Cloud Agent, now in a Container: Host Security for Nodes You Can’t Touch | Qualys
Summary: Qualys has published its Cloud Agent as a container image on Docker Hub, deployed as a Kubernetes DaemonSet that delivers host-based Vulnerability Management and Policy Audit without touching the host's package manager. The agent runs as a privileged container with host mounts to assess immutable operating systems such as Bottlerocket, COS, and CoreOS, and also runs on RPM- and Debian-based nodes, with images published for Intel/x64 and ARM and FIPS-validated builds available.
Bottom line: The source states that a clean image running on a vulnerable node is still a vulnerable workload, and that many teams have run immutable nodes blind because they could not install a traditional agent. Every node that joins or leaves an autoscaling cluster now carries or drops its own agent, so coverage becomes a property of the cluster rather than a task someone has to remember.
Read the original at Qualys Blog ↗
- Topics
- Cloud Security
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026