Q3 Revenue Growth of 11% Year-Over-Year

Raises 2026 Revenue Guidance to $736.9-$738.9 million

FOSTER CITY, Calif., Nov. 9, 2026 /PRNewswire/ — Qualys, Inc. (NASDAQ: QLYS), a leader in cloud-native cyber risk management, today announced financial results for the third quarter ended September 30, 2026. For the quarter, the Company reported revenues of $188.0 million, net income under United States Generally Accepted Accounting Principles (“GAAP”) of $57.2 million, non-GAAP net income of $74.8 million, Adjusted EBITDA of $89.9 million, GAAP net income per diluted share of $1.62, and non-GAAP net income per diluted share of $2.12.

“In Q3, we delivered another quarter of strong revenue growth and profitability,” said Sumedh Thakar, Qualys president and CEO. “Increasing adoption of our AI-native Risk Operations Center, driven by our partner-first strategy, reflects accelerating demand for a vendor-neutral platform that actually fixes security issues rather than just reporting them. These results distinguish our competitive position in pre-breach risk management and reinforce our confidence in long-term growth.”

Third Quarter 2026 Financial Highlights

Revenues: Revenues for the third quarter of 2026 increased by 11% to $188.0 million compared to $169.9 million for the same quarter in 2025.

Gross Profit: GAAP gross profit for the third quarter of 2026 increased by 10% to $156.7 million compared to $142.1 million for the same quarter in 2025. GAAP gross margin was 83% for the third quarter of 2026 compared to 84% for the same quarter in 2025. Non-GAAP gross profit for the third quarter of 2026 increased by 10% to $159.3 million compared to $144.9 million for the same quarter in 2025. Non-GAAP gross margin was 85% for both the third quarter of 2026 and for the same quarter in 2025.

Operating Income: GAAP operating income for the third quarter of 2026 increased by 11% to $66.3 million compared to $60.0 million for the same quarter in 2025. As a percentage of revenues, GAAP operating income was 35% for both the third quarter of 2026 and for the same quarter in 2025. Non-GAAP operating income for the third quarter of 2026 increased by 9% to $87.1 million compared to $80.0 million for the same quarter in 2025. As a percentage of revenues, non-GAAP operating income was 46% for the third quarter of 2026 compared to 47% for the same quarter in 2025.

Net Income: GAAP net income for the third quarter of 2026 increased by 14% to $57.2 million, or $1.62 per diluted share, compared to $50.3 million, or $1.39 per diluted share, for the same quarter in 2025. As a percentage of revenues, GAAP net income was 30% for both the third quarter of 2026 and for the same quarter in 2025. Non-GAAP net income for the third quarter of 2026 increased by 11% to $74.8 million, or $2.12 per diluted share, compared to $67.4 million, or $1.86 per diluted share, for the same quarter in 2025. As a percentage of revenues, non-GAAP net income was 40% for both the third quarter of 2026 and for the same quarter in 2025.

Adjusted EBITDA: Adjusted EBITDA (a non-GAAP financial measure) for the third quarter of 2026 increased by 9% to $89.9 million compared to $82.6 million for the same quarter in 2025. As a percentage of revenues, Adjusted EBITDA was 48% for the third quarter of 2026 compared to 49% for the same quarter in 2025.

Operating Cash Flow: Operating cash flow for the third quarter of 2026 increased by 13% to $101.8 million compared to $90.4 million for the same quarter in 2025. As a percentage of revenues, operating cash flow was 54% for the third quarter of 2026 compared to 53% for the same quarter in 2025.

Third Quarter 2026 Business Highlights

• Qualys introduced InstaScan, powered by Agent Insta in Enterprise TruRisk Management, delivering scanless vulnerability detection within minutes of advisory disclosure. By continuously correlating new advisories with existing asset, exposure, and threat telemetry, InstaScan eliminates the multi-day detection gap created by traditional scan cycles, enabling customers to begin validation and remediation before adversaries can act.
• Qualys advanced its TruRisk Eliminate capabilities with AI-powered Patch Reliability Scoring, wave-based autonomous remediation, and peer-to-peer patching, enabling organizations to rapidly remediate zero-day vulnerabilities and misconfigurations while maintaining operational stability with reduced dependency on centralized infrastructure.
• Qualys expanded TotalAI with governance capabilities that help CISOs reduce shadow AI, flag abnormal model behavior, and demonstrate that controls are working across development and runtime environments. Enhancements include discovery of AI agents and MCP servers, red-team testing against OWASP Top 10 and EU AI Act standards, and audit-ready evidence generation.
• Leading independent analysts recognized Qualys across multiple categories. Qualys received the highest score for best current offering in the 2026 Forrester Wave for Proactive Security Platforms, was named a Leader in the IDC MarketScape for Worldwide DAST, earned the highest-rated Champion designation in the Info-Tech Research Group Emotional Footprint for Vulnerability Management, and was named a Leader in the Frost and Sullivan Radar for Cloud Workload Protection Platforms.

