# Qualys, Inc > Clarifo company profile — qualitative business description generated from > the company's filings. Financial statements, charts and ratios are > available on Clarifo (https://www.clarifo.com/fi/companies/Qualys, Inc). ## Overview Qualys is a U.S.-based software company built around a cloud platform for IT security, vulnerability management, and compliance. Its Enterprise TruRisk Platform helps organizations inventory assets, assess cyber risk, prioritize remediation, and verify that security actions have been completed across on-premises, cloud, container, mobile, and OT environments. ## Products & services • Enterprise TruRisk Platform • Asset inventory and discovery • Vulnerability management • Cyber risk quantification and prioritization • Compliance and remediation verification • Cloud, endpoint, container, and OT security apps - **Cloud security platform** (55%) — Multi-tenant cloud software for security, compliance, and risk management workflows. - **Vulnerability management** (20%) — Tools to discover, assess, and prioritize vulnerabilities across IT assets. - **Asset inventory and discovery** (10%) — Continuous identification of internal and external IT and OT assets. - **Compliance and remediation workflows** (10%) — Applications that support policy compliance, remediation tracking, and verification. - **Endpoint and cloud security apps** (5%) — Security modules for endpoints, cloud workloads, containers, mobile, and developer teams. - Enterprise TruRisk Platform - Asset inventory and discovery - Vulnerability management - Cyber risk quantification and prioritization - Compliance and remediation verification - Cloud, endpoint, container, and OT security apps ## Customers Qualys sells to enterprises, government entities, and small and medium-sized businesses across many industries, with IT departments as a core end user. Customers buy the platform to centralize asset visibility, reduce vulnerability exposure, and support compliance across distributed environments. A large share of sales also flows through channel partners such as managed security service providers, cloud providers, resellers, and consulting firms. - **Enterprise customers** (primary) — Large organizations buy the platform to manage security, compliance, and asset visibility across complex environments. - **Government entities** (secondary) — Public-sector buyers use the software for vulnerability management and regulatory compliance. - **Small and medium-sized businesses** (secondary) — SMBs purchase subscription modules through inside sales and partners for packaged security coverage. - **Channel partners** (primary) — Managed security service providers, cloud providers, resellers, and consultants buy subscriptions to resell or bundle. - Enterprise IT and security teams managing large asset estates - Government entities needing compliance and vulnerability control - SMBs buying packaged cloud security subscriptions - Managed security service providers reselling to end customers - Cloud providers, resellers, and consulting firms as channel buyers - Customers adopt it to unify risk, compliance, and remediation ## Geography Qualys is headquartered in Foster City, California and sells across the United States and internationally. The company discloses that 56% of 2025 revenue came from U.S. customers based on billing address, indicating a broad foreign revenue base and meaningful international exposure. Its cloud platforms are distributed globally, with multi-tenant platforms hosted in collocated facilities and public cloud environments. - **United States** (56%) — 2025 revenue based on customers' billing addresses - **International** (44%) — 2025 revenue outside the United States based on billing addresses - Headquartered in Foster City, California - 56% of 2025 revenue came from U.S. customers - 44% of 2025 revenue came from foreign customers - Sells across the Americas, Europe, Asia, and other regions - Operates 15 multi-tenant platforms worldwide - Global cloud footprint supports distributed customer deployments ## Strategy Qualys is focused on expanding its cloud security platform by adding solutions that help customers identify assets, quantify cyber risk, and automate remediation. It also relies heavily on channel partners to broaden distribution, especially for enterprise, SMB, and international sales. Product innovation, platform breadth, and partner enablement are central to its competitive position. - **Broaden platform adoption within existing customers** (medium-term) — Cross-selling more modules increases customer value and deepens platform stickiness. - **Maintain and expand channel partner relationships** (short-term) — Partners account for a large share of revenue and are critical to reach and renewals. - **Enhance cloud platform capabilities** (medium-term) — A broader, integrated platform supports differentiation and customer retention. - **Support international growth** (medium-term) — Foreign customers are a meaningful part of the revenue base and diversify demand. - Expand the Enterprise TruRisk Platform across more security workflows - Increase adoption of additional modules within existing customers - Use channel partners to scale distribution and renewals - Invest in cloud infrastructure and new solution development - Support international expansion and broader market coverage - Strengthen brand and intellectual property in cyber risk software ## Risks Qualys faces demand, renewal, and sales-cycle risk because its subscriptions are sold into a competitive security market and often through partners. It is also exposed to cyberattacks on its own systems and those of its service providers, which could disrupt service delivery or damage customer trust. Broader macroeconomic weakness, foreign exchange volatility, and geopolitical conflict can slow customer spending and complicate international operations. - **Channel partner dependence** [high] — Nearly half of revenue comes through partners, many of whom also sell competing products. - **Cybersecurity and service disruption** [critical] — The company operates a security platform and is itself a target for attacks on cloud systems and data. - **Demand and renewal volatility** [high] — Subscription timing, renewals, and customer budget scrutiny can shift revenue between periods. - **Competitive pressure** [medium] — The security software market is crowded and customers can switch or delay purchases. - **International and macroeconomic exposure** [medium] — Foreign revenue and global operations are exposed to FX, inflation, and geopolitical uncertainty. - Channel partners are non-exclusive and may favor competitors - Security incidents could disrupt the cloud platform or customer trust - Demand can vary with IT budgets, renewals, and sales-cycle timing - Competition may pressure pricing and product differentiation - International exposure adds FX, geopolitical, and regulatory risk ## Accounting Qualys’ reported results depend heavily on subscription revenue recognition, which can be affected by contract timing, renewals, and partner arrangements. Management also highlights estimates for income taxes and stock-based compensation, while cloud infrastructure commitments and share repurchases affect cash flow and balance-sheet analysis. Because the business is subscription-based and partner-driven, quarterly results can move with deal timing, invoicing, and renewal patterns. - **Revenue recognition for subscriptions** — Reported revenue and deferred revenue - **Channel partner arrangements** — Revenue timing and customer concentration analysis - **Income tax estimates** — Tax expense and effective tax rate - **Stock-based compensation** — Operating margin and diluted EPS - **Cloud infrastructure purchase obligations** — Liquidity and cash flow planning - Subscription revenue recognition affects timing of reported sales - Channel partner arrangements can change billing and revenue timing - Quarterly results can vary with deal timing and renewals - Income tax estimates depend on geographic mix and future profitability - Stock-based compensation affects operating expense and earnings - Cloud infrastructure commitments affect future cash obligations --- *Last updated: 2026-09-24T12:15:39.561848+00:00*