Qualys Q1 2025 Earnings Report

Qualys EPS Results

• Actual EPS: $1.67
• Consensus EPS: $1.46
• Beat/Miss: Beat by +$0.21
• One Year Ago EPS: $1.45

Qualys Revenue Results

• Actual Revenue: $159.90 million
• Expected Revenue: $157.05 million
• Beat/Miss: Beat by +$2.85 million
• YoY Revenue Growth: +9.70%

Qualys Announcement Details

• Quarter: Q1 2025
• Date: 5/6/2025
• Time: After Market Closes
• Conference Call Date: Tuesday, May 6, 2025
• Conference Call Time: 5:00PM ET

Qualys (NASDAQ:QLYS), together with its subsidiaries, provides cloud-based platform delivering information technology (IT), security, and compliance solutions in the United States and internationally. It offers Qualys Cloud Apps, which include Cybersecurity Asset Management and External Attack Surface Management; Vulnerability Management, Detection and Response; Web Application Scanning; Patch Management; Custom Assessment and Remediation; Multi-Vector Endpoint Detection and Response; Context Extended Detection and Response; Policy Compliance; File Integrity Monitoring; and Qualys TotalCloud, as well as Cloud Workload Protection, Cloud Detection and Response, Cloud Security Posture Management, Infrastructure as Code, and Container Security. The company's integrated suite of IT, security, and compliance solutions delivered on its Qualys' Enterprise TruRisk Platform enables customers to identify and manage IT assets; collect and analyze IT security data; discover and prioritize vulnerabilities; quantify cyber risk exposure; recommend and implement remediation actions; and verify the implementation of such actions. It also provides asset tagging and management, reporting and dashboards, questionnaires and collaboration, remediation and workflow, big data correlation and analytics engine, and alerts and notifications that enable clients to detect vulnerabilities, and measure and remediate cyber risk. The company offers its solutions to enterprises, government entities, and small and medium-sized businesses in various industries, including education, financial services, government, healthcare, insurance, manufacturing, media, retail, technology, and utilities through its sales teams, as well as through its network of channel partners, such as security consulting organizations, managed service providers, resellers, cloud providers, and consulting firms. Qualys, Inc. was incorporated in 1999 and is headquartered in Foster City, California.

Qualys Q1 2025 Earnings Call Transcript

Presentation

[Operator]

Ladies and gentlemen, thank you for standing by, and welcome to Qualys First Quarter twenty twenty five Investors Call. At this time, all participants are in a listen only mode. After the speaker presentation there will be a question and answer session. And to ask a question during this session you would need to press 11 on your telephone. You will then hear an automated message advising your hand is raised.

[Operator]

If your question has been answered, to withdraw your question, please press 11 again. Please be advised that today's conference is being recorded. I would like now to turn the conference over to Blair King, Investor Relations. Please go ahead, sir.

[Blair King, Vice President of Investor Relations & Corporate Development at Qualys]

Thank you, Michelle. Good afternoon, and welcome to Qualys' first quarter twenty twenty five earnings call. Joining me today to discuss our results are Sumit Thakkar, President and CEO and Joo Mee Kim, our CFO. Before we get started, I'd like to remind you that our remarks today will include forward looking statements that generally relate to future events or future financial operating performance. Actual results may differ materially from these statements.

[Blair King, Vice President of Investor Relations & Corporate Development at Qualys]

Factors that could cause results to differ materially are set forth in today's press release and our filings with the SEC, including our latest Form 10 Q and 10 ks. Any forward looking statements that we make on this call are based on assumptions as of today, and we undertake no obligation to update these statements as a result of new information or future events. During this call, we will present both GAAP and non GAAP financial measures. A reconciliation of GAAP to non GAAP measures is included in today's earnings press release. And as a reminder, the press release, prepared remarks and investor presentation are all available on the Investor Relations section of our website.

[Blair King, Vice President of Investor Relations & Corporate Development at Qualys]

So with that, I'll turn the call now over to Sumit.

[Sumedh Thakar, President and CEO at Qualys]

Thanks, Blair, and welcome all to our first quarter earnings call. We are entering a new era for cybersecurity risk management powered by real time data, automation, and AI. Against this backdrop, we executed well in this quarter, resulting in better than expected revenue growth, strong profitability, and solid cash flow generation. Fueled by customer insights, Qualysys' mission is to bring innovative new security tech solutions to the market. With over twenty five years of evolving our platform to meet the next generation of modern security challenges, we have established a strong track record of converting operational challenges into secure competitive advantages, while maximizing lifetime value, ensuring frictionless outcomes at scale, and driving immediate ROI on security spend.

