This article contains content that is written like an advertisement. Please help improve it by removing promotional content and inappropriate external links, and by adding encyclopedic content written from a neutral point of view. (August 2021) (Learn how and when to remove this template message)
Qualys, Inc.
IndustryCyberSecurity Company Network Security
IT Security
Information Security
Founded1999; 23 years ago (1999)
Area served
Key people
Sumedh Thakar, President and CEO[1]
RevenueIncrease US$411 million (2021)[2]
Increase US$88 million (2021)[2]
Decrease US$71 million (2021)[2]
Total assetsIncrease US$815 million (2021)[2]
Total equityIncrease US$437 million (2021)[2]
Number of employees
Increase 1,823[2]

Qualys, Inc. provides cloud security, compliance and related services and is based in Foster City, California.[3] Qualys provides vulnerability management solutions using a "software as a service" (SaaS) model. It has added cloud-based compliance and web application security offerings.

Qualys has over 10,300 customers in more than 130 countries, including a majority of the Forbes Global 100.[4] The company has strategic partnerships with major managed services providers and consulting organizations including BT, Dell SecureWorks, Fujitsu, IBM, NTT, Symantec, Verizon, and Wipro.[5] The company is also a founding member of the Cloud Security Alliance (CSA).[6][7]


Qualys was founded in 1999. The company launched QualysGuard in December 2000, making Qualys one of the first entrants in the vulnerability management market.[8] In March 2001, angel investor Philippe Courtot became the CEO of the company after a major investment in the company.[9][10] He also served as the chairman of the board. Philippe originally invested in Qualys in 1999 when the company was founded, then became CEO in March 2001. Philippe brought a vision to the company that was unique from the very start – to build a cloud delivery platform that would allow for the scanning of any network globally. He then set about creating it.

The QualysGuard Intranet Scanner was released in 2002 to automatically scan corporate LANs for vulnerabilities and search for an available patch.[11] The following year, Qualys released FreeMap, a web-based tool for scanning, mapping and identifying possible security holes within networks connected to the Internet.[12]

In 2005, Qualys extended its QualysGuard product line. In 2008, Qualys introduced QualysGuard Policy Compliance, which extended the platform's global scanning capabilities to collect IT compliance data across the organization and map this information into policies to document compliance for auditing purposes.[13] Qualys also released a service for web application scanning named QualysGuard Web Application Scanning (WAS). In 2010, at the RSA Conference USA, Qualys announced QualysGuard Malware Detection Service, a new service designed to scan and identify malware on web sites.[14] It also announced the Qualys SECURE Seal, which allows websites to show visitors that it has passed security scans.[15]

In July 2010, Qualys announced Qualys BrowserCheck, a service for checking web browsers and plug-ins for security vulnerabilities.[16] At RSA Conference 2011, Qualys launched a new open source web application firewall project, IronBee,[17] led by Ivan Ristic, the creator of ModSecurity and a director of engineering at Qualys.[18] At the RSA Conference in 2012, Qualys introduced updates to the QualysGuard Cloud Platform, which extended its capabilities to help customers improve the security of their IT systems and applications, further automate their compliance initiatives for IT-GRC, and provide online protection against cyber-attacks while reducing operational costs and increasing the efficiency of their security programs.[19]

Qualys went public on NASDAQ with the symbol QLYS on September 28, 2012, raising net proceeds of $87.5 million.[3][20] At the 2014 RSA Conference, Qualys announced general availability of its QualyGuard Web Application Firewall (WAF), which provides protection for websites running on Amazon EC2 and on-premises, as well as a new Continuous Monitoring solution and free Top 4 Security Controls service.[7][21] In 2015, the company released 2.0 of its WAF software which included virtual patching and customizable event responses.[22] That same year, Qualys also released an IT security and compliance solution called Cloud Agent Platform.[23][24] In August 2015, the company released a free asset management service, Qualys AssetView, that allowed organizations to keep inventory of computers and their software.[25][26]

