Cloud Agent, now in a Container: Host Security for Nodes You Can’t Touch

What happened?

A single container image that brings Vulnerability Management and Policy Audit to every Kubernetes node, on immutable and mutable Linux alike, deployed the way your container workloads already are. Key Takeaways The Qualys Cloud Agent is now available as a container image on Docker Hub, bringing host-based Vulnerability Management and Policy Audit to every Kubernetes node without touching the host’s package manager. It runs as a Kubernetes DaemonSet, so every node that joins the cluster automatically gets an agent.

Key details

• Qualys Cloud Agent is now available as a container image on Docker Hub for Kubernetes nodes.
• The agent runs as a DaemonSet to automatically cover every node that joins the cluster.
• A single image supports immutable OSes like Bottlerocket, COS, CoreOS, and mutable RPM/Debian Linux on x64 and ARM.
• Policy Audit includes CIS-certified policies for Bottlerocket and COS with TruRisk prioritization.
• Combined with TotalCloud KCS, it provides full-stack coverage across host OS, containers, and control plane.
• Cloud Agent 2.9.0 will add direct download from the Qualys platform with Common Container tiles.

Summarised by SecOraLens from Qualys Blog. Always read the original source before acting. How SecOraLens verifies advisories.