Qualys (QLYS) investor relations material

Financial performance and growth

• Achieved 16% growth in Current Calculated Billings and 77% increase in operating cash flow in Q2, signaling strong execution and validation of strategic direction.

• Net Dollar Expansion Rate for customers with ETM or CSAM subscriptions remained steady at 107%, reflecting healthy customer spend and product adoption.

• Newer products like ETM and Patch Management now comprise a growing share of total bookings, supporting top-line acceleration.

• Guidance for the current year implies a return to 9%-10% billings growth, reversing prior deceleration and highlighting upside potential.

• High-40s EBITDA margins maintained, with significant free cash flow and ongoing share buybacks.

Product innovation and customer adoption

• Focused on remediation and Patch Management, with innovations like Agent Insta for rapid vulnerability detection and Agent Val for validation.

• Launched TotalAI 2.0 to address security for AI and leverage broad enterprise deployment for visibility into Shadow AI.

• Autonomous remediation capabilities highlighted, with over 40 million patches deployed without human intervention.

• Platform enhancements enable integration with third-party tools, supporting a holistic risk management approach.

• Customers value the ability to prioritize and remediate findings efficiently, reducing risk of outages and improving operational confidence.

Strategic vision and market positioning

• Emphasizing transition from traditional SOC to Risk Operations Center (ROC) for pre-breach risk management and business-aligned risk reduction.

• ROC framework supports inventory, assessment, prioritization, and remediation across emerging risks, including AI and quantum threats.

• Buyer remains primarily the CISO, but broader stakeholder engagement is required for patching and remediation initiatives.

• Differentiation from competitors centers on mature remediation capabilities, patch reliability scoring, and a proven track record of large-scale patch deployment.

• Open to M&A opportunities that complement remediation and AI security, balancing with ongoing buybacks.