Qualys is one of the most useless pieces of software I've ever come across. It purely exists for ass-covering and box-ticking purposes, and requires so much acc

Qualys is one of the most useless pieces of software I've ever come across. It purely exists for ass-covering and box-ticking purposes, and requires so much access to run its scans (it runs random things as root and ssh's into your whole fleet) that it's one compromise away from taking down a significant chunk of the tech industry. It's one massive backdoor into everything. And on top of that, if you use a cloud provider, the data you get back is next to useless because it still thinks hostnames/IPs are a remotely useful way to identify stuff, which they aren't. It looks like they might finally be providing some remotely useful identifying metadata, like instance tags, but only after years of begging for it.