Financial Performance Outlook

Based on information as of today, November 9, 2026, Qualys is issuing the following financial guidance for the fourth quarter and full year fiscal 2026. The Company emphasizes that the guidance is subject to various important cautionary factors referenced in the sections entitled “Legal Notice Regarding Forward-Looking Statements” and “Non-GAAP Financial Measures” below.

Fourth Quarter 2026 Guidance: Management expects revenues for the fourth quarter of 2026 to be in the range of $191.0 million to $193.0 million, representing 9% to 10% growth over the same quarter in 2025. GAAP net income per diluted share is expected to be in the range of $1.57 to $1.64, which assumes an effective income tax rate of 21%. Non-GAAP net income per diluted share is expected to be in the range of $2.05 to $2.12, which assumes a non-GAAP effective income tax rate of 20%. Fourth quarter 2026 net income per diluted share estimates are based on approximately 35.5 million weighted average diluted shares outstanding for the quarter.

Full Year 2026 Guidance: Management now expects revenues for the full year of 2026 to be in the range of $736.9 million to $738.9 million, representing 10% growth over 2025. This compares to the previous guidance range of $732.0 million to $738.0 million. GAAP net income per diluted share is now expected to be in the range of $6.08 to $6.15, up from the previous guidance range of $5.76 to $5.90. This assumes an effective income tax rate of 22%. Non-GAAP net income per diluted share is now expected to be in the range of $8.07 to $8.14, up from the previous guidance range of $7.74 to $7.88. This assumes a non-GAAP effective income tax rate of 20%. Full year 2026 net income per diluted share estimates are based on approximately 35.5 million weighted average diluted shares outstanding.

Qualys has not reconciled non-GAAP net income per diluted share guidance to GAAP net income per diluted share guidance because Qualys does not provide guidance on the various reconciling cash and non-cash items between GAAP net income and non-GAAP net income (i.e., stock-based compensation, amortization of intangible assets from acquisitions and non-recurring items). The actual dollar amount of reconciling items in the fourth quarter and full year 2026 is likely to have a significant impact on the Company’s GAAP net income per diluted share in the fourth quarter and full year 2026. A reconciliation of the non-GAAP net income per diluted share guidance to the GAAP net income per diluted share guidance is not available without unreasonable effort.

Investor Conference Call

Qualys will host a conference call and live webcast to discuss its third quarter financial results at 5:00 p.m. Eastern Time (2:00 p.m. Pacific Time) on Monday, November 9, 2026. To access the conference call by phone, please register here. A live webcast of the earnings conference call, investor presentation and prepared remarks can be accessed at https://investor.qualys.com/events-presentations. A replay of the conference call will be available through the same webcast link following the end of the call.

Investor Contact

Blair King
Senior Vice President, Investor Relations and Financial Planning & Analysis
(650) 538-2088
ir@qualys.com

About Qualys

Qualys, Inc. (NASDAQ: QLYS) is a leader in cloud-native cyber risk management, helping organizations measure, communicate, and eliminate cyber risk. The Qualys platform and its solutions power the Risk Operations Center (ROC), unifying asset visibility, exposure management, risk prioritization, and remediation to help organizations continuously reduce risk across hybrid, multi-cloud, endpoint, and AI environments. Qualys equips security and IT teams for the Frontier AI Era with AI-speed detection, hyper-prioritization, and autonomous remediation. Trusted by more than 10,000 organizations globally, including most of the Fortune 100, Qualys helps customers transform cybersecurity into a measurable business function that strengthens resilience and drives business outcomes. For more information, please visit www.qualys.com.

Qualys, Qualys VMDR^® and the Qualys logo are proprietary trademarks of Qualys, Inc. All other products or names may be trademarks of their respective companies.

