Company DescriptionQualys, Inc. provides cloud-based information technology (IT), security, and compliance solutions in the United States and internationally. The company offers Qualys Cloud Apps, which includes Vulnerability Management; Vulnerability Management, Detection and Response; Threat Protection; Continuous Monitoring; Patch Management; Multi-Vector Endpoint Detection and Response; Certificate Assessment; SaaS Detection and Response; Secure Enterprise Mobility; Policy Compliance; Security Configuration Assessment; PCI Compliance; File Integrity Monitoring; Security Assessment Questionnaire; Out of-Band Configuration Assessment; Web Application Scanning; Web Application Firewall; Global Asset Inventory; Cybersecurity Asset Management; Certificate Inventory; Cloud Inventory; Cloud Security Assessment; and Container Security. Its integrated suite of IT, security, and compliance solutions delivered on its Qualys Cloud Platform enables customers to identify and manage IT assets, collect and analyze IT security data, discover and prioritize vulnerabilities, recommend and implement remediation actions, and verify the implementation of such actions. The company also provides asset tagging and management, reporting and dashboards, questionnaires and collaboration, remediation and workflow, big data correlation and analytics engine, and alerts and notifications, which enable integrated workflows, management and real-time analysis, and reporting across IT, security, and compliance solutions. The company offers its solutions through its sales teams, as well as through its network of channel partners, such as security consulting organizations, managed service providers, resellers, and consulting firms. It serves enterprises, government entities, and small and medium-sized businesses in various industries, including education, financial services, government, healthcare, insurance, manufacturing, media, retail, technology, and utilities. The company was incorporated in 1999 and is headquartered in Foster City, California.
How the Company Makes MoneyQualys primarily makes money by selling subscriptions to its cloud security platform and related applications. Revenue is generated mainly from recurring subscription fees (typically contracted on multi-month or multi-year terms) that are priced based on factors such as the number of assets/hosts, IPs, endpoints, scanners, or application modules a customer uses. Customers often start with a core use case (commonly vulnerability management and asset discovery) and then expand adoption by adding additional platform applications (e.g., patch/configuration-related capabilities, web application scanning, compliance-focused tools), which drives upsell and cross-sell revenue. Qualys sells through a mix of direct sales to enterprises and channel partners such as managed security service providers (MSSPs), system integrators, and resellers that bundle, resell, or manage Qualys services for end customers. Professional services and other non-subscription items can contribute revenue, but the core economic engine is recurring platform subscriptions and expansion within existing customer accounts.