Qualys (QLYS) Q1 2025: Channel Revenue Jumps 19% as Partner-First Model Reshapes Growth Trajectory
Qualys’ channel-driven strategy delivered outperformance in Q1, with partner revenues up sharply and international momentum outpacing domestic growth. While macro headwinds and budget scrutiny are weighing on upsell velocity, retention improved and new enterprise risk management offerings are gaining traction. Guidance remains conservative, but management’s focus on platform extensibility, partner enablement, and AI security positions the business for durable growth and margin resilience.
Summary
- Partner-Led Shift Accelerates: Channel contribution rose to nearly half of revenue, signaling a decisive move away from direct sales dependency.
- Platform Expansion Drives Adoption: New risk management and AI security modules are unlocking larger deals and deepening customer integration.
- Macro Uncertainty Tempers Guidance: Management remains cautious on new business growth, but retention and disciplined investment underpin margin strength.
Performance Analysis
Qualys delivered 10% revenue growth in Q1, with channel partner revenue rising 19% year-over-year—outpacing the modest 2% growth in the direct business. The channel now accounts for 49% of total revenues, up from 45% last year, reflecting a strategic pivot to partner-driven distribution. International markets grew 16%, well ahead of the 6% growth seen in the US, shifting the revenue mix to 57% US and 43% international.
Profitability remains a standout: adjusted EBITDA margin held at 47%, and free cash flow margin expanded to 67%, up from 57% a year ago. Operating expenses increased 10%, largely due to a 15% rise in sales and marketing as Qualys invests in long-term initiatives without sacrificing margin discipline. Retention improved and net dollar expansion rate held steady at 103%, though upsell rates faced pressure late in the quarter as customers scrutinized budgets and elongated decision cycles. Cloud security (TotalCloud CNAP) contributed 5% of trailing bookings, while asset and patch management comprised 15% of total bookings and 24% of new bookings.
- Channel-Driven Revenue Mix: Partners now drive nearly half of total revenue, with international growth leading as a direct result of this model.
- Margin Resilience: Strong free cash flow and stable EBITDA margins provide flexibility for continued investment amid macro headwinds.
- Retention Outweighs Upsell Slowdown: Improved gross retention offset lower-than-expected upsell, sustaining net expansion rates.
Management’s capital allocation remains balanced: $39.6 million was deployed for share repurchases, with $303.8 million left in the buyback program, while capex remains modest. The business continues to self-fund innovation and expansion.
Executive Commentary
"We have established a strong track record of converting operational challenges into secular competitive advantages while maximizing lifetime value ensuring frictionless outcomes at scale, and driving immediate ROI on security spend."
Sumit Thakkar, President and CEO
"Our ability to innovate and invest in our long-term growth initiatives while remaining capital efficient, EPS for the first quarter of 2025 was 1.67, and our free cash flow was 107.6 million, representing a 67% margin, compared to 57% in the prior year."
Jumi Kim, Chief Financial Officer
Strategic Positioning
1. Channel-First Model Redefines Go-to-Market
Qualys’ partner-first strategy is now the primary growth engine, with channel sales comprising nearly half of revenue and driving superior growth rates compared to direct. This approach leverages managed security service providers (MSSPs, outsourced security operations providers) and global partners to extend reach, generate leads, and deliver managed risk operations (MROC, managed risk operations center) services that differentiate from commoditized post-breach detection offerings.
2. Risk Operations Center (ROC) and ETM Platform as Core Differentiators
The Enterprise Risk Management (ETM) solution and ROC paradigm are resonating with large enterprises seeking to consolidate risk signals across diverse security tools. Qualys’ platform ingests data from both Qualys and non-Qualys sources, providing unified risk quantification, contextual business impact analysis, and actionable remediation plans. This vendor-agnostic orchestration layer is a wedge for both new logo wins and deepening existing customer relationships, particularly in complex, multi-cloud environments.
3. AI Security and Audit Readiness Solutions Expand TAM
With Total AI and AI SPM (Security Posture Management), Qualys is targeting the emerging risks in AI and ML supply chains. Early customer proof-of-concepts (POCs, pilot deployments) and new features—like LLM (Large Language Model) scanning—position the company to capture spend as organizations formalize AI risk budgets. The new policy audit and audit fix modules address growing CISO (Chief Information Security Officer) demand for automated, cost-efficient compliance readiness, further expanding wallet share.
