Qualys Earnings Call: Profits Shine, Growth Tempers

Qualys Inc ((QLYS)) has held its Q4 earnings call. Read on for the main highlights of the call.

Qualys Balances Strong Profitability With Cautious Growth Outlook in Earnings Call

Qualys’ latest earnings call painted a picture of a highly profitable cybersecurity platform company leaning into new product innovation, particularly in agentic AI and exposure threat management (ETM), while guiding to slower top-line growth in 2026. Management emphasized double‑digit revenue growth in 2025, elite margins, and powerful cash generation, but also acknowledged that expanding investments and early‑stage product adoption will temper near‑term growth and profitability. The overall tone was constructive yet measured: the business is solid and increasingly differentiated, but management is realistic about a moderating growth trajectory and execution risks ahead.

Solid Revenue Growth With Slower Pace Ahead

Qualys reported full‑year 2025 revenue of $669.1 million, up 10% year over year, with Q4 revenue also growing 10% to $175.3 million. This firmly establishes the company in the mid‑single‑digit hundreds of millions revenue tier, maintaining steady double‑digit growth in a competitive security market. However, guidance for 2026 points to a slowdown: management expects revenue of $717 million to $725 million, implying 7%–8% growth. While still healthy, this deceleration signals a more mature growth curve and underscores that the next leg of expansion will need to come from newer products and deeper wallet share, rather than just the core vulnerability management engine.

Strong Profitability and Robust Free Cash Flow

Profitability remains a standout feature of the Qualys story. The company delivered an adjusted EBITDA margin of 47% for both the full year and Q4 2025, with Q4 adjusted EBITDA of $82.6 million. Net income rose 13% to $257.8 million and EPS climbed 15% to $7.07, outpacing revenue growth and showcasing operational leverage. Cash generation was equally impressive: free cash flow reached $304.4 million for the year, about 45% of revenue, and Q4 free cash flow was $74.9 million with a 43% margin, sharply higher than 26% a year earlier. For investors, these metrics underscore a business model that throws off significant cash even as the company steps up spending.

Channel and International Growth Outpace the Core

Qualys continues to lean into indirect and global routes to market, with noticeable traction. In Q4, channel sales accounted for 51% of total revenues, up from 48% a year ago, as channel revenue grew a strong 17%, far outstripping the 4% growth in direct sales. International markets also shined, with revenue up 15% compared to 6% growth in the U.S., leaving the mix at 56% U.S. and 44% international. This shift demonstrates that partners and non‑U.S. regions are becoming critical growth engines, diversifying the company’s revenue base and potentially cushioning any softness in its more mature domestic direct business.

Differentiated Product Mix Driving Bookings

The mix of what Qualys sells is evolving toward more advanced, higher‑value offerings. In 2025, Cybersecurity Asset Management plus ETM accounted for 10% of total bookings and a stronger 13% of new bookings, up from 8% of total and 9% of new a year before. Patch Management contributed 8% of total bookings and a hefty 16% of new bookings, highlighting its role in land‑and‑expand strategies. TotalCloud, Qualys’ cloud‑native platform, climbed to 5% of total bookings from 4%. This shifting mix suggests that while traditional products remain important, growth is increasingly being fueled by solutions that address cloud, asset visibility, and remediation – key themes for modern security buyers.

Agentic AI and ETM Innovation as Strategic Differentiators

Management devoted significant time to its ETM roadmap and agentic AI capabilities, positioning these as core differentiators versus competitors that focus mainly on exposure scoring. Enhancements include an agentic AI “risk fabric,” an agent marketplace, exploit confirmation capabilities branded as Agent Val, integrated internal security posture management (ISPM), and orchestration that ties discovery to remediation. Together, these are designed to help customers not only quantify cyber risk but also prioritize and fix it across hybrid environments. This end‑to‑end risk remediation story could become a key factor in competitive wins, even though it has not yet translated into a step‑change in revenue growth.

Early Customer and Partner Wins Validate the Strategy

While still early days, Qualys highlighted several notable deals that showcase its ability to monetize its expanded platform. These included a Global 50 customer signing a mid‑six‑figure annual upsell, and a Global 200 customer in Latin America closing a seven‑figure annual upsell incorporating CNAPP and Policy Compliance. The company also reported multiple mid‑six‑figure federal expansions, supported by its FedRAMP High authorization – a critical requirement for sensitive U.S. government work. On the partner side, deal registrations have increased and the mROC partner ecosystem is expanding, indicating that channel partners are beginning to rally around the broader Qualys portfolio.

Capital Allocation and Continued Share Repurchases

Qualys remains active in returning capital to shareholders. In Q4, the company repurchased $44.7 million of stock, buying back approximately 328,000 shares. Since 2018, cumulative repurchases total 10.7 million shares, representing about $1.2 billion returned to investors. The board has now authorized an additional $200 million, bringing available repurchase capacity to $360.5 million. Given the company’s strong free cash flow and modest capex requirements, buybacks are likely to remain a meaningful lever to support EPS growth and offset dilution, even as management invests in growth.

