CE+ Downloads

Forms and Qualys Cloud Agents for your CE+ assessment

CE+ Authorisation Form

Required for the external vulnerability scan portion of the CE+ assessment. The form captures the public IP addresses, IP ranges, and hostnames in scope for testing, and serves as the signed written authorisation to perform vulnerability scanning. It must be signed by an authorised signatory (e.g. IT Manager, Director, or Business Owner) and returned to URM via the URM File Portal or by email.

Download Authorisation Form

Important: Verify File Integrity

Always verify the SHA-256 hash of the Qualys agent files below to ensure they haven't been tampered with. Use the verification tool below or command line tools.

Qualys Cloud Agents

Platform Filename SHA-256 Hash
Windows x64 QualysCloudAgent_x64.exe c00366647814784cfad084518b04eddddefbb688bd7c3784c815d1133571dddd Download
Debian / Ubuntu x64 QualysCloudAgent_x64.deb 8d05e7ecd5307e58ec25f81d65dcff717cf372f451b8eb730b4cc04c159841a2 Download
Debian / Ubuntu ARM64 QualysCloudAgent_ARM64.deb d2e214aae9c1dc1acc7219079233e9e2718c87cf8d856f4dccdb1ef1fd688761 Download
Red Hat / CentOS x64 QualysCloudAgent_x64.rpm 52826aac1a902ed756dc23176b3b30b6d4ce0eb579eaf40fd8ac55c853e086f6 Download
Red Hat / CentOS ARM64 QualysCloudAgent_ARM64.rpm 99b2bd4b3c79a23ffff2b3fdd6781d62e4183a579bb7fb892de2d7735292f353 Download
macOS Intel (x64) QualysCloudAgent_x64.pkg e3f74166c6c9f745d95881c0ac8df8f424de0da80eb91f77221db740a1c6653c Download
macOS Apple Silicon (M1/M2/M3) QualysCloudAgent_apple_M_series_CPU.pkg fc9a2fa600f9ccd0ccc358206fec98713159d2506ab58aa57858d424615bb375 Download

Verify File Integrity

Upload your downloaded file to verify its SHA-256 hash matches the published value.

Manual Verification

You can also verify hashes using command line tools:

Windows (PowerShell):
Get-FileHash QualysCloudAgent_x64.exe -Algorithm SHA256
Linux / macOS:
sha256sum QualysCloudAgent_x64.deb