QLYS · Qualys, Inc. · Stock research

Current Thesis

The July version of this read said the AI-vulnerability-surface reframe was multiple expansion on an 8–9% grower until the Q2 print proved otherwise. The print landed on 2026-08-04 and proved otherwise: revenue $182.2M, +11% year over year, above the $177.5–179.5M guide; non-GAAP EPS $1.98 against $1.78 consensus; adjusted EBITDA $83.8M at a 46% margin versus 45% a year earlier; FY2026 revenue guidance raised to $732–738M from $721–727M and non-GAAP EPS to $7.74–7.88 from $7.44–7.65. Net dollar expansion ticked to 105% from 104%. Shares jumped roughly 14% after hours and eight firms raised targets the following morning. That resolves the question the prior note left open — the reframe is now visible in bookings-adjacent metrics, not only in sell-side language.

What replaces it is a pricing question. The 2026-08-14 close of $186.05 sits 5.0% under the fresh 52-week high of $195.88, carries an RSI(14) of 83.1, and follows a +106.7% three-month move. Of the eight targets posted on 2026-08-05, six are at or below that close. The narrative leg an investor is buying here is a confirmed re-rate with the confirmation already paid for, into a window with no company-scheduled event until the Q3 report in early November.

Bullish and bearish views on Qualys, Inc.

The model's bull view on Qualys, Inc. (QLYS), in brief: Q2 2026 (reported 2026-08-04): revenue $182.2M, +11% YoY, clearing the top of the $177.5–179.5M guide the company set in May. The bear view: Price has out-run the sell-side it was re-rated by. Both cases follow in full.

Bull Case

• Q2 2026 (reported 2026-08-04): revenue $182.2M, +11% YoY, clearing the top of the $177.5–179.5M guide the company set in May. This is the first quarter where the demand reframe shows up as an actual acceleration against a guide, not as a target revision.
• Net dollar expansion rate 105% in Q2, up from 104% in Q1, attributed on the call to upsell into ETM and patch management. Channel revenue +22%; customers spending ≥$500K up 8% to 229. These are the three lines that would have to move if AI-expanded attack surface were converting into installed-base spend.
• FY2026 raised twice this year: revenue now $732–738M (9–10% growth) and non-GAAP EPS $7.74–7.88; Q3 guided to $185.5–187.5M revenue versus $182.585M consensus and $1.91–1.98 adjusted EPS versus $1.90. The company guided Q3 above the street rather than resetting after a beat.
• Margin structure held through the acceleration: adjusted EBITDA $83.8M at 46%, GAAP net income $52.4M, GAAP EPS $1.50. Growth reacceleration without margin give-back is what separates this from a discount-driven bookings quarter.
• Target migration is now a cohort, not a call: Scotiabank $220, Truist $185, Jefferies $185, RBC $180, Piper Sandler $175, TD Cowen $170, DA Davidson $165 — all dated 2026-08-05, on top of the June–July moves (JPM $87→$139 on 2026-06-30, Scotiabank $190 on 2026-07-06).
• Balance-sheet profile — no debt, 46% adjusted EBITDA margin, high FCF conversion, sticky ARR — keeps an unscheduled strategic or private-equity approach as a live upside gap.

Bear Case

• Price has out-run the sell-side it was re-rated by. The 2026-08-14 close of $186.05 is above the 2026-08-05 targets from DA Davidson ($165), TD Cowen ($170), Piper Sandler ($175), RBC ($180), and level with Truist and Jefferies ($185). Only Scotiabank's $220 sits materially higher. Morgan Stanley kept an Underweight and moved to just $130.
• The multiple is doing more work than the growth rate. FY2026 non-GAAP EPS is guided to $7.74–7.88 against that $186.05 close, on 9–10% revenue growth. A 105% net dollar expansion rate is an improvement over 104%, and it is still a 105% net dollar expansion rate.
• RSI(14) at 83.1 with a +106.7% three-month return describes a tape that has already absorbed the good news. A Benzinga overbought screen tagged the name on 2026-07-02 at prices far below here; that screen was early, which is the ordinary failure mode of overbought signals and not a reason to dismiss the extension.
• The calendar is empty. The 2026-08-11 Canaccord Genuity fireside has passed; the fiscal quarter does not close until 2026-09-30 and the print is roughly eleven weeks out. Momentum names that gap on a print and then face a catalyst vacuum have to hold the gap on flow alone.
• Competitive structure is unchanged by one good quarter: Tenable (Vulcan Cyber), CrowdStrike Falcon Exposure Management and Wiz-inside-Google still own the exposure-management platform conversation, and Qualys remains the standalone in a suite-consolidation market.

