Qualys, Inc. delivers a cloud-native cyber risk and compliance platform that helps organizations measure, manage, and reduce risk across hybrid environments. Its Enterprise TruRisk Platform brings together asset visibility, risk prioritization, and remediation workflows so security, IT, and compliance teams can work from a shared operating layer across on-premises systems, endpoints, public and private clouds, containers, mobile devices, and web applications.
Built as a SaaS platform with integrated applications, Qualys, Inc. supports vulnerability management, attack surface coverage, cloud security, threat detection, remediation, and audit readiness. It also aggregates signals from Qualys and non-Qualys technologies, giving customers a business-context view of exposure and a practical path from discovery and validation through remediation and risk reduction.
Offerings, Capabilities, and Integrations
Qualys, Inc. packages its offerings through integrated cloud applications supported by a single lightweight Cloud Agent, virtual scanners, passive sensing, and cloud connectors. This architecture enables continuous discovery, assessment, prioritization, and response across managed and unmanaged assets, external-facing systems, workloads, containers, identities, and SaaS environments.
Beyond native capabilities, Qualys, Inc. extends into existing enterprise processes through APIs and a broad connector ecosystem spanning CMDB, ITSM, ticketing, SIEM, and DevSecOps workflows. It supports native integrations with AWS, Microsoft Azure, Google Cloud, and Oracle Cloud Infrastructure, and also offers a private cloud deployment option for organizations with stricter data-control or sovereignty requirements.
Products and Services
- Enterprise TruRisk Platform: Unified platform that measures, communicates, and eliminates cyber risk across internal and external attack surfaces using shared data, scoring, and workflows.
- Enterprise TruRisk Management / CTEM: Risk Operations Center platform for operationalizing CTEM with aggregated Qualys and third-party telemetry, TruRisk scoring, automated prioritization, and validation workflows.
- Vulnerability Management, Detection & Response (VMDR): Continuously discovers assets, assesses vulnerabilities and misconfigurations, prioritizes by risk, and identifies patches across hybrid IT.
- TotalAppSec: AI-powered application risk management for web applications and APIs that combines discovery, DAST, API security, malware detection, and remediation workflows.
- CyberSecurity Asset Management (CSAM): Continuously discovers, classifies, and manages known and unknown assets with enriched context across hybrid environments.
- TruRisk Eliminate (TE): Cyber risk reduction solution that combines patching, mitigation, and isolation to address exploitable and unpatchable vulnerabilities.
- Patch Management (PM): Automated patch deployment and orchestration for Windows, Linux, and Mac, tied to vulnerability context and remediation workflows.
- Policy Audit: Continuous compliance and audit-readiness solution with evidence collection, mandate-based controls, gap analysis, reporting, and remediation integration.
- Multi-Vector EDR: Cloud-delivered endpoint detection and response that supports pre- and post-breach detection, investigation, and multi-layered response.
- TotalCloud (CNAPP): Risk-based CNAPP for multi-cloud, containers, SaaS, and cloud workloads with posture management, runtime protection, threat detection, and remediation automation.
- ETM Identity: Identity risk operations capability that consolidates human and machine identity exposures into a prioritized view aligned with asset risk.
- External Attack Surface Management (EASM): Outside-in discovery of internet-facing assets, domains, APIs, and cloud services to expose shadow and unmanaged external risk.
Target Customers
Qualys, Inc. serves organizations that need centralized cyber risk and compliance operations across complex hybrid estates. Its primary audience includes security, IT operations, vulnerability management, cloud security, compliance, and risk teams that must coordinate remediation across distributed infrastructure and multiple business units.
The company addresses small business, mid-sized business, enterprise, and public sector environments, and it is also relevant to managed service and consulting-led security models. Its use cases span industries including financial services, technology, healthcare, government, manufacturing, retail, education, and telecommunications, especially where continuous visibility, audit readiness, and cloud security are operational priorities.
Cloud Integrations and Marketplace
- AWS Marketplace: Qualys, Inc. maintains an AWS Marketplace seller presence and offers deployable marketplace assets such as the Qualys Virtual Scanner Appliance and Qualys Gateway Service for AWS environments.
- Microsoft Azure Marketplace: Qualys, Inc. offers the Qualys Virtual Scanner Appliance in Microsoft Azure Marketplace and supports Azure deployments and integrations through marketplace-delivered components such as Qualys Gateway Service.
- Google Cloud Marketplace: Qualys, Inc. has made Qualys Cloud Agent and Qualys Gateway Service available through Google Cloud Marketplace, supporting streamlined deployment and visibility into Google Cloud workloads.
- Oracle Cloud Marketplace: Qualys, Inc. offers VMDR and TotalCloud through Oracle Cloud Marketplace with native Oracle Cloud Infrastructure integration, one-click provisioning, and support for Oracle committed spend.
Key People
- Sumedh Thakar: President and CEO
- Joo Mi Kim: Chief Financial Officer
- Dino DiMarino: Chief Revenue Officer
- Pinkesh Shah: Chief Product Officer
- Dilip Bachwani: CTO and SVP, Enterprise TruRisk Platform
- Jonathan Trull: Chief Information Security Officer | EVP & GM, Risk Management Business
- May Mitchell: Chief Marketing Officer
- Shawn O’Brien: EVP Global Sales and Strategic Alliances
- Rima Touma Bruno: Chief Human Resources Officer
- Bruce Posey: Chief Legal Officer
- Brad Bell: Chief Information Officer (CIO)
Key Facts
- Headquarters: Foster City, California, United States
- Employees: 2,625
- Annual Revenue: $669.1M
- Parent Company: None
- Subsidiaries: Approximately 15 subsidiaries, including Qualys International, Inc., Qualys Canada, Ltd., Qualys Technologies, S.A., Qualys GmbH, and Qualys Japan K.K.
- Publicly Listed: NASDAQ: QLYS
Analyst Recognitions
- Forrester: Leader in The Forrester Wave™: Cloud-Native Application Protection Solutions, Q1 2026.
- Gartner: Leader in the 2025 Gartner Magic Quadrant for Exposure Assessment Platforms.
- IDC: Leader in the IDC MarketScape: Worldwide Exposure Management 2025 Vendor Assessment. Major Player in the IDC MarketScape: Worldwide Cloud-Native Application Protection Platform 2025 Vendor Assessment.
