Floun

Floun is a lightweight Chrome extension for crypto-readiness and migration planning. It scans the active HTTP or HTTPS tab on demand and reports browser-visible cryptography signals that may matter for post-quantum migration work. Floun focuses on practical inventory signals rather than broad vulnerability scanning. It identifies weak or deprecated cryptography such as MD5, SHA-1, DES, 3DES, and RC4. Classical or unclassified TLS and certificate algorithms are presented as review items for migration planning. Core capabilities: - On-demand active-tab scanning - JavaScript cryptography-pattern detection - Session-token heuristic checks with redacted evidence - TLS and certificate metadata analysis - Explainable findings with severity, confidence, rationale, limitations, recommendations, and references - Redacted PDF report generation - Accessible interface built with the Kryv Labs Teal design system - Optional DeepSeek report drafting using a user-supplied API key Floun stores an optional DeepSeek API key on the user’s device only after explicit consent. The key can be replaced or removed at any time. Without both a key and consent, Floun generates reports locally and makes no DeepSeek request. Floun is not a definitive vulnerability scanner. Findings should be validated with application and infrastructure owners before remediation decisions.