[Sumedh Thakar, President and CEO at Qualys]

In doing so, we believe we have built a new security industry paradigm, which today leverages our powerful real time data processing capabilities across more than 18,000,000,000,000 data points on a natively integrated platform to help organizations streamline their cybersecurity risk management program with the Risk Operations Center, ROC. While a Security Operations Center, SOC, is used for detection of threat actors after a breach, the ROC is needed by organizations for proactive risk management to reduce the chance of breaches by deploying the cyber budgets where the highest risk of loss is. Unlike other CTEM solutions that only reveal exposures without providing effective remediation, Qualysys Cloud Native Enterprise Risk Management solution is purpose built to deliver a single comprehensive AI powered orchestration layer unifying security findings from multiple Qualys and non Qualys sources to implement an effective ROC. By unleashing the scale of the Qualys platform, we ingest data from multiple sources, including tenable CrowdStrike ways, normalize risk signals enriched with threat intelligence, analyze adversary behavior, and provide organizations with actionable enterprise wide insights to prioritize and remediate cyber risk through a common language of business context and financial impact. This holistic approach uniquely ensures organizations not only understand their cyber risk in quantifiable terms, but can take immediate action to reduce the risk that matters the most.

[Sumedh Thakar, President and CEO at Qualys]

With prospects of POCs more than doubling from last quarter, and over 25 active POCs already underway since launching of GA a short while ago, we continue to see many parallels between this new market opportunity and the early days of VMDR launch, including significant greenfield opportunity and a growing demand. Embracing this momentum in the market, we further evolved our ETM solution through an expanding ecosystem of remediation solutions. In doing so, we have advanced our Truist Eliminate agenda by enabling organizations to amplify third party remediation tools with security insights from Qualys to prioritize patching or activate other compensating controls available through the Qualys platform. With this latest innovation, organizations can soon leverage a unified Qualys workflow with end to end automation, CMDB, and ITSM integration to prioritize rapid remediation across all environments from their patching vendors of choice. This is a strong competitive differentiator for Qualys, further neutralizes IT and SecOps procurement friction, and significantly expands our market opportunity by going well beyond patch management.

[Sumedh Thakar, President and CEO at Qualys]

Continuing this rapid pace of innovation, we're expanding our Qualys Total AI and TruRisk capabilities to help organizations address the evolving threats associated with LLMs. With this latest release, Total AI brings full visibility across ML supply chain data applications and pipelines to detect malicious code policy violation and advance multi nodal exploits hidden within images, audio, and video files. By enhancing our AI security posture, AI SPM with native internal LLM scaling, expands jailbreak detection and seamless integration into MLOps pipeline, we're equipping security teams with the agility and insight needed to protect modern AI driven workloads from development all the way through runtime, while building what we believe is the most advanced AI security solution available in the market. In addition, with the launch of Policy Audit and Audit Fix, we are now providing organizations of all sizes with the ability to streamline audit operations by providing audit readiness reporting and automated evidence collection across four fifty plus technologies and over 1,000 out of the box audit process for frameworks like PCI and S, DORA, HIPAA, etcetera. This solution addresses a growing area of focus and cyber spend for CSO as they are under pressure to ensure their organizations don't fail audits, while at the same time reducing their spend in audit readiness with automation, in not only detecting the gaps, but automation and also fixing them.

[Sumedh Thakar, President and CEO at Qualys]

Moving to our business update, we have hosted several risk quantification workshops attended by many of the most forward looking CSOs around the world in recent quarters, And the message is clear. Organizations are increasingly anchoring pre breach cyber spend to quantifiable risk reduction in their business, which is easily articulated to boards and business partners. CSOs want a platform that speaks a unified language of risk, while letting their teams choose their own tools with various components of the stack, rather than trying to consolidate multiple vendors into a single platform. This requirement necessitates a centralized risk fabric that seamlessly unifies the underlying tools of choice to effectively measure, communicate, and fortify an organization's risk posture, while reducing complexity, operating costs, and time to reduction, time to remediation. As a result, our technologies are not only fueling new logo lands, but also helping to increase product platform adoption, especially in the areas of VMDR, cybersecurity asset management, patch management, cloud security, and increasingly delivered through Qualys' ETM solution.

