Qualys Enterprise TruRisk™ Platform 3.9 (PM) API Notification

A new release of Qualys Enterprise TruRisk™ Platform 3.9 (PM), which is released in August 2025, includes new APIs and updates to an existing API. This API notification highlights recently released changes, enabling you to identify use cases that can benefit from the updated API.

What’s New

Enhanced API: Get a List of Assets

GET /pm/v1/assets

DTD or XSD changes: Not Applicable

We have added new parameters: installedPatches, missingPatches, and interface.ipv6Address to the API response to enhance the Get a List of Assets API. These new fields provide the asset details such as IPv6 address, missing patches, and installed patches for the assets enabled for your Patch Management within your scope.

Enhanced API: Get a List of All Patch Management Assets

POST /pm/v1/assets

DTD or XSD changes : Not Applicable

We have added new parameters: installedPatches, missingPatches, and interface.ipv6Address to the API response to enhance the Get List of all Patch management Assets API. These new fields provide the asset details such as IPv6 address, missing patches, and installed patches for the assets. This API fetches the list of more than ten thousand assets enabled for your Patch Management subscription.

Enhanced API: Get Deployment Job Details by Job ID

GET /pm/v1/deploymentjob/{deploymentJobId}

DTD or XSD changes : Not Applicable

With this release, we have enhanced the Get Deployment Job Details by Job ID API to include new parameters to create a default job. This API gets the details of the default  deployment job based on the specified deployment job ID.

Enhanced API: Create a Deployment Job

POST /pm/v1/deploymentjob/

DTD or XSD changes : Not Applicable

With this release, we have enhanced the Create Deployment Job API to include new parameters to create a default deployment job. This API creates a default deployment job with the defined configurations.

Enhanced API: Update Deployment Job

PATCH /pm/v1/deploymentjob/UPDATE/{deploymentJobId}

DTD or XSD changes : Not Applicable

With this release, we have enhanced the Update Deployment Job API, in which you can edit a default job to update the configurations. 
Note: You can update a default job only if it is in a disabled state.

Enhanced API: Get Mitigation Job Action Result By Job ID

POST /mtg/v1/deploymentjob/{deploymentjobid}/deploymentjobresult/actions

DTD or XSD changes : Not Applicable

In this release, we have removed the pageSize and pageNumber parameters from the Get Mitigation Job Action result by Job ID API. This API will directly fetch all the job action results for the specified job ID and agent UUID.

Note: There is no change in the sample API request and response.

Enhanced APIs with New QQL Search Tokens

As a part of QQL token standardization, we have renamed common and Patch Management-specific tokens. The standardization helps reuse and customize the QQL queries across all Qualys applications, leading to a consistent user experience.  The standardized tokens make it easier to copy and reuse the search query from one application to another, eliminating the need to remember multiple token names for different applications and similar searches.

For the complete list of old and new token mappings, see Old and New Token Mappings.

Please refer to the detailed release notes here:
https://docs.qualys.com/en/pm/release-notes/patch_management/release_3_9_api.htm