Network Discovery

Discovery scans hosts, IPs or CIDR ranges and pulls the TLS certificates they actually serve, so you can see certs you didn't issue.

Certs the team made by hand, certs a contractor left behind, certs issued before NOLAPSE — Discovery pulls them into Inventory and flags the ones near expiry or using fragile crypto (RSA-1024, SHA-1).

POST /v1/discovery/scan   { "target": "10.0.0.0/16" }