CYBERSECURITYTRACKER
Permanent story citation

Cloud Agent, now in a Container: Host Security for Nodes You Can’t Touch

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12367

As cited

Copy frozen at (site build).

cloud saas

Cloud Agent, now in a Container: Host Security for Nodes You Can’t Touch

Qualys has released its Cloud Agent as a container image deployable to Kubernetes clusters via DaemonSet, enabling vulnerability management and policy audit on immutable and mutable Linux nodes without installing host packages. The containerized agent covers container-optimized operating systems such as AWS Bottlerocket and Google Container-Optimized OS, as well as traditional RPM- and Debian-based distributions, across both Intel x64 and ARM architectures. Deployment occurs through Kubernetes manifests or Helm charts, allowing automatic coverage as nodes join or leave the cluster.

Why it matters: Platform and security teams managing Kubernetes clusters with ephemeral or immutable nodes now have visibility into host-OS vulnerabilities and compliance drift without breaking the immutability guarantees or container-native deployment models they rely on.

VendorsMicrosoftGoogleAmazon Web ServicesDockerKubernetesLinux
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary