CyberSecurity Asset Management/Global AssetView Release 3.7.0.0 API
January 07, 2026
New APIs to Fetch Organization or Subsidiaries Count and List
We have introduced new APIs to fetch information about your organizations and subsidiaries. These include details such as asset count, business valuation, and TruRisk™ score of your organizations and subsidiaries.
For more information on the business valuation of organizations and subsidiaries, refer to CyberSecurity Asset Management/Global AssetView Release 3.7.0.0.
Get Organization or Subsidiaries Count API
| New or Updated API | New |
| API Endpoint | /rest/2.0/am/organization/count |
| Method | POST |
| DTD or XSD changes | Not Applicable |
Use this API to fetch the total number of organizations or subsidiaries that match your search criteria.
Input Filter ParametersInput Filter Parameters
| Filter Parameter | Mandatory/ Optional |
Data Type | Description |
|---|---|---|---|
| filters | Optional | Object | List of filter conditions used to refine search results. |
| field | Optional | String | Provide the token name to filter the response. |
| operator | Optional | String | Provide the operator.
Supported values: CONTAINS, IN, EQUALS, NOT_EQUALS |
| value | Optional | String | Provide the organization name. |
| operation | Optional | String | This is the logical operator used to add multiple filters.
Supported values: AND, OR |
API Request with filter in JSON
curl -X POST
'<qualys_base_url>/rest/2.0/am/organization/count'
-H 'accept: application/json'
-H 'Content-Type: application/json'
-d '{
"filters": [
{
"field": "orgs.country",
"operator": "EQUALS",
"value": "QUALYS TECHNOLOGIES"
}
],
"operation": "AND"
}'
API Request with filter in XML
curl -X POST
'<qualys_base_url>/rest/2.0/am/organization/count'
-H 'accept: application/xml'
-H 'Content-Type: application/xml'
-d '
<filters>
<Criteria field="orgs.country" operator="EQUALS">
<value>QUALYS TECHNOLOGIES</value>
</Criteria>
</filters>
<operation>AND</operation>API Response
{
"US": 23,
"CA": 5,
"IN": 3,
"NL": 1
}
Get Organization or Subsidiaries List API
| New or Updated API | New |
| API Endpoint | /rest/2.0/am/organization/list |
| Method | POST |
| DTD or XSD changes | Not Applicable |
Use this API to fetch the list of organizations or subsidiaries that match your search criteria.
Input Filter ParametersInput Filter Parameters
| Filter Parameter | Mandatory/ Optional |
Data Type | Description |
|---|---|---|---|
| filters | Optional | Object | List of filter conditions used to refine search results. |
| value | Optional | String | The value to match against the specified field. |
| field | Optional | String | The name of the field on which the filter is applied. |
| operator | Optional | String | Comparison logic used for the filter condition.
Supported values: CONTAINS, IN, EQUALS, NOT_EQUALS |
| operation | Optional | String | Logical operator used to combine multiple filters.
Supported values: AND, OR |
API Request with filter in JSON
curl -X POST '<qualys_base_url>/rest/2.0/am/organization/list' -H 'accept: application/json' -H 'Content-Type: application/json' -d '{ "filters": [ { "value": "QUALYS TECHNOLOGIES", "field": "orgs.name", "operator": "EQUALS" } ], "operation": "AND" }'
API Request with filter in XML
curl -X POST
'<qualys_base_url>/rest/2.0/am/organization/list'
-H 'accept: application/xml'
-H 'Content-Type: application/xml'
-d '
<filters>
<Criteria field="orgs.name" operator="EQUALS">
<value>QUALYS TECHNOLOGIES</value>
</Criteria>
</filters>
<operation>AND</operation>
API Response
{
"responseMessage": "Valid API Access",
"responseCode": "SUCCESS",
"hasMore": 0,
"count": 6,
"organizationListData": {
"organizations": [
{
"name": "Organization A",
"assets": 3011,
"orgSource": "EASM",
"isUserDefined": false,
"lastUpdated": "2025-10-15"
},
{
"name": "Organization B",
"assets": 3011,
"orgSource": "EASM",
"isUserDefined": false,
"lastUpdated": "2025-10-15"
},
{
"name": "Organization C",
"assets": 11,
"orgSource": "EASM",
"isUserDefined": false,
"lastUpdated": "2025-10-16"
},
{
"name": "Organization D",
"assets": 3011,
"orgSource": "EASM",
"isUserDefined": false,
"lastUpdated": "2025-10-15"
},
{
"name": "Organization E",
"assets": 47,
"orgSource": "EASM",
"isUserDefined": false,
"lastUpdated": "2025-10-15"
},
{
"name": "Organization F",
"assets": 7,
"orgSource": "EASM",
"isUserDefined": false,
"lastUpdated": "2025-10-16"
},
{
"name": "Organization G",
"assets": 17,
"orgSource": "EASM",
"isUserDefined": false,
"lastUpdated": "2025-10-16"
}
]
}
},
{
"responseCode": "SUCCESS",
"organizationListData": {
"organizations": [
{
"name": "Organization H",
"assets": 150,
"truRisk": 75,
"businessValue": 95,
"country": "CA",
"orgSource": "EASM",
"businessValueSource": "username",
"currency": "USD",
"isUserDefined": true,
"lastUpdated": "2025-09-29T08:30:00Z"
}
]
},
"hasMore": 1,
"count": 1
}
Import and Export Software Instances with Third-party Sources
You can now import and export software instance data between CSAM and Third-party sources (such as ServiceNow, Webhooks, and others) using CSAM APIs. This integration enables you to sync software instance information of assets across CSAM and Third-party Sources.