[Sumedh Thakar, President and CEO at Qualys]

With thousands of customers consolidating on Qualys Enterprise Tools platform, let me share a couple of recent wins, which illustrate why these companies are turning to Qualys to help unify their security tools, quantify the immediate cyber risk in their environments, and achieve better security outcomes. First, an existing global 100 multinational media companies with a rapidly growing multi cloud and container environment determined that managing siloed tools added complexity to their operations, lack integration and misdetection, while hindering their ability to assess risk and centralized remediation. This customer chose Qualys to transform siloed risk factors spanning core repositories, endpoints, identity, cloud container, IT, IoT, and network assets into a cohesive real time risk management solution by consolidating Qualys and non Qualys data. This included purchasing eight Qualys modules and deploying ETM to begin operationalizing their ROC and consolidating ingested data from WILs, resulting in a 7 figure annual bookings deal, including a mid 6 figure total cloud CNAP upsell. We are now quickly migrating numerous data sources in the Qualys platform and delivering a vendor agnostic orchestration layer with full visibility of the attack surface, centralized risk assessment, quantification prioritization, and remediation, while unleashing the operational efficiencies of security stack consolidation.

[Sumedh Thakar, President and CEO at Qualys]

Looking ahead, this customer is now in the process of planning to power its ROC with ETM across 30 separate entities worldwide. Further advancing our total cloud CNAP momentum is another marquee 7 figure annual bookings win with a global 50 financial services company. This existing customer launched and initiated to strengthen its cloud and container security solution against advanced threats, close security gaps, and remediate risk with ITSM integration through a single dashboard. It also needed to meet increasingly stringent global regulatory requirements and extended its on prem visibility to multi cloud and container environments. Through its evaluation, this customer chose our Total Cloud CNAP solution and is now leveraging the Qualys Enterprise Trudis platform for complete visibility across its entire attack surface to quantify and prioritize risk reduction initiatives and increase operational resolution and compliance.

[Sumedh Thakar, President and CEO at Qualys]

Our growing leadership in the cloud market was further evidenced in Gigaon's report, ranking Qualys as a leading outperformer in cloud workload security. With customers beginning to perceive Qualys as a leading risk management platform that consolidates and orchestrates multiple security solutions and workloads, we are growing increasingly confident in our ability to drive long term growth and gain market share. This confidence was again bolstered in Q1 with customers spending $500,000 or more with us, grew 6% from a year ago to $2.00 3. Consolidating workflows isn't just happening with customers, it's also embraced and prioritized by our partners, underscored by an increasingly strong mix of new business and significant growth. As we continue to endorse a partner for sales motion partner, again in Q1.

[Sumedh Thakar, President and CEO at Qualys]

In addition, we have now certified six leading partners who are actively marketing the delivery of our fresh new managed risk operations, MROC services, and just beginning their efforts to capitalize on a centralized and automated approach to pre breach risk management on top of ETM. Further advancing our momentum towards a global rock ecosystem, we look forward to certifying few additional strategic partners in the months ahead, who have already demonstrated a firm commitment to spearheading this new initiative with Qualys as their Embark partner of choice. And finally, as the federal government seeks to show efficiency and replace outdated and costly on prem deployments from years past with modern cloud native risk management solutions, we are especially excited to host our second annual federal conference in Washington, D. C. Towards the end of this month.

[Sumedh Thakar, President and CEO at Qualys]

We have recently made good progress advancing our FedRAMP high certification status, and we continue to believe we are on track to achieve authorized milestone later this year, fueling a new leg of growth for the company.

[Sumedh Thakar, President and CEO at Qualys]

In summary, Qualys is increasingly well armed with fresh new capabilities to further strengthen our strategic position as the partner of choice for customers ready to centralize their response to cyber risks, solve modern security challenges, and reduce costs. Looking ahead, we believe we will continue to outpace our competitors, extend our leadership in the market, and build upon an already strong foundation to drive durable long term growth in the business. With that,

[Sumedh Thakar, President and CEO at Qualys]

I will turn the call over to Jume to further discuss our first quarter results and look forward to the second quarter and the year ahead.

