Qualys

Name

Qualys

Legal name

Qualys, Inc.

Website

https://qualys.com

Company type

Public

Founded year

1999

Operating status

Operating

Headcount range

1,001–5,000 employees

Short description

Qualys (NASDAQ: QLYS) is a cloud-based cybersecurity and compliance SaaS provider serving 10,000+ enterprise customers across 130+ countries. The Enterprise TruRisk Platform unifies vulnerability management, cloud security, endpoint detection, and agentic AI risk operations across 20+ natively shared apps.

Ownership category

akta.pro rank

Product category

Cloud Security and Compliance

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Cloud Network Security (Microsegmentation, Cloud Firewall) (HDADADAH)

akta.pro secondary industries

Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC) (HDABAHAI), Cloud Security Logging, SIEM/SOAR & Threat Detection (HDABAHAL), IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK), Model Governance, Risk & Compliance (GRC) Platforms (HDAAAKAA)

Keywords

• Vulnerability management
• Cloud security platform
• Compliance monitoring
• Cyber risk management
• Endpoint detection response

Headquarters

HQ city

Redwood City

HQ country

United States

HQ region

North America

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Infrastructure, Marketing or Sales

Revenue model

1. Subscription Recurring Revenue: Qualys generates primarily subscription-based recurring revenue through annual and multi-year contracts for its cloud-based security and compliance platform. Revenue grew 10% year-over-year to $669 million in FY2025.
2. Consumption-based Pricing: TotalCloud platform pricing is based on consumption rather than employee count, providing flexibility for varying cloud workload sizes

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels7 records

Core offering

Qualys delivers a cloud-native platform that provides organizations with continuous visibility into their IT, security, and compliance posture. The platform unifies vulnerability management, cloud security, web application scanning, endpoint detection, and compliance automation into a single SaaS solution consumed by enterprise security and IT operations teams.

Product overview

Qualys offers a unified platform-plus-modules architecture centered on the Enterprise TruRisk Platform, which integrates over 20 specialized apps for measuring, communicating, and eliminating cyber risk. The core offering includes Enterprise TruRisk Management (ETM) as the unified AI-augmented Risk Operations Center, with specialized modules for Vulnerability Management/Detection/Response (VMDR), TotalCloud CNAPP (cloud security), Multi-Vector EDR (endpoint security), TotalAppSec (application security), and TotalAI (AI security posture). Key differentiators include Agentic AI capabilities (Agent Val for exploit validation, Agent Nyra for threat prioritization, Agent Sara for patch orchestration), TruConfirm exploitability validation technology, TruRisk transparent risk scoring powered by 73,000+ vulnerability signatures and 25+ threat intel sources, and comprehensive compliance coverage across 100+ regulatory frameworks. The platform processes 9+ trillion data points annually with 99.99966% Six Sigma accuracy and serves over 10,000 subscription customers in 130 countries.

Differentiator

Problem solved

Functional benefit

Brands

• Enterprise TruRisk Platform: Core platform for measuring, communicating, and eliminating cyber risk across the extended enterprise.
• TotalCloud
• VMDR
• Agent Val
• TruConfirm
• Agentic AI
• TruRisk Eliminate
• ROCky

Products and services

• Qualys VMDR (Vulnerability Management, Detection, and Response) Continuously identifies vulnerabilities, misconfigurations, and threats across on-premises, cloud, and remote endpoints, and prioritizes remediation based on risk for enterprise security teams.
• Qualys TotalCloud
• Qualys TotalAI
• Qualys Enterprise TruRisk Management (ETM)
• Qualys Endpoint Detection and Response
• Qualys Web Application Scanning

Quantifiable outcome

• 85% reduction in critical vulnerabilities through TruRisk-based prioritization
• +4 more outcomes

Named customers10 records

Segments4 records

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration88 records

AI capability14 records

Feature6 records

Partnerships

Nine partnerships are on record, tiered core and minor.

