Qualys Enterprise TruRisk™ Platform (CAR Release 2.5.2) API Notification
A new release of Qualys Enterprise TruRisk™ Platform (CAR Release 2.5.2 API), which is released in June 2025, includes updates to existing APIs. This API notification highlights recently released changes, enabling you to identify use cases that can benefit from the updated APIs.
What’s New?
This release introduces API versioning support along with support for updating and deleting blocked commands using command IDs. APIs for custom QID scripts now support multiple detection conditions. Additionally, A few CAR version 1 APIs are scheduled for End-of-Support (EOS) and End-of-Life (EOL).
CAR API Versioning Support
A few CAR v1 APIs are now scheduled for End-of-Support (Dec 2025 – Jun 2026) and End-of-Life (Jun 2026). For more information on API versioning, refer to the Introducing API Versioning: A Strategic Upgrade for Enhanced Stability and Control for API Integrations blog.
The following APIs are impacted due to API versioning:
Search List of Blocked Commands by LanguageId API
GET /sm/v1/block-commands/{id}
Create Script API
POST /sm/v1/script
Update Scripts API
PATCH /sm/v1/script/{scriptid}
New Parameters in Blocked Command APIs
In this release, we have added a new input parameter, commandId, to the following APIs. This parameter can be used to update or delete blocked commands. To support smoother transition and testing, version 2 (v2) APIs are introduced while maintaining backward compatibility with the v1 APIs.
New API: Update Blocked Commands API
POST /sm/v2/block-commands/update
DTD or XSD changes: Not Applicable
New API: Delete Blocked Commands API
POST sm/v2/block-commands/delete
DTD or XSD changes: Not Applicable
New Parameters in Custom QID Scripts API
We have enhanced the Custom QID Script APIs listed below to support multiple detection conditions. Using the detectionRegex parameter, you can now define primary and secondary detection logic.
Updated API: Create Scripts API
POST /sm/v5/script
DTD or XSD changes: Not Applicable
Updated API: Update Scripts API
PATCH /sm/v4/script/{ScriptId}
DTD or XSD changes: Not Applicable
Please refer to the detailed release note here: https://docs.qualys.com/en/car/release-notes/car/release_2_5_2_api.htm