And now i add another “not so necessary” tool: spectre-meltdown-checker
Most of people won’t think this as a necessary package, because many of the IT guys/ladies cannot do really something to solve the issue than “waiting for new hardware” or “waiting for new software”.
Sometimes a vulnerability status (and report) could be an useful information, expecially for publicy-available servers like application, mail and webserver.
As stated in many other places…
A false sense of security is worse than no security at all
Maybe one day there will be the “Vulnerability assessment tool” into Cockpit.