Patch Management Release 3.14 API

May 04, 2026

Before understanding the API release highlights, learn more about the API server URL to be used in your API requests by referring to the Know Your Qualys API Server URL section. For this API Release Notes, <qualys_base_url> is mentioned in the sample API requests.

Acquired From Vendor Patch Support

Updated API: Get Patch Insights Data

New or Updated API Updated
API Endpoint  /pm/v1/remediation/insights
Method POST
DTD or XSD changes Not Applicable

We have enhanced this API, to fetch the list of acquired from vendor patches. The enhanced API includes a new parameter isCustomizedDownloadUrl in the API response. If the patch for the specified QID is in the enabled state, this parameter value is true else, it is false.  

Sample - Get Patch Insights Data with Vendor Acquired PatchesSample - Get Patch Insights Data with Vendor Acquired Patches

API Request

  curl -X 'POST' \ '<qualys_base_url>/pm/v1/remediation/insights' \
 - H 'accept: application/json' \
 -H 'Authorization: Bearer <<jwt token>>' \
 -H 'Content-Type: application/json' \
 -d '[ { "assetId": 62101603,"qid": 372667 } ]'

API Response

[
  {
    "qid": 372667,
    "qidTitle": "KeePass Man-In-The -Middle Vulnerability",
    "assetId": 62101603,
    "assetUUID": "a841b4fb-ab57-4f11-a462-1976cc64c286",
    "assetName": "Win11-23H2-Path-1",
    "assetPlatform": "Windows",
    "assetOperatingSystem": "Windows Server 2012 R2 Standard 64 bit Edition",
    "assetLicenseStatus": "Full",
    "statusMessage": "The provided Asset is fully licensed. Full information is available for the applicable patches.",
    "patches": [
      {
        "qualysPatchId": "18792193-a0ff-33d2-8c0c-b9ffa67ad27e",
        "patchTitle": "KeePass 2.61",
        "category": "Non-Security Patches",
        "vendorSeverity": "None",
        "bulletin": "KEEP-260304",
        "kb": "QKPP261EXE",
        "advisory": null,
        "notification": null,
        "associatedQIDs": [
          "372667"
        ],
        "cve": [],
        "packages": null,
        "downloadUrls": [
          "https://sourceforge.net/projects/keepass/files/KeePass 2.x/2.61/KeePass-2.61-Setup.exe"
        ],
        "downloadMethod": "AcquireFromVendor",
        "isCustomizedDownloadUrl": true
      }
    ]
  }
]

Isolate and Unisolate an Asset

New API: Isolate and Unisolate an Asset

New or Updated API New
API Endpoint  /isl/v1/assets/isolation/{action}
Method POST
DTD or XSD changes Not Applicable

We have introduced a new Isolate and Unisolate Assets API as part of automatic rule based Isolation. These APIs helps you to isolate or unisolate the assets in bulk using tags or individual assets using asset IDs. You must have the Isolation Manager and Isolation User roles to use this API.

Input ParametersInput Parameters

Parameter Mandatory/
Optional
Data Type Description
action Mandatory String Specify the action. The values are isolate and unisolate.
platform Mandatory String Specify the platform type.
For example, Windows, Linux.
type Mandatory String

Specify the type. The values are tag or asset. 

ids Mandatory Array of String Specify the ids for the assets or tags.

Sample Isolate Assets with Asset Tags as inputSample Isolate Assets with Asset Tags as input

API Request

curl -X 'POST' \
  '<qualys_base_url>/isl/v1/assets/isolation/unisolate?platform=windows' \
  -H 'accept: application/json' \
  -H 'Authorization: Bearer <JWT_Token>' \
  -H 'Content-Type: application/json' \
  -d '{
   "type": "tag",
  "ids": [
    "3963a26c-d3e7-4ea7-ba76-0a313d0ba7c7"
  ]
}'

API Response

{
 "compatibleCount": 1,
 "skippedAssets": [],
 "skippedCount": 0
}

Sample - Unisolate an Asset Not Activated for ISLSample - Unisolate an Asset Not Activated for ISL

API Request

curl -X 'POST' \
  '<qualys_base_url>/isl/v1/assets/isolation/unisolate?platform=windows' \
  -H 'accept: application/json' \
  -H 'Authorization: Bearer <JWT_Token>' \
  -H 'Content-Type: application/json' \
  -d '{
    "type""asset",
 "ids": [
    "3963a26c-d3e7-4ea7-ba76-0a313d0ba7c7"
 ]
}'

API Response

{
 "compatibleCount": 0,
 "skippedAssets": [
    {
      "reason""Asset not activated for ISL module",
      "id""3963a26c-d3e7-4ea7-ba76-0a313d0ba7c7"
    }
 ],
 "skippedCount": 1
}

UI Release Updates

To know in detail about the UI features, enhancements and issues addressed, see Patch Management Release 3.14