Qualys (QLYS) Q2 2025: Channel Revenue Jumps 17% as Platform Strategy Drives Expansion

2025-08-05 | By EarningsIQ Research

Qualys’ Q2 results highlight a decisive pivot to partner-driven growth and platform unification, with channel revenue up 17% and new AI and pricing models accelerating customer adoption. The company’s risk operations center vision is resonating, particularly with larger and public sector clients, as the new agentic AI platform and flexible QLU pricing unlock cross-sell and upsell momentum. Management maintains a cautious macro stance, but stronger retention and net expansion rates point to a more durable growth profile heading into 2026.

Summary

• Channel Expansion Accelerates: Partner-driven sales outpace direct, amplifying platform reach and ecosystem leverage.
• Platform Unification Gains Traction: New agentic AI and flexible pricing drive broader module adoption and customer stickiness.
• Retention and Upsell Strengthen: Improved net expansion rates and multi-product wins signal rising customer lifetime value.

Business Overview

Qualys provides cloud-based cybersecurity and compliance solutions, enabling organizations to identify, assess, and remediate cyber risks across hybrid environments. The company monetizes via a modular subscription platform, with core offerings including vulnerability management (VMDR), patch management, cybersecurity asset management, and cloud security (TotalCloud). Revenue is generated through both direct enterprise sales and an expanding global channel partner ecosystem. Key customer segments include large enterprises, government agencies, and managed service providers seeking unified risk management and automation capabilities.

Performance Analysis

Qualys delivered 10% revenue growth in Q2 2025, with channel partner sales rising 17% and now representing nearly half of total revenue. International markets outpaced domestic, with 15% growth outside the US versus 7% within. The company’s net dollar expansion rate improved to 104%, indicating better upsell and retention execution, while the number of customers spending $500,000 or more grew 7% to 212 accounts. Notably, patch management and cybersecurity asset management contributed 16% of total bookings and 26% of new bookings on a last twelve months basis, signaling increasing multi-module adoption.

Profitability remained robust, with a 45% adjusted EBITDA margin despite a 15% increase in operating expenses tied to sales, marketing, and R&D investments. Free cash flow margin contracted to 20% due to working capital fluctuations, but normalized first-half margin was a healthy 43%. The company continued its shareholder return program, repurchasing $49 million in shares, with $255 million still authorized. Qualys raised FY25 revenue and EPS guidance, reflecting improved execution and pipeline visibility, but maintained a cautious outlook on new business given ongoing macroeconomic scrutiny.

• Channel Leverage Drives Growth: Channel partners now account for 49% of revenue, up from 46% a year ago, with 17% YoY growth versus 4% for direct sales.
• Multi-Module Momentum: Patch management and asset management modules are driving a greater share of both total and new bookings, reflecting deeper platform adoption.
• Retention and Expansion Improve: Net dollar expansion rate rose to 104%, up from 103% last quarter and 102% a year ago, underscoring better upsell and gross retention.

Management’s conservative revenue guidance reflects tough comps and macro caution, but operational execution and product innovation are creating levers for sustained growth and margin resilience.

Executive Commentary

Strategic Positioning

1. Channel-First Model Accelerates Scale

Qualys’ pivot to a partner-led go-to-market strategy is paying dividends, with channel partners now making up nearly half of revenue and delivering outsize growth. The Managed Risk Operations Center (MROC) program is enabling partners to offer differentiated, proactive risk services layered atop customers’ existing security stacks, creating a multiplier effect for both Qualys and its partners.

2. Platform Unification and Flexible Pricing

The new Qualys Units (QLU) pricing model allows customers to flexibly consume any module across the platform, reducing friction for cross-sell and accelerating multi-product adoption. Early customer feedback is positive, and management expects this model to drive larger initial lands and faster upsell cycles, especially as organizations seek to consolidate point solutions.

3. Agentic AI and Automation-Driven Differentiation

The launch of an agentic AI platform and marketplace positions Qualys at the forefront of autonomous risk management, enabling customers to deploy specialized AI agents for remediation, risk quantification, and workflow automation. This not only differentiates Qualys from legacy players but also opens new monetization avenues and expands the company’s addressable market.

4. Public Sector and FedRAMP High Authorization

The recent FedRAMP High certification unlocks federal, state, and local government opportunities, with Qualys now uniquely positioned as the only platform offering inventory, vulnerability, patch, cloud, container, and EDR security in a unified workflow for high-security environments. Management expects this to be a multi-year growth driver as agencies modernize away from legacy on-prem solutions.