We have updated the following APIs to include software instance details in their response parameters:
| Function | API Name | API Endpoint |
|---|---|---|
| Export | Get Host Details of Specific Asset API | /am/v2/sn/asset/host/{assetid} |
| Import | Import Third-Party Assets API | /rest/2.0/am/connector/asset/data/sync |
New Response Parameters
| Parameter | Description |
|---|---|
| softwareInstances | Contains details about the software instance. |
| instanceName | Name of the software instance. |
| technology | Technology associated with the software instance. |
| version | Version number of the software instance. |
| port | Port on which the instance is running |
| installPath | Path that contains the installed software files. |
| configurationPath | Path to the directory where the software’s configuration files are stored. |
| homePath | Home directory of the software instance |
| firstSeen | The first detected date and time of the software instance. |
| lastSeen | The most recently detected date and time of the software instance. |
Get Host Details of Specific Asset API: Export Software Instances
| New or Updated API | Updated |
| API Endpoint | /am/v2/sn/assets/host/{assetid} |
| Method | GET |
| DTD or XSD changes | Not Applicable |
Use this API to export software instance information to a third-party source.
Sample: Export software instance dataSample: Export software instance data
API Request
curl -X GET
'<qualys_base_url>/am/v2/sn/assets/host/id?assetId=78658617
-H "Authorization: Bearer <JWTToken>"
-H "Content-Type: application/json"
API Response
{
"responseMessage": "Valid CMDB Subscription",
"count": 1,
"responseCode": "SUCCESS",
"lastSeenAssetId": 12345678,
"hasMore": 0,
"assetListData": {
"asset": [
{
"assetId": 12345678,
"assetUUID": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"hostId": 1234567890123456,
"lastModifiedDate": "2025-08-20T11:32:15.000Z",
"agentId": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"createdDate": "2025-07-25T07:38:59.000Z",
"sensorLastUpdatedDate": "2025-08-20T11:32:15.000Z",
"assetType": "HOST",
"address": "10.0.0.100",
"dnsName": "example-host",
"assetName": "example-host",
"netbiosName": "EXAMPLE-NB",
"timeZone": "GMT+9:30",
"biosDescription": "Example BIOS",
"lastBoot": "2022-07-12T05:50:23.000Z",
"totalMemory": 122,
"cpuCount": 1,
"lastLoggedOnUser": "exampleuser",
"domainRole": null,
"hwUUID": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"biosSerialNumber": "SN-EXAMPLE-12345",
"biosAssetTag": "AssetTag-EXAMPLE",
"isContainerHost": false,
"operatingSystem": {
"osName": "Windows 7",
"fullName": "Microsoft Windows 7 (6.1)",
"category": "Windows / Client",
"category1": "Windows",
"category2": "Client",
"productName": "Windows 7",
"publisher": "Microsoft",
"edition": null,
"marketVersion": "7",
"version": "6.1",
"update": "6.1",
"architecture": "64bit",
"lifecycle": {
"gaDate": "2009-10-22T00:00:00.000Z",
"eolDate": "2015-01-13T00:00:00.000Z",
"eosDate": "2020-01-14T00:00:00.000Z",
"stage": "EOL/EOS",
"lifeCycleConfidence": "Exact",
"eolSupportStage": "Mainstream Support",
"eosSupportStage": "Extended Support",
"detectionScore": 40
},
"taxonomy": {
"id": null,
"name": "Windows / Client",
"category1": "Windows",
"category2": "Client"
},
"productUrl": "ProductURL",
"productFamily": "Windows",
"installDate": null,
"release": "9.4",
"cpeId": null,
"cpe": "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*",
"cpeType": "NIST"
},
"hardware": {
"fullName": "IBM Power System S924 9009-42G",
"category": "Computers / Server",
"category1": "Computers",
"category2": "Server",
"manufacturer": "IBM",
"productName": "Power System S924",
