Custom Assessment and Remediation Release 2.6.1

September 02, 2025

Implementation of QQL Token Standardization

We have now implemented Qualys Query Language (QQL) token standardization across all Qualys applications. As part of this enhancement, both common and CAR-specific tokens are updated with new token names that follow a standard, consistent nomenclature. 

The new token format follows the syntax: entity.attribute
For example, in the new token, script.name, script is the entity, and name is the attribute.

Key Enhancements:

• Standardized Token Naming: The tokens, such as assets, scripts, jobs, asset jobs, schedules, library, and activity, now adhere to a standardized naming convention. The tokens common to all Qualys applications have also been updated.
• Search Bar Updates: Only the new tokens are displayed in the auto-suggestion in the search bars within the UI. However, if you type the old token name manually, the QQL query still works. The old tokens will not be visible in the auto-suggestions on the UI.
• Backward Compatibility: The existing Dashboard widgets and Saved Search Queries will continue to support the old tokens in edit mode.
• Improved Interoperability: The standardized tokens make it easier to copy and reuse the search query from one application to another, eliminating the need to remember multiple token names for different applications and similar searches.

For the complete list of old and new token mappings, see CAR Online Help.

API Release Updates

You can use the new standardized token in the CAR APIs to filter the response as required. For more information, refer to Enhanced APIs with New QQL Search Tokens.