# PQC dashboard: The crypto-vulnerable asset overview

Axiad Mesh tracks the machines, software, and cryptographic assets in your
environment and their exposure to post-quantum cryptography (PQC) risk. The
**Crypto-vulnerable asset overview** — the PQC dashboard — is where you browse
those assets, understand why each one carries risk, and act on what you find.

## Two dashboards, one switch

Mesh has two primary dashboards, and the **Identify** switch toggles between
them:

- **Identity risk assessment** — human identities: the people in your
  organization and the accounts, credentials, and entities correlated to them.
- **Crypto-vulnerable asset overview** (the PQC dashboard) — the machine,
  software, and crypto assets in your environment and the risks they carry.

Mesh remembers whether your organization works primarily in the identity or
asset dashboard and takes you there when you sign in, so you
don't have to pick a dashboard on every visit. You can still switch dashboards
at any time during a session — the redirect only happens once, at sign-in. To
change the default dashboard for your organization, contact Axiad support.

The **Identify** switch is separate from the **Classic | Agentic** dashboard
mode toggle: Identify chooses which classic dashboard you're on, while the
mode toggle switches between classic dashboards and
[Generative UI](./generative-ui.md) workspaces.

In Agentic mode, the same crypto estate can be composed as a workspace — for
example an operator view with discovery coverage, compliance status,
algorithm lifecycle, and crypto-agility breakdowns:

![An Operator workspace in Generative UI showing discovery coverage, compliance status, NIST security-strength categories, algorithm lifecycle, and a crypto-agility heatmap](/img/generative-ui/operator-workspace.png)

## Asset types

The asset inventory covers three asset types, each with its own tab in the
asset list. The same three types are available programmatically through the
[Analytics OData API](../api-reference/analytics-odata.mdx):

| Asset type | What it covers | OData entity set |
|---|---|---|
| Machine | Machines in your environment; key attributes include the operating system version | `MachineAssets` (entity type `MachineAsset`) |
| Software | Software products, with a version and a normalized product name | `SoftwareAssets` (entity type `SoftwareAsset`) |
| Crypto (certificate) | Certificates and other cryptographic elements | `CryptoElements` (entity type `CryptoElement`) |

## The asset list

Each asset type has its own list. All three lists behave the same way.

### Sorting

Every column is sortable, in ascending or descending order. Each asset tab
keeps its own sort state — sorting one tab doesn't affect the others — and
your sort state is preserved when you page through results or navigate back
in the browser.

### Status column

The Status column appears directly after the asset name and shows the current
lifecycle status of each asset, sourced from your ServiceNow CMDB integration.
The available values depend on the asset type and on what the source system
reports. Assets with no reported status show **Unknown**, and Unknown always
sorts last, keeping assets that need attention easy to triage.

### Key attributes

Alongside the name, status, and risk score, the asset list and the asset
details view show these attributes:

| Attribute | Applies to | Description |
|---|---|---|
| OS Version | Machine assets | The machine's operating system version (for example, 10.0.19045) |
| Version | Software assets | The software product's version (for example, 2.3.1) |
| Product | Software assets | The normalized product name |
| Mesh unique asset ID | All asset types | A stable identifier assigned by Mesh |
| External ID | All asset types | The asset's identifier in the source system |

If an attribute isn't populated for an asset, the column shows a dash (`-`).
OS Version and Product values depend on data from your connected sources and
can show a dash until the next connector sync completes.

### Advanced Filters

An **Advanced Filters** box on each asset tab lets you narrow the list with
column-based filters from a single place:

- Filter controls match each column's data type: text search, dropdown, or
  range.
- The table updates in real time as you apply filters.
- A single reset control clears all applied filters at once.
- Active filters are clearly indicated and stay applied until you reset them,
  including across data refreshes.
- If no assets match, an empty state appears with an option to reset the
  filters.
- Filtering handles mixed or incomplete column data gracefully: invalid values
  are ignored, and unknown values are grouped at the end.

