VMDR OT Release 1.6
April 23, 2026
Assess High-risk External IPs in OT Environment
You can now assess the security risk of external IPs communicating with assets in your OT environment using their reputation scores and geolocation details. This helps you identify potentially malicious, suspicious, or high-risk assets.
The system assigns a reputation score to each external IP based on multiple threat intelligence factors, such as a history of malware, phishing, spam, or botnet activity. The score ranges from 1 to 100, where a lower score indicates higher risk (malicious IP) and a higher score indicates lower risk (trustworthy IP).
VMDR OT can only display reputation scores for known malicious or high-risk IPs. Future releases may support additional reputation ratings, such as Suspicious, Moderate Risk, Low Risk, and Trustworthy. Also, only the first 100 external IPs communicating with an asset are displayed.
With IP reputation scores and geolocation details, you can:
- Prioritize remediation efforts for high-risk external IPs.
- Make informed security decisions related to external IPs.
View Reputation Score
You can view the reputation score for external IPs on the Network > List View tab. A reputation bar is displayed below the External label, providing a quick visual summary of the risk level associated with each IP.
The following screenshot displays an example of a reputation bar in the List View page.
Click the reputation bar to view detailed information about each external IP. The following image displays an example of the External IPs Details window:
For more information on the reputation score, refer to VMDR OT Online Help.
Visibility of Passive Sensor in Monitoring Integrity Events
You can now view the details of network passive sensors that monitor process integrity events in your network. To view these details, navigate to Event Details > Summary > Passive Sensor Details. You can view the sensor information, such as Name, Location, and Sensor ID, for each event under Passive Sensor Details.
Updated QQL Token Names
This release updates several Qualys Query Language (QQL) token names to align with the token standardization introduced in VMDR OT Release 1.3.1:
| Old Token Name | New Token Name |
|---|---|
| passiveSensor.id | qualys.passiveSensor.id |
| passiveSensor.location | qualys.passiveSensor.location |
| passiveSensor.name | qualys.passiveSensor.name |
New QQL Tokens
We have introduced the following new tokens in VMDR OT:
| Tab | Token |
|---|---|
| Network > List View > External IPs Details | The following tokens are added for searching external IPs:
For more information, refer to Network Search Tokens. |
| Monitoring > Events | The following tokens are added for searching events using passive sensor details:
For more information, refer to Events Search Tokens. |
Issues Addressed
There are no notable issues addressed in this release.