Qualys, Inc. (QLYS) Stock Price & How to Invest

Last updated July 2026

Short answer

You can invest in Qualys (QLYS) by buying shares or fractional shares at any major broker, through an ETF that holds it, or as one holding in a thematic basket. Qualys is a cloud-based cybersecurity company best known for continuous vulnerability management (VMDR), expanding into cloud security posture, compliance, and patch management, with risk-based prioritization via TruRisk. Unusually for security, it runs at high margins and strong free cash flow, so QLYS is the profitable, financially disciplined, slower-growth alternative to cash-burning peers.

QLYS stock price

As of 2026-07-31, Qualys, Inc. (QLYS) last closed at $144.75, up 10.9% over the past year. Over the past 52 weeks it has traded between $76.20 and $164.12.

QLYS last close
$144.75
1 day
+2.15%
1 month
+0.91%
1 year
+10.89%
52-week range
$76.20 to $164.12
Last close
2026-07-31

Prices are daily closing prices from Yahoo Finance and may be delayed. For the live quote, check your broker or Qualys, Inc.'s investor relations page. Walnut is informational, not investment advice.

What does Qualys, Inc. (QLYS) do?

Qualys (QLYS) is a cloud-based cybersecurity company best known for vulnerability management. Its platform continuously scans an organization's IT assets (servers, endpoints, cloud workloads, web apps, and containers) to find security weaknesses, misconfigurations, and missing patches, then helps prioritize and remediate them. The flagship products are VMDR (Vulnerability Management, Detection and Response) and a growing suite covering cloud security posture, compliance, web application scanning, and patch management.

Qualys sells primarily through a subscription SaaS model, so revenue is recurring and high-margin, and the company is notably profitable for a security vendor, generating strong free cash flow. Customers are typically mid-size and large enterprises plus government agencies that need continuous visibility into their attack surface. Founded in 1999 and headquartered in Foster City, California, Qualys is a long-established, financially disciplined player in a sector where many peers prioritize growth over profitability.

What's driving Qualys, Inc. (QLYS)?

1. Vulnerability management core.

Qualys is a recognized leader in continuous vulnerability management, a foundational security category that grows as attack surfaces expand across cloud, containers, and remote endpoints. The sticky, subscription-based core generates durable recurring revenue and strong renewal rates among large enterprises and governments.

2. Platform expansion.

Qualys is broadening beyond scanning into cloud security posture management, patch management, web application security, and risk-based prioritization via TruRisk. Cross-selling these modules into the existing base lifts revenue per customer without heavy new-logo costs, the classic SaaS land-and-expand motion.

3. Profitability and free cash flow.

Unusually for cybersecurity, Qualys runs at high operating margins and converts a large share of revenue to free cash flow. That financial discipline, plus consistent buybacks, differentiates it from cash-burning growth peers and supports the stock during risk-off periods.

4. Risk-based prioritization.

The TruRisk approach scores and ranks vulnerabilities by actual business risk rather than raw counts, addressing alert overload. As enterprises shift from finding everything to fixing what matters, this positioning aligns Qualys with how security teams now operate.

What are the risks to Qualys, Inc. (QLYS)?

Qualys competes against larger, better-funded platforms (Tenable, Rapid7, CrowdStrike, Microsoft) that are bundling vulnerability and exposure management into broader security suites, pressuring standalone vendors. Growth has decelerated to more modest rates as the core market matures, and the company is a relatively small cap in a sector that rewards faster expanders. Larger platform players can undercut on price or include comparable scanning for free inside bundles. Customer concentration in vulnerability management leaves Qualys exposed if newer categories like cloud and exposure management consolidate around competitors. Its conservative growth profile can underperform in momentum-driven markets.

What is the Qualys, Inc. (QLYS) forecast?

18 analysts publish price targets on QLYS, averaging $131.13 against a $133.83 price as of July 2026, or -2.0%. The published targets run from $90.00 to $190.00, a wide spread, and the ratings split 5 buy, 15 hold, 1 sell. Over the last six months there have been 6 raises and 6 cuts among the published actions. A price target is what an analyst published on a date, not a prediction, and sell-side ratings skew positive across the whole market.

Read the full QLYS forecast and price target for the target table, the recent rating actions by firm, and how the consensus has shifted.

Is QLYS a buy or a sell?

We give no verdict on Qualys, Inc.. Both cases are real, which is why the question is contested at all, so here is the strongest version of each.

