Qualys (QLYS) Q3 2025: Channel Revenue Jumps 17% as ETM Platform Drives Partner Upsell
Qualys’ Q3 2025 results highlight a decisive pivot toward platform-based risk management, with channel-led revenue outpacing direct sales and partner momentum accelerating. The company’s agentic AI-powered ETM solution is emerging as a new pillar, driving both customer consolidation and upsell opportunities, while management signals a strategic focus on cross-selling and operational leverage for the coming year.
Summary
- Channel-Led Growth Outpaces Direct Sales: Partner-driven revenue now comprises half of total sales, signaling a structural shift.
- AI-Driven ETM Platform Gains Traction: Early customer adoption validates Qualys’ move from legacy tools to risk-centric automation.
- Strategic Focus Shifts to Upsell and Platform Penetration: Management prioritizes ETM cross-sell and partner ecosystem expansion for 2026.
Business Overview
Qualys provides cloud-based cybersecurity solutions, specializing in vulnerability management, risk quantification, and automated remediation. The company monetizes through software subscriptions across modules such as VMDR, ETM, patch management, and TotalCloud. Revenue is derived from direct enterprise sales and a growing channel partner ecosystem, with major segments including vulnerability management, cybersecurity asset management, patch management, and emerging risk operations offerings.
Performance Analysis
Qualys delivered double-digit revenue growth in Q3 2025, with total revenues rising 10% year over year. Notably, channel partner revenue surged 17%, now representing 50% of total sales, compared to 47% last year, as the company’s partner-first sales strategy gained traction. Direct sales growth lagged at 5%, underscoring a deliberate pivot toward partner-led expansion.
International revenue growth of 15% outpaced US growth of 7%, shifting the geographic mix to 56% US and 44% international. Operating leverage improved, with adjusted EBITDA margin reaching 49%, up from 45% a year ago, and free cash flow margin climbing to 53%. However, net dollar expansion rate remained at 104%, indicating upsell challenges despite strong customer retention, particularly as upsells into existing accounts proved more difficult in a scrutinized IT budget environment.
- Channel Momentum: Partner-led deal registration and certified MROC partners increased, signaling broader ecosystem engagement.
- Product Mix Shift: Patch management and cybersecurity asset management comprised 17% of total bookings and 28% of new bookings on a last twelve months basis.
- Cloud Security Contribution: TotalCloud CNAP reached 5% of LTM bookings, highlighting early traction in cloud-native security.
Capital allocation remained disciplined, with continued share repurchases and capex focused on innovation, while operational investments targeted sales, marketing, and R&D efficiency gains, particularly through AI-driven productivity improvements.
Executive Commentary
"With third actors continuing to reduce time to explore at a fast pace, I believe the future of cybersecurity is moving from attack surface management to risk surface management, using agentic AI-powered proactive risk management with business quantification and automated remediation."
Sumedh Thakkar, President & CEO
"Adjusted EBITDA for the third quarter of 2025 was $82.6 million, representing a 49% margin compared to a 45% margin a year ago. This demonstrates our ability to maintain high operating leverage, remain capital efficient, while continuing to innovate and invest to support our long-term growth initiatives."
Jimmy Kim, Chief Financial Officer
Strategic Positioning
1. ETM Platform as Growth Engine
Enterprise True Risk Management (ETM), Qualys’ AI-powered risk operations platform, is positioned as the primary pillar for growth. ETM unifies asset inventory, risk quantification, and automated remediation, integrating agentic AI and native patching. Management expects ETM to drive up to 100% uplift versus legacy VMDR, with future reporting focused on ETM penetration rather than legacy module bookings.
2. Channel and Partner-Led Scale
Channel partners are now central to revenue growth, with certified MROC (Managed Risk Operations Center) partners actively launching services that leverage ETM. This approach broadens Qualys’ reach and accelerates customer acquisition, particularly in new geographies and verticals, while supporting margin stability through leveraged implementation and support services.
3. AI-Driven Operational Efficiency
AI is embedded in both product and internal operations, enabling rapid R&D cycles and improved engineering productivity. The company reports 20-25% efficiency gains among top engineers, reducing the need for traditional QA headcount and enabling faster innovation without significant incremental R&D expense.
