- What is the BigFix Quantum Risk Analyzer scanner?
The BigFix Quantum Risk Analyzer scanner is a cross-platform executable that you download and run on your endpoints to scan for cryptographic assets.
- Quick Start
This guide reviews multiple options for configuring your scans, optimizing your performance, and viewing your data. However, for those users who want to quickly begin scanning, below are the most common scan configurations with the simplest output options.
- Installation
Below are the basic steps for getting started. For more advanced installation steps or integrations, contact your HCL account representative.
- Command Reference
When you are ready to begin scanning, you can configure your scan with various commands to customize the scope, output, features, and more. The following section provides reference tables with the available commands.
- Usage Examples
This section provides examples for common scans combining the available command options. All commands below assume a valid license key is configured.
- Hardware PQC Benchmark
The Hardware PQC Benchmark runs real cryptographic operations on the host CPU during the scan to measure whether the CPU is fast enough to sustain PQC workloads at production throughput.
- PQC Discovery Details
The BigFix Quantum Risk Analyzer scanner provides comprehensive detection and analysis of post-quantum cryptographic implementations, preparing your infrastructure for the quantum-safe future.
- Cipher Suite Discovery Details
The scanner performs active testing to discover all supported cryptographic configurations on remote services.
- Quantum Readiness Scoring
Learn how the BigFix Quantum Risk Analyzer scanner evaluates your organization's readiness for the post-quantum cryptography transition through comprehensive scoring algorithms.
- TLS Letter Grade System
In addition to the system-level 0-100 score, each TLS port, application, and the overall system receives a letter grade (A+ through F) derived from what the scanner observes on the wire: TLS protocol, key exchange, certificate, and cipher suite quality.
- Platform Support for Scans
The BigFix Quantum Risk Analyzer scanner supports Windows, macOS, and Linux platforms for cryptographic asset discovery.
- Performance Optimization
The scanner includes intelligent CPU throttling controls to manage system resource usage during intensive cipher enumeration scans.
- Advanced System Use
Advanced examples for enterprise security assessment, incident response, continuous monitoring, and VDI identity. All commands below assume a valid license key is configured.
- Filesystem Scanning Details
The scanner provides comprehensive filesystem scanning capabilities to discover cryptographic assets across your systems.
- VPN Client Support
The scanner supports detection of 19 VPN clients across Windows, macOS, and Linux platforms. Each client is assessed for post-quantum cryptography (PQC) readiness and migration status.
- Output Features: Split Outputs & Detail Level Control
The scanner provides two features for controlling output organization and size: split outputs (separate files per dataset type) and detail levels (control output verbosity).
- Frequently Asked Questions
This FAQ section provides answers to common questions about the BigFix Quantum Risk Analyzer scanner, its compliance with federal mandates, and how it helps organizations prepare for the post-quantum cryptography era.
- Appendix A: Output Formats
The scanner supports multiple output formats to suit integration, compliance, and reporting use cases: JSON, CBOM, OMB CSV, Flat NDJSON, HTML, and EventLog.
- Appendix B: Network Security
The scanner implements context-aware network security measures. SSRF protection applies only to integration service configurations (Kafka, Elasticsearch, Splunk, S3) while allowing full network access for legitimate security scanning via -host flags.
- Appendix C: Additional Security Considerations
Additional considerations for scanning, data privacy, and antivirus configuration.
- Appendix D: CPU Throttling Guidance
The -cputhrottle flag provides comprehensive control over CPU usage across all resource-intensive operations. This feature prevents system overload, ensures smooth operation alongside other applications, and provides predictable performance characteristics.
