Enhance Container Security in 2025 with QScanner by Qualys | Qualys
Summary: Qualys introduced QScanner, a standalone command-line utility that scans container images for vulnerabilities in OS and software packages, performs Software Composition Analysis across Ruby, Rust, PHP, Java, Go, Python, .NET, and Node.js, and detects exposed secrets such as passwords, API keys, and tokens. It requires no installation, runs against local Docker, Containerd, or Podman runtimes, local archives, and remote registries including AWS ECR, Azure Container Registry, JFrog, and GHCR, and outputs reports as SBOM, JSON, Table, or SARIF while feeding the TruRisk score for each image.
Bottom line: Qualys states the scanning engine behind QScanner carries 99.99966% Six Sigma accuracy and is maintained by over 35 threat feeds, and the tool uploads scan data to the Qualys platform for analysis and storage in the customer's Vulnerability Management system - so a zero-install binary on a developer's desktop is also a data path into the security team's risk scoring.
Read the original at Qualys Blog ↗
- Topics
- Cloud Security
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026The Last List of 2009 - Predicting Security in 2010 Cyber Risks ·