4. International and Federal Verticals Drive Incremental Growth
International revenue growth is outpacing domestic, fueled by channel alignment and partner-led execution. Progress towards FedRAMP (Federal Risk and Authorization Management Program, US government cloud security certification) high certification and dedicated federal events signal intent to unlock federal market opportunities later this year.
5. Capital Discipline and Margin Focus
Despite increased sales and marketing investment, Qualys maintains industry-leading margins, balancing R&D, go-to-market, and operational investments with a commitment to capital efficiency. The company continues to allocate capital to both innovation and shareholder returns, with a clear bias toward durable, long-term growth over short-term gains.
Key Considerations
Qualys is navigating a complex macro and competitive environment with a clear focus on platform extensibility, partner leverage, and solution breadth. The quarter’s results highlight the strategic shift from point solution selling to integrated, outcome-driven risk management, with an emphasis on channel scalability and customer ROI.
Key Considerations:
- Partner Ecosystem as Growth Lever: The partner-led model is driving higher growth, especially internationally, but requires ongoing enablement and alignment to maintain momentum and avoid channel conflict.
- Platform Stickiness Through Integration: Ability to ingest and contextualize third-party security data (including from competitors) increases Qualys’ relevance as a risk fabric, reducing churn risk and expanding upsell opportunities.
- Macro Headwinds and Budget Scrutiny: Elongated decision cycles and heightened ROI requirements are slowing upsell, pressuring net expansion, and keeping management guidance conservative.
- AI Security Adoption in Nascent Phase: While early customer engagement is promising, most buyers remain in the exploration stage, with budget allocation for AI risk management likely to ramp over several years.
- Capital Allocation Remains Balanced: Share repurchases and disciplined capex reflect a commitment to shareholder value and operational flexibility.
Risks
Macro uncertainty and increased budget scrutiny are dampening upsell rates and elongating sales cycles, particularly in the US. While retention has improved, new logo and upsell bookings face headwinds. Competitive encroachment from endpoint and cloud security vendors could pressure pricing and differentiation, especially as the market shifts toward integrated platforms. Execution risk remains as Qualys scales its partner ecosystem and seeks to maintain margin discipline while investing in new verticals and technologies.
Forward Outlook
For Q2 2025, Qualys guided to:
- Revenue of $159.7 to $162.7 million (7% to 9% growth)
- EPS of $1.40 to $1.50
For full-year 2025, management raised the lower end of revenue guidance to $648 to $657 million (7% to 8% growth) and increased EPS guidance to $6.00 to $6.30. EBITDA margin is expected in the low to mid-40% range, with free cash flow margin in the mid-30s. Management cited ongoing macro headwinds, conservative assumptions for new bookings, and a continued focus on partner-driven growth and federal expansion.
- Sales and marketing and R&D will see prioritized investment, with G&A growth kept modest.
- Retention is expected to remain stable, with new business contribution likely subdued in the near term.
Takeaways
Qualys is executing a deliberate transition to a partner-first, platform-centric model, capitalizing on enterprise demand for unified risk management and automation. Margin discipline and capital flexibility provide a buffer against macro volatility, while new offerings in AI security and audit readiness expand the company’s addressable market.
- Partner-Led Growth: Channel execution is driving higher growth and international expansion, but requires sustained enablement and strategic focus.
- Platform Differentiation: The ROC and ETM solutions are deepening customer relationships and enabling Qualys to act as a risk management aggregator, not just a point solution provider.
- Watch for AI Security Ramp: Most customers remain in the evaluation phase, but early POCs and new capabilities position Qualys for future spend as budgets shift toward AI risk mitigation.
Conclusion
Qualys’ Q1 results underscore the effectiveness of its partner-first transformation and platform integration strategy, even as macro headwinds persist. With strong margins, prudent capital allocation, and expanding solution breadth, Qualys is well-positioned to weather near-term volatility and capture long-term growth opportunities in enterprise risk management and AI security.
Industry Read-Through
Qualys’ transition to a channel-led, platform-centric model reflects a broader cybersecurity industry trend toward solution integration, partner leverage, and outcome-based selling. The growing importance of risk quantification, automation, and AI security posture management is reshaping buyer expectations and vendor positioning. Vendors with extensible platforms and strong partner ecosystems will be best placed to capture budget as CISOs seek consolidation, cost efficiency, and actionable risk reduction. Competitors reliant on direct, point-solution sales face increasing pressure as customers demand unified risk visibility, board-level reporting, and operational ROI. The federal and international verticals remain underpenetrated opportunities for those with the scale and certifications to compete.