Qualys (QLYS) Q3 2026 earnings review
Qualys billings rise 14%, while higher sales costs trim margins
Qualys, a provider of cloud cybersecurity software that finds and fixes technology flaws, grew customer billings faster than sales even as marketing costs trimmed its operating margin. Revenue rose 11% to $188 million, while calculated current billings climbed 14% against a tough comparison from last year. Chief executive Sumedh Thakar raised the full-year revenue and profit outlook, and the new fourth-quarter profit plan sits well above what the prior full-year outlook implied.
| Revenue | $188.0M +11% from a year ago |
|---|---|
| Calculated current billings | $211.9M +14% from a year ago |
| Profit per share, excluding one-offs | $2.12 +14% from a year ago |
| Full-year revenue outlook | Raised $2.9M middle of the range: 10.3% growth |
⚖️ Verdict: 🟢 Bullish
The story got better because customer billings cleared the company's own cautious second-half baseline of 7% to 8% growth. By our math, twelve-month billings growth reached nearly 11%, which supports double-digit sales growth into next year. One caution: sales and marketing spending rose 17%, trimming the operating margin excluding one-offs by almost a percentage point, while booking details for its newer risk platform were not in the release.
The question now is whether the newer Enterprise TruRisk Management platform brings in extra customer spending or mostly relabels existing scanning contracts. If it adds new spending, total revenue growth will move above the 10% mark; if it relabels, growth stays near the 9% to 10% fourth-quarter plan despite rising sales costs. The bookings mix on the call and in the quarterly filing will tell.
🐂 Bull Case
Billings Grew 14% Against a Tough Comparison
Qualys sells mostly annual cybersecurity subscriptions paid up front, so its calculated current billings — revenue plus the quarterly change in short-term deferred revenue — show customer demand before reported sales do. Three months ago management set a cautious baseline for second-half billings growth of 7% to 8%, because the third quarter faced a tougher comparison from a year ago.
Instead, third-quarter current billings rose 13.7% from a year ago to $211.9 million, after growing 15.9% in the second quarter. The company added $23.9 million to current deferred revenue during the quarter, compared with $16.5 million in the same period last year. By our math, billings over the last twelve months grew 10.9% to $761.6 million.
That twelve-month pace matters because management uses it as the best indicator of next year's sales growth, and it has now climbed from 8.5% in the first quarter to 10% in the second and nearly 11% in the third. Even if fourth-quarter billings slow, the twelve-month trend supports roughly 10% revenue growth heading into 2027.
What to watch: fourth-quarter calculated current billings against last year's $204.9 million. A reading above 8% growth would keep twelve-month billings in double digits entering 2027.
New Q4 Plan Erases the Implied Profit Slowdown
After the second quarter, Qualys's full-year outlook left a small remainder for the end of the year. By our math, that earlier plan pointed to fourth-quarter profit per share, excluding one-offs, of $1.90 to $1.97, or growth of only 2% to 5% from a year ago. That left open whether the cybersecurity group planned a heavy year-end spending push.
The company beat its third-quarter profit plan by $0.14 at the top of the range, reporting $2.12 per share, and raised its full-year outlook by $0.30 at the middle of the range. For the fourth quarter, Qualys now forecasts $2.05 to $2.12 per share, which means profit per share excluding one-offs will grow 11.5% at the middle of the range.
Beating what the earlier plan implied shows that the old full-year target was cautious rather than a warning about fourth-quarter costs. What to watch: the initial 2027 profit outlook next quarter, which will show whether management sets next year's margin baseline with the same caution.
Positives this quarter didn't test
Three standing drivers from earlier quarters are disclosed on the earnings call or in the quarterly filing rather than the press release, so they cannot be read yet from these materials.
- Partner sales share: chief executive Sumedh Thakar credited "our partner-first strategy" for platform demand, and partners supplied 54% of revenue in the second quarter; the third-quarter filing will show whether partner revenue kept growing above 20%.
- Customer retention: the net dollar expansion rate — how much existing customers spend compared with a year ago — reached 105% in the second quarter; the filing's key metrics section will show if it held.
- Federal government wins: Qualys earned high-level government cloud clearances earlier this year; the call will show whether federal agencies signed larger contracts during the September federal fiscal year-end.
🐻 Bear Case
Sales Spending Grew Faster Than Revenue and Trimmed Margins
Qualys has been hiring and spending more on sales and marketing to push its newer risk-management platform through partners. In the third quarter, sales and marketing expense excluding stock-based pay rose 16.6% from a year ago to $37.1 million, while revenue grew 10.7%.
- Sales and marketing excluding one-offs: 19.7% of revenue, up 1.0 percentage point from a year ago
- Cost of making and delivering the software excluding one-offs: 15.3% of revenue, up 0.6 percentage points
- Research and development excluding one-offs: 13.5% of revenue, down 0.5 percentage points
- Operating margin excluding one-offs: 46.3%, down 0.8 percentage points from 47.1% a year ago
Because sales costs and software delivery costs rose faster than savings in engineering, operating income excluding one-offs grew 8.9%, trailing the 10.7% revenue increase. What to watch: whether revenue growth rises above the 9% to 10% fourth-quarter plan in 2027, because if sales stay near 10% while marketing rises 17%, operating margins will keep edging down.
Scanless Detection Defends the Base but Concedes the Shift
"Increasing adoption of our AI-native Risk Operations Center, driven by our partner-first strategy, reflects accelerating demand for a vendor-neutral platform that actually fixes security issues rather than just reporting them," chief executive Sumedh Thakar said. Risk Operations Center (ROC) is Qualys's umbrella platform for finding, ranking and fixing security flaws, while Vulnerability Management, Detection and Response (VMDR), its older scanning tool, still brings in about half of bookings.
