Release Notes

Release 1.2.0

July 29, 2026

Support for TruConform to Improve Additional Details Section  

This release added support for Qualys TruConfirm for the ETM VR app. Four new fields are added to the Additional Details section. The added fields provide greater visibility into TruRisk status and the applicability of detections, helping you gain additional context when reviewing and managing vulnerabilities.

To view the TruConfirm data in Additional details, go to the Qualys ETM Additional Details page.

For more details, see View ETM VIT Additional Details.

Release 1.1.0

February 27, 2026

Support for OpenID Connect Authentication

This release adds support for OIDC (OpenID Connect) authentication using Client ID and Client Secret. Users can now configure either Basic authentication (Username and Password) or OIDC credentials, depending on their environment requirements. The application authenticates using the configured credentials to connect to ETM APIs. This enhancement enables secure integration with environments that require OIDC authentication while maintaining support for existing Basic authentication configurations.

For more details, see Qualys ETM VR Integration.

Release 1.0.1

November 17, 2025 

We are pleased to announce that the Qualys Enterprise TrueRisk Management (ETM) Vulnerability Response (VR) Integration app for ServiceNow is now available.

This integration allows organizations to automatically import vulnerability findings from Qualys ETM into the ServiceNow VR module. By creating Vulnerable Items (VITs) with detailed enrichment data, security and IT teams can collaborate more effectively, streamline remediation processes, and maintain an up-to-date view of enterprise risk.

The following are the key highlights of this integration:

• Automated ticketing process that creates Vulnerable Item (VIT) entries directly from Qualys ETM findings

• Enrichment for CVEs with critical information such as EPSS (Exploit Prediction Scoring System), CISA Known Exploits, Exploit Maturity, Threat Actor RTI (Real-Time Intelligence), Impact, Detection Result, and Recommendation

• Patch intelligence with patch IDs, advisory links, release dates, and supersedence details

• Support to update the CI in the CMDB table 

• Scheduled integrations for report requests and downloads, using QQL-based filtering

• Application logging and monitoring within ServiceNow to enhance visibility

• View ETM-specific data for VITs