A new release of Qualys Policy Audit (PA Release 1.5), which is released in November 2025, includes new and updates to an existing API. This API notification highlights recently released changes, enabling you to identify use cases that can benefit from the updated APIs.

What’s New?

Manage Policies Using Various Policy APIs

GET, PUT, and DELETE /pcas/v3/policy/

DTD or XSD changes: No

With this release, we are introducing certain APIs that can help you manage policies better.

A policy is a collection of controls used to measure and report compliance for a set of hosts. Your compliance reports display the host compliance status (pass or fail) with the policy controls. Use the following policy APIs to manage policy details such as sections, controls, and technologies, and evaluate data. They support functionalities such as retrieval, update, addition, and removal of these policy details:

• Policy
• Lock Policy
• Policy Technology
• Policy Section
• Policy Section Control
• Policy Section Control Technology
• Policy Section Control Technology Evaluate

Get Posture Info API: View API Response in JSON Format

POST /pcrs/4.0/posture/postureInfo/

DTD or XSD changes: No

Earlier, the cloud Resource Metadata for assets was received as a string in the API response, which was difficult to interpret the information. With this enhancement, you can now interpret the posture information for all the specified hosts for each policy ID included in the API response in JSON format.

Get Host ID API: Resolve Host IDs for Compliance Policies

POST /pcrs/4.0/posture/hostids/

DTD or XSD changes: No

With this release, we have introduced the Get Host ID API (/pcrs/4.0/posture/hostids/) that helps you resolve host IDs for multiple compliance policies.

For more details, please refer to the release notes here: https://docs.qualys.com/en/vm/release-notes/mergedProjects/qualys_pa/pa/release_1_5_api.htm