Your visible cryptographic posture

Discover exposed services, cryptography, trust relationships, and infrastructure dependencies using open-source intelligence and active probing.

pq-map

Map visible cryptographic posture

Discover hosts, services, trust chains and crypto relationships.

Discovery · Mapping

See it in action ↓ GitHub ↗

pq-pulse

Verify cryptographic posture

Actively inspect endpoints, negotiated cryptography and PQC support.

Active probing

See it in action ↓ GitHub ↗

Collect the facts. Improve the posture.

Turn observable infrastructure and cryptographic evidence into a baseline for continuous improvement.

Public infrastructure

pq-map

Discovery + mapping

hosts · services · trust

pq-pulse

Active probing

negotiated crypto · PQC

Cryptographic visibility

baseline · exposure · dependencies · migration

pq-map

Map publicly visible cryptographic posture

Discover exposed services and map the cryptographic, trust, and infrastructure relationships between them.

pq-map nbp.pl --ports

Discovered names: 92

Exposed (54)

Host / service Service Observed KX
adfs.nbp.pl TLS:443 secp256r1
www.adfs.nbp.pl TLS:443 secp256r1
akademia.nbp.pl TLS:443 X25519MLKEM768
amakro.nbp.pl TLS:443 X25519
www.amakro.nbp.pl TLS:443 X25519
bankandcredit.nbp.pl TLS:443 X25519MLKEM768
www.bankandcredit.nbp.pl TLS:443 X25519MLKEM768
bankikredyt.nbp.pl TLS:443 X25519MLKEM768
www.bankikredyt.nbp.pl TLS:443 X25519MLKEM768
biblioteka.nbp.pl TLS:443 secp256r1
bik.nbp.pl TLS:443 X25519MLKEM768
www.bik.nbp.pl TLS:443 X25519MLKEM768
click.nbp.pl TLS:443 X25519
connect.vc.nbp.pl TLS:443 X25519
cp.nbp.pl TLS:443 X25519MLKEM768
www.cp.nbp.pl TLS:443 X25519MLKEM768
docert.nbp.pl TLS:443 X25519
www.docert.nbp.pl TLS:443 X25519
e-zamowienia.nbp.pl TLS:443 X25519
www.e-zamowienia.nbp.pl TLS:443 X25519
elektrocb.nbp.pl TLS:443 X25519
ewib.nbp.pl TLS:443 secp256r1
exp-e.vc.nbp.pl TLS:443 X25519
exp-e1.vc.nbp.pl TLS:443 X25519
hda-test.nbp.pl TLS:443 secp256r1
hda.nbp.pl TLS:443 secp256r1
kantor.nbp.pl TLS:443 secp256r1
www.kantor.nbp.pl TLS:443 secp256r1
kolekcjoner.nbp.pl TLS:443 X25519MLKEM768
login-biblioteka.nbp.pl TLS:443 X25519
mob.nbp.pl TLS:443 X25519
nbe.nbp.pl TLS:443 X25519
nbp.pl TLS:443 X25519MLKEM768
ph.nbp.pl TLS:443 secp384r1
pki.nbp.pl TLS:443 X25519
www.pki.nbp.pl TLS:443 X25519
pre.nbp.pl TLS:443 X25519MLKEM768
prezes.nbp.pl TLS:443 X25519MLKEM768
www.prezes.nbp.pl TLS:443 X25519MLKEM768
sprawozdawczosc.nbp.pl TLS:443 secp256r1
www.sprawozdawczosc.nbp.pl TLS:443 secp256r1
swp.nbp.pl TLS:443 secp256r1
www.swp.nbp.pl TLS:443 secp256r1
swptest.nbp.pl TLS:443 secp256r1
sws-test.nbp.pl TLS:443 secp256r1
sws.nbp.pl TLS:443 secp256r1
test-kantor.nbp.pl TLS:443 X25519
test-sprawozdawczosc.nbp.pl TLS:443 secp256r1
www.test-sprawozdawczosc.nbp.pl TLS:443 secp256r1
test.zloteszkoly.nbp.pl TLS:443 X25519
wnioski-azu.nbp.pl TLS:443 secp256r1
wnioski-azua.nbp.pl TLS:443 secp256r1
zamowienia.nbp.pl TLS:443 X25519
www.zamowienia.nbp.pl TLS:443 X25519

Resolving (17)

autodiscover.nbp.plazu.nbp.plwww.azu.nbp.pleas.nbp.plhd-test.idpt.nbp.plhd-test.nbp.plhd.nbp.plmisp.nbp.plmx1c.nbp.plmx1r.nbp.ploutlook.nbp.plsipteams.nbp.plsipteams1.nbp.plsis.nbp.plsisa.nbp.plsisu.nbp.plwnioski-azuu.nbp.pl

PKI-only (21)

backsystem.mobywatel.nbp.pldev.cp.nbp.plenbe.nbp.pleurexetest.nbp.plwww.ewib.nbp.plews.nbp.plexe.nbp.plexetest.nbp.plexp-e-cluster.vc.nbp.plguest1-portal.nbp.plwww.guest1-portal.nbp.plguest2-portal.nbp.plwww.guest2-portal.nbp.plidpt.nbp.plkomunikatrpp-p.nbp.plwww.komunikatrpp-p.nbp.plkomunikatrpp.nbp.plwww.komunikatrpp.nbp.plmx.nbp.plwww.test-kantor.nbp.plvc.nbp.pl
_sip._tls.nbp.pl SIP/TLS → sipdir.online.lync.com:443 MX → mx1c.nbp.pl (10) MX → mx1r.nbp.pl (10)

pq-pulse

Probe cryptographic posture

Inspect exposed endpoints to see what cryptography is actually negotiated, whether PQC is present, and where that cryptography terminates — on your infrastructure, a cloud/CDN edge, or another operator.

pq-pulse nbp.pl
checked: 2026-09-28 14:40 +02:00

WEB

endpoint

443/tcp reachable
TLS TLS 1.3
KX X25519MLKEM768
symmetric AES-128
PQ yes

termination

provider Imperva

network

IP 45.223.164.250
PTR -
ASN AS19551 INCAPSULA
RDAP THALES-IMPERVA-NA4-AGG-45-223

MAIL

MX 10 mx1r.nbp.pl
25/tcp unreachable
587/tcp unreachable
465/tcp unreachable

network

IP 195.85.196.53
PTR mx1r.nbp.pl
ASN AS21328 NBP-AS
RDAP NBPNET

attribution

infrastructure ambiguous
operator -
provider -
confidence mixed
MX 10 mx1c.nbp.pl
25/tcp unreachable
587/tcp unreachable
465/tcp unreachable

network

IP 193.109.212.53
PTR mx1c.nbp.pl
ASN AS21328 NBP-AS
RDAP NBPNET

attribution

infrastructure ambiguous
operator -
provider -
confidence mixed

SUMMARY

web PQ TLS at Imperva edge
mail MX discovered; SMTP/25 unreachable from probe