Qualys (QLYS) Q1 2026 earnings review
Margins Expand, But Top-Line Momentum Cools
Qualys is a profitability powerhouse, but its growth engine is showing signs of fatigue. For the fifth consecutive quarter, the company delivered exactly 10% YoY revenue growth ($175.6M). However, forward-looking indicators point to a slowdown: calculated current billings grew just 8%, and Q2 revenue guidance suggests an 8.5% growth rate, officially breaking the double-digit streak. What Qualys lacks in top-line acceleration, it makes up for in pristine efficiency. Non-GAAP operating margin expanded to 46%, and full-year EPS guidance was meaningfully raised. The narrative rests heavily on transitioning enterprises to its AI-driven Risk Operations Center (ROC), but the numbers show this platform pivot has not yet re-accelerated the core business.
🐂 Bull Case
Qualys combines high gross margins (84% Non-GAAP) with disciplined expense management, driving operating margins to 46% and funding consistent EPS beats and share buybacks ($53.5M in Q1 alone).
The release of Agent Val and the Enterprise TruRisk Management (ETM) solution positions Qualys to capitalize on the shift from passive vulnerability detection to active, AI-driven risk remediation.
🐻 Bear Case
Despite management's optimism around the new AI-native capabilities, Q2 guidance implicitly confirms growth will drop to single digits (8-9%) for the first time in over a year.
Operating cash flow fell 13% YoY in Q1 despite higher net income, indicating potential working capital friction or shifting billing dynamics that require monitoring.
⚖️ Verdict: ⚪
Neutral. The company's exceptional profitability provides a high floor, but the decelerating top-line guidance and trailing billings growth limit the near-term upside. Execution on the ROC platform upsell is critical to reignite growth.
Key Themes
Agentic AI and the Risk Operations Center (ROC)
Qualys is aggressively pushing its platform pivot with the introduction of Agent Val, powered by TruConfirm. This capability uses AI to validate real-world exploitability, allowing security teams to stop chasing theoretical vulnerability scores. If successful, this bridges the gap between vulnerability discovery and actual automated remediation, fundamentally differentiating Qualys from legacy scanning tools.
Relentless Margin Expansion
Operating leverage remains stable and highly impressive. Non-GAAP operating margin expanded to 46% from 45% a year ago, while Adjusted EBITDA reached $83.3M (47% margin). Management has successfully utilized AI internally for R&D efficiencies (as noted in prior quarters), allowing them to expand platform capabilities without bloating operating expenses.
Scaling the Partner Ecosystem via mROC
Qualys introduced the mROC (managed Risk Operations Center) portal to arm its partners with a unified risk view across attack surfaces. Historical transcripts show channel revenue has been vastly outpacing direct sales (growing 17-19% YoY in prior quarters). The mROC portal is a direct tool to empower this high-growth segment and maintain partner loyalty.
Decelerating Leading Indicators Contradict Platform Optimism
Management cites the 'tangible impact' of the AI-native ROC and early engagement from QFlex as confidence boosters. Yet, the data contradicts a growth re-acceleration narrative: Calculated Current Billings grew only 8% (down from 11% two quarters ago), directly foreshadowing the weaker 8-9% Q2 revenue guidance. Customer upsell traction appears stuck in the mud.
Operating Cash Flow Reversal
Despite GAAP Net Income rising 7% YoY, Operating Cash Flow reversed, falling 13% to $95.3M from $109.6M in the prior year. This was primarily driven by negative working capital swings, notably an $11M negative swing in accrued/other liabilities and lower accounts receivable collections compared to the prior year. While cash conversion remains healthy overall (54% margin), the divergence from net income warrants attention.
Macroeconomic Budget Scrutiny Persists
The deceleration in Q2 guidance strongly suggests that the macro headwinds and intense deal scrutiny identified by management throughout 2025 have not abated. Enterprises continue to optimize existing security stacks rather than aggressively expanding into new modules unless immediate cost consolidation is proven.
Other KPIs
Decelerating. Growth clocked in at 8% YoY, trailing recognized revenue growth (10%). Since billings represent recognized revenue plus the change in deferred revenue, this signals that the pipeline of future recognizable revenue is growing slower than current performance, validating the softer Q2 guidance.
Accelerating significantly from $39.7 million in the prior year quarter. Qualys is using its fortress balance sheet ($471.3M in cash and short-term investments) to aggressively support the stock, capitalizing on the recent $200M buyback authorization expansion from the end of 2025.
Guidance
Decelerating. The midpoint of $178.5M implies 8.5% YoY growth, down from the steady 10% rate achieved over the last five quarters. Sequential growth implies a modest $2.9M addition.
Stable/Slightly Raised. Management bumped the full-year range up from the previous $717.0-$725.0M outlook. However, the new midpoint still represents 8-9% annual growth, indicating that the Q2 deceleration is expected to persist through the second half of the year.
Accelerating. Raised significantly from the previous $7.17-$7.45 range. This underscores that while top-line growth is finding a new, lower baseline, Qualys's ability to extract operating leverage and EPS growth via margin protection and buybacks remains fully intact.
Key Questions
Cash Flow Mechanics
Operating cash flow declined 13% despite net income growth. How much of this working capital headwind is structural (e.g., changes in billing durations or QFlex terms) versus simple timing of collections and tax payments?
Bridge to Re-acceleration
With Q2 and FY26 guidance implying 8-9% growth, what specific catalysts—be it Federal deployments, broader Agent Val adoption, or macro relief—are required to return calculated current billings and revenue back to double-digit growth?
QFlex Adoption Run-rate
You noted 'promising early engagement' from QFlex. Is this pricing model cannibalizing near-term billings in exchange for long-term module adoption, and when do you expect it to materially impact the net dollar expansion rate?