Qualys Launches Containerized Cloud Agent for Kubernetes Nodes
Summary
Qualys has released its Cloud Agent as a container image for Kubernetes, deployed as a DaemonSet to provide host vulnerability management and policy auditing across supported Linux nodes, including immutable operating systems.
Key points
- Qualys says the Cloud Agent container image provides host-based Vulnerability Management and Policy Audit without installing packages on the host.
- The agent runs as a Kubernetes DaemonSet, so it is deployed to nodes as they join a cluster and removed when they leave.
- Qualys says one image supports container-optimized systems including AWS Bottlerocket, Google Container-Optimized OS, and Red Hat CoreOS, as well as RPM- and Debian-based Linux.
- Deployment and upgrades are available through YAML manifests or a Helm chart; images are offered for Intel/x64 and ARM.
- The agent runs as a privileged container with host mounts to assess the underlying operating system.
- Qualys says findings feed into its Enterprise TruRisk Platform; its TotalCloud KCS product provides complementary container and Kubernetes security capabilities.
Article Details
- Event Type
- Product availability announcement
- Impact
- Qualys made the Cloud Agent available as a container image deployed as a Kubernetes DaemonSet, extending host vulnerability-management and policy-audit coverage to Kubernetes nodes, including immutable operating systems, without installing packages on the host. The article describes compatibility across Intel/x64 and ARM and several Linux platforms. It reports no security incident or customer impact.
Vendors
Products
AWS BottlerocketA single image covers container-optimized operating systems such as AWS Bottlerocket, Google Container-Optimized OS, and Red Hat CoreOS, as well as RPM- and Debian-based Linux, including Azure Linux, on both Intel/x64Azure LinuxGoogle Container-Optimized OS, and Red Hat CoreOS, as well as RPM- and Debian-based Linux, including Azure Linux, on both Intel/x64 and ARM.Google Container-Optimized OSA single image covers container-optimized operating systems such as AWS Bottlerocket, Google Container-Optimized OS, and Red Hat CoreOS, as well as RPM- and Debian-based Linux, including Azure Linux, on both Intel/x64KubernetesA single container image that brings Vulnerability Management and Policy Audit to every Kubernetes node, on immutable and mutable Linux alike, deployed the way your container workloads already are.Qualys Cloud AgentThe Solution: Qualys Cloud Agent as a Container ImageQualys Container SecurityIt can be deployed and upgraded through YAML manifests or a unified Helm chart that also deploys Qualys Container Security sensors, for full-stack coverage in a single install.Qualys Policy Auditfor vulnerabilities and against Center for Internet Security (CIS) Benchmarks through Qualys Policy Audit.Qualys TotalCloudPaired with Qualys TotalCloud Kubernetes and Container Security (KCS), it delivers full-stack coverage across the host OS, running containers, and the Kubernetes control plane.Qualys TruRiskPolicy Audit includes CIS-certified policies for AWS Bottlerocket and Google Container-Optimized OS, and all findings are prioritized with Qualys TruRisk alongside the rest of your estate.Red Hat CoreOScontainer-optimized operating systems such as AWS Bottlerocket, Google Container-Optimized OS, and Red Hat CoreOS, as well as RPM- and Debian-based Linux, including Azure Linux, on both Intel/x64 and ARM.