Qualys Enterprise TruRisk™ Platform (Custom Assessment and Remediation 2.6) API Notification
A new release of Qualys Enterprise TruRisk™ Platform (CAR 2.6 API), which is released in July 2025, includes new APIs and updates to existing APIs. This API notification highlights recently released changes, enabling you to identify use cases that can benefit from the updated APIs.
What’s New
With this release, we have added new APIs to manage script schedules and enhanced a few APIs to allow sharing script output with FIM. Additionally, you can categorize custom scripts using the new parameters in the Create and Import Script APIs.
New APIs to Manage Script Schedules
We have introduced the following new APIs to manage and automate script schedules:
New API: Search Schedules API
POST /sm/v1/scheduler/search
DTD and XSD Changes: NA
This API is used to fetch the details schedules.
New API: Get Schedule API
GET /sm/v1/scheduler/{id}
DTD and XSD Changes: NA
This API is used to fetch the script schedule using the schedule ID.
New API: Update Schedule API
POST /sm/v1/scheduler/{id}
DTD and XSD Changes: NA
This API is used to update an existing schedule.
New API: Delete Schedule API
POST /sm/v1/scheduler/delete
DTD and XSD Changes: NA
This API is used to delete an existing schedule.
New API: Activate Schedule API
POST /sm/v1/scheduler/activate
DTD and XSD Changes: NA
This API is used to activate a schedule.
New API: Deactivate Schedule API
POST /sm/v1/scheduler/deactivate
DTD and XSD Changes: NA
This API is used to deactivate a schedule.
Share Script Output with FIM
You can now share script output with Qualys File Integrity Monitoring (FIM) when executing scripts in CAR. We have added a new input parameter shareScriptResultWithFim to the following APIs:
Updated API: Execute Scripts On Demand API
POST /sm/v1/scripts/{scriptId}/execute
DTD and XSD Changes: NA
This API can be used to execute and share the script output with FIM.
Updated API: Schedule Script Execution API
POST /sm/v1/scripts/scheduler
DTD and XSD Changes: NA
This API is used to schedule script execution and share the script output with FIM.
Categorize Custom Scripts
We have introduced the following input parameters to enhance the Create and Import Script API.
subType: This parameter enables you to categorize your custom scripts as either Detection or Response.
typeName: This parameter enables you to specify the script type name, such as Custom Script and Custom QID.
Updated API: Create Scripts API
POST /sm/v6/script
DTD and XSD Changes: NA
This API is used to create scripts.
Updated API: Import Scripts API
POST /sm/v2/script-library/import
DTD and XSD Changes: NA
This API is used to import scripts for the library.
For more details, please refer to the detailed release notes here: https://docs.qualys.com/en/car/release-notes/car/release_2_6_api.htm