# How do I turn on the NetSenX crypto inventory (NQCI)?

NQCI is visible on every plan as a preview, active from the Pro plan, and it needs the packet-capture sensor, which is off by default. To use it, you need two things. First, a Pro, Business or Enterprise plan. Second, an agent that captures packets: either a Linux agent with packet capture switched on, or an agent on a host connected to a SPAN or TAP port. The basic macOS mode does not see TLS handshakes, so it cannot feed the inventory. Once it runs, NQCI shows which connections crossing the monitored segment use quantum-vulnerable key exchange and which already use hybrid post-quantum key exchange, plus the SSH server versions it sees. It is still in preview. It does not see cryptography inside applications or on disk, it does not migrate anything, and it does not do your compliance work for you; it gives you a starting inventory from the network.

FAQ: [NetSenX: plans and set-up](https://netsenx.com/en/faq/product) · https://netsenx.com/en/faq/how-do-i-turn-on-the-netsenx-crypto-inventory

## Read next

- https://netsenx.com/en/encrypted-traffic-analysis
- https://netsenx.com/en/features

## Related questions

- [Does NetSenX alert from the first day after installation?](https://netsenx.com/en/faq/does-netsenx-alert-from-the-first-day)
- [What is the network map in NetSenX?](https://netsenx.com/en/faq/what-is-the-netsenx-network-map)
- [How are NetSenX alerts delivered?](https://netsenx.com/en/faq/how-are-netsenx-alerts-delivered)
- [How long does NetSenX keep alert history?](https://netsenx.com/en/faq/how-long-does-netsenx-keep-alert-history)
- [Does NetSenX detect DNS tunnelling on every plan?](https://netsenx.com/en/faq/does-netsenx-detect-dns-tunnelling-on-every-plan)