Qualys Enterprise TruRisk™ Platform 3.8 (PM) API Notification

A new release of Qualys Enterprise TruRisk™ Platform 3.8 (PM), which is released in July 2025, includes new APIs and updates to an existing API. This API notification highlights recently released changes, enabling you to identify use cases that can benefit from the updated API.

What’s New

Get List of Fix Based Mitigations

POST /mtg/v1/vulnerabilities/mitigations
DTD or XSD changes: Not Applicable

This API provides a list of fix-based mitigations with CVE and mitigation details for Windows and Linux platforms.

Create Mitigation Job

POST /mtg/v1/deploymentjob

DTD or XSD changes: Not Applicable

This API is used to create the on-demand and run-once Windows and Linux mitigation jobs.

Update Mitigation Job

UPDATE /mtg/v1/deploymentjob/{deploymentJobId} 

DTD or XSD changes: Not Applicable

This API is used to update the on-demand and run-once Windows and Linux mitigation jobs. 

Get Mitigation Job Details 

GET /mtg/v1/deploymentjob/{deploymentJobId}

DTD or XSD changes: Not Applicable

This API is used to fetch the details of the mitigation job for the specified job ID. 

Get Mitigation Deployment Job Result Summary

POST mtg/v1/deploymentjob/{deploymentJobId}/deploymentjobresult/summary

DTD or XSD changes: Not Applicable This API provides a detailed summary of the job result for the given job ID. 

Get Mitigation Deployment Job Action Result By Job ID

POST /mtg/v1/deploymentjob/{deploymentJobId}/deploymentjobresult/actions

DTD or XSD changes: Not Applicable

This API fetches the results of the mitigation job action for the specified job ID.

Get List of All Mitigation Deployment Jobs

GET mtg/v1/deploymentjobs

DTD or XSD changes: Not Applicable

This API fetches the list of all mitigation jobs for Windows or Linux platforms. 

Delete Mitigation Deployment Jobs

DELETE mtg/v1/deploymentjobs

DTD or XSD changes: Not Applicable

This API is used to delete the specified mitigation jobs using the job IDs.

Updated API: Create Deployment Job API for Access Management

PATCH /pm/v1/deploymentjob/update/{deploymentJobId}

DTD or XSD changes: Not Applicable

With this release, we have added two new  roles: Custom Access Manager and Patch Custom Access Manager. If the Custom Access Manager role is not assigned to the user, the user cannot add any co-authors to the patch deployment job. 

Updated API: Update Deployment Job API for Access Management

PATCH /pm/v1/deploymentjob/update/{deploymentJobId}

DTD or XSD changes: Not Applicable

With this release, we have added two new roles Custom Access Manager and Patch Custom Access Manager. If the Custom Access Manager role is not assigned to the user, the user cannot add any co-authors to the patch deployment job. 

Please refer to the detailed release notes here:
https://docs.qualys.com/en/pm/release-notes/patch_management/release_3_8_api.htm