A new release of Qualys Enterprise TruRisk™ Platform (VM, PC Release 10.36), which is released in October 2025, includes updates to an existing API. This API notification highlights recently released changes, enabling you to identify use cases that can benefit from the updated APIs.

What’s New?

Option Profile API: Enhancement in Default Enablement of Recommended Option Profile

POST /api/3.0/fo/subscription/option_profile/vm/

DTD or XSD changes: Yes

In an earlier release, we introduced the Qualys Recommended Option Profile for all new VM/VMDR subscriptions. Refer to Cloud Platform 10.30 Release Notes. 

With this release, we have further enhanced the Qualys Recommended Option Profile to provide improved configurations for all new VM/VMDR subscriptions.

When you select the overall performance as Normal, the following are the enhanced default settings:

• The number of Scanner Appliances is increased from 30 to 50. This helps to speed up the scanning process, as more scanner appliances can function simultaneously.
• Total process and HTTP processes are increased from 10 to 20. This allows each host to handle more scan tasks at once, improving overall scan throughput.

Note: For existing recommended and non-recommended Option Profile users, the default settings for overall performance for Normal remain the same as earlier as 30, 10, and 10 for Scanner Appliances, Total Processes, and HTTP Processes.

Scans API and Scan Schedule API: Validation for DNS Character Limit in VM-to-PCI Scan Sharing

Scans API
POST: /api/2.0/fo/scan/
DTD or XSD changes: No

Schedule Scan API
POST: /api/2.0/fo/schedule/scan/
DTD or XSD changes: No

With this enhancement, a validation message has been introduced during scan launch and schedule scan from both the VM and PCI portals. If the asset group or FQDN contains DNS entries exceeding 4000 characters, users will be notified before the scan is initiated and/or scheduling scan. This proactive check prevents scan sharing and scan schedule failures, thereby improving the user experience.

Users API: Enhancement to State Selection in User Creation

GET: /msp/user.php/
DTD or XSD changes: No

With this feature, we have expanded the list of available states in the state input parameter by adding Ladakh and Telangana. When you create or edit a user, you can now have these two state codes added to the list.

EOL/EOS in VM APIs

With this release, all VM API versions will follow a defined lifecycle ending in December 2025. After the 10.35.0.0 release, each API version will remain valid for one year, comprising six months of End of Service (EOS) followed by six months of End-of-Life (EOL).

For more details, please refer to the release notes here: https://docs.qualys.com/en/vm/release-notes/qweb/release_10_36_api.htm