"model": "9009-42G",
"lifecycle": {
"introDate": "2020-07-14T00:00:00.000Z",
"gaDate": "2020-07-24T00:00:00.000Z",
"eosDate": "Not Announced",
"obsoleteDate": "Not Announced",
"stage": "GA",
"lifeCycleConfidence": "Exact"
},
"taxonomy": {
"id": null,
"name": "Computers / Server",
"category1": "Computers",
"category2": "Server"
},
"productUrl": "ProductURL",
"productFamily": null
},
"userAccountListData": null,
"openPortListData": {
"openPort": [
{
"port": 8080,
"description": "HTTP Alternate (see port 80)",
"protocol": "UDP",
"detectedService": "HTTP",
"firstFound": "2025-07-10T10:32:18.000Z",
"lastUpdated": "2025-07-10T10:32:18.000Z",
"authorization": null,
"detectionScore": null,
"discoverySources": "Cloud Agent"
},
{
"port": 23,
"description": "Telnet protocol unencrypted text communications",
"protocol": "TCP",
"detectedService": "Telnet",
"firstFound": "2025-07-10T10:32:18.000Z",
"lastUpdated": "2025-07-10T10:32:18.000Z",
"authorization": null,
"detectionScore": null,
"discoverySources": "Cloud Agent"
},
{
"port": 443,
"description": "http protocol over TLS/SSL",
"protocol": "TCP",
"detectedService": "HTTPs",
"firstFound": "2024-04-22T05:15:28.000Z",
"lastUpdated": "2024-04-22T05:15:28.000Z",
"authorization": null,
"detectionScore": null,
"discoverySources": "Cloud Agent"
}
]
},
"volumeListData": {
"volume": [
{
"name": "C:\\",
"free": 16,
"size": 183
},
{
"name": "D:\\",
"free": 23,
"size": 189
}
]
},
"networkInterfaceListData": {
"networkInterface": [
{
"hostname": "example-host",
"addressIpV4": "xx.x.x.xxx",
"addressIpV6": "xxxx::xxxx:xxxx:xxxx:xxxx",
"macAddress": "xx:xx:xx:xx:xx:xx",
"interfaceName": "eth0",
"dnsAddress": "xx.x.x.x, xx.x.x.x",
"gatewayAddress": "xx.x.x.x",
"manufacturer": "VMware",
"macVendorIntroDate": 946944000000,
"netmask": null,
"addresses": null
}
]
},
"softwareListData": {
"software": [
{
"id": 1111111111111111111,
"discoverySources": "Cloud Agent",
"fullName": "Microsoft SQL Server 2012 (11.0.6020.0)",
"softwareType": "Application",
"isIgnored": false,
"ignoredReason": null,
"category": "Databases / RDBMS",
"category1": "Databases",
"category2": "RDBMS",
"productName": "SQL Server",
"component": "Server",
"publisher": "Microsoft",
"edition": null,
"marketVersion": "2012",
"version": "11.0",
"update": "11.0.6020.0",
"architecture": null,
"installDate": null,
"installPath": null,
"lastUpdated": null,
"lastUseDate": null,
"language": null,
"formerlyKnownAs": null,
"isPackage": true,
"isPackageComponent": false,
"packageName": null,
"productUrl": "ProductURL",
"lifecycle": {
"gaDate": "2012-05-20T00:00:00.000Z",
"eolDate": "2017-07-11T00:00:00.000Z",
"eosDate": "2022-07-12T00:00:00.000Z",
"stage": "EOL/EOS",
"lifeCycleConfidence": "Exact",
"eolSupportStage": "Mainstream End Date",
"eosSupportStage": "Extended End Date",
"detectionScore": 0
},
"supportStageDesc": null,
"license": {
"category": "Commercial",
"subcategory": "Licensed"
},
"authorization": null,
"discoveredPublisher": null,
"discoveredName": "MSSQL 2012",
"discoveredVersion": "11.0.6020.0",
"authorizationDetectionScore": null,
"cpeId": null,
"cpe": null,
"cpeType": "NIST",
"softwareInstances": [
{
"instanceName": "SQLServer",
"technology": "MSSQL 2012",
"version": "11.0.6020.0",
"port": null,
"installPath": null,
"configurationPath": null,
"homePath": null,
"firstSeen": "2025-08-20T06:01:46.000Z",
"lastSeen": "2025-08-20T06:02:04.000Z"
}
]
},
{
"id": 2222222222222222222,
"discoverySources": "Cloud Agent",
"fullName": "Microsoft .NET Framework 4.7",
"softwareType": "Application",
"isIgnored": false,
"ignoredReason": null,
"category": "Application Development / Framework",
"category1": "Application Development",