Legal Notice Regarding Forward-Looking Statements

This press release contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933 and Section 21E of the Securities Exchange Act of 1934. Forward-looking statements generally relate to future events or our future financial or operating performance. Forward-looking statements in this press release include, but are not limited to, quotations of management and statements related to: the benefits of our existing, new and upcoming products, features, integrations, collaborations and joint solutions, and their impact upon our long-term growth; our expectations regarding AI for security and security for AI; our expectations regarding business opportunities with the federal government; our expectations regarding our business partners; our ability to advance our value proposition and competitive differentiation in the market; our ability to address demand trends; our ability to maintain and strengthen our category leadership; our ability to solve modern security challenges at scale; our strategies and ability to achieve and maintain durable profitable growth; our guidance for revenues, GAAP EPS and non-GAAP EPS for the fourth quarter and full year 2026; and our expectations for the number of weighted average diluted shares outstanding and the GAAP and non-GAAP effective income tax rate for the fourth quarter and full year 2026. Our expectations and beliefs regarding these matters may not materialize, and actual results in future periods are subject to risks and uncertainties that could cause actual results to differ materially from those projected. These risks include our ability to continue to develop platform capabilities and solutions; the ability of our platform and solutions to perform as intended; customer acceptance and purchase of our existing solutions and new solutions; real or perceived defects, errors or vulnerabilities in our products or services; our ability to retain existing customers and generate new customers; the budgeting cycles and seasonal buying patterns of our customers; our ability to maintain government authorizations applicable to our platform; general market, political, economic and business conditions in the United States as well as globally; our ability to manage costs as we increase our customer base and the number of our platform solutions; the market for cloud solutions for IT security and compliance not increasing at the rate we expect; competition from other products and services; fluctuations in currency exchange rates; unexpected fluctuations in our effective income tax rate on a GAAP and non-GAAP basis; our ability to effectively manage our rapid growth and our ability to anticipate future market needs and opportunities; and any unanticipated accounting charges. The forward-looking statements contained in this press release are also subject to other risks and uncertainties, including those more fully described in our filings with the Securities and Exchange Commission, including our Annual Report on Form 10-K and Quarterly Reports on Form 10-Q.

The forward-looking statements in this press release are based on information available to Qualys as of the date hereof, and Qualys disclaims any obligation to update any forward-looking statements, except as required by law.

Non-GAAP Financial Measures

In addition to reporting financial results in accordance with GAAP, Qualys provides investors with certain non-GAAP financial measures, including non-GAAP gross profit, non-GAAP gross margin, non-GAAP operating expenses, non-GAAP operating income, non-GAAP net income, non-GAAP net income per diluted share, Adjusted EBITDA (defined as earnings before interest expense, interest income and other income (expense), net, income taxes, depreciation, amortization, and stock-based compensation) and non-GAAP free cash flows (defined as cash provided by operating activities less purchases of property and equipment, net of proceeds from disposal).

In computing non-GAAP financial measures, Qualys excludes the effects of stock-based compensation expense, amortization of intangible assets from acquisitions, non-recurring items and for non-GAAP net income, impairment of non-marketable securities and certain tax effects. Qualys believes that these non-GAAP financial measures help illustrate underlying trends in its business that could otherwise be masked by the effect of the income or expenses that are excluded in non-GAAP gross profit, non-GAAP gross margin, non-GAAP operating expenses, non-GAAP operating income, non-GAAP net income, non-GAAP net income per diluted share, Adjusted EBITDA and non-GAAP free cash flows.

Furthermore, Qualys uses some of these non-GAAP financial measures to establish budgets and operational goals for managing its business and evaluating its performance. Qualys believes that non-GAAP gross profit, non-GAAP gross margin, non-GAAP operating expenses, non-GAAP operating income, non-GAAP net income, non-GAAP net income per diluted share, Adjusted EBITDA and non-GAAP free cash flows provide additional tools for investors to use in comparing its recurring core business operating results over multiple periods with other companies in its industry.

Although Qualys does not focus on or use quarterly billings in managing or monitoring the performance of its business, Qualys provides calculated current billings (defined as total revenues recognized in a period plus the sequential change in current deferred revenue in the corresponding period) for the convenience of investors and analysts in building their own financial models.

In order to provide a more complete picture of recurring core operating business results, the Company’s non-GAAP net income and non-GAAP net income per diluted share include adjustments for non-recurring income tax items and certain tax effects of non-GAAP adjustments to achieve the effective income tax rate on a non-GAAP basis. The Company’s non-GAAP effective tax rate may differ from the GAAP effective income tax rate as a result of these income tax adjustments. The Company believes its estimated non-GAAP effective income tax rate of 20% in 2026 is a reasonable estimate under its current global operating structure and core business operations. The Company may adjust this rate during the year to take into account events or trends that it believes materially impact the estimated annual rate. The non-GAAP effective income tax rate could be subject to change for a number of reasons, including but not limited to, significant changes resulting from tax legislation, material changes in geographic mix of revenues and expenses and other significant events.

The presentation of this non-GAAP financial information is not intended to be considered in isolation or as a substitute for results prepared in accordance with GAAP. A reconciliation of the non-GAAP financial measures discussed in this press release to the most directly comparable GAAP financial measures is included with the financial statements contained in this press release. Management uses both GAAP and non-GAAP information in evaluating and operating its business internally and as such has determined that it is important to provide this information to investors.

View original content:https://www.prnewswire.com/news-releases/qualys-announces-third-quarter-2026-financial-results-302933782.html

SOURCE Qualys, Inc.