Qualys (NASDAQ: QLYS) is a publicly traded Email, AppSec & GRC company founded in 1999 and based in Foster City, United States.
No dated funding rounds on file. This company is privately held and may be raising or operating on undisclosed capital.
Qualys reported Q2 2026 revenue of $182.2 million, up 11% year-over-year, with GAAP net income of $52.4 million ($1.50 per diluted share) and GAAP net margin of 29%, unchanged from Q2 2025. Gross margin expanded 1 percentage point to 83%, while operating margin improved 3 points to 34%. The company achieved FedRAMP High Authorization for its TotalCloud solution, expanded AI partnerships with Anthropic and OpenAI, and launched a cyber insurance premium-reduction collaboration with Converge. Operating cash flow surged 77% to $59.6 million. Qualys raised full-year 2026 guidance to $732.0–$738.0 million revenue (9–10% growth), and GAAP EPS to $5.76–$5.90, up from prior guidance of $5.40–$5.61. Q3 2026 is expected to post revenue of $185.5–$187.5 million (9–10% growth) with GAAP EPS of $1.43–$1.50.
Full-year 2026 revenue $732.0–$738.0 million (9–10% growth); GAAP EPS $5.76–$5.90; Q3 2026 revenue $185.5–$187.5 million (9–10% growth), GAAP EPS $1.43–$1.50

Qualys details how its TruRisk Eliminate product addresses CISA BOD 26-04's rapid remediation timelines for CVE-2026-68820.

Qualys advocates for autonomous, closed-loop audit remediation to match AI-driven attack speeds, citing a 90% reduction in manual prep labor.

Qualys TruConfirm extends exploit validation to cloud agents, covering endpoint, kernel, browser, and post-authentication CVEs.

Qualys launches InstaScan with Agent Insta for scanless vulnerability detection within an hour of CVE disclosure.

Qualys launches TotalAI to discover, assess, and govern AI and LLM workloads across enterprise environments.

Qualys adds automated vulnerability scanning for AWS Lambda, extending serverless security from posture checks to workload-level risk detection.
A cloud-based security and compliance platform that consolidates vulnerability management, policy compliance, web application scanning, cloud security, and asset inventory into a single subscription service. Delivered entirely from the cloud with lightweight agents and scanners, it continuously discovers assets, detects vulnerabilities and misconfigurations, and quantifies risk so teams can prioritize remediation. Enterprises and government agencies use it to maintain real-time visibility into their attack surface, automate compliance reporting against frameworks and regulations, and manage exposure across on-premises, cloud, and hybrid environments at scale.
14 patents on file, but none with both an extractable figure and an abstract on Google Patents yet.
We don't have a live feed for this company's ATS. Their careers page has every open role.
View all careers ↗