DOCX or PDF,
convert the Markdown with a tool such as pandoc.