Policy Audit Release 1.11 API

A new release of Qualys Policy Audit (PA Release 1.11), which is released in May 2026, includes updates to an existing API. This API notification highlights recently released changes, enabling you to identify use cases that can benefit from the updated APIs. 

What’s New?

Get Policy List API: View Tag Information for Policy 

GET /pcrs/2.0/posture/policy/list 

With this release, a new input parameter, requireTagInfo, is introduced to display tag information for a policy. When enabled, the response includes the following sections under requireTagInfo: 

• includeTags – List of included tag objects containing the tag ID and name. 
• excludeTags – List of excluded tag objects containing the tag ID and name. 
• includeTagsScope – Scope for included tags (ALL or ANY) 
• excludeTagsScope – Scope for excluded tags (ALL or ANY) 

Added Active Directory Support to VMware NSX Authentication

GET and POST /api/3.0/fo/auth/nsx 

You can now use Active Directory (AD) support with HashiCorp Vault when you create, update, list, and delete VMware NSX authentication records, This enables you to securely retrieve AD credentials from Vault. 

Scans API: Support for Google Cloud Platform Instance-Based Scans for IPv4 

POST /api/3.0/fo/scan/cloud/internal/job/ 

We have now provided support to Google Cloud Platform instance based scans. You can now create and update internal scans for Assets in GCP Cloud. Earlier, GCP supported only perimeter scans, while AWS EC2 and Azure supported both internal and perimeter scans. With this enhancement , you can now perform internal scans on GCP instances to enable deeper vulnerability visibility and improved security coverage for GCP environments or assets. 

Revised EOS and EOL dates for Posture Streaming APIs 

With this release, we have revised the End of Support (EOS) and End of Life (EOL) dates for the following APIs: 

• Resolve Host IDs API 
• Get Posture Info API 

The updated timelines provide additional time for you to transition from the legacy APIs to the recommended newer versions of these APIs.

Extended EOL Timelines for API Endpoints

With this release, the End of Life (EOL) timelines have been extended from June 2026 to December 2026 for a set of APIs that were previously scheduled for deprecation in June 2026.

The updated timeline provides additional time for you to transition from the legacy APIs to the recommended newer versions. 

For more details, please refer to the detailed release notes here, https://docs.qualys.com/en/vm/release-notes/mergedProjects/qualys_pa/pa/release_1_11_api.htm