"category2": "Framework",
"productName": ".NET Framework",
"component": null,
"publisher": "Microsoft",
"edition": "Unknown",
"marketVersion": "4",
"version": "4.7",
"update": "4.7",
"architecture": null,
"installDate": null,
"installPath": "InstallPath",
"lastUpdated": null,
"lastUseDate": null,
"language": null,
"formerlyKnownAs": null,
"isPackage": false,
"isPackageComponent": true,
"packageName": "Visual Studio",
"productUrl": "ProductURL",
"lifecycle": {
"gaDate": "2017-04-11T00:00:00.000Z",
"eolDate": "Not Announced",
"eosDate": "Not Announced",
"stage": "GA",
"lifeCycleConfidence": "Exact",
"eolSupportStage": "Not Announced",
"eosSupportStage": "Not Announced",
"detectionScore": 0
},
"supportStageDesc": null,
"license": {
"category": "Commercial",
"subcategory": "Free"
},
"authorization": null,
"discoveredPublisher": null,
"discoveredName": "Microsoft .NET Framework 4",
"discoveredVersion": "4.7.03190",
"authorizationDetectionScore": null,
"cpeId": null,
"cpe": null,
"cpeType": "NIST",
"softwareInstances": [
{
"instanceName": "SQLServer",
"technology": "MSSQL 2012",
"version": "11.0.6020.0",
"port": null,
"installPath": null,
"configurationPath": null,
"homePath": null,
"firstSeen": "2025-08-20T06:01:46.000Z",
"lastSeen": "2025-08-20T06:02:04.000Z"
}
]
},
{
"id": 3333333333333333333,
"discoverySources": "Cloud Agent",
"fullName": "Microsoft SQL Server Management Studio Client 17.9 14.0.17285.0",
"softwareType": "Application",
"isIgnored": false,
"ignoredReason": null,
"category": "Databases / Client Tools",
"category1": "Databases",
"category2": "Client Tools",
"productName": "SQL Server Management Studio",
"component": "Client",
"publisher": "Microsoft",
"edition": null,
"marketVersion": "17",
"version": "17.9",
"update": "17.9 14.0.17285.0",
"architecture": null,
"installDate": null,
"installPath": null,
"lastUpdated": null,
"lastUseDate": null,
"language": null,
"formerlyKnownAs": null,
"isPackage": false,
"isPackageComponent": false,
"packageName": null,
"productUrl": "https://example.com/product-url",
"lifecycle": {
"gaDate": "2018-09-04T00:00:00.000Z",
"eolDate": null,
"eosDate": null,
"stage": "EOL/EOS",
"lifeCycleConfidence": "Exact",
"eolSupportStage": " ",
"eosSupportStage": " ",
"detectionScore": 49
},
"supportStageDesc": null,
"license": {
"category": "Commercial",
"subcategory": "Free"
},
"authorization": null,
"discoveredPublisher": null,
"discoveredName": "Microsoft SQL Server Management Studio - 17.9",
"discoveredVersion": "14.0.17285.0",
"authorizationDetectionScore": null,
"cpeId": 999999999,
"cpe": "cpe:2.3:a:microsoft:sql_server_management_studio:17.9:*:*:*:*:*:*:*",
"cpeType": "NIST",
"softwareInstances": null
},
{
"id": 4444444444444444444,
"discoverySources": "Cloud Agent",
"fullName": "Fullname",
"softwareType": "Others",
"isIgnored": true,
"ignoredReason": "Hotfix",
"category": "Unknown / Unknown",
"category1": "Unknown",
"category2": "Unknown",
"productName": "Unknown",
"component": null,
"publisher": "Unknown",
"edition": null,
"marketVersion": null,
"version": "14.0.3485.1",
"update": "14.0.3485.1",
"architecture": null,
"installDate": null,
"installPath": null,
"lastUpdated": null,
"lastUseDate": null,
"language": null,
"formerlyKnownAs": null,
"isPackage": false,
"isPackageComponent": false,
"packageName": null,
"productUrl": null,
"lifecycle": {
"gaDate": null,
"eolDate": null,
"eosDate": null,
"stage": "Unknown",
"lifeCycleConfidence": null,
"eolSupportStage": null,
"eosSupportStage": null,
"detectionScore": null
},
"supportStageDesc": null,
"license": {
"category": null,
"subcategory": null
},
"authorization": null,
"discoveredPublisher": null,