5. Identity Security Posture Management (ISPM) Expansion

Qualys is integrating identity risk into its core platform, offering continuous analysis of identity systems for misconfigurations and privilege risks. This holistic approach to identity and asset risk—rather than siloed tools—enables deeper visibility and remediation, aligning with zero-trust security trends and customer demand for unified risk context.

Key Considerations

Qualys’ Q2 marks a strategic inflection, as platform unification, channel leverage, and AI-led automation converge to drive durable growth. The company’s focus on pre-breach prevention and risk quantification aligns with evolving CISO priorities and regulatory pressures, while the new pricing model and FedRAMP High authorization open new verticals and cross-sell opportunities.

Key Considerations:

• Channel Momentum Outpaces Direct: Partners are increasingly central to both new customer acquisition and expansion within existing accounts, reducing customer concentration risk.
• Multi-Module Adoption Drives Upsell: The QLU pricing model and agentic AI marketplace are designed to increase average revenue per customer and lower churn by embedding Qualys deeper into security workflows.
• Public Sector Pipeline Expands: FedRAMP High authorization positions Qualys for incremental wins in government and regulated industries, with the first major deployment already underway.
• Macro Caution Remains: Management is not forecasting improvement in the demand environment, maintaining conservative guidance despite recent outperformance.

Risks

Persistent macroeconomic uncertainty and budget scrutiny could constrain new business growth and delay large deals, especially in the public sector where procurement cycles are long. Competitive intensity remains high, particularly from legacy vendors and emerging AI-native security platforms. Execution risk exists around scaling the new pricing model and ensuring partner enablement keeps pace with product innovation. Management’s conservative stance on guidance reflects these uncertainties, though improved retention and upsell trends partially offset new logo risk.

Forward Outlook

For Q3 2025, Qualys guided to:

• Revenue of $164.5 to $167.5 million (7% to 9% YoY growth)
• EPS of $1.5 to $1.6

For full-year 2025, management raised guidance:

• Revenue of $656 to $662 million (8% to 9% growth)
• EPS of $6.2 to $6.5
• EBITDA margin in the low to mid 40s percent

Management highlighted several factors that will shape results:

• Continued investment in sales, marketing, and R&D, with operating expenses up 15% to 17% YoY
• Ongoing macro headwinds and budget scrutiny factored into guidance, with upside dependent on pipeline conversion and expansion within the installed base

Takeaways

Qualys is executing a deliberate shift to platform-centric, partner-led growth, with improved retention, cross-sell, and new market access through FedRAMP High. The combination of agentic AI, flexible pricing, and channel expansion is creating a more resilient and scalable growth model, though macro and competitive risks remain elevated.

• Channel and Platform Leverage: Outperformance is increasingly driven by partner-led sales and multi-module adoption, reducing reliance on any single product or customer cohort.
• Innovation as a Growth Catalyst: The agentic AI platform, ISPM, and QLU pricing are unlocking new use cases and deepening customer engagement, positioning Qualys ahead of legacy incumbents.
• Watch for Federal and Large Enterprise Wins: Pipeline conversion in public sector and continued upsell in the installed base will be key to sustaining momentum into 2026.

Conclusion

Qualys’ Q2 2025 results validate its strategic pivot to platform unification, channel-first growth, and AI-driven automation. While management remains cautious on macro trends, improved retention and new product traction lay the groundwork for durable expansion. The company’s differentiated approach to risk operations and flexible consumption models position it well for long-term share gains in a rapidly evolving cybersecurity landscape.

Industry Read-Through

Qualys’ results underscore a broader industry shift toward unified risk management and platform consolidation, as customers seek to reduce complexity, lower costs, and achieve measurable cyber risk reduction. The success of channel-led models and agentic AI integration highlights the growing importance of ecosystem leverage and workflow automation in cybersecurity. Competitors lacking flexible pricing and multi-vendor orchestration risk losing relevance, especially as public sector and regulated industries accelerate migration to cloud-native, FedRAMP-certified solutions. The focus on pre-breach prevention and identity-contextualized risk signals a new standard for enterprise security, with implications for both legacy and emerging vendors across the sector.

QLYS Technology Cybersecurity Platform Channel AI FedRAMP Pricing