Qualys Enterprise TruRisk™ Platform 3.23 (CA) API Notification

A new release of Qualys Enterprise TruRisk™ Platform (CA Release 3.23 API), which is released in December 2025, includes updates to existing APIs. This API notification highlights recently released changes, enabling you to identify use cases that can benefit from the updated APIs.

What’s New

We have updated the response for the SBOM Report Download API to clearly display the asset details for convenient asset identification.

Additionally, we have updated the Service Provider and Timestamp fields in the API response according to the CycloneDx 1.6 Standard. The following table shows the updated Service Provider and Timestamp format.

Field Name	Updated Field Value Format	Old Field Value Format
Service Provider	“services”: [                     {                         “provider”: {                             “bom-ref”: “provider-d0ec648b-7cc0-47da-995d-bd0ab96209fc”,                             “name”: “Qualys”                         },                         “name”: “QAgent”                     }                 ]	{“provider”: “Qualys”,”name”: “QAgent”}
Timestamp	“2025-12-15T04:19:14Z”	“2025-12-15T04:19:14.716396469”

CA API: SwCA Report Download API

POST /qps/rest/1.0/download/ca/downloadcdxsbom/

DTD or XSD Changes: No

Updated and added response parameters in the API response facilitate convenient asset identification and compliance with the CycloneDx 1.6 Standard.

For more details, please refer the release note here:https://docs.qualys.com/en/portal-cloud-platform-rn/cloud_platform/release_3_23_api.htm