Profits are clear, faster growth is not
- Q1 revenue grew 10% to $175.6 million, and full-year revenue guidance moved to $721 million to $727 million.
- The main debate is whether newer ETM and CSAM products can lift growth beyond the current high single-digit guide.
- Customers using ETM or CSAM had 107% net dollar expansion, better than the company-wide 104%.
- Partner-led revenue is now 52% of total revenue and grew 17%, while direct revenue grew 3%.
- Google's March 2026 purchase of Wiz raises the risk that cloud security pricing and win rates get tougher.
A steady compounder needs proof
Qualys is still a clean execution story. It beat Q1 expectations, raised full-year revenue guidance, and kept showing strong profit discipline. That fits its long-running pitch: one cloud platform can help customers find cyber weak spots, rank the danger, and fix the most urgent ones.
The better news is under the surface. Qualys disclosed that customers using its newer Enterprise TruRisk Management, or ETM, and Cybersecurity Asset Management, or CSAM, products had 107% net dollar expansion. That means this group spent 7% more than a year ago after renewals, upgrades, and downgrades. The full company was only at 104%, so the newer platform products look stickier than the average account.
The problem is scale. Total company growth is still modest, with full-year revenue guidance pointing to 8% to 9% growth. The company-wide expansion rate has not yet broken out of the 104% area. Until that changes, the market is being asked to believe that a good cohort will become large enough to pull the whole company faster.
Competition also got harder. Qualys names Wiz as a competitor, and Wiz was acquired by Google in March 2026. That puts a hyperscaler, meaning a giant cloud platform owner, more directly into Qualys' cloud security market. The stock can work if platform adoption and the partner channel keep building, but the growth proof is not complete.
Subscriptions built around risk
Qualys makes money by selling subscriptions to its Enterprise TruRisk Platform. Customers pay for modules that cover jobs like vulnerability management, patching, asset tracking, cloud security, and risk measurement. The more modules a customer uses, the more valuable the platform should become.
The model works best when Qualys lands with its core vulnerability product, then adds other tools over time. That is why net dollar expansion matters. If existing customers keep spending more, Qualys can grow without needing every dollar to come from new customers.
The go-to-market mix is shifting. Partner-led revenue reached 52% of total revenue in Q1 2026, up from 49% a year earlier, and grew 17%. Direct revenue grew 3%. This partner motion can widen reach, but it also makes sales leadership and partner focus important.
Where it can break is in the core market. Vulnerability management is more mature and can face pricing pressure. If newer products fail to sell into the installed base, Qualys may stay a profitable but slower-growth software company.
From finding bugs to fixing them
VMDR with TruRisk
Vulnerability Management, Detection and Response is the core product. It helps customers find security flaws, rank them by risk, and decide what to fix first.
Patch Management
Patch Management helps automate the fix after a weakness is found. It supports the move from alerting customers to helping them take action.
CSAM with EASM
Cybersecurity Asset Management shows customers what technology assets they have, including internet-facing assets. Its 107% cohort expansion with ETM is an early sign that platform adoption can improve spending.
TotalCloud CNAPP
TotalCloud is Qualys' cloud security product. It is strategically important, but competition is rising after Google's acquisition of Wiz.
Enterprise TruRisk Management
ETM helps security teams turn many alerts into a clearer risk score and action plan. The product is central to Qualys' platform upsell story.
Agent Vail
Agent Vail is part of ETM and is now generally available. It aims to validate whether a flaw can be exploited and then help automate remediation.
Q-Flex pricing
Q-Flex is a platform pricing model meant to let customers use Qualys units across modules. Qualys plans a full go-live for select customers and partners later in 2026.
A balanced revenue base
The geographic mix is from Q1 2026. Qualys also discloses channel mix, where partner-led revenue was 52% of total revenue and direct revenue was 48%.
What could break the thesis
Cloud security gets tougher after Wiz
High impact · Medium oddsQualys already competes with large security platforms. Google's acquisition of Wiz adds a cloud giant with large distribution and deep funding. This could hurt TotalCloud CNAPP win rates, lengthen sales cycles, or pressure prices.
The platform cohort stays too small
High impact · Medium oddsThe 107% ETM and CSAM expansion rate is encouraging, but the full company remains at 104%. If the stronger cohort is not large enough, it will not move total growth. The reacceleration story needs the company-wide number to rise.
Growth stays in high single digits
Medium impact · High oddsFull-year revenue guidance points to 8% to 9% growth. That is not broken, but it is slower than investors usually want from a cybersecurity software company. A mature core market makes cross-sell execution more important.
Sales leadership remains unsettled
Medium impact · Medium oddsQualys still lacks a permanent Chief Revenue Officer. That matters during a partner-first shift because the company must balance direct sellers, partners, and platform pricing. A long delay could create confusion in the field.
Budget caution slows upsells
Medium impact · Medium oddsManagement continues to cite macro volatility. When security budgets are tight, customers may delay adding new modules even if they renew core products. That would keep expansion rates flat.
In one breath
What does Qualys do?
Qualys sells cloud-based cybersecurity software. Its tools help companies find assets, detect security weaknesses, rank risk, and fix the most urgent problems.
Why does net dollar expansion matter for Qualys?
Net dollar expansion shows whether existing customers spend more over time after renewals, upgrades, and downgrades. Qualys' total rate was 104% in Q1 2026, while ETM and CSAM customers were at 107%.
Is Qualys growing fast?
Qualys is growing, but not at a high-growth software pace. Q1 revenue grew 10%, and full-year guidance points to 8% to 9% revenue growth.
What is the biggest risk for Qualys?
The biggest risk is that newer platform products do not grow fast enough to offset a maturing core vulnerability market. Competition in cloud security also increased after Google bought Wiz in March 2026.