The case for buying. Vulnerability management core. Qualys is a recognized leader in continuous vulnerability management, a foundational security category that grows as attack surfaces expand across cloud, containers, and remote endpoints. The most optimistic published target, $190.00, assumes this works close to its best case.

The case against. Qualys competes against larger, better-funded platforms (Tenable, Rapid7, CrowdStrike, Microsoft) that are bundling vulnerability and exposure management into broader security suites, pressuring standalone vendors. The most pessimistic target, $90.00, is roughly what QLYS is worth if this bites instead.

Read the full bull and bear case on QLYS, including what would have to change to break either one. Walnut is not an investment adviser.

How is Qualys, Inc. (QLYS) valued? (approximate, early 2026)

A simple financial snapshot. These are approximations and refresh quarterly; for current figures see Qualys, Inc.'s investor relations page or your broker.

  • Revenue (TTM): ~$650 million
  • Revenue growth: High-single to low-double-digit
  • Operating margin: ~30% (GAAP); higher non-GAAP
  • Free cash flow margin: Strong (often ~40% of revenue)
  • Net income (TTM): Solidly profitable (~$150 million range)
  • P/E (TTM): ~30x
  • Dividend yield: None (buybacks instead)
  • Recurring revenue: Predominantly subscription / SaaS

Qualys trades as a profitable, cash-generative SaaS security name rather than a hypergrowth disruptor. Its multiple reflects steady recurring revenue and high margins, balanced against slower growth than platform peers. Valuation tends to compress when growth decelerates and expand when cross-sell and exposure-management momentum reaccelerate.

Which ETFs hold Qualys, Inc. (QLYS)?

If you want QLYS exposure as part of a larger bundle rather than directly, these ETFs hold it meaningfully. Weights are approximate and refresh quarterly.

ETFName% in QLYSExpense ratio
BUGGlobal X Cybersecurity ETF~5.4%0.50%
CLOUGlobal X Cloud Computing ETF~4.0%0.68%
IHAKiShares Cybersecurity and Tech ETF~5.1%0.47%
WCLDWisdomTree Cloud Computing Fund~2.1%0.45%

Who competes with Qualys, Inc. (QLYS)?

Vulnerability and exposure management

Tenable and Rapid7 are the closest direct competitors in scanning and vulnerability management. Microsoft Defender Vulnerability Management bundles comparable capability into broader security licensing, pressuring standalone pricing.

Cloud security posture

Wiz, Palo Alto Networks (Prisma Cloud), CrowdStrike, and Microsoft compete in cloud security posture and workload protection, the category Qualys is expanding into beyond traditional scanning.

Broad security platforms

CrowdStrike, Palo Alto Networks, and Microsoft increasingly fold vulnerability and exposure management into consolidated platforms, the main strategic threat to point-product vendors like Qualys.

What stocks are similar to Qualys, Inc. (QLYS)?

Other names that sit close to QLYS: same theme, named as a direct competitor, or held beside it in the same funds. Each entry says which. Worth a look if you are thinking about diversification within a thesis rather than concentration on one ticker.

How to invest in Qualys, Inc. (QLYS)

There are three common ways to get QLYS exposure. Buy shares (or fractional shares) directly at any major broker. Hold an ETF that includes it (BUG, CLOU, IHAK), which spreads the position across many companies. Or build it into a focused thematic portfolio, so QLYS sits alongside other stocks that express the same thesis.

Walnut takes the portfolio route. Describe a thesis where QLYS fits (for example “AI infrastructure” or “dividend-growth large-caps”) and the AI proposes 5 to 6 constituents with target weights. You review the plan and fund it through your own broker when you're ready.

New to this? Start with how to invest in stocks, see how to analyze a stock with AI, or compare the best AI stock analyzers.

The bottom line on Qualys, Inc. (QLYS)

Qualys (QLYS) is a profitable, cash-generative SaaS security name whose sticky vulnerability-management core and land-and-expand cross-sell are weighed against slower growth and larger platforms (CrowdStrike, Palo Alto, Microsoft, Tenable, Rapid7) bundling comparable scanning. In a portfolio it behaves as the steady, free-cash-flow-positive sleeve of a cybersecurity allocation rather than a hypergrowth disruptor.

More on Qualys, Inc. (QLYS)

Whether QLYS is worth buying today depends more on your time horizon and what you already hold than on any single call. We walk through valuation, what would have to go right, and the risks in is QLYS a buy or a sell?, and where the stock could go from here in the QLYS stock forecast.

