Qualys

Qualys is a US publicly traded company that provides cloud-based cybersecurity and compliance solutions. Its platform covers vulnerability management, asset discovery, compliance, cloud and container security, web application security, endpoint capabilities, network visibility, and enterprise cyber risk operations. The company was founded in 1999 and went public on NASDAQ in 2012, with headquarters in the United States.

Qualys emerged during the growth of hosted security services in the late 1990s. Philippe Courtot invested in the company in 1999 and became its chief executive and board chair in 2001. At a time when many organizations relied on manually operated security appliances and periodic consulting assessments, Qualys pursued a software-as-a-service model intended to make vulnerability discovery more automated and repeatable. The company's first major offering was QualysGuard, launched in 2000. It could examine corporate local-area networks for vulnerabilities and help customers identify patches or other corrective measures. This initial vulnerability-management focus established the company's core operating model: collect technical data from an organization's environment, compare that information with known security and compliance requirements, and present findings through a hosted service. Qualys later broadened the platform with compliance assessment, malware detection, web-application scanning, and related security functions. During the 2000s, Qualys also developed scanning appliances and additional service components for enterprise environments. Its products were used by organizations that needed recurring security audits, vulnerability prioritization, and evidence for regulatory or internal compliance programs. The company built relationships with telecommunications providers, managed-security firms, technology companies, and consulting organizations, giving partners the ability to incorporate Qualys capabilities into broader services. Qualys completed its initial public offering on Nasdaq on September 28, 2012, trading under QLYS. The offering generated reported net proceeds of $87.5 million. Becoming a public company gave Qualys additional visibility in the expanding cloud-security market while preserving its focus on subscription software and recurring enterprise use cases. A significant product and architectural transition took place in 2015. Qualys launched its cloud platform together with a lightweight Cloud Agent. The platform was intended to provide more continuous visibility into infrastructure and applications, while the agent collected information from systems without requiring a full traditional scanning cycle for every assessment. This approach helped Qualys extend from point-in-time vulnerability scans toward ongoing asset inventory, configuration assessment, endpoint monitoring, and compliance management. Qualys subsequently expanded its coverage across cloud workloads, containers, web applications, endpoints, and networks. Its Network Passive Sensor added a network-observation layer that could identify devices and services from traffic metadata and transmit the resulting asset information to the Qualys Cloud Platform. This complemented active scanning and agents by helping security teams find assets that might not be fully registered or directly accessible. The company continued to develop partnerships and platform integrations. In 2021, Qualys and Red Hat worked to bring Cloud Agent capabilities to Red Hat Enterprise Linux CoreOS and Red Hat OpenShift, with container-security functionality intended to cover the OpenShift stack. In the same year, Courtot resigned as CEO for health reasons after leading Qualys for about twenty years. Sumedh Thakar, a long-serving company executive, became president and CEO. Under Thakar, Qualys increasingly emphasized risk prioritization and consolidation. Enterprise TruRisk Management, released in 2023, was designed to aggregate risk indicators from Qualys and other security tools, producing a more unified view of exposure. The strategy was to connect technical findings with the business importance of affected assets so that customers could focus remediation on the weaknesses most likely to affect critical operations. In 2024, Qualys announced trial access intended to help organizations evaluate this approach and introduced a Risk Operations Center associated with the platform. Qualys also expanded its channel infrastructure in 2024 through a managed-security-services partner portal. The portal provided partners with operational visibility over customer accounts, licenses, and user roles. In 2025, the Qualys Threat Research Unit received additional industry recognition for its vulnerability research. In 2026, the company announced Agent Val, an agentic-AI capability for exploit validation and autonomous remediation. These developments illustrate the brand's continuing movement from traditional vulnerability scanning toward continuous exposure management, automated prioritization, and machine-assisted remediation. Today, Qualys is an active public cybersecurity company serving enterprises, government organizations, service providers, and other institutions internationally. Its business spans vulnerability management, asset discovery, compliance, cloud and container security, web-application security, endpoint capabilities, network visibility, and enterprise cyber-risk operations.

• 2026

  Agent Val announced

  [1]Qualysen.wikipedia.org

  Qualys announced an agentic-AI tool for exploit validation and autonomous remediation.

• 2024

  Risk Operations Center introduced

  [1]Qualysen.wikipedia.org

  Qualys introduced a real-time Risk Operations Center connected with Enterprise TruRisk Management.

• 2023

  Enterprise TruRisk Management launches

  [1]Qualysen.wikipedia.org

  Qualys released a platform for consolidating cyber-risk signals and prioritizing remediation according to business impact.

• 2021

  Leadership transition

  [1]Qualysen.wikipedia.org

  Sumedh Thakar became president and CEO after Philippe Courtot stepped down for health reasons.

