Qualys, Inc
Qualys is a U.S.-based software company built around a cloud platform for IT security, vulnerability management, and compliance. Its Enterprise TruRisk Platform helps organizations inventory assets, assess cyber risk, prioritize remediation, and verify that security actions have been completed across on-premises, cloud, container, mobile, and OT environments.
Fiscal year 2025 · change from previous year
Development 2020–2025
Business
Share of revenueMulti-tenant cloud software for security, compliance, and risk management workflows.
Tools to discover, assess, and prioritize vulnerabilities across IT assets.
Continuous identification of internal and external IT and OT assets.
Applications that support policy compliance, remediation tracking, and verification.
Security modules for endpoints, cloud workloads, containers, mobile, and developer teams.
Customers
Qualys sells to enterprises, government entities, and small and medium-sized businesses across many industries, with IT departments as a core end user. Customers buy the platform to centralize asset visibility, reduce vulnerability exposure, and support compliance across distributed environments. A large share of sales also flows through channel partners such as managed security service providers, cloud providers, resellers, and consulting firms.
Large organizations buy the platform to manage security, compliance, and asset visibility across complex environments.
Public-sector buyers use the software for vulnerability management and regulatory compliance.
SMBs purchase subscription modules through inside sales and partners for packaged security coverage.
Managed security service providers, cloud providers, resellers, and consultants buy subscriptions to resell or bundle.
Strategy
Qualys is focused on expanding its cloud security platform by adding solutions that help customers identify assets, quantify cyber risk, and automate remediation. It also relies heavily on channel partners to broaden distribution, especially for enterprise, SMB, and international sales. Product innovation, platform breadth, and partner enablement are central to its competitive position.
Cross-selling more modules increases customer value and deepens platform stickiness.
Partners account for a large share of revenue and are critical to reach and renewals.
A broader, integrated platform supports differentiation and customer retention.
Foreign customers are a meaningful part of the revenue base and diversify demand.
Geography
Q1/2026Qualys is headquartered in Foster City, California and sells across the United States and internationally. The company discloses that 56% of 2025 revenue came from U.S. customers based on billing address, indicating a broad foreign revenue base and meaningful international exposure. Its cloud platforms are distributed globally, with multi-tenant platforms hosted in collocated facilities and public cloud environments.
Share of the revenue the company reports by geography.
Risks
Qualys faces demand, renewal, and sales-cycle risk because its subscriptions are sold into a competitive security market and often through partners. It is also exposed to cyberattacks on its own systems and those of its service providers, which could disrupt service delivery or damage customer trust. Broader macroeconomic weakness, foreign exchange volatility, and geopolitical conflict can slow customer spending and complicate international operations.
- Cybersecurity and service disruptionImpact: CriticalLikelihood: Medium
The company operates a security platform and is itself a target for attacks on cloud systems and data.
Exposure - Channel partner dependenceImpact: HighLikelihood: Medium
Nearly half of revenue comes through partners, many of whom also sell competing products.
Exposure: 49% of 2025 revenue from channel partners
- Demand and renewal volatilityImpact: HighLikelihood: Medium
Subscription timing, renewals, and customer budget scrutiny can shift revenue between periods.
Exposure - Competitive pressureImpact: MediumLikelihood: Medium
The security software market is crowded and customers can switch or delay purchases.
Exposure: Vulnerability management and cloud security software
- International and macroeconomic exposureImpact: MediumLikelihood: Medium
Foreign revenue and global operations are exposed to FX, inflation, and geopolitical uncertainty.
Exposure: 44% of revenue outside the United States
Accounting
Judgemental itemsSubscription contracts and partner sales can shift revenue timing across periods.
Impact: Reported revenue and deferred revenue
Selling through partners affects gross versus net presentation, billing, and renewal timing.
Impact: Revenue timing and customer concentration analysis
Deferred tax assets and tax provisions depend on geographic income mix and future earnings.
Impact: Tax expense and effective tax rate
Equity awards are a recurring estimate in operating expenses and earnings.
Impact: Operating margin and diluted EPS
Non-cancelable commitments for cloud services affect future cash needs.
Impact: Liquidity and cash flow planning
Similar listed companies
Publicly listed companies with a comparable business focus.
Unisys Corporation New
UIS · Services-Computer Integrated Systems Design
Qnity Electronics, Inc.
Q · Semiconductors & Related Devices
Oculus Inc.
OVTZ · Services-Business Services, NEC
Telos Corporation
TLS · Services-Computer Integrated Systems Design
Telos Corp is a U.S.-based provider of software-based security solutions and related services for organizations that need to protect people, information, and digital assets.
Quantum Corporation
QMCO · Computer Storage Devices
Quantum Corp is a U.S.-based storage technology company that designs, manufactures, and sells primary storage, secondary storage, and data management solutions.
Quantum Computing Inc.
QUBT · Services-Prepackaged Software
Last updated: 24/09/2026