In February 2016, Qualys released ThreatPROTECT, a vulnerability detection service for its cloud-based platform.[27] The company received full certification for its Configuration Management Databases (CMDBs) App for ServiceNow, allowing the app to be integrated into ServiceNow's system in March 2016.[28] In July 2016, it was announced that Qualys would integrate with Microsoft Azure Security Center.[29] In August 2017, Qualys acquired the network analysis assets from Nevis Networks for an undisclosed sum.[30][31] In December 2017, Qualys announced its acquisition of NetWatcher, a network security company.[32][33]

In April 2018, Qualys acquired the software assets of Singapore-based 1Mobility, a startup which develops security technologies for mobile phones.[34]

In June 2018, Qualys announced the addition of Asset Inventory to their Cloud Platform.[35]


Qualys won two Pwnie Awards in 2021, in the categories of “Best Privilege Escalation Bug” and “Most Under-Hyped Research”.[36][37][38]

Qualys honored by SC Media as the winner for Best Vulnerability Management Solution in its 2020 Trust Awards.[39]

Qualys received 2019 Gartner Peer Insights Customers' Choice Award for Vulnerability Assessment.[40]

In 2017 Frost & Sullivan recognized Qualys with 2017 Global Vulnerability Management Market Leadership Award.[41]

Throughout its history Qualys has received a number of other awards.[42][43][44][45][46][47][48][49][50][51]


