# Eoncore Documentation

> Documentation for Eoncore's software products — post-quantum secure networking and communication, network monitoring, and cryptographic visibility.

Each page below is also available as raw Markdown by appending `index.md` to its URL.
Full documentation in one file: https://docs.eoncore.eu/llms-full.txt
Company, products and assessments, from the vendor's side: https://eoncore.eu/ (index for machines: https://eoncore.eu/llms.txt).

## EON Path
- [EON Path](https://docs.eoncore.eu/eon-path/): EON Path is a post-quantum secure VPN — WireGuard transport, ML-DSA-87 challenge-response authentication, and stateless IPv4/IPv6 (SIIT) translation inside the tunnel.
- [Concepts](https://docs.eoncore.eu/eon-path/concepts/): How EON Path works — architecture, cryptography, tunneling, and address translation.
- [Architecture](https://docs.eoncore.eu/eon-path/concepts/architecture/): The components that make up EON Path — server daemon, API, desktop client, and mobile apps — and how they interact.
- [Post-Quantum Cryptography](https://docs.eoncore.eu/eon-path/concepts/post-quantum/): Why EON Path uses post-quantum cryptography, how the ML-DSA-87 challenge-response authentication flow works, and how server identity pinning protects it.
- [Tunneling](https://docs.eoncore.eu/eon-path/concepts/tunneling/): WireGuard as EON Path's transport, keyed from a post-quantum authenticated exchange, and multi-server client support.
- [Address Translation (SIIT)](https://docs.eoncore.eu/eon-path/concepts/siit/): Stateless IPv4/IPv6 translation inside the EON Path tunnel, when it applies, and why it exists.
- [Install](https://docs.eoncore.eu/eon-path/install/): How to install the EON Path server, desktop client, and mobile apps.
- [Server](https://docs.eoncore.eu/eon-path/install/server/): Install the EON Path server on Debian or Ubuntu using the .deb packages, start the systemd services, and open the firewall for WireGuard.
- [Desktop](https://docs.eoncore.eu/eon-path/install/desktop/): Supported platforms for the EON Path desktop client, how to build and sign it, the privileges each connection method needs, and how to connect to a server for the first time.
- [Mobile](https://docs.eoncore.eu/eon-path/install/mobile/): Current status of the EON Path iOS and Android apps.
- [Configuration](https://docs.eoncore.eu/eon-path/configuration/): Where EON Path's configuration files live, the formats they use, and links to the full server and client reference.
- [Server](https://docs.eoncore.eu/eon-path/configuration/server/): Configuration reference for the eonpath-server daemon — the environment file, server.conf with endpoint registration and standby/active state, WireGuard VPN settings, and the SSH proxy method's post-quantum key exchange options.
- [Client](https://docs.eoncore.eu/eon-path/configuration/client/): Configuration reference for eonpath.conf — the desktop and mobile client configuration file, its top-level settings, and per-endpoint options.
- [API](https://docs.eoncore.eu/eon-path/api/): EON Path's two protocol surfaces — the ML-DSA-87 challenge-response VPN authentication handshake, and the REST management API for accounts, public keys, IP leases, endpoint registration, and licensing.
- [Security Model](https://docs.eoncore.eu/eon-path/security/): EON Path's threat model, ML-DSA-87 authentication, mandatory server identity pinning, handshake transcript binding, and WireGuard transport — plus how to report a vulnerability.
- [FAQ](https://docs.eoncore.eu/eon-path/faq/): Frequently asked questions about EON Path — why post-quantum now, compatibility with WireGuard, performance, IPv6-only deployments, platform support, and licensing.