For income investors, whether QLYS pays a dividend and how the payout looks is covered in does QLYS pay a dividend? And to weigh QLYS against a peer, read the full side-by-side comparisons: QLYS vs TENB and QLYS vs RPD.

Wondering how QLYS fits the portfolio you already own? Walnut is an AI investing app that connects your brokerage read-only and answers questions like that about your actual holdings: overlap, concentration, and how each position tracks the S&P 500. Compare the best AI portfolio analyzers or see the best AI investing apps in 2026.

Investing in Qualys, Inc. with AI

Connect the broker you already use and ask Walnut's AI how QLYS fits what you actually hold: whether you own it already through a fund, what it would do to your concentration, and how it has tracked the S&P 500. Read-only by default, and you approve anything before it reaches your broker.

FAQ

What is QLYS's ticker symbol?

+

QLYS, listed on Nasdaq. Officially Qualys, Inc. Founded 1999, headquartered in Foster City, California. Trades during US market hours and is available at every major US brokerage. It is a mid-cap cybersecurity name.

What does Qualys do?

+

Qualys provides cloud-based cybersecurity, best known for vulnerability management. Its platform continuously scans IT assets across servers, endpoints, cloud, and containers to find security weaknesses and misconfigurations, then prioritizes remediation. It also offers compliance, cloud security posture, web app scanning, and patch management, sold as subscription SaaS.

Who are Qualys's main competitors?

+

By segment. Vulnerability management: Tenable, Rapid7, and Microsoft Defender Vulnerability Management. Cloud security posture: Wiz, Palo Alto Networks (Prisma Cloud), CrowdStrike, Microsoft. Broad platforms folding in exposure management: CrowdStrike, Palo Alto Networks, and Microsoft are the main strategic threats.

Is Qualys profitable?

+

Yes, notably so for a cybersecurity company. Qualys runs at high operating margins, is solidly net-income positive, and converts a large share of revenue to free cash flow. This financial discipline distinguishes it from many cash-burning, growth-first security peers and supports consistent share buybacks.

What is the vulnerability management that Qualys provides?

+

Vulnerability management is the continuous process of identifying, assessing, prioritizing, and remediating security weaknesses across an organization's IT assets. Tools scan for missing patches, misconfigurations, and known exploitable flaws, then help teams fix the most dangerous issues first. It is a foundational, ongoing function of enterprise cybersecurity.

Is Qualys a cybersecurity stock?

+

Yes. Qualys is a pure-play cybersecurity company focused on vulnerability and exposure management, cloud security, and compliance. Investors typically hold it as part of a cybersecurity theme, often as the profitable, cash-generative complement to faster-growing platform names.

How does Qualys make money?

+

Qualys makes money primarily through recurring software subscriptions to its cloud platform. Enterprises and governments pay annual or multi-year fees for vulnerability management, cloud security, compliance, and related modules. The SaaS model produces predictable, high-margin recurring revenue and strong free cash flow.

Which ETFs hold Qualys?

+

Cybersecurity-themed ETFs such as those tracking the security and software sectors hold Qualys, typically at modest weights given its mid-cap size. Broad technology and small-to-mid-cap index funds also include it. It is not a large weight in S&P 500 funds.

Is Qualys in the S&P 500?

+

No. Qualys is a mid-cap company and is not an S&P 500 constituent. It appears mainly in cybersecurity, software, and mid-cap thematic funds rather than the large-cap index.

Which thematic baskets typically include Qualys?

+

Cybersecurity themes on Walnut. Qualys is often included as the profitable, free-cash-flow-positive sleeve of a security basket, balancing higher-growth, less-profitable platform names like CrowdStrike and faster expanders in cloud security.

How does Qualys compare to Tenable and Rapid7?

+

All three are core vulnerability-management vendors. Qualys is distinguished by its strong profitability and free cash flow, while Tenable and Rapid7 emphasize their own platform breadth and exposure-management positioning. Competition increasingly comes from larger platforms bundling comparable scanning into broader security suites.

Is Qualys a good stock to buy?

+

Descriptive, not a recommendation. Qualys offers exposure to cybersecurity with unusually strong profitability and free cash flow, balanced against slower growth than platform peers and competition from larger vendors bundling vulnerability management. Whether it suits a portfolio depends on preference for steady, cash-generative SaaS versus faster growth. Walnut is informational, not investment advice.

Walnut is informational, not investment advice. Financial figures on this page are approximations; always verify current numbers with Qualys, Inc.'s investor relations page or your broker before making investment decisions.