"discoveredName": "SQL Server 2017 (KB5046858) (64-bit)",
"discoveredVersion": "14.0.3485.1",
"authorizationDetectionScore": null,
"cpeId": null,
"cpe": null,
"cpeType": null,
"softwareInstances": null
},
{
"id": 5555555555555555555,
"discoverySources": "Cloud Agent",
"fullName": "Microsoft SQL Server 2017 Setup (English) 14.0.3485.1",
"softwareType": "Others",
"isIgnored": true,
"ignoredReason": "Setup Software",
"category": "Unknown / Unknown",
"category1": "Unknown",
"category2": "Unknown",
"productName": "Unknown",
"component": null,
"publisher": "Unknown",
"edition": null,
"marketVersion": null,
"version": "14.0.3485.1",
"update": "14.0.3485.1",
"architecture": null,
"installDate": null,
"installPath": null,
"lastUpdated": null,
"lastUseDate": null,
"language": null,
"formerlyKnownAs": null,
"isPackage": false,
"isPackageComponent": false,
"packageName": null,
"productUrl": null,
"lifecycle": {
"gaDate": null,
"eolDate": null,
"eosDate": null,
"stage": "Unknown",
"lifeCycleConfidence": null,
"eolSupportStage": null,
"eosSupportStage": null,
"detectionScore": null
},
"supportStageDesc": null,
"license": {
"category": null,
"subcategory": null
},
"authorization": null,
"discoveredPublisher": null,
"discoveredName": "Microsoft SQL Server 2017 Setup (English)",
"discoveredVersion": "14.0.3485.1",
"authorizationDetectionScore": null,
"cpeId": null,
"cpe": null,
"cpeType": null,
"softwareInstances": null
},
{
"id": 6666666666666666666,
"discoverySources": "Cloud Agent",
"fullName": "Microsoft SQL Server Native Client 11.4.7515.2",
"softwareType": "Application",
"isIgnored": false,
"ignoredReason": null,
"category": "Databases / Client Tools",
"category1": "Databases",
"category2": "Client Tools",
"productName": "SQL Server Native Client",
"component": "Client",
"publisher": "Microsoft",
"edition": null,
"marketVersion": "11",
"version": "11.4",
"update": "11.4.7515.2",
"architecture": null,
"installDate": null,
"installPath": null,
"lastUpdated": null,
"lastUseDate": null,
"language": null,
"formerlyKnownAs": null,
"isPackage": false,
"isPackageComponent": true,
"packageName": "SQL Server",
"productUrl": "productURL",
"lifecycle": {
"gaDate": null,
"eolDate": null,
"eosDate": null,
"stage": "GA",
"lifeCycleConfidence": "Exact",
"eolSupportStage": " ",
"eosSupportStage": " ",
"detectionScore": 0
},
"supportStageDesc": null,
"license": {
"category": "Commercial",
"subcategory": "Licensed"
},
"authorization": null,
"discoveredPublisher": null,
"discoveredName": "Microsoft SQL Server 2012 Native Client",
"discoveredVersion": "11.4.7515.2",
"authorizationDetectionScore": null,
"cpeId": null,
"cpe": null,
"cpeType": "NIST",
"softwareInstances": null
},
{
"id": 7777777777777777777,
"discoverySources": "Cloud Agent",
"fullName": "Microsoft SQL Server 2017 RsFx Driver 14.0.3485.1",
"softwareType": "Others",
"isIgnored": true,
"ignoredReason": "Device Drivers",
"category": "Unknown / Unknown",
"category1": "Unknown",
"category2": "Unknown",
"productName": "Unknown",
"component": null,
"publisher": "Unknown",
"edition": null,
"marketVersion": null,
"version": "14.0.3485.1",
"update": "14.0.3485.1",
"architecture": null,
"installDate": null,
"installPath": null,
"lastUpdated": null,
"lastUseDate": null,
"language": null,
"formerlyKnownAs": null,
"isPackage": false,
"isPackageComponent": false,
"packageName": null,
"productUrl": null,
"lifecycle": {
"gaDate": null,
"eolDate": null,
"eosDate": null,
"stage": "Unknown",
"lifeCycleConfidence": null,
"eolSupportStage": null,
"eosSupportStage": null,
"detectionScore": null
},
"supportStageDesc": null,
"license": {
"category": null,
"subcategory": null
},
"authorization": null,