## Eon Insights
- [Eon Insights](https://docs.eoncore.eu/eon-insights/): Eon Insights is a network security monitoring platform that captures TLS, QUIC, SSH, IKE/IPsec, and OpenVPN traffic, scans hosts for TLS and open-port weaknesses, tracks software dependencies for vulnerabilities, and reports compliance against PCI DSS, NIST, GDPR, HIPAA, NIS2, and DORA.
- [Getting Started](https://docs.eoncore.eu/eon-insights/getting-started/): Walkthrough for building Eon Insights from source, initializing ClickHouse, and running a first capture, scan, and dashboard view.
- [Dashboard](https://docs.eoncore.eu/eon-insights/dashboard/): Svelte 5 single-page dashboard that visualizes hosts, clients, handshakes, certificates, compliance, and SCA data from the insights API.
- [Compliance](https://docs.eoncore.eu/eon-insights/compliance/): How Eon Insights scores captured traffic and certificates against PCI-DSS, NIST, GDPR, HIPAA, NIS2, and DORA compliance frameworks.
- [Tools](https://docs.eoncore.eu/eon-insights/tools/): Overview and reference table of all 15 Eon Insights command-line tools and daemons and their build/run conventions.
- [insights](https://docs.eoncore.eu/eon-insights/tools/insights/): Main REST API server backing the dashboard, handling authentication, data queries, and background scan/task orchestration.
- [capture](https://docs.eoncore.eu/eon-insights/tools/capture/): Passive capture tool that extracts TLS, QUIC, SSH, IKE/IPsec, and OpenVPN handshake metadata from live traffic or PCAP files.
- [hostsync](https://docs.eoncore.eu/eon-insights/tools/hostsync/): Daemon that discovers new hosts and clients from captured traffic and enqueues TLS and nmap scans for them.
- [tlsscand](https://docs.eoncore.eu/eon-insights/tools/tlsscand/): Asynq worker daemon that processes queued TLS scan tasks against discovered hosts.
- [nmapscand](https://docs.eoncore.eu/eon-insights/tools/nmapscand/): Asynq worker daemon that processes queued nmap port/service/OS scan tasks against discovered hosts.
- [tlsscan](https://docs.eoncore.eu/eon-insights/tools/tlsscan/): One-shot CLI that scans a single TLS/SSL endpoint for protocol versions, cipher suites, and known vulnerabilities.
- [tlslab](https://docs.eoncore.eu/eon-insights/tools/tlslab/): TLS protocol simulator serving configurable, reproducible endpoints for testing capture, scan, and detection tools.
- [datagen](https://docs.eoncore.eu/eon-insights/tools/datagen/): CLI that populates ClickHouse with realistic synthetic hosts, clients, certificates, and TLS handshakes for development and demos.
- [ja3import](https://docs.eoncore.eu/eon-insights/tools/ja3import/): CLI that imports JA3 fingerprint data into ClickHouse from built-in browser lists, Trisul, SSLBL, and CSV seed files.
- [fingerprintd](https://docs.eoncore.eu/eon-insights/tools/fingerprintd/): Standalone HTTP API serving the centralized TLS fingerprint database with scheduled aggregation.
- [pcapworker](https://docs.eoncore.eu/eon-insights/tools/pcapworker/): Asynq worker daemon that extracts TLS handshakes from user-uploaded PCAP files and writes them to ClickHouse.
- [notifyd](https://docs.eoncore.eu/eon-insights/tools/notifyd/): Scheduler-and-worker daemon that sends certificate-expiry and malicious-fingerprint alerts via email, Slack, or webhook.
- [sca](https://docs.eoncore.eu/eon-insights/tools/sca/): One-shot CLI that scans a local or remote Git repository's Maven, npm, Go, and Cargo dependencies for known vulnerabilities.
- [scascand](https://docs.eoncore.eu/eon-insights/tools/scascand/): Daemon that polls for pending repository scans and runs Software Composition Analysis dependency checks.
- [devctl](https://docs.eoncore.eu/eon-insights/tools/devctl/): Terminal UI for starting, stopping, and monitoring every Eon Insights service during local development.

