Qualys (QLYS) Q2 2026: Channel Revenue Rises to 54% as AI-Driven Risk Platform Gains Scale

2026-08-04 | By EarningsIQ Research

Qualys posted a robust Q2, propelled by surging channel revenue and accelerating adoption of its AI-native risk operations platform. AI urgency is driving both product innovation and customer pipeline, with autonomous remediation and scanless detection now core differentiators. Raised full-year guidance signals conviction in platform-led expansion, but sustained execution in upsell and federal momentum will be key to long-term growth.

Summary

• Channel Acceleration: Channel partners now drive the majority of revenue, amplifying platform reach and sales leverage.
• AI Remediation Adoption: Autonomous remediation and scanless detection are reshaping customer buying priorities.
• Platform Expansion Focus: Upsell execution and QFlex flexibility underpin guidance raise and future bookings outlook.

Business Overview

Qualys provides cloud-based security and compliance solutions with a focus on risk management, vulnerability detection, and remediation. The company monetizes through subscription licenses across major modules: VMDR (Vulnerability Management, Detection, and Response), ETM (Enterprise True Risk Management), Patch Management, CSAM (Cybersecurity Asset Management), and Total Cloud. Its platform enables customers to autonomously detect, prioritize, and remediate security risks across hybrid and multi-cloud environments, with channel partners and direct sales as primary go-to-market routes.

Performance Analysis

Qualys delivered double-digit revenue growth, with channel partner contributions climbing to 54% of total revenue, up from 49% a year ago. Channel revenue grew 22% YoY, far outpacing the flat direct business, signaling the success of a partner-first growth model and expanding global reach. International revenue grew 15%, outstripping the 8% growth in the U.S., and now represents 45% of the mix, underscoring rising adoption outside the domestic base.

Product mix continues to shift toward higher-value modules. ETM and CSAM combined accounted for 12% of total bookings (up from 9% last year), while Patch Management rose to 9%. The company’s net dollar expansion rate improved to 105%, reflecting better upsell execution and the growing attach of new modules to the installed base. Free cash flow margin rebounded to 31% in the quarter, though management notes this was partly due to working capital timing, with normalized first-half margin at 42%.

• Channel Revenue Momentum: Partner-driven growth is now the dominant engine, enabling broader platform sales and reducing reliance on direct sales cycles.
• Upsell and Expansion Execution: Net dollar expansion improved sequentially, with ETM and Patch Management driving incremental bookings.
• Operating Leverage Maintained: EBITDA margin held at 46%, while increased investment in sales and marketing (up 14%) supports pipeline build and future growth.

Management’s guidance raise for both revenue and EPS reflects confidence in the platform’s competitive edge and pipeline conversion. However, the impact of AI-driven urgency is still in early pipeline stages, with most new bookings growth tied to better upsell and partner execution rather than immediate post-Mythos spending.

Executive Commentary

Strategic Positioning

1. AI-Native Risk Operations Platform

Qualys is doubling down on its AI-native risk operations center (ROC), which integrates agentic AI for instant vulnerability detection (Instascan), exploit validation (Agent Val), and autonomous remediation (Agent Serra). This closed-loop, scanless model compresses exposure windows from weeks to minutes, creating a defensible moat versus legacy scanning and patching approaches. The company’s messaging is clear: autonomous remediation is no longer optional in an AI-accelerated threat landscape.

2. Channel-First Expansion

Partner ecosystem now drives the majority of bookings, enabling broader reach, faster upsell, and more scalable customer acquisition. The company’s QFlex model, which allows large enterprises to flexibly commit spend across modules, is directly supporting large upsell motions and platform expansion, as highlighted in recent customer wins.

3. Upsell and Platform Attach

Net dollar expansion rate improvement is underpinned by the attach of ETM, CSAM, and Patch Management, with upsell execution accelerating in the installed base. The company is leveraging its large VMDR customer base as a pipeline for true risk management and remediation upgrades, while QFlex provides commercial flexibility to drive larger, longer-term commitments.