Setup & Price Structure

• Reference close 2026-08-14: $186.05. 52-week high $195.88, so price sits 5.0% under it. RSI(14) 83.1. Three-month return +106.7%.
• The old ceiling is now the floor of the story. Through late July the 52-week high read $155.47; the 2026-08-04 print gapped price through it and the range now extends to $195.88. The unfilled post-print gap is the structural feature of this chart, and $155.47 is the level that defines whether it was a re-rate or a spike.
• Prior structure below: the June 2026 base near $111, from which the whole leg started, and the $132–140 reclaim shelf that mattered in July. Both are now distant; a return to either would mean the August gap failed entirely.
• Crowding observables, stated as observables: RSI(14) 83.1; six of eight post-print targets at or below spot; a two-day analyst-note cluster (eight firms, 2026-08-05) that has since gone quiet; no earnings date inside the next eleven weeks; a 69% spread between the highest ($220 Scotiabank) and lowest ($130 Morgan Stanley) published targets, both dated the same day.
• The narrative is maturing. The narrative was accelerating through 2026-06-30 to 2026-07-21 as targets migrated on sentiment; it converted to numbers on 2026-08-04; the entire covering cohort re-priced on 2026-08-05 and has not moved since. Well known, still working, with the flow that drove the repricing largely spent. It is not saturated yet — the stock is 5.0% off its high, not rolling — but the marginal upgrade has fewer places to come from once spot clears most posted targets.

Catalyst Calendar (next 30 days)

• 2026-08-16 to 2026-09-15 — no company-scheduled event confirmed in this window. The 2026-08-11 Canaccord Genuity 46th Annual Growth Conference fireside chat (Boston, 10:00am ET) has already occurred.
• 2026-09-30 — fiscal Q3 2026 quarter end. Guidance in force: revenue $185.5–187.5M, non-GAAP EPS $1.91–1.98, GAAP EPS $1.43–1.50.
• ~2026-11-03 (est.) — Q3 2026 results. Unconfirmed; prior prints landed 2026-05-05 (Q1) and 2026-08-04 (Q2).

Elapsed catalysts

• Unscheduled — further target revisions (none since the 2026-08-05 cluster), peer prints from Tenable and Rapid7 that would corroborate or contradict the AI-demand bid, and any strategic/PE approach given the debt-free, high-FCF profile. (passed 21d ago)

What Would Change Our Mind

The structure to watch is the unfilled 2026-08-04 gap. If price works back under the pre-print ceiling of $155.47, the August move reads as a spike into a beat rather than a durable re-rate, and the $132–140 shelf and $111 June base come back into scope. Stated as a gradeable condition: a weekly close below $155 forfeits the post-print gap.

On fundamentals, the thesis rests on three lines that must keep moving in the same direction at the Q3 print: revenue at or above the $185.5M guide low end, net dollar expansion at 105% or better, and the ≥$500K customer count above 229. Any one of those reversing would show the Q2 acceleration was a channel-timing quarter — channel revenue grew 22% in Q2, which is the line most likely to be lumpy.

On positioning, the condition that would flip the label from maturing to saturated is price holding above $185 while no further target revisions arrive and the 2026-08-05 cluster remains the high-water mark — a stock priced above its own bull cohort with no new bid. Conversely, a Scotiabank-style $220 target being matched by a second firm would argue the re-rate still has sell-side room.

Correlation Notes

• Like-for-like read: Tenable (TENB) and Rapid7 (RPD). Their next prints are the cleanest independent check on whether AI-expanded attack surface is lifting vulnerability-management demand broadly or whether Qualys' 11% is company-specific execution on ETM and patch management.
• Platform complex: CrowdStrike, Palo Alto Networks and Wiz-inside-Google set the sector multiple and own the exposure-management narrative. Qualys re-rated as the laggard beneficiary of that bid; a de-rating in the leaders removes the umbrella.
• After a +106.7% three-month move, the name trades increasingly on its own gap rather than with the security tape. Divergence — QLYS holding while TENB/RPD fade, or the reverse — is itself the observable that says which of the two is driving.
• Rate sensitivity is second-order here: debt-free with a 46% adjusted EBITDA margin, so the duration argument runs through the multiple rather than the balance sheet.