• 2015

  Cloud Platform and Cloud Agent introduced

  [1]Qualysen.wikipedia.org

  Qualys introduced a cloud platform and lightweight agent to support continuous monitoring of systems, applications, and compliance conditions.

• 2012

  Qualys goes public on Nasdaq

  [1]Qualysen.wikipedia.org

  Qualys began trading on Nasdaq under QLYS on September 28, 2012, with reported net IPO proceeds of $87.5 million.

• 2001

  Philippe Courtot becomes CEO and board chair

  [1]Qualysen.wikipedia.org

  Courtot assumed the company's chief executive and board-chair roles.

• 2000

  QualysGuard launches

  [1]Qualysen.wikipedia.org

  Qualys launched QualysGuard, an early cloud-delivered vulnerability-management service capable of scanning networks and identifying remediation options.

• 1999

  Philippe Courtot invests in Qualys

  [1]Qualysen.wikipedia.org

  Philippe Courtot invested in the company, preceding his appointment as chief executive and board chair.

Enterprise-focused cloud cybersecurity and compliance platform emphasizing continuous asset visibility, automated vulnerability assessment, and risk-based remediation.

• Cloud cybersecurity platform · 2015

  Qualys Cloud Platform

  The Qualys Cloud Platform is the company's central hosted environment for collecting, analyzing, and presenting security and compliance data. It brings together information from scanners, agents, passive sensors, and integrations across endpoints, servers, cloud workloads, containers, networks, and applications. The platform supports asset inventory, vulnerability assessment, configuration analysis, compliance reporting, and risk prioritization. Its cloud architecture is intended to provide a common data layer across multiple security functions rather than requiring customers to operate separate appliances for each use case.

• Vulnerability management · 2000

  Qualys Vulnerability Management

  Qualys vulnerability-management capabilities identify weaknesses in systems, applications, and network-connected assets. The product family evolved from QualysGuard and supports scanning, vulnerability assessment, prioritization, remediation tracking, and reporting. It is intended for security teams that need recurring or continuous visibility into exposure across enterprise environments. Findings can be connected with asset context and compliance information so that organizations can distinguish urgent weaknesses on important systems from lower-priority issues.

• Endpoint and workload agent · 2015

  Qualys Cloud Agent

  The lightweight Cloud Agent collects security, configuration, inventory, and compliance information from endpoints and workloads and sends it to the Qualys Cloud Platform. It was introduced to complement active scanning and provide more continuous visibility. The agent is used across supported operating systems and environments, including infrastructure associated with cloud and container platforms. Its role is to reduce blind spots and shorten the time between a system change and the availability of updated security information.

• Cyber-risk management · 2023

  Enterprise TruRisk Management

  Enterprise TruRisk Management aggregates cyber-risk signals and helps organizations score, rank, and manage exposure. Qualys positioned the product as a way to combine information from multiple security tools, including sources outside the Qualys portfolio, into a more unified view. Its purpose is to connect technical vulnerabilities and configuration issues with asset importance and business impact, allowing security and information-technology teams to concentrate remediation on the risks that matter most.

• Network discovery and monitoring

  Qualys Network Passive Sensor

  The Network Passive Sensor observes network traffic and extracts metadata about devices, services, and other elements present in an environment. It sends the resulting information to the Qualys Cloud Platform for analysis and asset visibility. Passive monitoring complements active scanners and installed agents by helping identify systems that may be unmanaged, difficult to scan, or absent from official inventories. The capability is particularly relevant to organizations seeking a broader view of unknown or changing network assets.

• Web application security

  Qualys Web Application Scanning

  Web Application Scanning extends Qualys's assessment model to websites and web applications. It is designed to identify application-layer security issues and provide findings for investigation and remediation. The offering sits alongside network and host assessment capabilities, allowing customers to address vulnerabilities in externally accessible applications as well as the infrastructure that supports them.

• AI-assisted security operations · 2026

  Agent Val

  Agent Val was announced as an agentic-AI capability for exploit validation and autonomous remediation. The stated use case is to help determine whether identified weaknesses can be exploited and to support automated corrective action. Detailed product scope, availability, and commercial terms were not specified in the supplied reference material.

• 2024Enterprise TruRisk Management free 30-day access

  United Kingdom · International

  Qualys offered free 30-day access to Enterprise TruRisk Management to help organizations evaluate risk prioritization and support vulnerability-patching practices associated with guidance from the U.K. National Cyber Security Centre.

  Outcome. Promoted trial adoption of the company's risk-management platform; broader commercial results were not specified.

  Source

• 2024

  Investment in partner operationsStrategy

  Background

  Managed-security-service providers require centralized visibility into customer accounts, licenses, and permissions.

  Action taken

  Qualys launched an MSSP portal within its global partner program.