• AnthropiccoreStrategic or Co-development Partner · 5 June 2026Qualys announced invitation-only participation in Anthropic's Project Glasswing, exploring security implications of advanced AI systems and ensuring responsible deployment of frontier AI capabilities.
• OpenAIcoreStrategic or Co-development Partner · 5 June 2026Qualys participates in OpenAI's Trusted Access for Cyber program, exploring security implications of advanced AI systems to strengthen software assurance and vulnerability discovery.
• ConvergecoreGTM or Marketing Partner · 14 May 2026Joint offering enabling organizations demonstrating strong cybersecurity compliance through Qualys ETM to potentially qualify for reduced cyber insurance premiums via automated Qualys Converge Connect Insurance Report.
• First DistributioncoreChannel Partner/ Reseller/ Distributor · 14 May 2026Partnership brings Qualys Enterprise TruRisk Management solution to African market, combining First Distribution's channel presence with Qualys' cyber risk management capabilities.
• EkcominorChannel Partner/ Reseller/ Distributor · 20 March 2026Ekco launched Managed Risk Operations Centre powered by Qualys Enterprise TruRisk Management to help Irish organizations consolidate vulnerability data and achieve continuous cyber risk reduction.
• San Francisco UnicornsminorGTM or Marketing Partner · 9 March 2026Qualys extended its sponsorship as Major Partner and Official Cybersecurity Partner for 2026 and 2027 Major League Cricket seasons, with front-of-shirt branding, merchandise, and matchday advertising.
• Blue HexagoncoreStrategic or Co-development Partner · 5 October 2022Qualys acquired Blue Hexagon, a cloud security and AI company, to enhance its cloud platform's AI and ML capabilities for threat detection and response. The acquisition integrated Blue Hexagon's technology into existing products.
• TotalCloudcoreStrategic or Co-development Partner · 9 August 2021Qualys acquired TotalCloud, a provider of no-code workflow engine, to enhance cloud platform offerings and enable workflow automation for cloud security.
• 100+ Technology IntegrationscoreTechnology or IntegrationQualys offers 100+ connectors including AWS, Azure, GCP, ServiceNow, CrowdStrike, Microsoft Defender, Palo Alto Networks, SentinelOne, Rapid7, Tenable, and many more for unified risk operations.

Scale indicators10 records

Recent moves6 records

Expansion highlights7 records

Emerging players

• Orca Security: Orca Security is an emerging CNAPP specialist with agentless cloud security that directly competes with Qualys TotalCloud (CSPM/CWPP). Orca is also referenced as an integration connector in Qualys's ecosystem, reflecting strong product-level overlap for cloud security buyers.

Direct peers

• Rapid7: Rapid7 is a direct competitor offering InsightVM for vulnerability management, InsightIDR for detection/response, and a cloud security suite, with a similar mid-market and enterprise customer base. Both companies now also offer MDR and consolidated security-analytics platforms, putting them in direct competition for the same security operations budget.
• SentinelOne: SentinelOne is a direct competitor through its Singularity Platform spanning endpoint (EDR/XDR), cloud workload protection (Singularity Cloud Workload Security), and identity threat detection — overlapping with Qualys's Multi-Vector EDR, TotalCloud, and CIEM offerings for enterprise security operations buyers.
• Tenable: Tenable is the closest direct peer to Qualys: a publicly listed cybersecurity platform centered on vulnerability management (Nessus/Tenable One) with adjacent exposure management, cloud security, and compliance capabilities. Both vendors compete head-to-head in enterprise VMDR, and Tenable is explicitly listed among Qualys's 100+ integration connectors — illustrating direct overlap in target customers and product surface.
• CrowdStrike: CrowdStrike competes directly via Falcon Cloud Security (CNAPP/CSPM/CWPP), Falcon Insight XDR, Falcon Discover for asset management, and Spotlight for vulnerability management — all overlapping with Qualys's TotalCloud, EDR, CSAM, and VMDR. CrowdStrike's scale, growth, and single-agent platform strategy make it a primary direct competitor for enterprise security consolidation budgets.
• Wiz: Wiz is a direct competitor in the CNAPP category where Qualys TotalCloud competes, with an agentless approach that quickly gained enterprise market share and led to Wiz's announced acquisition by Google Cloud. Wiz's rapid growth and platform breadth put it in direct head-to-head competition with Qualys's cloud posture, workload, and identity security offerings.
• Palo Alto Networks (Prisma Cloud): Palo Alto Networks competes directly through Prisma Cloud (CNAPP/CSPM/CWPP), Cortex XDR/XSIAM, and its broader Strata platform — all of which overlap with Qualys's TotalCloud, Multi-Vector EDR, and Risk Operations Center. The companies are explicitly connected via Qualys's Cortex Cloud and Prisma Cloud integration connectors, underscoring direct competition.

Broad incumbents

• Microsoft Defender for Cloud / Azure Security: Microsoft Defender for Cloud, Defender for Endpoint, Sentinel SIEM, and Microsoft Security Copilot form a broad incumbent cloud security suite bundled with Azure and Microsoft 365 commitments. As the largest enterprise software vendor, Microsoft competes with Qualys across cloud security posture, EDR, vulnerability management, and SIEM through platform-included pricing rather than direct product parity.
• Check Point Software: Check Point offers the Infinity platform covering cloud security (CloudGuard CNAPP), endpoint, network, and threat prevention — competing with Qualys across multiple product lines and serving many of the same enterprise and government customers.
• Trend Micro: Trend Micro is a broad incumbent cybersecurity vendor offering Vision One platform that spans cloud security, EDR, XDR, and vulnerability management — directly overlapping with multiple Qualys product modules, particularly for enterprise and mid-market customers seeking consolidated platforms.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/qualys
• YouTubeyoutube.com/user/QualysGuard
• Facebookfacebook.com/qualys
• LinkedInlinkedin.com/company/qualys
• Instagraminstagram.com/qualyscloud
• TikToktiktok.com/@qualysofficial

Compliance8 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Subsidiaries2 records

Funding overview

Funding rounds5 records

Investors6 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A7 records

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Qualys