**OS Version** (Machine assets) and **Version** (Software assets) are
available as filter fields. Both use text matching — contains, equals, matches
one of a list, and is-empty checks — consistent with how they sort. There is
no version-aware greater-than or less-than comparison. Each field applies only
to its own asset type and is marked not applicable on other tabs.

The NHI dashboard, the asset lists, and the asset details page share one
filter area with the same interaction model, and your filter selections carry
across NHI screens for the rest of your session — drilling into a detail page
doesn't drop your context.

## Asset details

Select an asset to open its details page.

### Risk score breakdown

Point to the asset's risk score to see why the asset has its score. The
tooltip breaks the score down into:

- A header: "The asset's score reflects:"
- One line per direct risk category on the asset, with its count — for
  example, "Risks associated to this asset: No owner (3)"
- A summary of inherited risks — for example, "Risks inherited from 38
  correlated assets (190)"

Severity is conveyed by the color of the score. The same tooltip appears on
the asset list and on the asset details page, so a score means the same thing
in both views.

### The Risks section

The Risks section of the asset details page explains each risk tag on the
asset:

- **Simple risks** state the condition plainly — for example, "This asset has
  no assigned owner" or "This asset is not linked to any hardware asset."
- **Policy-based risks**, such as noncompliance with a post-quantum
  cryptography (PQC) policy, show the outcome of the policy assessment, the
  specific attributes that didn't comply, and the name of the policy that
  triggered the tag.

Each tag opens its own explanation. Long explanations open in a dismissible
dialog, and if risk data is missing for an asset, a generic explanation is
shown.

### Certificate details

For crypto assets, certificate cards display the **Subject DN**, **Serial
Number**, **Issuer DN**, **Signature Algorithm**, **Key Size**, and **Owner**.
Together these fields let you uniquely identify each certificate — including
certificates that share the same subject — and match it to records in
external systems such as ServiceNow.

### Correlated assets

The Correlated Assets section lists the assets correlated to the one you're
viewing, in a table that matches the main asset list:

- Sort and filter on all relevant columns, with pagination when an asset has
  many correlations.
- Correlated assets are grouped into Software, Certificate, and Machine tabs,
  with a filtered count reported for each tab — including tabs with zero
  matches.
- A **Filters** button next to the section header opens the same filter dialog
  you use on the main asset list, with the same five categories: Risk,
  Platforms, Owners, Organizations, and Locations. Active filters render as
  chips that you can remove individually or clear all at once.
- Filters applied here are scoped to the Correlated Assets section and kept
  separate from the main asset list filters. They persist as you switch tabs
  and as you move from asset to asset during the same session.

## Risk tags

Risk tags label the individual risks on an asset:

- Tags are shown without the asset-type suffix — for example, "PQC
  noncompliant" rather than "PQC noncompliant: Crypto". The asset type is
  visible elsewhere on the page.
- Hover over a tag in the asset list for a summary tooltip. Open the full
  explanation from the Risks section on the asset details page.
- Examples of tags you might see include **PQC noncompliant**, **No owner**,
  **No linked asset**, and **Insufficient information**. The exact set depends
  on the risk conditions Mesh detects and the risk policies configured for
  your organization. For questions about policy configuration, such as PQC
  compliance policies, contact your Axiad representative.

## Take action from asset details

The asset details page offers two actions:

- **Delegate investigation** — assign the investigation of the asset to a
  teammate. See [Delegate remediation](../concepts/delegation.md).
- **View in ServiceNow** — open the matching record in ServiceNow, signing
  you in through single sign-on. If the ServiceNow integration isn't enabled
  for your tenant, the button is disabled with a message that says so.

## Export asset data

You can export from any NHI asset screen. When you start an export, Mesh asks
you to choose:

- **All data** — exports the full dataset, regardless of any active filters.
- **Filtered data** — exports only the records matching your active filters,
  so the export reflects exactly what you filtered for on screen.

Exports and downloaded files always use UTC timestamps, regardless of your
tenant's timestamp display setting, so shared data stays consistent. While an
shown.

For more on report generation and export formats, see
[Reports and exports](./reports-and-exports.md).