Qualys
Qualys (NASDAQ: QLYS) is a cloud-based cybersecurity and compliance SaaS provider serving 10,000+ enterprise customers across 130+ countries. The Enterprise TruRisk Platform unifies vulnerability management, cloud security, endpoint detection, and agentic AI risk operations across 20+ natively shared apps.
- Company typePublic
- Founded1999
- HeadquartersRedwood City, United States
- Headcount1,001–5,000
- GTM typeB2B
- OfferingSoftware
Qualys firmographics
Firmographics- Name
- Qualys
- Legal name
- Qualys, Inc.
- Website
- https://qualys.com
- Company type
- Public
- Founded year
- 1999
- Operating status
- Operating
- Headcount range
- 1,001–5,000 employees
- Short description
- Qualys (NASDAQ: QLYS) is a cloud-based cybersecurity and compliance SaaS provider serving 10,000+ enterprise customers across 130+ countries. The Enterprise TruRisk Platform unifies vulnerability management, cloud security, endpoint detection, and agentic AI risk operations across 20+ natively shared apps.
- Ownership category
- akta.pro rank
Qualys industry classification
Industry- Product category
- Cloud Security and Compliance
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Cloud Network Security (Microsegmentation, Cloud Firewall) (HDADADAH)
- akta.pro secondary industries
- Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC) (HDABAHAI), Cloud Security Logging, SIEM/SOAR & Threat Detection (HDABAHAL), IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK), Model Governance, Risk & Compliance (GRC) Platforms (HDAAAKAA)
Keywords
Where Qualys is headquartered
LocationHeadquarters
- HQ city
- Redwood City
- HQ country
- United States
- HQ region
- North America
Offices3 records
Markets served
Qualys business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Infrastructure, Marketing or Sales
Revenue model
- Subscription Recurring Revenue: Qualys generates primarily subscription-based recurring revenue through annual and multi-year contracts for its cloud-based security and compliance platform. Revenue grew 10% year-over-year to $669 million in FY2025.
- Consumption-based Pricing: TotalCloud platform pricing is based on consumption rather than employee count, providing flexibility for varying cloud workload sizes
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Usage-based | Annual | Consumption-based pricing for cloud security |
| Subscription | Annual | SCuBA compliance monitoring included with TotalCloud SSPM subscription |
Go-to-market motion3 records
Distribution channels4 records
Marketing channels7 records
Qualys product offering
Product offeringCore offering
Qualys delivers a cloud-native platform that provides organizations with continuous visibility into their IT, security, and compliance posture. The platform unifies vulnerability management, cloud security, web application scanning, endpoint detection, and compliance automation into a single SaaS solution consumed by enterprise security and IT operations teams.
Product overview
Qualys offers a unified platform-plus-modules architecture centered on the Enterprise TruRisk Platform, which integrates over 20 specialized apps for measuring, communicating, and eliminating cyber risk. The core offering includes Enterprise TruRisk Management (ETM) as the unified AI-augmented Risk Operations Center, with specialized modules for Vulnerability Management/Detection/Response (VMDR), TotalCloud CNAPP (cloud security), Multi-Vector EDR (endpoint security), TotalAppSec (application security), and TotalAI (AI security posture). Key differentiators include Agentic AI capabilities (Agent Val for exploit validation, Agent Nyra for threat prioritization, Agent Sara for patch orchestration), TruConfirm exploitability validation technology, TruRisk transparent risk scoring powered by 73,000+ vulnerability signatures and 25+ threat intel sources, and comprehensive compliance coverage across 100+ regulatory frameworks. The platform processes 9+ trillion data points annually with 99.99966% Six Sigma accuracy and serves over 10,000 subscription customers in 130 countries.
Differentiator
Problem solved
Functional benefit
Brands
- Enterprise TruRisk Platform: Core platform for measuring, communicating, and eliminating cyber risk across the extended enterprise.
- TotalCloud
- VMDR
- Agent Val
- TruConfirm
- Agentic AI
- TruRisk Eliminate
- ROCky
Products and services
- Qualys VMDR (Vulnerability Management, Detection, and Response) Continuously identifies vulnerabilities, misconfigurations, and threats across on-premises, cloud, and remote endpoints, and prioritizes remediation based on risk for enterprise security teams.
