qualys/runtime-sensor repository overview

⁠Qualys Runtime (eBPF) Sensor

The Qualys Container Runtime Sensor (CRS) is the official container image published by Qualys, used to provide eBPF-based runtime protection, behavioral monitoring, and threat detection in Kubernetes (EKS, AKS, GKE, OpenShift, etc.) and standalone Docker environments. It is deployed as a Daemon Set. The Runtime Sensor complements the Qualys Container Security ecosystem by monitoring live container activity and reporting security events to the Qualys platform.

⁠Key Features

The Qualys CRS is designed for:

• Kubernetes runtime threat detection
• File Integrity Monitoring
• Behavioral monitoring of container processes and file activity

⁠Supported Architectures

The image supports different architectures including:

• AMD64: linux/amd64
• ARM64: linux/arm64

⁠Installation

Please refer to the 'How to install runtime-sensor' section of the Artifacthub link⁠ for detailed installation instructions.

⁠Documentation

For additional information on Qualys Runtime Sensor, please refer to the official documentation⁠.

⁠Verified Publisher

This image is marked as a Verified Publisher image from Qualys Inc., indicating authenticity and security.