"discoveredPublisher": null,
"discoveredName": "Microsoft SQL Server 2017 RsFx Driver",
"discoveredVersion": "14.0.3485.1",
"authorizationDetectionScore": null,
"cpeId": null,
"cpe": null,
"cpeType": null,
"softwareInstances": null
},
{
"id": 8888888888888888888,
"discoverySources": "Cloud Agent",
"fullName": "Microsoft Internet Explorer 11.0",
"softwareType": "Application",
"isIgnored": false,
"ignoredReason": null,
"category": "Network Application / Internet Browser",
"category1": "Network Application",
"category2": "Internet Browser",
"productName": "Internet Explorer",
"component": null,
"publisher": "Microsoft",
"edition": "Unknown",
"marketVersion": "11",
"version": "11.0",
"update": "11.0",
"architecture": null,
"installDate": null,
"installPath": null,
"lastUpdated": null,
"lastUseDate": null,
"language": null,
"formerlyKnownAs": null,
"isPackage": false,
"isPackageComponent": false,
"packageName": null,
"productUrl": "productURL",
"lifecycle": {
"gaDate": "2013-10-17T00:00:00.000Z",
"eolDate": null,
"eosDate": null,
"stage": "OS Dependent",
"lifeCycleConfidence": "Exact",
"eolSupportStage": " ",
"eosSupportStage": " ",
"detectionScore": 40
},
"supportStageDesc": null,
"license": {
"category": "Commercial",
"subcategory": "Free"
},
"authorization": null,
"discoveredPublisher": null,
"discoveredName": "Internet Explorer 11",
"discoveredVersion": "9.11.17763.0",
"authorizationDetectionScore": null,
"cpeId": 877711965,
"cpe": "cpe:2.3:a:microsoft:internet_explorer:11.0:*:*:*:*:*:*:*",
"cpeType": "Qualys",
"softwareInstances": [
{
"instanceName": "SQLServer",
"technology": "MSSQL 2012",
"version": "11.0.6020.0",
"port": null,
"installPath": null,
"configurationPath": null,
"homePath": null,
"firstSeen": "2025-08-20T06:01:46.000Z",
"lastSeen": "2025-08-20T06:02:04.000Z"
}
]
}
]
},
"softwareComponent": null,
"provider": "AWS",
"cloudProvider": {
"aws": {
"ec2": {
"accountId": "123456789012",
"availabilityZone": "us-west-2a",
"hasAgent": true,
"hostname": "ip-xx-x-x-xxx",
"imageId": null,
"instanceId": "i-0123456789abcdef0",
"instanceState": "RUNNING",
"instanceType": null,
"qualysScanner": false,
"kernelId": null,
"launchdate": 1618651595000,
"privateDNS": null,
"privateIpAddress": "10.0.0.100",
"publicDNS": "ec2-203-0-113-25.compute-1.amazonaws.com",
"publicIpAddress": "203.0.113.25",
"region": {
"code": "us-west-2",
"name": "US West (Oregon)"
},
"spotInstance": true,
"subnetId": "subnet-0123456789abcdef0",
"vpcId": "vpc-0123456789abcdef0"
},
"tags": [
{
"key": "Email",
"value": "[email protected]"
},
{
"key": "Department",
"value": "it-ops"
},
{
"key": "Lifecycle",
"value": "2030/12/12"
},
{
"key": "Name",
"value": "Example Host Name"
},
{
"key": "Jira",
"value": "PROJECT-12345"
},
{
"key": "Owner",
"value": "ExampleOwner"
}
]
},
"azure": null,
"gcp": null,
"oci": null,
"ibm": null,
"alibaba": null
},
"agent": {
"version": "5.6.0.20",
"configurationProfile": "Initial Profile",
"activations": null,
"connectedFrom": "xx.x.x.xx",
"lastActivity": 1752143538000,
"lastCheckedIn": 1752143538000,
"lastInventory": 1755689535000,
"udcManifestAssigned": false,
"errorStatus": false
},
"sensor": {
"activatedForModules": [],
"pendingActivationForModules": [],
"lastVMScan": 0,
"lastComplianceScan": 0,
"lastFullScan": 0,
"lastVmScanDateScanner": 0,
"lastVmScanDateAgent": 0,
"lastPcScanDateScanner": 0,
"lastPcScanDateAgent": 0,
"firstEasmScanDate": null,
"lastEasmScanDate": null
},
"container": null,
"inventory": {
"source": "QAGENT",
"created": 1753429139000,
"lastUpdated": 1752143538000
},
"inventoryListData": {
"inventory": [
{
"source": "Cloud Agent",
"created": 1753429138000,
"lastUpdated": 1752163337000
}
]
},
