Welcome to AI PQC Audit

AI PQC Audit is a comprehensive dual-track security platform featuring:

What This Platform Does

• 13 Audit Areas: Domain TLS, Documents, Networks, Devices, Code, Software, IoT, IAM, PKI, Cloud, Vendor, Email, Mobile, and Blockchain
• Proprietary AI Analysis: Uses advanced multi-AI orchestration with adaptive audit core for enterprise-grade security assessment
• CISO-Ready Reports: Executive summaries with individual asset analysis and prioritized action plans
• Latest Standards: Automatically updated with NIST and industry developments

Quick Start Process

1. Create an account and log in
2. Start a new audit session
3. Upload files or enter domains for scanning
4. Review AI-powered analysis results
5. Download comprehensive reports

Creating Your Account

1. Click "Start Free Trial" on the homepage
2. Enter your email address and create a secure password
3. Verify your email address (check spam folder if needed)
4. Complete your profile with organization details

Security Settings

After logging in, enhance your account security:

1. Go to your user dropdown → Security Settings
2. Set up Multi-Factor Authentication (MFA)
3. Choose between authenticator app or SMS verification
4. Save backup codes in a secure location

Organization Management

For team accounts:

• Create or join an organization
• Invite team members with role-based access
• Configure organization settings and preferences
• Set up shared audit templates

Creating a New Audit Session

1. Click "Start New Audit" from the homepage or dashboard
2. Enter a descriptive audit name (e.g., "Q4 2025 Security Assessment")
3. Select audit type: Comprehensive (recommended for full analysis)
4. Click "Start Audit" to create your session

Two-Track Audit System

Audit Session Management

Each audit session:

• Has a unique identifier for tracking
• Stores all scan results in one place
• Allows multiple scan types within the same session
• Generates consolidated reports across all scans

Planning Your Audit

File Uploads and Domain Scanning: Most scans require either file uploads (CSV, JSON, PDF, DOCX, ZIP) or direct domain entry. Prepare your data using our templates for best results.

Before starting, gather:

• Domain Lists: All organizational domains and subdomains (for direct entry)
• Network Inventory: CSV/JSON files with network configurations
• Device Lists: Hardware inventory with firmware versions (CSV format)
• Code Archives: Source code ZIP files for analysis
• Policy Documents: Cryptographic policies and procedures (PDF/DOCX)
• Configuration Files: YAML, JSON, PEM, P7B certificates
• Software Lists: Package inventories, requirements.txt files

Supported File Formats

Sample File Templates

Download pre-built templates for each scan type:

1. Go to the scan wizard
2. Select your desired scan type
3. Click "Download Template" for the appropriate file format
4. Fill in your organizational data
5. Upload the completed file

Data Preparation Tips

• Accuracy: Ensure all data is current and accurate
• Completeness: Include all relevant systems and components
• Privacy: Remove sensitive personal information before upload
• Format: Follow template structures exactly for best results
• Organization: Group related systems logically

Step-by-Step Scanning Process

1. Access Scan Wizard: From your audit session, click "Scan Files & Generate Reports"
2. Select Scan Type: Choose from 13 available audit areas
3. Upload Files or Enter Data:
   • For domains: Enter URLs separated by commas
   • For files: Upload your prepared files
   • For text: Paste configuration data directly
4. Initiate Scan: Click "Scan [Type] & Generate Report"
5. Wait for Analysis: AI engines process your data (typically 1-2 minutes)
6. Review Results: Automatic redirect to results page

Multi-AI Processing

Each scan uses multiple AI engines for comprehensive analysis:

• Analysis Engine Alpha: Advanced reasoning and comprehensive analysis
• Analysis Engine Beta: Safety-focused vulnerability assessment
• Analysis Engine Gamma: Multimodal analysis and advanced insights
• Analysis Engine Delta: Real-time threat intelligence

Monitoring Scan Progress

During scanning:

• Progress indicators show current processing stage
• Real-time logs display analysis steps
• Timeout protection prevents system overload
• Fallback analysis ensures results even if some engines fail

Multiple Scans per Session

Within one audit session, you can:

• Run multiple scan types sequentially
• Combine results in consolidated reports
• Track overall risk scores across all areas
• Generate comprehensive executive summaries

Risk Scoring System

Results Structure

Executive Summary

• Overall Risk Score: Numerical assessment (0-10 scale)
• Vulnerability Count: Total issues found by category
• Key Findings: Most critical vulnerabilities
• Business Impact: Risk assessment for organization

Individual Asset Analysis

For each asset (domain, device, file, etc.):

• Asset Name: Specific identifier
• Current State: Present configuration/status
• Vulnerability: Specific security weakness
• Action Required: Step-by-step remediation
• Business Impact: Operational consequences
• Timeline: Recommended implementation schedule
• Effort Level: Resource requirements (Low/Medium/High)

Forced Ranking System

Within each risk category, items are ranked by priority:

