Qualys Cloud Platform 3.16 (AM/CA/WAS) API notification 1
A new release of Qualys Cloud Platform 3.16 (AM/CA/WAS) includes updated APIs which is targeted for release in July 2023. The specific day will differ depending on the platform. See platform release dates on the Qualys Status page. This API notification provides an early preview into the coming API, allowing you to identify use cases that can leverage this updated API.
What’s New
AM API: Added Support for TagSet Feature
/qps/rest/2.0/create/am/tag/
/qps/rest/2.0/update/am/tag/
With this release, we have updated the Create Tags API for TagSet feature introduced in CSAM
CA API: Added Support for Agent Passive Sensor
/qps/rest/2.0/activate/am/asset/?module=
/qps/rest/2.0/activate/am//asset?module=,
/qps/rest/2.0/deactivate/am/asset/?module=
/qps/rest/2.0/deactivate/am/asset?module=,
/qps/rest/1.0/create/ca/agentactkey/
/qps/rest/1.0/update/ca/agentactkey/
With this release, we have added support for Qualys Cloud Agent to work as a passive sensor to identify traffic in the subnet agent. To enable this ability, you can activate the Cloud Agent as Passive Sensor on single or multiple assets. You can also activate the Cloud Agent as Passive Sensor (CAPS) module while creating or updating the activation key.
CA API: Configure VM and PC Scan Interval Settings and Scan on Startup with API
/qps/rest/1.0/create/ca/agentconfig/
/qps/rest/1.0/update/ca/agentconfig/
With this release, you can configure scan interval settings for VM and PC scans in the configuration profile for the associated assets using APIs.
CA API: Added Support for Software Composition Analysis (SwCA) Module for Native Agents
/qps/rest/2.0/activate/am/asset/?module=
/qps/rest/2.0/activate/am//asset?module=,
/qps/rest/2.0/deactivate/am/asset/?module=
/qps/rest/2.0/deactivate/am/asset?module=,
/qps/rest/1.0/create/ca/agentactkey/
/qps/rest/1.0/update/ca/agentactkey/
With this release, we have added support for to activate Software Composition Analysis (SwCA) on for Windows and Linux native agents. To enable this ability, you can activate the SwCA module on single or multiple assets.You can also activate the SwCA module while creating or updating the activation key.
WAS API: New Field in Scan API Response
/qps/rest/3.0/search/was/wasscan
/qps/rest/3.0/status/was/wasscan/
/qps/rest/3.0/download/was/wasscan/
/qps/rest/3.0/status/was/wasscan/
With this release, we have added a new field in the API response— in the scan APIs that matches the Status of the scan in the Scan List tab in Web Application Scanning.
WAS API: New API for OWASP ZAP Finding
/qps/rest/3.0/import/was/owaspzap/
/qps/rest/3.0/search/was/owaspzapfinding/
/qps/rest/3.0/count/was/owaspzapfinding/
/qps/rest/3.0/get/was/owaspzapfinding/id/
With this release, we have added API support for importing OWASP ZAP reports and save the findings discovered by OWASP ZAP tool with the findings discovered by WAS. You can also search for the specific OWASP findings, details of the finding, and total number of OWASP ZAP findings in your scope.
The release notes are here: https://www.qualys.com/docs/release-notes/qualys-cloud-platform-3.16-api-release-notes.pdf