This quarter Qualys launched InstaScan inside Enterprise TruRisk Management, its newer risk-scoring software, "delivering scanless vulnerability detection within minutes of advisory disclosure". The company said the tool "eliminates the multi-day detection gap created by traditional scan cycles", added automated patching in its TruRisk Eliminate product to "rapidly remediate zero-day vulnerabilities and misconfigurations", and expanded TotalAI to "reduce shadow AI, flag abnormal model behavior, and demonstrate that controls are working across development and runtime environments".
Calling traditional scan cycles slow cuts against the heritage of Qualys's own core product, and it highlights why customers and rivals are moving away from scheduled scanning as AI tools find flaws faster. Even though Thakar cited accelerating demand, revenue growth ticked down from 11.0% in the second quarter to 10.7% in the third, and the fourth-quarter outlook points to 9% to 10%.
What to watch: the share of total bookings coming from Enterprise TruRisk Management on the earnings call. If that share does not rise fast enough to offset slower growth in traditional scanning, total revenue growth will stay stuck near 10%.
Risks this quarter didn't answer
Three standing concerns from prior quarters depend on figures that do not appear in the earnings release.
- Enterprise TruRisk Management share of bookings: stood at 12% of twelve-month bookings last quarter, with its share of new bookings unchanged at 14%; the call remarks will show whether customers are adding new spending or just swapping out old VMDR contracts.
- Direct sales growth and partner discounts: direct sales grew only 0.4% last quarter while partners get price discounts; the quarterly filing's management discussion will show if direct sales stayed stagnant.
- Currency impact on revenue: foreign sales and currency hedges moved reported revenue last quarter without a constant-currency growth rate; the filing's footnote on geographic sales will show how much a weaker dollar helped the 10.7% growth rate.
👓 Other Themes
Option Exercises Slowed the Share Count Drop
Qualys bought back $54.2 million of its own stock in the third quarter by our math, bringing nine-month repurchases to $185.6 million. Even so, the diluted share count rose from 35.0 million in the second quarter to 35.3 million in the third, and management raised its full-year share count estimate to 35.5 million, because employees exercised stock options that brought in $65.6 million of cash over the first nine months.
💲 Other KPIs
By our math, third-quarter free cash flow — operating cash flow minus equipment purchases — rose 11.7% from a year ago to $100.0 million, or 53.2% of revenue. Operating cash flow printed at $101.8 million, up 12.6% from a year ago and rebounding from $59.6 million in the second quarter on strong customer collections.
Total deferred revenue — cash billed to customers for subscriptions not yet recognised as sales — grew 10.0% from a year ago by our math, up from 7.5% growth in the second quarter. Short-term deferred revenue rose 10.9% to $412.0 million, while multi-year prepayments sat at $14.4 million.
Uncollected customer bills rose 15.9% from a year ago by our math, faster than the 10.7% revenue growth rate and roughly matching the 13.7% rise in current billings. Compared with December, receivables fell $22.1 million, which helped generate $256.7 million of operating cash flow over the first nine months.
🔮 Guidance
New. The plan calls for 9% to 10% growth from a year ago (9.5% at the middle of the range), down from 10.7% in the third quarter. Qualys has beaten the top of its quarterly revenue range eight quarters in a row; by our math, if its 1.4% average beat against the middle of the range holds, fourth-quarter revenue would land near $194.6 million (+11.0%).
Raised. The middle of the range moved up $2.9 million to $737.9 million, or 10.3% growth for the year. It is the third raise this year, following increases of $3.0 million in the first quarter and $11.0 million in the second.
New. Management forecasts profit per share excluding one-offs to grow 11.5% from a year ago at the middle of the range ($2.085), assuming a 20% tax rate and 35.5 million shares. That is slightly below the $2.12 reported in the third quarter, but well above the $1.90 to $1.97 that the previous full-year plan left for the fourth quarter.
Raised. The full-year target rose $0.295 at the middle of the range to $8.105, or 14.6% growth over 2025. It is the third raise of the year, passing through the third-quarter beat and a higher fourth-quarter outlook despite a slightly higher expected share count of 35.5 million.
New. The plan points to 9.2% growth from a year ago at the middle of the range ($1.605), assuming a 21% effective tax rate and 35.5 million diluted shares.
Raised. The middle of the range rose $0.285 to $6.115, or 12.4% growth over 2025, even with the full-year GAAP tax rate assumption moving up from 21% to 22%.
❓ Key Questions
What share of bookings came from Enterprise TruRisk Management?
The newer platform accounted for 12% of twelve-month bookings in the second quarter, while its share of new bookings stayed flat at 14%. Investors need this figure to see if the new product is adding growth or just replacing old scanning contracts.
Did net dollar expansion hold at 105%?
Customer expansion rose from 103% late last year to 105% in the second quarter. Because the press release does not include this metric, the quarterly filing must confirm whether existing customers kept increasing their spending at that pace.
How much did direct sales grow versus partner sales?
Sales through partners grew 22% last quarter while direct sales rose just 0.4%, and partners receive price discounts. Management has not disclosed how much of partner growth comes from moving existing direct accounts over to partners.
How much did currency movements help third-quarter revenue?
Qualys does not publish constant-currency revenue growth, even though international sales grew nearly twice as fast as US sales last quarter. Knowing the currency benefit is necessary to judge the true underlying sales pace.