Qualys Enterprise TruRisk™ Platform Connectors 2.18 API Notification
A new release of Connector APIs (Release 2.18, June 2026) introduces multiple new APIs for service accounts, target accounts, scan logs, and audit trails. This notification summarizes the newly added APIs and their usage.
New Service Accounts API
A service account represents a cloud provider account (e.g., a GCP project, AWS account, or Azure subscription) that Flexscan is authorized to scan. You must register a service account before configuring or scanning it.
Register Service Account API
Registers a cloud service account (AWS, Azure, or GCP) for snapshot-based scanning.
POST/flexscan-api/rest/v1/service-accounts/register
DTD or XSD changes: No
For more details, please refer to the detailed release note here: https://docs.qualys.com/en/conn/release-notes/connector/release_2_18_api.htm
Deregister Service Account API
Deregisters a service account and removes connector configuration.
DELETE/flexscan-api/rest/v1/service-accounts/deregister
DTD or XSD changes: No
For more details, please refer to the detailed release note here: https://docs.qualys.com/en/conn/release-notes/connector/release_2_18_api.htm
Setup Service Account API
Configures scan settings, including regions, scan interval, and tag filters.
POST/flexscan-api/rest/v1/service-accounts/setup
DTD or XSD changes: No
For more details, please refer to the detailed release note here: https://docs.qualys.com/en/conn/release-notes/connector/release_2_18_api.htm
List Service Accounts API
Retrieves all registered service accounts with pagination support.
GET/flexscan-api/rest/v1/service-accounts
DTD or XSD changes: No
For more details, please refer to the detailed release note here: https://docs.qualys.com/en/conn/release-notes/connector/release_2_18_api.htm
Get Service Account API
Fetches details of a specific service account.
GET/flexscan-api/rest/v1/service-accounts/{accountId}
DTD or XSD changes: No
For more details, please refer to the detailed release note here: https://docs.qualys.com/en/conn/release-notes/connector/release_2_18_api.htm
Get Service Account State API
Retrieves provisioning state and cloud details of a service account.
GET/flexscan-api/rest/v1/service-accounts/{accountId}/state
DTD or XSD changes: No
For more details, please refer to the detailed release note here: https://docs.qualys.com/en/conn/release-notes/connector/release_2_18_api.htm
Setup Target Account API
Configures scan settings for target accounts under a service account.
POST/flexscan-api/rest/v1/target-accounts/setup
DTD or XSD changes: No
For more details, please refer to the detailed release note here: https://docs.qualys.com/en/conn/release-notes/connector/release_2_18_api.htm
New Target Accounts API
A target account is a child cloud account, or subscription scoped under a parent service account (e.g., an AWS member account in an AWS Organization, or an Azure target subscription). Target accounts inherit infrastructure from the parent service account but can have independent scan configurations.
List Target Accounts API
Lists all target accounts with filtering and pagination.
GET/flexscan-api/rest/v1/target-accounts
DTD or XSD changes: No
For more details, please refer to the detailed release note here: https://docs.qualys.com/en/conn/release-notes/connector/release_2_18_api.htm
Get Target Account API
Retrieves details for a specific target account.
GET/flexscan-api/rest/v1/target-accounts/{accountId}
DTD or XSD changes: No
For more details, please refer to the detailed release note here: https://docs.qualys.com/en/conn/release-notes/connector/release_2_18_api.htm
Get Target Account State API
Fetches the provisioning state of a target account.
GET/flexscan-api/rest/v1/target-accounts/{accountId}/state
DTD or XSD changes: No
For more details, please refer to the detailed release note here: https://docs.qualys.com/en/conn/release-notes/connector/release_2_18_api.htm
New Scan Logs API
Provides read-only access to scan status records. Each record represents a single VM/resource scan attempt. Sensitive internal fields (resultFileName, correlationIds) are excluded by default.
List Scan Logs API
Provides paginated list of scan execution logs.
GET/flexscan-api/rest/v1/scan/logs
DTD or XSD changes: No
For more details, please refer to the detailed release note here: https://docs.qualys.com/en/conn/release-notes/connector/release_2_18_api.htm
Get Scan Log API
Fetches detailed scan log information for a given scan UUID.
GET/flexscan-api/rest/v1/scan/logs/{scanUuid}
DTD or XSD changes: No
For more details, please refer to the detailed release note here: https://docs.qualys.com/en/conn/release-notes/connector/release_2_18_api.htm
New Audit Trail API
Provides visibility into the execution history of the scan workflow. Events are stored in OpenSearch; resource state is cross-referenced from the Oracle database (RESOURCE_SCAN_STATUS).
Get Resource Audit Trail API
Returns full audit trail for a scanned resource.
GET/flexscan-api/rest/v1/audit/resource/{scanUuid}
DTD or XSD changes: No
For more details, please refer to the detailed release note here: https://docs.qualys.com/en/conn/release-notes/connector/release_2_18_api.htm
Get Workflow Timeline API
Retrieves ordered workflow events using correlation ID.
GET/flexscan-api/rest/v1/audit/workflows/{correlationId}
DTD or XSD changes: No
For more details, please refer to the detailed release note here: https://docs.qualys.com/en/conn/release-notes/connector/release_2_18_api.htm
List Workflows API
Lists workflows with filters such as status and event category.
GET/flexscan-api/rest/v1/audit/workflows
DTD or XSD changes: No
For more details, please refer to the detailed release note here: https://docs.qualys.com/en/conn/release-notes/connector/release_2_18_api.htm