A new release of Qualys Policy Audit (PA Release 1.4), which is released in October 2025, includes updates to existing APIs. This API notification highlights recently released changes, enabling you to identify use cases that can benefit from the updated APIs.

What’s New?

Exceptions API: Create Multiple Exceptions Using Asset Tags

GET and POST /api/3.0/fo/compliance/exception/

DTD or XSD changes: No

With this release, we have added support for asset tags for the Exceptions API. By providing asset tag details, users can raise multiple exceptions for multiple host IDs.

Option Profile API: Enable Agent Correlation Identifier

With this release, we have added support for Agent Correlation Identifier to address the issue of duplicate records being created during compliance scans, especially for databases. On enabling this option, merging of agent and scan data is ensured, thereby, avoiding duplicate host entries. This change is reflecting the following APIs:

· PC Option Profile API: Create, Update, List, and Delete Option Profile – GET and POST /api/5.0/fo/subscription/option_profile/pc/

· Options Profiles API: Import and Export Option Profile – GET and POST /api/5.0/fo/subscription/option_profile/

Infoblox Record API: Update Details for HashiCorp and Wallix Authentication Vaults

POST /api/2.0/fo/auth/infoblox

DTD or XSD changes: No

With this release, we have updated the Infoblox API to update the authentication records created using HashiCorp or Wallix authentication vault.

EOS/EOL in Policy Audit/Policy Compliance APIs

With this release, all Policy Audit/Policy Compliance API versions will follow a defined lifecycle ending in June 2026. After the 1.1.0 release, each API version will remain valid for one year, comprising six months of End Of Service (EOS) followed by six months of End Of Life (EOL). For the list of Release

For more details, please refer to the release notes here:
https://docs.qualys.com/en/vm/release-notes/mergedProjects/qualys_pa/pa/release_1_4_api.htm