4. Federal Pipeline and Compliance Tailwinds

Federal business remains nascent but presents a significant opportunity, as new CISA mandates require rapid detection and remediation. Qualys’ FedRAMP High platform and unique AI-driven capabilities position it well to win in this segment as compliance urgency rises.

5. Product-Led Differentiation

Continuous innovation in scanless detection, exploit validation, and autonomous remediation is creating tangible proof points for customers, with peer-to-peer patching and AI-driven patch reliability scores cited as key differentiators. The platform’s ability to ingest third-party data and operate in multi-vendor environments supports broad-based adoption and competitive displacement.

Key Considerations

This quarter marks a strategic inflection for Qualys, with AI urgency catalyzing both product adoption and customer conversations. However, much of the pipeline is still in the evaluation or proof-of-concept stage, and the pace of budget conversion remains a watchpoint.

Key Considerations:

• Shift to Autonomous Remediation: Customers are increasingly prioritizing solutions that move from detection to validated, autonomous remediation, shortening exposure windows and reducing manual effort.
• Partner-Driven Growth Model: Channel partners now drive over half of total revenue, enhancing sales leverage and international expansion but introducing new dependencies on partner execution.
• QFlex as Platform Expansion Lever: Flexible commitment model is supporting larger upsells and bookings pull-forward, though its impact is still early in the numbers.
• Federal and Compliance Opportunity: CISA mandates and FedRAMP High certification could unlock a new wave of demand, but federal revenue is not yet material.
• Sales Cycle and Pipeline Conversion: While urgency is high, most new AI-driven demand is still in pipeline or POC, with enterprises taking a measured approach to long-term security program changes.

Risks

Key risks include elongated enterprise sales cycles as customers plan long-term remediation programs, potential partner concentration as channel-driven growth scales, and intensifying competition from new and legacy vendors touting AI capabilities. Federal pipeline remains an opportunity rather than a revenue driver, and the speed of pipeline-to-bookings conversion will be critical to sustaining double-digit growth targets.

Forward Outlook

For Q3 2026, Qualys guided to:

• Revenue of $185.5 to $187.5 million (9% to 10% growth)
• EPS of $1.91 to $1.98

For full-year 2026, management raised guidance:

• Revenue of $732 to $738 million (9% to 10% growth)
• EPS of $7.74 to $7.88 (up from $7.44 to $7.65 prior)

Management expects:

• Net dollar expansion rate to remain at current levels
• Moderate new business contribution, with bookings growth led by upsell and channel momentum
• Continued investment in sales and marketing, especially headcount and partner enablement, to support pipeline build

Takeaways

Qualys is capitalizing on AI-driven urgency to reposition itself as a platform leader in autonomous risk management. The shift to channel-led growth and flexible platform commitments is unlocking larger upsell opportunities, while product innovation is setting a new standard for detection and remediation speed.

• AI-Driven Differentiation: Autonomous remediation and scanless detection are now core to customer conversations, driving competitive wins and expanding pipeline.
• Channel and Upsell Momentum: Partner-first model and QFlex are accelerating bookings and platform expansion, but require sustained execution as scale increases.
• Pipeline Conversion Pace: Watch for the timing of AI-driven pipeline translating to bookings and revenue, especially as enterprises move from evaluation to deployment.

Conclusion

Qualys delivered a strategically significant quarter, with channel expansion and AI-native product innovation driving both financial performance and future positioning. The raised outlook underscores management’s confidence, but the next leg of growth will depend on converting pipeline urgency into recurring, platform-wide adoption.

Industry Read-Through

Qualys’ results and narrative signal an industry-wide pivot toward AI-driven, autonomous security operations. The collapse of exploit timelines and board-level focus on quantifiable risk are pushing enterprises to demand closed-loop remediation, not just detection. Vendors unable to deliver validated exploitability and rapid remediation will likely see share shift toward integrated platforms. Channel-led expansion and flexible commercial models (like QFlex) are becoming essential for scaling in a market where buyers want optionality and rapid time-to-value. Federal mandates for 72-hour remediation and FedRAMP High certification are creating new barriers to entry and expanding the total addressable market for compliant, automation-first providers.

QLYS Technology Cybersecurity AI Channel Remediation Subscription Federal