"activity": {
"source": "QAGENT",
"lastScannedDate": 1752143538000
},
"tagList": {
"tag": [
{
"tagId": 90000000,
"tagName": "DYNAMIC",
"foregroundColor": 0,
"backgroundColor": 0,
"businessImpact": null,
"criticalityScore": null
},
{
"tagId": 90000001,
"tagName": "software:(publisher:*)",
"foregroundColor": 0,
"backgroundColor": 0,
"businessImpact": null,
"criticalityScore": 5
}
]
},
"serviceList": {
"service": [
{
"description": "Service Description A",
"name": "service-A",
"status": "running"
},
{
"description": "Service Description B",
"name": "service-B",
"status": "running"
},
{
"description": "Service Description C",
"name": "service-C",
"status": "running"
}
]
},
"lastLocation": {
"city": "Example City",
"state": "Example State",
"country": "Example Country",
"name": "Example City, Example State - Example Country",
"continent": "North America",
"postal": "00000"
},
"criticality": {
"score": 5,
"isDefault": false,
"lastUpdated": "2025-08-20T11:31:24.000Z"
},
"businessInformation": null,
"assignedLocation": null,
"businessAppListData": null,
"riskScore": null,
"passiveSensor": null,
"domain": null,
"subdomain": null,
"missingSoftware": null,
"whois": null,
"organizationName": null,
"isp": null,
"asn": null,
"easmTags": null,
"hostingCategory1": null,
"customAttributes": null,
"lparId": null,
"processor": [
{
"description": "Example Processor Model",
"speed": 2600,
"numCPUs": 2,
"noOfSocket": null,
"threadsPerCore": null,
"coresPerSocket": null,
"multithreadingStatus": null
}
]
}
]
}
}
Import Third-Party Assets API: Import Software Instances
| New or Updated API | Updated |
| API Endpoint | /rest/2.0/am/connector/asset/data/sync |
| Method | POST |
| DTD or XSD changes | Not Applicable |
Use this API to import software instance information from a third-party source.
Sample: Import software instance dataSample: Import software instance data
API Request
curl -X POST
'<qualys_base_url>/rest/2.0/am/connector/asset/data/sync'
--header 'Authorization: Bearer <JWT Token>'
--header 'Content-Type: application/json'
--data-raw '<JSON payload>'
Sample JSON Payload
{
"connectorMetaData": {
"requestId": "REQ-001",
"connectorUuid": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"source": "WEBHOOK"
},
"assetData": [
{
"identityAttributes": {
"hostName": "HOSTNAME-001",
"fqdn": null,
"netBiosName": null,
"ipAddress": [
"10.0.0.100"
],
"macAddress": null,
"hardwareUuid": null,
"serialNumber": null,
"sourceNativeKey": "NATIVE-KEY-001"
},
"dnsName": "hostname-001.example.com",
"coreAttributes": {
"hostName": "HOSTNAME-001",
"domain": "example.com",
"ipaddress": "10.0.0.100",
"biosInfo": {
"totalMemory": 100,
"serialNumber": null,
"biosAssetTag": "",
"manufacturer": "Example Manufacturer"
},
"ports": [
{
"port": "9191",
"protocol": "TCP"
},
{
"port": "9292",
"protocol": "TCP"
}
],
"softwares": [
{
"name": "mariadb",
"description": "This is MariaDB",
"version": "10.2.44-3.53.1.x86_64-Bit",
"publisher": "MariaDB",
"softwareInstances": [
{
"instanceName": "mariadb",
"port": "8080",
"technology": "abc",
"version": "1.2.1",
"homePath": "/mariadb"
}
]
},
{
"name": "mariadb-client",
"description": "This is MariaDB",
"version": "10.2.44-3.53.1.x86_64-Bit",
"publisher": "MariaDB",
"softwareInstances": [
{
"instanceName": "mariadb-client",
"port": "8080",
"technology": "abc-client",
"version": "1.2.1",
"homePath": "/mariadb/client"
}
]
},
{
"name": "Apache-Coyote",
"version": "1.1"
},
{
"name": "MS-SQL",
"version": "2016"
}
],
"services": [
{
"name": "Example Service",
"description": "Active Directory Domain Services",
"status": "Running"
}
],
"operatingSystem": "Windows 11",
"businessInformation": {
"operationalStatus": "Operational",
