Qualys Enterprise TruRisk™ Platform 3.13 (PM) API Notification
A new release of Qualys Enterprise TruRisk™ Platform 3.13 (PM), which was released in March 2026, includes new APIs and updates to an existing API. This API notification highlights recently released changes, enabling you to identify use cases that can benefit from the updated API.
Asset IDs in Jobs
Updated API: Create MTG Deployment Job
POST /mtg/v1/deploymentjob
DTD or XSD changes: DTD or XSD changes Not Applicable
With this release, we have updated the Create MTG Deployment Job API which supports including Asset IDs in On-Demand and Run Once mitigation jobs. Previously, only Asset Tag IDs were supported. This enhancement applies to both Windows and Linux platforms and allows you to target individual assets more precisely.
Updated API: Get Mitigation Job Details
GET /mtg/v1/deploymentjob/{deploymentJobId}
DTD or XSD changes: Not Applicable
With this release, we have updated the Get Mitigation Job Details API that now returns Asset IDs in the response for both Windows and Linux platforms, enabling you to view the assets included in a deployment job.
Updated API: Update Mitigation Deployment Job
PATCH /mtg/v1/deploymentjob/{deploymentJobId}
DTD or XSD changes: Not Applicable
With this release, we have enhanced the Update MTG Deployment Job API in which you can now update the Asset IDs in On-Demand and Run Once mitigation jobs. This enhancement applies to both Windows and Linux platforms and helps you manage individual assets more effectively.
Updated Random Downtime Parameter
Updated API: Create Deployment Job
POST /pm/v1/deploymentjob/update/{deploymentJobId}
DTD or XSD changes: Not Applicable
With this release, we have enhanced the Create Deployment Job API to configure the random downtime parameter up to 8 hours. This extended duration allows agents more time to download patches, which is especially useful for jobs involving a large number of patches.
Updated API: Update Deployment Job
POST /pm/v1/deploymentjob/update/{deploymentJobId}
DTD or XSD changes: Not Applicable
We have enhanced the Update Deployment Job API to support setting the random downtime parameter up to 8 hours, enabling improved patch download flexibility for large deployments.
New Result Type Column in Reports
Updated API: Get List of Report Columns
POST pm/v1/report/columns
DTD or XSD changes: Not Applicable
With this release, this API now supports the resultType field in the request. The generated report includes a new Result Type column. This enhancement applies to Windows and Linux platforms for Job Progress report.
Updated API: Get Deployment Job Progress Report
POST pm/v2/report/jobProgress/{deploymentJobId}
DTD or XSD changes: Not Applicable
With this release, we have enhanced the Get Deployment Job Progress Report API response to include the resultType field, indicating the result type for each asset.
Updated API: Get Deployment Job Result Summary
GET /pm/v1/deploymentjob/{deploymentJobId}/deploymentjobresult/summary
DTD or XSD changes: Not Applicable
With this release, the Get Deployment Job Result Summary API displays the resultType field in the API response. This field indicates the result type for each asset in the report.
Patch and Action Filters In Reports
Updated API: Generate Mitigation Job Progress Report
POST /pm/v1/report/mitigationjobprogress/{deploymentJobId}
DTD or XSD changes: Not Applicable
In this release, we have enhanced the Mitigation Job Progress Report API by adding action filters to the API request. When filter values are provided, the report displays results accordingly. You can also retrieve IP address information based on the assetIP and/or IPV6 values included in the API request.
Updated API: Get Deployment Job Progress Report
POST /pm/v2/report/jobprogress/{deploymentJobId}
DTD or XSD changes: Not Applicable
In this release, we have enhanced the Get Deployment Job Progress Report API by adding patch status filters to the API request. When you provide specific filter values, the report displays results based on those filters.
IPv6 Address Visibility
Updated API: Generate Isolation Job Progress Report
POST /pm/v1/report/isolationjobprogress/{deploymentJobId}
DTD or XSD changes: Not Applicable
With this release, we have enhanced the Generate Isolation Job Progress Report API to include IPv6 address in the API request. This makes it easier to identify and track assets in IPv6 environments.
Support to Download PDF Reports
With this release, we have enhanced certain report APIs that now allow you to download report in PDF format.
PDF reports support the selection of up to 5 columns for optimal readability.
The impacted APIs are:
Get List of Report Columns
GET /pm/v1/report/columns
DTD or XSD changes: Not Applicable
Generate Deployment Job Progress Report
POST /pm/v2/report/jobprogress/{deploymentJobId}
DTD or XSD changes: Not Applicable
Generate Isolation Deployment Job Progress Report
POST /pm/v1/report/isolationjobprogress/{deploymnetJobId}
DTD or XSD changes: Not Applicable
Generate Mitigation Deployment Job Progress Report
POST /pm/v1/report/mitigationjobprogress/{deploymentJobId}
DTD or XSD changes: Not Applicable
Generate Patches Report
POST /pm/v2/report/patch
DTD or XSD changes: Not Applicable
Download a report in CSV and PDF format for specified reportID
GET /pm/v1/report/{reportId}/download
DTD or XSD changes: Not Applicable
Get Assets Tab Report
POST /pm/v2/report/asset
DTD or XSD changes: Not Applicable
With this release, we have enhanced the Get Assets Tab Report API that allows you to download report in PDF format.
Extended Limits for Deployment Job Co-Authors
With this release, we have updated certain Deployment Job APIs with v2 version. These APIs are enhanced to restrict addition of only 200 users as co-authors to a deployment job. If you try to add more than 200 co-authors to a job, the API response displays an error. The impacted APIs are:
Create Mitigation Job
POST /mtg/v2/deploymentjob
DTD or XSD changes: Not Applicable
Update Mitigation Job for Specified ID
PATCH /mtg/v2/deploymentjob/{deploymentJobId}
DTD or XSD changes: Not Applicable
Create Patch Deployment Job
POST /pm/v2/deploymentjob
DTD or XSD changes: Not Applicable
Update Patch Deployment Job for Specified Job ID
PATCH /pm/v2/deploymentjob/update/{deploymentJobId}
DTD or XSD changes: Not Applicable
Version-Specific ESU Licensing for Windows Patching
Patch Details for Patches
POST /pm/v1/patchcatalog/patches
DTD or XSD changes: Not Applicable
With this release, we have enhanced the Patch Details for Patches API to include the ESU operating system version in the API response. A new field esuOsVersion is displayed in the response.
Get Patches from the Catalog
GET /pm/v1/patchcatalog/patches
DTD or XSD changes: Not Applicable
With this release, we have enhanced the Get Patches from the Catalog API to include the ESU operating system version in the API response. A new field esuOsVersion is displayed in the response.
Please refer to the detailed release notes here: https://docs.qualys.com/en/pm/release-notes/patch_management/release_3_13_api.htm