  Aftermath

  The portal was intended to improve partner efficiency and strengthen distribution through managed-security providers.

  Source

• 2023

  Enterprise TruRisk Management launchProduct launch

  Background

  Enterprise security teams increasingly needed to aggregate findings from multiple products and prioritize them according to business impact.

  Action taken

  Qualys released Enterprise TruRisk Management as a risk-scoring and prioritization framework capable of incorporating signals from different security tools.

  Aftermath

  The product reinforced Qualys's strategy of positioning its platform around enterprise risk operations rather than isolated vulnerability findings.

  Source

• 2021

  Expansion into Red Hat cloud-native environmentsStrategy

  Background

  Customers operating OpenShift and RHEL CoreOS required security visibility across cloud-native infrastructure and container stacks.

  Action taken

  Qualys partnered with Red Hat to support Cloud Agent and container-security capabilities in RHEL CoreOS and OpenShift environments.

  Aftermath

  The partnership extended Qualys coverage into Red Hat's cloud-native ecosystem.

  Source

• 2015

  Shift toward continuous cloud-based monitoringStrategy

  Background

  Periodic vulnerability scanning was being supplemented by demand for continuous visibility across endpoints, applications, and cloud infrastructure.

  Action taken

  Qualys launched its cloud platform and lightweight Cloud Agent to collect and analyze security data continuously.

  Aftermath

  The move broadened Qualys from a vulnerability-scanning provider into a wider cloud-delivered security and compliance platform.

  Source

• 2026-10-15

  Qualys launches TruRisk Eliminate 2.0 with TruConfidence[3]Qualys发布TruRisk Eliminate 2.0及TruConfidencechannellife.com.au

  Reported: 2026-10-14

  Qualys launched TruRisk Eliminate 2.0 with TruConfidence, adding a remediation intelligence and orchestration engine to its cyber risk platform. The update extends remediation beyond agent-based endpoints to perimeter devices, cloud assets and applications, and adds features such as an AI-based Patch Reliability Score, wave-based remediation, compensating controls and post-remediation monitoring. The new version is now generally available, with existing TruRisk Eliminate customers receiving it as a free upgrade.

• 2021-12-03

  Qualys adds Bill Berutti to its board[4]Qualys任命Bill Berutti加入董事会prnewswire.com

  Reported: 2021-12-03

  Qualys announced that Bill Berutti joined its Board of Directors.

• 2020-05-26

  Qualys appoints Joo Mi Kim as CFO[5]Qualys任命Joo Mi Kim为首席财务官prnewswire.com

  Reported: 2020-05-26

  Qualys announced the appointment of Joo Mi Kim as chief financial officer. She will take over from current CFO Melissa Fisher, who is due to depart at the end of the month.

• 2019-12-16

  Qualys partners with Google Cloud on security integration[6]Qualys 与 Google Cloud 合作推出安全集成prnewswire.com

  Reported: 2019-12-16

  Qualys announced a partnership with Google Cloud to integrate the Qualys Cloud Agent with Google Cloud Platform and provide customers with one-click vulnerability assessment. The integration makes vulnerability findings available in Google Cloud Security Command Center; Qualys VMDR was announced as expected to become available in January 2020.

• 2019-10-30

  Qualys reports third-quarter 2019 financial results[7]Qualys公布2019年第三季度财务业绩prnewswire.com

  Reported: 2019-10-30

  Qualys announced third-quarter 2019 financial results, reporting revenue of $82.7 million and GAAP net income of $19.2 million.

• 2019-10-30

  Qualys raises 2019 earnings guidance[7]Qualys公布2019年第三季度财务业绩prnewswire.com

  Reported: 2019-10-30

  Qualys raised its 2019 GAAP and non-GAAP earnings-per-share guidance. The revised GAAP range was $1.47–$1.49, and the revised non-GAAP range was $2.28–$2.30.

1. 1Qualysen.wikipedia.org
2. 2Qualys official websitequalys.com
3. 3Qualys发布TruRisk Eliminate 2.0及TruConfidencechannellife.com.au
4. 4Qualys任命Bill Berutti加入董事会prnewswire.com
5. 5Qualys任命Joo Mi Kim为首席财务官prnewswire.com
6. 6Qualys 与 Google Cloud 合作推出安全集成prnewswire.com
7. 7Qualys公布2019年第三季度财务业绩prnewswire.com
8. 8Qualys Announces First Quarter 2020 Financial Resultsprnewswire.com
9. 9Qualys Announces Fourth Quarter and Full Year 2019 Financial Resultsprnewswire.com
10. 10Qualys Announces Fourth Quarter and Full Year 2020 Financial Resultsprnewswire.com
11. 11Qualys Announces Second Quarter 2020 Financial Resultsprnewswire.com