PCI Compliance Release 1.6.2 API
Limited Customer Release
July 01, 2025
Launch PCI Scan for IPv6 Assets
With this release, we have added support for launching PCI scans on discovered IPv6 assets directly from the PCI Compliance user interface. With the support to IPv6 assets, the following APIs are also impacted.
The save_merchant API does not support adding IPv6 assets while creating a new merchant.
Add Hosts API: Add IPv6 Assets
| New or Updated API | Updated |
| API Endpoint | /pci/asset/add |
| Method | POST |
| DTD or XSD changes | No |
We have added support for IPv6 to Add Hosts API. Now, you can use this API to add both the IPv4 and IPv6 assets to your account.
Sample: Add IPv6 AssetsSample: Add IPv6 Assets
API Request
curl -u "USERNAME:PASSWD"
-X POST -H "content-type: application/json"
-H "apiVersion:V1" -d @postdatafile.json "https://pci-api.qualys.com/pci/asset/add"Request Post Data
{
"assetType": "IP",
"assets": "2001:0db8:85a3:0000:0000:8a2e:0370:7334"
}API Response
{
"responseApiVersion": "LATEST - V1",
"data": "1 IP added successfully"
}Remove Hosts API: Delete IPv6 Asset
| New or Updated API | Updated |
| API Endpoint | /pci/asset/delete |
| Method | DELETE |
| DTD or XSD changes | No |
We have added support for IPv6 to Remove Hosts API. Now, you can use this API to delete both the IPv4 and IPv6 assets from your account.
Sample: Delete IPv6 AssetsSample: Delete IPv6 Assets
API Request
curl -H "X-Requested-With: test"-u "USERNAME:PASSWD"
-X DELETE -H "content-type: application/json"
-H "apiVersion:V1"
-d @postdatafile.json "https://pci-api.qualys.com/pci/asset/delete"Request Post Data
{
"assetType": "IP",
"assets": "1e80::5c91:4831:88f9:41ef"
}API Response
{
"responseApiVersion": "LATEST - V1",
"data": "1 IP removed successfully"
}
{
"responseApiVersion": "LATEST - V1",
"data": "1 IP removed successfully"
}Add Virtual Hosts API: Add IPv6 Virtual Host
| New or Updated API | Updated |
| API Endpoint | /pci/asset/add |
| Method | POST |
| DTD or XSD changes | No |
We have added support for IPv6 to Add Virtual Hosts API. Now, you can use this API to add both the IPv4 and IPv6 virtual assets to your account.
Sample: Add IPv6 Virtual HostSample: Add IPv6 Virtual Host
API Request
curl -H "X-Requested-With: test" -u "USERNAME:PASSWD"
-X POST -H "content-type: application/json"
-H "apiVersion:V1"
-d @postdatafile.json "https://pci-api.qualys.com/pci/asset/add"
Request Post Data
{
"assetType": "VIRTUALHOST",
"assets": "www.test.com:8008:11.11.11.11/path, www.test.com:8008:2001:df1:f600:247d::a73:7de3/path"
}
API Response
{
"responseApiVersion": "LATEST - V1",
"data": "2 VirtualHost added successfully"
}
Remove Virtual Hosts API: Delete IPv6 Virtual Host
| New or Updated API | Updated |
| API Endpoint | /pci/asset/delete |
| Method | DELETE |
| DTD or XSD changes | No |
We have added support for IPv6 assets to Remove Virtual Hosts API. Now, you can use this API to delete both the IPv4 and IPv6 virtual assets from your account.
Sample: Delete IPv6 Virtual HostSample: Delete IPv6 Virtual Host
API Request
curl -H "X-Requested-With: test" -u "USERNAME:PASSWD"
-X DELETE -H "content-type: application/json" -H "apiVersion:V1"
-d @postdatafile.json "https://pci-api.qualys.com/pci/asset/delete"
Request Post Data
{
"assetType": "VIRTUALHOST",
"assets": "www.test.com:8008:2001:df1:f600:247d::a73:7de3/path, www.test.com:8008:11.11.11.11/path"
}
API Response
{
"responseApiVersion": "LATEST - V1",
"data": "2 VirtualHost removed successfully"
}
Get Scan Details API: Fetch IPv6 Scan Details
| New or Updated API | Updated |
| API Endpoint | /pci/scan/{scanId}/details |
| Method | GET |
| DTD or XSD changes | No |
We have added support for IPv6 assets to Get Scan Details API. Now, you can use this API to get scan details for both IPv4 and IPv6 assets.
Sample: Fetch IPv6 Scan DetailsSample: Fetch IPv6 Scan Details
API Request
curl -H "X-Requested-With: test" -u "USERNAME:PASSWD"
-X GET -H "content-type: application/json" -H "apiVersion: V1"
"https://pci-api.qualys.com/pci/scan/2185043/details"
API Response
"responseApiVersion": "LATEST - V1",
"data": {
"title": "aa",
"startedOn": "May 26, 2025 at 06:49 AM GMT",
"launchedBy": "Manoj Jaisinghani",
"duration": "00:00:00",
"activeHosts": 0,
"launchType": "On Demand",
"bandwidth": "Medium",
"scanStatus": "Failed",
"target": "1.2.3.5,10.10.10.10,...,2001:df1:f600:247d::a73:7de3",
"scanType": "IP",
"compliance": "Fail"
}
}
The API Response may contain details for IPv4 addresses, IPv6 addresses, and IP ranges.
Launch Scans API: Launch Scan with IPv6 Targets
| New or Updated API | Updated |
| API Endpoint | /pci/scan/launch |
| Method | POST |
| DTD or XSD changes | No |
We have added support for IPv6 assets to Launch Scans API. Now, you can use this API to launch scan for both IPv4 and IPv6 assets.
Sample: Launch Scan with IPv6 TargetsSample: Launch Scan with IPv6 Targets
API Request
curl -H "X-Requested-With: test" -u "USERNAME:PASSWD"
-X POST -H "content-type: application/json" -H "apiVersion:V1"
-d @postdatafile.json'"https://pci-api.qualys.com/pci/scan/launch"
Request Post Data
{
"title": "aa",
"bandwidth": "Medium",
"scanType": "IP",
"targetIps": "10.15.20.25, 2001:df1:f600:247d::a73:7de3",
"targetDns": "qas.com, fff.com, dnstest1.com",
"targetAll": "true",
"launchType": "ondemand"
} API Response
{
"responseApiVersion": "LATEST - V1",
"data": {
"id": 10988,
"status": "Launched scan successfully"
}
}