Qualys Q1 2026: AI-Driven Risk Management Fuels Growth, Lifts Revenue Forecast

Executive snapshot

The security-automation vendor posted a revenue of $175.6 million for the quarter, up 10% year over year. GAAP net income came in at $50.6 million, translating to a GAAP EPS of $1.42 on a diluted basis. Non-GAAP measures were even more robust: net income of $69.6 million and non-GAAP EPS of $1.95.

On the margin front, GAAP gross profit reached $145.6 million with an 83% gross margin, while non-GAAP gross profit was $148.3 million for an 84% gross margin. Operating income was $60.9 million on a GAAP basis (35% of revenues) and $80.9 million on a non-GAAP basis (46% of revenues). Adjusted EBITDA stood at $83.3 million, or 47% of revenues.

Perhaps most notable for investors: management raised the full-year revenue forecast to a range of $721.0 million to $727.0 million, signaling confidence in continued demand for Qualys’ cloud-based IT, security, and compliance offerings. Operating cash flow of $95.3 million represented 54% of quarterly revenues, down from $109.6 million and 69% of revenues in the prior-year quarter, a reminder that cash flow dynamics are not perfectly parallel to reported earnings in a growth-heavy software model.

First Quarter 2026 Business Highlights

Qualys is moving deeper into AI-powered risk management. The company introduced Agent Val, powered by TruConfirm, described as an agentic AI-led workflow within its Enterprise TruRisk Management solution. Agent Val is pitched as a tool to identify high-risk exposures, validate real exploitability, and drive prioritized remediation, aiming to shift teams from chasing vulnerability counts to reducing verified risk.

The press release frames this as part of a broader strategy to unify cyber risk workflows under a single, AI-native risk fabric. Sumedh Thakar, Qualys’ president and CEO, emphasized ongoing innovation, expanding partnerships, and the early engagement of QFlex within the ecosystem as evidence of durable demand for the platform’s risk-management capabilities.

Detailed financials

The quarterly numbers reinforce a steady growth trajectory with expanding profitability on a non-GAAP basis. Highlights include:

• Revenues: $175.6 million (+10% YoY; EPS metrics cited above).
• GAAP net income: $50.6 million; GAAP diluted EPS: $1.42.
• Non-GAAP net income: $69.6 million; non-GAAP diluted EPS: $1.95.
• GAAP gross profit: $145.6 million; GAAP gross margin: 83%.
• Non-GAAP gross profit: $148.3 million; non-GAAP gross margin: 84%.
• GAAP operating income: $60.9 million (35% of revenues); Non-GAAP operating income: $80.9 million (46% of revenues).
• Adjusted EBITDA: $83.3 million (47% of revenues).
• Operating cash flow: $95.3 million; cash flow as a percentage of revenue: 54% (vs. 69% in Q1 2025).

Guidance for the year was updated to a revenue forecast of $721.0–$727.0 million for 2026, underpinning expectations of continued demand strength and platform expansion. The commentary suggests the company aims to convert acceptance of new features into durable revenue growth rather than one-off gains.

Takeaways for the sector and next steps

Qualys’ narrative sits at the intersection of AI augmentation and enterprise risk management. By embedding agentic AI within a closed-loop risk architecture, the company signals a path to higher wallet share from existing customers and the potential to broaden usage across the enterprise stack. For peers in the cybersecurity and cloud-risk space, the message is clear: align product roadmaps with real-time risk insights and remediation workflows to monetize risk reduction rather than risk counting.

From an investor perspective, the key watchpoints are the execution of Agent Val in customer deployments, the ability to sustain higher gross margins amid a growing feature set, and the trajectory of operating cash flow as the business scales. The raise in the 2026 revenue forecast provides a roadmap, but the sustainability of that forecast will depend on customer adoption, pricing discipline, and the competitive dynamics of an AI-enabled risk-management market.

In the EPS and revenue-forecast vocabulary, the story isn’t about a single earnings surprise; it’s about a steady cadence of profitability that compounds as the platform matures and expands. If Qualys can maintain sticky ARR-equivalent retention and push into complementary modules, the QLYS narrative could translate into a more durable EPS trajectory even as the sector absorbs new AI-enabled capabilities.