- Qualys TotalCloud
- Qualys TotalAI
- Qualys Enterprise TruRisk Management (ETM)
- Qualys Endpoint Detection and Response
- Qualys Web Application Scanning
Quantifiable outcome
- 85% reduction in critical vulnerabilities through TruRisk-based prioritization
- +4 more outcomes
Companies that use Qualys
Customer profileNamed customers10 records
Segments4 records
Ideal customer profiles1 record
Qualys technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration88 records
AI capability14 records
Feature6 records
Qualys partnerships and signals
Strategic signalPartnerships
Nine partnerships are on record, tiered core and minor.
- AnthropiccoreQualys announced invitation-only participation in Anthropic's Project Glasswing, exploring security implications of advanced AI systems and ensuring responsible deployment of frontier AI capabilities.
- OpenAIcoreQualys participates in OpenAI's Trusted Access for Cyber program, exploring security implications of advanced AI systems to strengthen software assurance and vulnerability discovery.
- ConvergecoreJoint offering enabling organizations demonstrating strong cybersecurity compliance through Qualys ETM to potentially qualify for reduced cyber insurance premiums via automated Qualys Converge Connect Insurance Report.
- First DistributioncorePartnership brings Qualys Enterprise TruRisk Management solution to African market, combining First Distribution's channel presence with Qualys' cyber risk management capabilities.
- EkcominorEkco launched Managed Risk Operations Centre powered by Qualys Enterprise TruRisk Management to help Irish organizations consolidate vulnerability data and achieve continuous cyber risk reduction.
- San Francisco UnicornsminorQualys extended its sponsorship as Major Partner and Official Cybersecurity Partner for 2026 and 2027 Major League Cricket seasons, with front-of-shirt branding, merchandise, and matchday advertising.
- Blue HexagoncoreQualys acquired Blue Hexagon, a cloud security and AI company, to enhance its cloud platform's AI and ML capabilities for threat detection and response. The acquisition integrated Blue Hexagon's technology into existing products.
- TotalCloudcoreQualys acquired TotalCloud, a provider of no-code workflow engine, to enhance cloud platform offerings and enable workflow automation for cloud security.
- 100+ Technology IntegrationscoreQualys offers 100+ connectors including AWS, Azure, GCP, ServiceNow, CrowdStrike, Microsoft Defender, Palo Alto Networks, SentinelOne, Rapid7, Tenable, and many more for unified risk operations.
Scale indicators10 records
Recent moves6 records
Expansion highlights7 records
Qualys competitors and assessment
Company assessmentEmerging players
- Orca Security: Orca Security is an emerging CNAPP specialist with agentless cloud security that directly competes with Qualys TotalCloud (CSPM/CWPP). Orca is also referenced as an integration connector in Qualys's ecosystem, reflecting strong product-level overlap for cloud security buyers.
Direct peers
- Rapid7: Rapid7 is a direct competitor offering InsightVM for vulnerability management, InsightIDR for detection/response, and a cloud security suite, with a similar mid-market and enterprise customer base. Both companies now also offer MDR and consolidated security-analytics platforms, putting them in direct competition for the same security operations budget.
- SentinelOne: SentinelOne is a direct competitor through its Singularity Platform spanning endpoint (EDR/XDR), cloud workload protection (Singularity Cloud Workload Security), and identity threat detection — overlapping with Qualys's Multi-Vector EDR, TotalCloud, and CIEM offerings for enterprise security operations buyers.
- Tenable: Tenable is the closest direct peer to Qualys: a publicly listed cybersecurity platform centered on vulnerability management (Nessus/Tenable One) with adjacent exposure management, cloud security, and compliance capabilities. Both vendors compete head-to-head in enterprise VMDR, and Tenable is explicitly listed among Qualys's 100+ integration connectors — illustrating direct overlap in target customers and product surface.