• Critical-1, Critical-2, Critical-3 (highest to lower priority)
• Moderate-1, Moderate-2, Moderate-3
• Low-1, Low-2, Low-3

Navigation Tabs

Results page organizes findings by scan type:

• Domain: TLS/SSL analysis results
• Document: Policy analysis findings
• Network: Infrastructure vulnerabilities
• Device: Hardware assessment results
• Code: Software vulnerability analysis
• Software: Package and dependency analysis
• IoT/Edge: IoT device security assessment
• IAM: Identity management analysis
• PKI: Certificate infrastructure review
• Cloud: Cloud security configuration
• Vendor: Third-party risk assessment
• Email: Email system security
• Mobile: Mobile application analysis
• Blockchain: Blockchain security review

Report Generation

AI PQC Audit provides multiple report formats for different audiences:

Text Reports (Copy Function)

• Access: Click "Copy Report" button on results page
• Content: Complete text version of analysis
• Use Case: Quick sharing, email communication, internal documentation
• Format: Structured text with all individual asset analysis

PDF Reports

• Access: Click "Download PDF Report" button
• Content: Professional formatted document
• Use Case: Executive presentations, formal documentation, archival
• Features: Charts, tables, executive summary, detailed findings

Report Contents

Executive Summary Section

• Overall risk assessment
• Key vulnerability statistics
• Business impact analysis
• Compliance status overview
• Recommended next steps

Technical Analysis Section

• Detailed vulnerability descriptions
• Individual asset assessments
• Risk categorization and ranking
• Specific remediation steps
• Implementation timelines

Methodology Section

• AI analysis engine details
• Assessment criteria used
• Compliance frameworks referenced
• Limitations and assumptions

Advanced Analytics

Access additional analysis through navigation menu:

• Analytics Dashboard: Executive charts and trends
• Q-Day Monitor: Quantum threat timeline analysis
• Multi-AI Engine: Consensus analysis details
• Compliance Dashboard: Standards alignment tracking
• Remediation Workflows: Implementation planning tools

Data Export Options

• Raw Data: CSV exports of scan results
• API Access: Programmatic data retrieval
• Integration: Connect with SIEM and GRC tools
• Historical Data: Trend analysis across multiple audits

Multi-AI Engine Analysis

Access detailed AI analysis through Analytics → Multi-AI Engine:

• Consensus Analysis: Compare results across 4 AI engines
• Confidence Scoring: Reliability metrics for each finding
• Engine Performance: Track AI engine accuracy and speed
• Custom Prompts: Advanced users can customize analysis criteria

Q-Day Timeline Monitoring

Quantum threat assessment via Analytics → Q-Day Monitor:

• Q-Day Analysis: X + Y > Z assessment for your organization
• Threat Timeline: Real-time quantum computing progress tracking
• Migration Planning: Automated post-quantum migration timelines
• Risk Forecasting: Predictive analysis of quantum threats

Compliance Dashboard

Standards alignment tracking:

• NIST Standards: Automated compliance checking
• FIPS Validation: Federal standards alignment
• Industry Frameworks: ISO, SOC, GDPR compliance
• Custom Standards: Organization-specific requirements

Organization Management

For team and enterprise users:

• Role-Based Access: Admin, Manager, Analyst, Viewer roles
• Team Collaboration: Shared audit sessions and templates
• Centralized Reporting: Organization-wide security posture
• Policy Management: Custom organizational policies

Security Monitoring

Enterprise security features:

• Security Monitor: Real-time threat detection for platform usage
• Audit Logging: Complete activity tracking
• IP Monitoring: Geographic and behavioral analysis
• Alert System: Email and SMS notifications for security events

Post-Quantum Security

Platform self-protection features:

• Quantum-Resistant Encryption: Platform uses PQ algorithms
• Algorithm Testing: Validate quantum-safe implementations
• Security Metrics: Real-time cryptographic status
• Research Integration: Latest PQ research integration

Automated Updates

Daily PQ resources updates (1-5 AM UTC):

• NIST Standards: Latest cryptographic standards
• Industry Research: Academic and commercial developments
• Threat Intelligence: Quantum computing progress
• Algorithm Updates: New post-quantum algorithms

Common Issues and Solutions

Login and Authentication

File Upload Issues

Scan Processing Problems

Results Not Displaying

PDF Generation Issues

Error Codes

Performance Optimization

• File Size: Keep uploads under recommended limits
• Browser: Use Chrome, Firefox, or Safari for best performance
• Network: Stable broadband connection recommended
• Concurrent Scans: Run one scan at a time for optimal performance
• Data Quality: Clean, well-formatted data processes faster

Getting Additional Help

If you continue experiencing issues:

• Submit Ticket: Support → Submit Ticket with detailed description
• Live Chat: Available during business hours
• Email Support: Include session ID and error details
• FAQ: Check FAQ section for additional answers
• Video Tutorials: Step-by-step visual guides