Unified Vulnerability View of Unauthenticated and Agent Scans | Qualys
Summary: Qualys introduced an asset merging capability in its Cloud Platform that combines unauthenticated scan results with Qualys Cloud Agent collections for the same asset, giving a single record that includes the attacker's point of view. The feature, fully available for beta on all Qualys shared platforms as of January 27, 2021, depends on the Cloud Platform 10.7 release and supplements the existing Agentless Identifier, which correlates agent-based and authenticated scan results.
Key Takeaway: Before this, agent and unauthenticated scans of the same asset produced two separate records, and Qualys notes that duplicate asset records undermine asset management, accurate metrics reporting, and understanding of overall risk per asset. The merge also depends on the scanner retrieving a Correlation ID from the agent, so if the required ports are unreachable or QID 48143 is left out of a scan, the merge fails and the duplicate records return.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026