PQC dashboard: The crypto-vulnerable asset overview
Axiad Mesh tracks the machines, software, and cryptographic assets in your environment and their exposure to post-quantum cryptography (PQC) risk. The Crypto-vulnerable asset overview — the PQC dashboard — is where you browse those assets, understand why each one carries risk, and act on what you find.
Two dashboards, one switch
Mesh has two primary dashboards, and the Identify switch toggles between them:
- Identity risk assessment — human identities: the people in your organization and the accounts, credentials, and entities correlated to them.
- Crypto-vulnerable asset overview (the PQC dashboard) — the machine, software, and crypto assets in your environment and the risks they carry.
Mesh remembers whether your organization works primarily in the identity or asset dashboard and takes you there when you sign in, so you don't have to pick a dashboard on every visit. You can still switch dashboards at any time during a session — the redirect only happens once, at sign-in. To change the default dashboard for your organization, contact Axiad support.
The Identify switch is separate from the Classic | Agentic dashboard mode toggle: Identify chooses which classic dashboard you're on, while the mode toggle switches between classic dashboards and Generative UI workspaces.
In Agentic mode, the same crypto estate can be composed as a workspace — for example an operator view with discovery coverage, compliance status, algorithm lifecycle, and crypto-agility breakdowns:
Asset types
The asset inventory covers three asset types, each with its own tab in the asset list. The same three types are available programmatically through the Analytics OData API:
| Asset type | What it covers | OData entity set |
|---|---|---|
| Machine | Machines in your environment; key attributes include the operating system version | MachineAssets (entity type MachineAsset) |
| Software | Software products, with a version and a normalized product name | SoftwareAssets (entity type SoftwareAsset) |
| Crypto (certificate) | Certificates and other cryptographic elements | CryptoElements (entity type CryptoElement) |
The asset list
Each asset type has its own list. All three lists behave the same way.
Sorting
Every column is sortable, in ascending or descending order. Each asset tab keeps its own sort state — sorting one tab doesn't affect the others — and your sort state is preserved when you page through results or navigate back in the browser.
Status column
The Status column appears directly after the asset name and shows the current lifecycle status of each asset, sourced from your ServiceNow CMDB integration. The available values depend on the asset type and on what the source system reports. Assets with no reported status show Unknown, and Unknown always sorts last, keeping assets that need attention easy to triage.
Key attributes
Alongside the name, status, and risk score, the asset list and the asset details view show these attributes:
| Attribute | Applies to | Description |
|---|---|---|
| OS Version | Machine assets | The machine's operating system version (for example, 10.0.19045) |
| Version | Software assets | The software product's version (for example, 2.3.1) |
| Product | Software assets | The normalized product name |
| Mesh unique asset ID | All asset types | A stable identifier assigned by Mesh |
| External ID | All asset types | The asset's identifier in the source system |
If an attribute isn't populated for an asset, the column shows a dash (-).
OS Version and Product values depend on data from your connected sources and
can show a dash until the next connector sync completes.
Advanced Filters
An Advanced Filters box on each asset tab lets you narrow the list with column-based filters from a single place:
- Filter controls match each column's data type: text search, dropdown, or range.
- The table updates in real time as you apply filters.
- A single reset control clears all applied filters at once.
- Active filters are clearly indicated and stay applied until you reset them, including across data refreshes.
- If no assets match, an empty state appears with an option to reset the filters.
- Filtering handles mixed or incomplete column data gracefully: invalid values are ignored, and unknown values are grouped at the end.
OS Version (Machine assets) and Version (Software assets) are available as filter fields. Both use text matching — contains, equals, matches one of a list, and is-empty checks — consistent with how they sort. There is no version-aware greater-than or less-than comparison. Each field applies only to its own asset type and is marked not applicable on other tabs.
The NHI dashboard, the asset lists, and the asset details page share one filter area with the same interaction model, and your filter selections carry across NHI screens for the rest of your session — drilling into a detail page doesn't drop your context.
Asset details
Select an asset to open its details page.
Risk score breakdown
Point to the asset's risk score to see why the asset has its score. The tooltip breaks the score down into:
- A header: "The asset's score reflects:"
- One line per direct risk category on the asset, with its count — for example, "Risks associated to this asset: No owner (3)"
- A summary of inherited risks — for example, "Risks inherited from 38 correlated assets (190)"
Severity is conveyed by the color of the score. The same tooltip appears on the asset list and on the asset details page, so a score means the same thing in both views.
The Risks section
The Risks section of the asset details page explains each risk tag on the asset:
- Simple risks state the condition plainly — for example, "This asset has no assigned owner" or "This asset is not linked to any hardware asset."
- Policy-based risks, such as noncompliance with a post-quantum cryptography (PQC) policy, show the outcome of the policy assessment, the specific attributes that didn't comply, and the name of the policy that triggered the tag.
Each tag opens its own explanation. Long explanations open in a dismissible dialog, and if risk data is missing for an asset, a generic explanation is shown.
Certificate details
For crypto assets, certificate cards display the Subject DN, Serial Number, Issuer DN, Signature Algorithm, Key Size, and Owner. Together these fields let you uniquely identify each certificate — including certificates that share the same subject — and match it to records in external systems such as ServiceNow.
Correlated assets
The Correlated Assets section lists the assets correlated to the one you're viewing, in a table that matches the main asset list:
- Sort and filter on all relevant columns, with pagination when an asset has many correlations.
- Correlated assets are grouped into Software, Certificate, and Machine tabs, with a filtered count reported for each tab — including tabs with zero matches.
- A Filters button next to the section header opens the same filter dialog you use on the main asset list, with the same five categories: Risk, Platforms, Owners, Organizations, and Locations. Active filters render as chips that you can remove individually or clear all at once.
- Filters applied here are scoped to the Correlated Assets section and kept separate from the main asset list filters. They persist as you switch tabs and as you move from asset to asset during the same session.
Risk tags
Risk tags label the individual risks on an asset:
- Tags are shown without the asset-type suffix — for example, "PQC noncompliant" rather than "PQC noncompliant: Crypto". The asset type is visible elsewhere on the page.
- Hover over a tag in the asset list for a summary tooltip. Open the full explanation from the Risks section on the asset details page.
- Examples of tags you might see include PQC noncompliant, No owner, No linked asset, and Insufficient information. The exact set depends on the risk conditions Mesh detects and the risk policies configured for your organization. For questions about policy configuration, such as PQC compliance policies, contact your Axiad representative.
Take action from asset details
The asset details page offers two actions:
- Delegate investigation — assign the investigation of the asset to a teammate. See Delegate remediation.
- View in ServiceNow — open the matching record in ServiceNow, signing you in through single sign-on. If the ServiceNow integration isn't enabled for your tenant, the button is disabled with a message that says so.
Export asset data
You can export from any NHI asset screen. When you start an export, Mesh asks you to choose:
- All data — exports the full dataset, regardless of any active filters.
- Filtered data — exports only the records matching your active filters, so the export reflects exactly what you filtered for on screen.
Exports and downloaded files always use UTC timestamps, regardless of your tenant's timestamp display setting, so shared data stays consistent. While an export is running, the export button is disabled and the job's progress is shown.
For more on report generation and export formats, see Reports and exports.