## Eon Aethis
- [Eon Aethis](https://docs.eoncore.eu/eon-aethis/): Eon Aethis is an AI-driven monitoring platform built on Icinga 2 — active checks, passive network visibility (Zeek, NetFlow/IPFIX/sFlow), and natural-language configuration in one deployment.
- [Architecture](https://docs.eoncore.eu/eon-aethis/architecture/): The central platform services and the distributed Agent, Probe, and Perimeter Probe components, and how they interact.
- [Installation](https://docs.eoncore.eu/eon-aethis/install/): Deploy the Eon Aethis central platform with Docker Compose, for development and for production.
- [Agents & Probes](https://docs.eoncore.eu/eon-aethis/agents-and-probes/): Install the Aethis Agent, Aethis Probe, and Perimeter Probe — the distributed collection components that pair with the central platform.
- [Configuration](https://docs.eoncore.eu/eon-aethis/configuration/): Environment variables for the central platform and config file references for the Agent, Probe, and Perimeter Probe.

## Eon Kartis
- [Eon Kartis](https://docs.eoncore.eu/eon-kartis/): Eon Kartis is an external cryptography attack-surface scanner for post-quantum-readiness audits — it discovers an organization's internet-facing domains and hosts, scans them for TLS/SSH/crypto posture, classifies what it finds as shadow, rogue or drift, and serves the result through a customer portal and an API.
- [Scanning](https://docs.eoncore.eu/eon-kartis/scanning/): The discovery and scan pipeline, the depth/category model, and the CLI and API for running scans.
- [Portal](https://docs.eoncore.eu/eon-kartis/portal/): The customer-facing Kartis portal — pages, tenancy, login and MFA, domain verification, and the scan schedule.
- [Reports](https://docs.eoncore.eu/eon-kartis/reports/): Generating and anonymizing Markdown reports from consolidated scan results.
- [Configuration](https://docs.eoncore.eu/eon-kartis/configuration/): Config files, scan profiles, the portal block, environment variables, and bearer tokens for kartis-scan, kartis-discovery, kartis-recon, and kartis-scheduler.

## Eon Phoenix
- [Eon Phoenix](https://docs.eoncore.eu/eon-phoenix/): Eon Phoenix is a post-quantum end-to-end encrypted mail and messaging client, with D-Mail (Discrete Mail) chat threads and the Codex per-domain directory keyserver that makes key discovery work across domains.
- [Client](https://docs.eoncore.eu/eon-phoenix/client/): Using the Eon Phoenix app on desktop and Android — accounts, encrypted mail, D-Mail, group chat, and interface settings.
- [Getting Started](https://docs.eoncore.eu/eon-phoenix/client/getting-started/): Installing Eon Phoenix, adding your first mail account, and backing up or moving your encryption identity to a new device.
- [Encrypted Mail](https://docs.eoncore.eu/eon-phoenix/client/encrypted-mail/): Sending and receiving Eon-PQC encrypted mail, key discovery and verification, and the Apax, Confidential, Dual-control, and Discrete message options.
- [D-Mail](https://docs.eoncore.eu/eon-phoenix/client/d-mail/): Chat-style encrypted direct messages inside your inbox — subject threads, read-once messages, the Discrete toggle, and encrypted group chat.
- [Interface](https://docs.eoncore.eu/eon-phoenix/client/interface/): Themes, fonts, layout, folders, tags, and other appearance settings in the Eon Phoenix desktop app.
- [Codex Server](https://docs.eoncore.eu/eon-phoenix/codex-server/): What the Codex per-domain public-key directory is, its authoritative and open-enrollment directory modes, and its security model.
- [Install](https://docs.eoncore.eu/eon-phoenix/codex-server/install/): Requirements, packaging, installing one or two eon-keyserver instances, post-install DNS/TLS setup, and troubleshooting.
- [Configuration](https://docs.eoncore.eu/eon-phoenix/codex-server/configuration/): Env files, command-line flags, the administrative listener, Dovecot mailbox-bound auth, DNS records, and deployment topology for eon-keyserver.
- [Operations](https://docs.eoncore.eu/eon-phoenix/codex-server/operations/): The Codex HTTP API surface, the administrative API, mailauth/mailverify flows, key sets and key replacement, escrow tiers, signing-key rotation, and day-to-day service management.