Qualys Enterprise TruRisk™ Platform (VM Release 10.41) API Notification 

A new release of Qualys Enterprise TruRisk™ Platform (VM Release 10.41), which is released in October 2026, includes updates to existing APIs. This API notification highlights recently released changes, enabling you to identify use cases that can benefit from the updated APIs. 

What’s New?

Scan Report Template API: Filter Scan Reports Using Vulnerability Tags 

POST, GET  /api/8.0/fo/report/template/scan/ 

DTD or XSD changes: No 

You can now configure scan report templates with Vulnerability Tag filters using the Scan Report Template API and retrieve the configured tags when exporting templates. Previously, Vulnerability Tag filters could not be configured in scan report templates through the API. This enhancement lets you generate reports that include only vulnerabilities associated with the tags you specify, helping you automate the creation and management of vulnerability-tag-based report templates. Existing scan report template workflows remain unchanged when no Vulnerability Tags are specified. 

Notes:  

• This feature is available on request. Contact Qualys Support or your Technical Account Manager (TAM) to activate it.  

• Vulnerability Tags are visible only for Vulnerability Management Reporting Service (VMRS) enabled accounts.

Remediation Ticket List API: Reduce API Response Size by Excluding Ticket History 

GET  /msp/ticket_list.php 

DTD or XSD changes: No 

You can now reduce the size of Remediation Ticket List API responses by excluding ticket history from the ticket records. Previously, the API always returned historical ticket activity, which could significantly increase the response size for tickets with extensive history. This enhancement helps optimize API responses for integrations that require only current ticket information. 

Authentication and Option Profile APIs: Perform Authenticated Vulnerability Scans on Oracle Linux Virtualization Manager Assets

POST, GET  /api/2.0/fo/auth/olvm/, /api/3.0/fo/auth/olvm/, /api/6.0/fo/subscription/option_profile/vm/, /api/8.0/fo/subscription/option_profile/ 

DTD or XSD changes: Yes 

You can now create, update, delete, and list Oracle Linux Virtualization Manager (OLVM) authentication records using either basic or vault-based authentication. Create VM option profiles to perform authenticated Vulnerability Management scans on OLVM assets. This enhancement extends OLVM support to Vulnerability Management, enabling you to automate authenticated vulnerability scanning and manage OLVM authentication records. 

Scan Report Template API: Configure Scan Report Templates with Qualys Patchable and Mitigable Details 

POST, GET  /api/8.0/fo/report/template/scan/ 

DTD or XSD changes: No 

You can now configure host-based scan report templates through the API to include Qualys Patchable and Qualys Mitigable vulnerability details. Previously, these remediation details could not be configured in scan report templates through the API. This enhancement lets you include additional remediation context when generating reports through template-based workflows. 

For more details, please refer to the release notes here:  https://docs.qualys.com/en/vm/release-notes/qweb/release_10_41_api.htm