4. Federal and Regulated Sector Expansion
FedRAMP High certification and wins in federal and state government validate Qualys’ ability to serve highly regulated customers. Early traction is evident, but management acknowledges long sales cycles and a “wait and watch” approach among some agencies due to budget scrutiny, positioning government as a long-term growth lever.
5. Flexible Pricing and Upsell Motion
QFlex, a new flexible platform pricing model, is accelerating multi-module adoption and driving larger annual bookings, particularly among Global 10 customers. This model is expected to facilitate broader platform penetration and simplify cross-sell motions across the customer base.
Key Considerations
Qualys’ Q3 signals a strategic inflection point, as the company pivots from legacy vulnerability management toward holistic, platform-based risk operations, leveraging AI and channel scale for durable growth.
Key Considerations:
- Partner Ecosystem Acceleration: Channel partners now drive half of revenue, expanding Qualys’ market reach and supporting margin leverage.
- AI-Infused Product Differentiation: Agentic AI in ETM and TrueRisk Eliminate positions Qualys ahead of legacy competitors focused solely on detection.
- Upsell and Cross-Sell Execution: Net dollar retention remains flat, highlighting the need for improved ETM and Eliminate module penetration among existing customers.
- Federal Pipeline as Long-Term Upside: Early government wins validate strategy, but sales cycles remain lengthy and exposure remains modest.
- Cloud Security and Flexible Pricing: TotalCloud and QFlex provide incremental growth vectors as customers consolidate security stacks and seek value-based pricing.
Risks
Budget scrutiny and macro volatility continue to weigh on new business growth, particularly for upsells. Competitive encroachment from platform vendors such as CrowdStrike and Tenable remains a persistent threat, especially as customers demand integrated risk quantification and remediation. Federal sector growth is promising but remains nascent, with execution risk tied to long sales cycles and shifting regulatory priorities.
Forward Outlook
For Q4 2025, Qualys guided to:
- Revenue of $172 to $174 million (8-9% YoY growth)
- EPS of $1.73 to $1.80
For full-year 2025, management raised guidance:
- Revenue of $665.8 to $667.8 million (10% YoY growth)
- EPS of $6.93 to $7.00
Management noted continued budget scrutiny and challenging new business environment, but expects ETM and channel momentum to drive durable growth, with margin discipline and capital efficiency remaining priorities.
- Partner ecosystem and ETM penetration to be key growth drivers
- Federal and cloud security segments expected to contribute incremental upside over the medium term
Takeaways
Qualys is executing a deliberate platform transition, leveraging channel scale, AI-driven innovation, and flexible pricing to reposition for sustainable growth.
- Channel-Led Expansion: Partner revenue growth outpaces direct sales, structurally shifting go-to-market and supporting margin leverage.
- Platform Penetration Remains Critical: Flat net dollar retention underscores the need for improved upsell execution, especially as ETM becomes the central growth pillar.
- AI and Automation Differentiate: Agentic AI and native remediation capabilities provide a competitive edge, but continued innovation and customer education are required for broader adoption.
Conclusion
Qualys’ Q3 2025 results mark a pivotal shift toward platform-based risk management, with channel momentum, AI-powered automation, and flexible pricing driving the next phase of growth. Sustained upsell execution and partner ecosystem expansion will be critical to realizing the full potential of the ETM platform and maintaining competitive differentiation.
Industry Read-Through
The cybersecurity industry is entering a new phase, as customers demand proactive, business-aligned risk management rather than legacy detection-centric approaches. Qualys’ pivot to platform-based, AI-driven operations reflects a broader trend toward consolidation and automation, with channel partners playing an increasingly central role. Competitors focused solely on detection or fragmented toolsets risk losing relevance as enterprises prioritize unified, outcome-driven solutions. Federal and regulated sectors are emerging as long-term battlegrounds, but execution risk remains high given budget cycles and compliance hurdles. Cloud-native security and flexible consumption models will be key differentiators for vendors seeking durable growth.