  1. ^ Singh, Meghavi. "Qualys Board Names Sumedh Thakar as CEO". Yahoo Finance. Yahoo. Retrieved 30 April 2021.
  2. ^ a b c d e f "Qualys, Inc. 2021 Annual Report (Form 10-K)". U.S. Securities and Exchange Commission. 22 February 2022.
  3. ^ a b Meghan Kelly (28 September 2012). "Cloud security company Qualys up 18 percent on IPO after the markets close". VentureBeat. Retrieved 1 May 2014.
  4. ^ "Customer stories". Qualys, Inc. Retrieved 10 July 2018.
  5. ^ Find a Partner | Qualys, Inc
  6. ^ About : Cloud Security Alliance
  7. ^ a b "Qualys Introduces Cloud Continuous Monitoring". Diversity. 2014-02-25. Retrieved 18 May 2014.
  8. ^ "Cloud Security Vendor Qualys Ready for IPO". Sramana Mitra. 2012-06-12. Retrieved 2020-03-23.
  9. ^ "Philippe Courtot Unifies Security Services at Qualys". 2017-11-08. Retrieved 25 October 2018.
  10. ^ "The 8 Best Tips You'll Ever Get On How To Launch (And Grow) A Startup". 2012-02-17. Retrieved 25 October 2018.
  11. ^ Marin Courtney (30 September 2002). "Tool scours networks for threats". Network Week.
  12. ^ David M. Ewalt (26 May 2003). "Free Network Check". Information Week.
  13. ^ "Qualys Adds Security and Regulatory Policy Compliance to SaaS Offering". The Windows Observer. Archived from the original on 13 March 2013. Retrieved 18 May 2014.
  14. ^ Psst, Mister, Scan Your Site for Malware – For Free? | Maureen O'Gara
  15. ^ "Qualys to offer free domain scanning and security assurance seals". Archived from the original on 2016-03-03. Retrieved 2012-04-20.
  16. ^ "Free web browser and plug-in security service launched". Infosecurity Magazine. 2010-07-19. Retrieved 2020-03-23.
  17. ^ "IronBee Open Source WAF Project Launches". 15 February 2011. Retrieved 2020-03-23.
  18. ^ "Forensics and Incident Response". Retrieved 23 May 2016.
  19. ^ RSA 2012: Qualys Updates Cloud Platform, Launches Web Application Firewall Service | Security Blog Archived 2012-06-21 at the Wayback Machine
  20. ^ Ingrid Lunden (28 September 2012). "Cloud Security Firm Qualys' IPO Opens At $12/Share, Raising $71.8M". TechCrunch. Retrieved 1 May 2014.
  21. ^ "RSA news round-up". IT Security Guru. 2014-02-25. Retrieved 18 May 2014.
  22. ^ Jackson, Joab (23 April 2015). "Qualys Devises a Virtual Patch to Protect Against Vulnerabilities". Computerworld. Retrieved 18 December 2016.
  23. ^ Kovacs, Eduard (21 April 2015). "Qualys Web Application Firewall 2.0 Brings Virtual Patching, Event Response". Security Week. Retrieved 18 December 2016.
  24. ^ Barker, Ian (2015-04-21). "New Cloud Agent Brings Enterprises Greater Security and Asset Control". BetaNews. Retrieved 18 December 2016.
  25. ^ Jackson, Joab (6 August 2016). "Qualys Offers Free IT Asset Management Service for Enterprises". Computerworld. Retrieved 18 December 2016.
  26. ^ Vizard, Mike (5 August 2016). "Qualys Unfurls Free Asset Inventory Service in the Cloud". IT Business Edge. Retrieved 18 December 2016.
  27. ^ Barker, Ian (29 February 2016). "New Service Help sOrganizations Visualize and Prioritize Security Threats". BetaNews. Retrieved 18 December 2016.
  28. ^ VanDervoort, Oliver (7 March 2016). "Qualys App for ServiceNow CMDB Gets Certification". Enterprise Cloud. Retrieved 18 December 2016.
  29. ^ Mackie, Kurt (21 July 2016). "Microsoft Azure Security Center Goes Live". Redmond Magazine. Retrieved 18 December 2016.
  30. ^ "Qualys to Acquire Assets of Nevis Networks". Dark Reading. 1 August 2017.
  31. ^ "Brief-Qualys Announces Agreement to Acquire Assets of Nevis Networks". Reuters. 1 August 2017.
  32. ^ Charlie Osborne (December 1, 2017). "Qualys snaps up NetWatcher security assets". ZD Net. Retrieved December 9, 2017.
  33. ^ Michael Novinson (November 29, 2017). "Qualys To Buy Threat Detection Startup NetWatcher To Strengthen Ties With MSSPs". CRN. Retrieved December 9, 2017.
  34. ^ "Qualys acquires 1Mobility assets to bolster enterprise mobile device compliance". ZDNet. Retrieved 25 October 2018.
  35. ^ "Qualys announces Asset Inventory capabilities in Qualys Cloud Platform". 2018-06-14. Retrieved 25 October 2018.
  36. ^ "Pwnie Award Winners 2021 – Pwnies". Retrieved 2022-04-29.
  37. ^ "Heap-based buffer overflow in Sudo! – Pwnies". Retrieved 2022-04-29.
  38. ^ "21 Nails – Pwnies". Retrieved 2022-04-29.
  39. ^ Barth, Bradley (February 27, 2020). "The winners of the 2020 SC Awards Honored in the U.S." Archived from the original on 29 February 2020.
  40. ^ "Vulnerability Management Tools Reviews 2021 | Gartner Peer Insights".
  41. ^ Inc., Qualys. "Frost & Sullivan Recognizes Qualys with 2017 Global Vulnerability Management Market Leadership Award". Retrieved 2018-02-15.
  42. ^ "Awards". Retrieved 18 May 2014.
  43. ^ "The Sponsors" (PDF). SC Magazine. Archived from the original (PDF) on 22 September 2014. Retrieved 18 May 2014.
  44. ^ "Results 2014". SC Magazine Awards 2014 Europe. Archived from the original on 21 May 2014. Retrieved 18 May 2014.
  45. ^ The 2010 Inc. 5000 List – JurInnov through Busey Group |
  46. ^ Qualys Ranks 26th in Silicon Valley/San Jose Business Journal's Largest Private … | Qualys, Inc
  47. ^ Silicon Valley Business Journal – 2012-08-03 digital edition
  48. ^ "Qualys Earns Highest Rating Possible of "Strong Positive" for Fifth Time in Gartner's MarketScope for Vulnerability Assessment". Marketwired. Retrieved 18 May 2014.
  49. ^ "2014 Information Security Readers' Choice Winners". TechTarget. Retrieved 29 March 2015.
  50. ^ "SANS Best of Awards". SANS Institute. Retrieved 27 September 2016.
  51. ^ "Cyber Security Leaders 2017 – Cyber Defense Magazine". 23 May 2017. Retrieved 2018-02-15.