Operational Discipline Amid Rising Investments

Despite ramping up spending, Qualys maintained enviable profitability in Q4. Operating expenses rose 11% to $68.9 million, with sales and marketing spend climbing 18% as the company pushes to accelerate customer acquisition and partner productivity. Nevertheless, the adjusted EBITDA margin held steady at 47%, demonstrating tight cost control and operating efficiency. Looking ahead, management plans to sustain margins in the mid‑40s while increasing operating expenses at a mid‑teens rate in 2026, signaling confidence that investments can be absorbed without a meaningful erosion of the company’s high‑margin profile.

Moderating Growth Outlook and Expansion Pressures

The company’s 2026 outlook acknowledges a slower growth profile and pressure on expansion metrics. The revenue guide of 7%–8% growth is a step down from the 10% achieved in 2025, reflecting a more cautious stance on demand and the timing of contributions from newer products. Net dollar expansion came in at 103% in Q4, down slightly from 104% in the prior quarter, and management is not baking in any material improvement for 2026. Gross dollar retention remains above 90% but has seen modest sequential softening. This suggests that while the installed base is stickier than average, upsell and cross‑sell momentum is not yet accelerating in a way that would push growth back into the mid‑teens.

Higher Operating Expense and the Investment Cycle

Qualys is clearly entering an investment cycle aimed at capturing more of the exposure management and cloud security opportunity. Q4 operating expenses were up 11%, led by an 18% increase in sales and marketing, and management expects overall operating expenses to climb at a mid‑teens rate in 2026. This step‑up in spending is a key driver behind the guidance for EBITDA margins to move from 47% into the mid‑40s next year. The strategy is to lean into go‑to‑market, with more measured increases in engineering and G&A, in order to better monetize ETM, cloud, and agentic AI capabilities across the customer base and partner ecosystem.

ETM Adoption Still Early, Inflection Yet to Come

While management highlighted promising proof‑of‑concepts and early wins for ETM and related offerings, they also stressed that adoption is still at an early stage. Penetration into the existing installed base, although encouraging, has not yet produced a material inflection in net expansion rates or overall revenue growth. This means investors will likely need to be patient: ETM and agentic AI have the potential to be multi‑year growth drivers, but the financial impact is currently more incremental than transformational. Execution in sales, marketing, and partner enablement will be critical to turning today’s POCs and pilots into broader rollouts and larger enterprise standardizations.

Market and Competitive Uncertainty

The call also touched on broader market and competitive dynamics, which add a layer of uncertainty to the outlook. Analysts probed shifting estimates for the size of the vulnerability and exposure management market, as well as competitive threats from players like ServiceNow and Armis. Management downplayed any immediate, direct impact from these rivals, arguing that Qualys’ full risk‑to‑remediation approach and integrated platform create differentiation. Even so, changes in buyer behavior, evolving platforms, and consolidation in security tooling could reshape the playing field over time, and investors will be watching closely to see how Qualys defends and grows its share.

Seasonality, Renewals Concentration, and Execution Risk

Another theme was the inherent seasonality in the business and what it means for execution. Renewals and revenue are skewed toward the second half of the year, which can concentrate risk if performance in earlier quarters is uneven. Management pointed to key drivers for hitting the 2026 plan: ramping up partners, rolling out QFlex, and successfully converting active POCs into full‑scale deployments. If these efforts ramp more slowly than expected, it could pressure growth and utilization of the elevated sales and marketing budget. Conversely, if execution lands ahead of expectations, the current guidance could prove conservative.

Guidance: Steady Growth, High Margins, and Elevated Investment

For 2026, Qualys guided revenue to a range of $717 million to $725 million, implying year‑over‑year growth of roughly 7%–8%, and Q1 revenue of $172.5 million to $174.5 million, or about 8%–9% growth. Full‑year adjusted EBITDA margins are expected in the mid‑40s, with free cash flow margin in the low‑40s, even as operating expenses grow in the mid‑teens. EPS is projected between $7.17 and $7.45 for the year, with Q1 EPS of $1.76 to $1.83. Capex remains light at an expected $8 million to $12 million for 2026. Guidance assumes the net dollar expansion rate stays around its current 103% level, with moderate new‑business contributions, and billings growth roughly in line with revenue. Management reinforced that higher sales and marketing intensity will be the main investment theme, with more modest increases in engineering and G&A.

In closing, Qualys’ earnings call offered a nuanced picture: a company with best‑in‑class margins, strong cash flow, and a widening product moat, but facing a period of slower growth and heavier investment. ETM, agentic AI, cloud, and asset management are beginning to shape the next chapter, supported by growing channel and international momentum. Yet adoption is still early and expansion metrics are not accelerating, leaving near‑term growth modest and execution risk elevated. For investors, the story is one of a highly profitable platform making a deliberate bet that today’s investment cycle will lay the groundwork for a stronger, more differentiated growth profile in the years ahead.