Qualys raises 2026 revenue guidance after 11% Q3 growth
Qualys reported third-quarter 2026 revenue of $188.0 million, up 11% year over year, and raised its full-year revenue guidance to $736.9 million to $738.9 million. The cloud-native cyber risk management company also highlighted product updates covering vulnerability detection, remediation and AI governance.
- Q3 revenue rose 11% year over year to $188.0 million.
- GAAP net income increased 14% to $57.2 million.
- Full-year 2026 revenue guidance increased to $736.9 million to $738.9 million.
- Qualys introduced InstaScan for scanless vulnerability detection.
- TotalAI added AI governance and testing capabilities.
Revenue and profit increased in the third quarter
For the quarter ended September 30, 2026, Qualys reported GAAP net income of $57.2 million, compared with $50.3 million in the same quarter in 2025. GAAP net income per diluted share rose to $1.62 from $1.39.
Non-GAAP net income increased 11% to $74.8 million, or $2.12 per diluted share, from $67.4 million, or $1.86 per diluted share, in the year-earlier period. Adjusted EBITDA, a non-GAAP financial measure, increased 9% to $89.9 million from $82.6 million.
GAAP gross profit rose 10% to $156.7 million, while GAAP gross margin was 83%, compared with 84% in the third quarter of 2025. Operating cash flow increased 13% to $101.8 million from $90.4 million.
Qualys expands vulnerability and AI security tools
During the quarter, Qualys introduced InstaScan, powered by Agent Insta in Enterprise TruRisk Management. The company said the capability provides scanless vulnerability detection within minutes of an advisory disclosure by correlating new advisories with existing asset, exposure and threat telemetry.
Qualys also added AI-powered Patch Reliability Scoring, wave-based autonomous remediation and peer-to-peer patching to its TruRisk Eliminate capabilities. According to the company, these features are designed to help organizations remediate zero-day vulnerabilities and misconfigurations while maintaining operational stability and reducing dependence on centralized infrastructure.
Its TotalAI offering gained governance features for identifying shadow AI, flagging abnormal model behavior and demonstrating that controls work across development and runtime environments. The updates include discovery of AI agents and MCP servers, red-team testing against OWASP Top 10 and EU AI Act standards, and audit-ready evidence generation.
“Increasing adoption of our AI-native Risk Operations Center, driven by our partner-first strategy, reflects accelerating demand for a vendor-neutral platform that actually fixes security issues rather than just reporting them,” Qualys president and CEO Sumedh Thakar said.
Full-year revenue outlook moves higher
Qualys now expects full-year 2026 revenue of $736.9 million to $738.9 million, representing 10% growth over 2025. The new range compares with its previous guidance of $732.0 million to $738.0 million.
The company also raised its full-year GAAP net income per diluted share outlook to $6.08 to $6.15, from $5.76 to $5.90 previously. Its non-GAAP forecast increased to $8.07 to $8.14 per diluted share, compared with the earlier range of $7.74 to $7.88.
For the fourth quarter, management expects revenue of $191.0 million to $193.0 million, representing 9% to 10% growth over the same quarter in 2025. GAAP net income per diluted share is expected to be $1.57 to $1.64, while the non-GAAP forecast is $2.05 to $2.12.
The guidance is based on information available November 9, 2026, and Qualys said it is subject to cautionary factors described in its legal notice regarding forward-looking statements. The company will discuss the results during an investor conference call and webcast at 5:00 p.m. Eastern Time on November 9.
PR Newswire: Qualys Announces Third Quarter 2026 Financial Results