- CrowdStrike: CrowdStrike competes directly via Falcon Cloud Security (CNAPP/CSPM/CWPP), Falcon Insight XDR, Falcon Discover for asset management, and Spotlight for vulnerability management — all overlapping with Qualys's TotalCloud, EDR, CSAM, and VMDR. CrowdStrike's scale, growth, and single-agent platform strategy make it a primary direct competitor for enterprise security consolidation budgets.
- Wiz: Wiz is a direct competitor in the CNAPP category where Qualys TotalCloud competes, with an agentless approach that quickly gained enterprise market share and led to Wiz's announced acquisition by Google Cloud. Wiz's rapid growth and platform breadth put it in direct head-to-head competition with Qualys's cloud posture, workload, and identity security offerings.
- Palo Alto Networks (Prisma Cloud): Palo Alto Networks competes directly through Prisma Cloud (CNAPP/CSPM/CWPP), Cortex XDR/XSIAM, and its broader Strata platform — all of which overlap with Qualys's TotalCloud, Multi-Vector EDR, and Risk Operations Center. The companies are explicitly connected via Qualys's Cortex Cloud and Prisma Cloud integration connectors, underscoring direct competition.
Broad incumbents
- Microsoft Defender for Cloud / Azure Security: Microsoft Defender for Cloud, Defender for Endpoint, Sentinel SIEM, and Microsoft Security Copilot form a broad incumbent cloud security suite bundled with Azure and Microsoft 365 commitments. As the largest enterprise software vendor, Microsoft competes with Qualys across cloud security posture, EDR, vulnerability management, and SIEM through platform-included pricing rather than direct product parity.
- Check Point Software: Check Point offers the Infinity platform covering cloud security (CloudGuard CNAPP), endpoint, network, and threat prevention — competing with Qualys across multiple product lines and serving many of the same enterprise and government customers.
- Trend Micro: Trend Micro is a broad incumbent cybersecurity vendor offering Vision One platform that spans cloud security, EDR, XDR, and vulnerability management — directly overlapping with multiple Qualys product modules, particularly for enterprise and mid-market customers seeking consolidated platforms.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Qualys social profiles
Digital presenceQualys compliance and trust
Trust signalCompliance8 records
Qualys financial estimates
Financial estimateRevenue estimate
Valuation estimate
Qualys leadership team
Management profileNumber of profiles
Profiles1 record
Qualys subsidiaries and ownership
Company hierarchySubsidiaries2 records
Qualys funding detail
Funding detailFunding overview
Funding rounds5 records
Investors6 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Qualys M&A and investment
M&A and investmentM&A7 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Qualys
What does Qualys do?
Qualys delivers a cloud-native platform that provides organizations with continuous visibility into their IT, security, and compliance posture. The platform unifies vulnerability management, cloud security, web application scanning, endpoint detection, and compliance automation into a single SaaS solution consumed by enterprise security and IT operations teams.
Is Qualys a public or private company?
Qualys is a public company. It is classified as public and is currently operating.
When was Qualys founded?
Qualys was founded in 1999. It employs 1,001 to 5,000 people.
Where is Qualys based?
Qualys is headquartered in Redwood City, United States, in the North America region.
How does Qualys make money?
Two revenue lines are on record. Subscription Recurring Revenue is the primary driver. The others are consumption-based Pricing.
Who are Qualys's main competitors?
Orca Security is listed as an emerging player. Direct peers are Rapid7, SentinelOne, Tenable, CrowdStrike, Wiz and Palo Alto Networks (Prisma Cloud). Broad incumbents are Microsoft Defender for Cloud / Azure Security, Check Point Software and Trend Micro.
Does Qualys have an API?
Yes. Qualys offers 100+ connectors (ROC Connectors and Integrations) that centralize risk exposure signals into the Qualys Risk Operations Center. These enable aggregation of findings across Qualys and third-party tools to improve prioritization and remediation. Connectors support both cloud (96) and on-premise (5) deployment methods, with various data exchange capabilities including data fetch, data export, and action triggers.
What industry is Qualys in?
Qualys's product category is Cloud Security and Compliance. Its primary akta.pro industry code is HDADADAH, Cloud Network Security (Microsegmentation, Cloud Firewall), with a secondary code of HDABAHAI, Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC). Its NAICS code is 51821 and its SIC code is 7372.