Release 2.1.0

January 7, 2025 

What's New?

Enhanced User Interface (UI 4.0) of the Qualys Cloud Platform  

Introducing the new and improved UI with the following key upgrades. This new interface is designed to make your platform experience faster, smoother.

Check out our blog for insights to discover the key enhancements designed to improve your experience.

Watch this video to explore the new UI and discover the key enhancements designed to improve your experience!

New UI Key Highlights

New UI Rollout 

The new user interface is rolling out in phases starting January 2025. You will receive in-platform notifications and email updates to guide you through the transition. Compatibility is seamless, with no additional setup required.

You can update your preference by switching between the Old and New UI using the toggle option until Day 90.

If no preference is set, the platform will default to the New UI after the 30 days transition period. For more information on the rollout phase, refer to the Frequently Asked Questions.

Platform Name Change Update

We are renaming the Qualys Cloud Platform to the Qualys Enterprise TruRisk Platform. This change highlights Qualys' commitment to empowering CISOs, cybersecurity professionals, and risk stakeholders to effectively measure and mitigate the impact of cyber risk on their organizations. 

The Qualys Enterprise TruRisk Platform is the only cybersecurity and risk management solution that enables you to measure, communicate, and eliminate cyber risk across the extended enterprise with precise remediation and mitigation actions. 

This update does not affect the platform’s functionality or features. The name change will be implemented across all product interfaces in phases starting January 2025. 

For more information, check out this blog.  

New Tokens 

The following table lists the tokens added under the Vulnerabilities, Alerting and Asset tabs. 

Tab Tokens
Vulnerabilities

We have added the following new tokens to the Asset Details page for TruRiskScore under the Vulnerabilities tab and VMDR widget in the unified dashboard.

  • vulnerabilities.qualysPatchable
  • vulnerabilities.qualysMitigable

These tokens were previously added to the Vulnerabilities Details page in Release 2.0.0

The following new tokens are added to the Rule Query under the Alerting tab.

Rule Query Tokens
Vulnerability

The following tokens are added to the Vulnerability Rule Query.

  • vulnerabilities.detectionSource.name
  • vulnerabilities.riskFactor.cisaKnownExploits
  • vulnerabilities.riskFactor.exploitCodeMaturity
  • vulnerabilities.riskFactor.rti
  • vulnerabilities.vulnerability.cveIds
  • vulnerabilities.vulnerability.cvss2Info.baseScore
  • vulnerabilities.vulnerability.mitre.attack.tactic.id
  • vulnerabilities.vulnerability.mitre.attack.technique.id
  • vulnerabilities.vulnerability.pci
  • vulnerabilities.vulnerability.qid
  • vulnerabilities.vulnerability.ransomware.name
  • vulnerabilities.vulnerability.severity
  • vulnerabilities.vulnerability.vendors.productName
  • vulnerabilities.vulnerability.vendors.vendorName

For more information, see Alerting in Search Tokens for VMDR.

Asset

The following tokens are added to the Asset Rule Query.

  • activatedForModules
  • openPorts.firstFound
  • openPorts.lastUpdated
  • openPorts.protocol 

For more information, see Alerting in Search Tokens for VMDR.

Issue Addressed

Previously, the QQL filter vulnerabilities.riskFactor.cisaKEVDueDate<now did not work as expected. Customers were using vulnerabilities.riskFactor.cisaKEVDueDate<now-0d as a workaround to filter their views. This issue has now been resolved, and the original filter (<now) works correctly.

Another related issue was identified, where future dates were not accounted for in the same QQL query. This problem has also been fixed.

Both fixes ensure the filter behaves as intended for past, present, and future dates.