"environment": "Development",
"ownedBy": "John Doe",
"managedBy": "Jane Smith",
"supportedBy": "Support Team",
"supportGroup": "App-Sec Manager"
},
"assignedLocation": {
"name": "123 Main Street, City, ST",
"city": "City",
"state": "ST",
"country": "USA"
},
"businessApps": [
{
"businessAppId": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
}
],
"networkInterfaces": [
{
"interfaceName": "eth0",
"hostname": "10.0.0.100",
"temp_q_25_ipv4Address": [
"10.0.0.101"
],
"macAddress": null,
"temp_q_29_gatewayAddress": [
""
],
"ipv4Address": [
"10.0.0.100"
],
"gatewayAddress": [
""
]
}
]
},
"customAttributes": [
{
"key": "B_Unit"
},
{
"key": "HW Status",
"value": "Installed"
},
{
"key": "Purchase Date",
"value": "2015-05-10"
},
{
"key": "Lease Details",
"value": "LEASE-2023-001"
},
{
"key": "Managed Group",
"value": "CI Manager"
},
{
"key": "Last Checkin",
"value": "2023-05-18 22:51:40"
},
{
"key": "Internet",
"value": "true"
},
{
"key": "discovery_source",
"value": "Discovery-Tool"
},
{
"key": "First Discovered",
"value": "2022-11-15 04:03:19"
},
{
"key": "Subcategory",
"value": "Computer"
}
]
}
]
}
API Response
{
"message": "All Assets are successfully published for sync.",
"responseCode": "SUCCESSFULLY_PUBLISHED",
"assetsError": {}
}
Enhanced Third-Party Asset Import API
We have enhanced the Third-Party Asset Import API to ensure consistent tagging of assets imported by a connector. Now, whenever new assets are imported through a connector, the tags defined for the connector are also applied to existing assets imported from the same connector.
For more information on the applicable connector list, refer to Automatic Tagging for Third-party Assets.
Import Third-Party Assets API
| New or Updated API | Updated |
| API Endpoint | /rest/2.0/am/connector/asset/data/sync |
| Method | POST |
| DTD or XSD changes | Not Applicable |
Use this API to import third-party assets into the CSAM inventory.
For more information on the third-party asset import API, refer to the CSAM APIs.
Enhanced APIs with New QQL Search Tokens
As a part of QQL token standardization, we have renamed common and CSAM/GAV-specific tokens. The standardization helps reuse and customize the QQL queries across all Qualys applications, leading to a consistent user experience. The standardized tokens make it easier to copy and reuse the search query from one application to another, eliminating the need to remember multiple token names for different applications and similar searches.
For more information on QQL Token Standardization, refer to Implementation of QQL Token Standardization.
The table below provides the CSAM/GAV APIs, where the standardized token names can be used in the API request to filter the response.
To know more about the supported tokens for these APIs, refer to CSAM APIs.
| API Name | API Endpoint |
|---|---|
| Count of Assets API | POST /rest/2.0/count/am/asset |
| Get Host Details of Specific Asset | GET /rest/2.0/get/am/asset |
| Get Host Details of All Assets | POST /rest/2.0/search/am/asset |
| Get the List of Vulnerabilities Discovered by EASM | POST /rest/2.0/search/am/easm/vulns |
| GET the List of Vulnerabilities discovered by EASM Scan | POST /rest/2.0/search/am/easm/scan/vulns |
| Fetch Vulnerability Data for Software and Operating Systems Across Assets | POST /rest/2.0/am/catalog/cve/detail |
| Get a List of Domains | POST /rest/2.0/am/domain/list |
| Get the Count of Domains | POST /rest/2.0/am/domain/count |
| Get the List of All Software Components | POST /rest/2.0/am/asset/component |
| Get the List of Software Components for the Specific Asset ID | POST /rest/2.0/am/asset/component/{assetId} |