[Joo Mi Kim, CFO at Qualys]

Thanks, Suneet, and good afternoon. Before I start, I'd like to note that except for revenues, all financial figures are non GAAP, and the growth rates are based on comparisons to the prior year period unless stated otherwise. Turning to first quarter results, revenues grew 10% to $159,900,000 The channel continued to increase its contribution, making up 49% of total revenues compared to 45% a year ago. As a result of our continued commitment to leverage our partner ecosystem to drive growth, we were able to grow revenues from channel partners by 19%, outpacing direct, which grew 2%. SYGIO's sixteen % growth outside The U.

[Joo Mi Kim, CFO at Qualys]

S. Was ahead of our domestic business, which grew 6%. U. S. And international revenue mix was 5743%, respectively.

[Joo Mi Kim, CFO at Qualys]

In Q1, we were pleased to see some improvements in our gross retention rate. However, growing macroeconomic uncertainty toward the end of the quarter presented an increasingly challenging upsell environment, with our net dollar expansion rate at 103, unchanged from last quarter. In terms of product contribution to bookings, patch management and cybersecurity asset management combined made up 15% of total bookings and 24% of new bookings on an LTM basis. Our cloud security solutions, Total Cloud CNAP, made up 5% of LTM bookings. We credit this momentum to customer demand for a more comprehensive and contextual understanding of their expanding attack surface, supported by seamless integrated risk management and remediation workflows across all environments within a unified platform.

[Joo Mi Kim, CFO at Qualys]

Turning to profitability. Adjusted EBITDA for the first quarter of twenty twenty five was $74,800,000 representing a 47% margin, in line with last year. Operating expenses in Q1 increased by 10% to $62,500,000 primarily driven by investments in sales and marketing, which grew 15%. Demonstrating our ability to innovate and invest in our long term growth initiatives while remaining capital efficient, EPS for the first quarter of twenty twenty five was $1.67 and our free cash flow was $107,600,000 representing a 57% margin compared to 57% in the prior year. In Q1, we continued to invest the cash we generated from operations back into Qualys, including $2,000,000 on capital expenditures and $39,600,000 to repurchase $292,000 of our outstanding shares.

[Joo Mi Kim, CFO at Qualys]

Since commencing our CR repurchase program in February 2018, we've repurchased 9,600,000.0 shares and returned nearly $1,100,000,000 in cash to shareholders. As of the end of the quarter, we had $303,800,000 remaining in our share repurchase program. With that, let us turn to guidance, starting with revenues. For the full year 2025, we expect revenues to be in the range of $648,000,000 to $657,000,000 which represents a growth rate of 7% to 8%. This compares to prior guidance of $645,000,000 to $657,000,000 For the second quarter of twenty twenty five, we expect revenues to be in the range of 159,700,000.0 to $162,700,000 representing a growth rate of 7% to 9%.

[Joo Mi Kim, CFO at Qualys]

While we believe our platform approach to cyber risk management provides some insulation of ongoing macro volatility, this guidance assumes increased scrutiny in a more challenging environment for new business growth in 2025. Shifting to profitability guidance. Given our strong Q1 performance, for the full year 2025, we expect an EBITDA margin in the low to mid-40s, implying a 15% to 17% increase in operating expenses and a free cash flow margin in the mid-30s. We expect full year EPS to be in the range of $6 to $6.3 up from prior range of $5.5 to 5.9 For the second quarter of twenty twenty five, we expect EPS to be in the range of $1.4 to $1.5 Our planned capital expenditures in 2025 are expected to be in the range of $8 to 11,000,000 and for the second quarter of twenty twenty five in the range of 1,500,000.0 to $3,000,000 We continue to believe organizations will increasingly adopt cloud native, full stack security and compliance coverage to meet the demands of today's threat landscape and reduce costs. As the impact of the macro economy is still unfolding, we are closely monitoring the business environment and adjusting our priorities accordingly.

[Joo Mi Kim, CFO at Qualys]

That said, considering the long term growth opportunities ahead of us and our industry leading margins implying further room for investment, we intend to continue to responsibly align our product and marketing investments to focus on high impact initiatives aimed at driving more pipeline, accelerating our partner program, and expanding our federal vertical. As a percentage of revenues, we expect to prioritize increased investment in sales and marketing and engineering with a more modest increase in G and A, consistent with our commitment of balancing long term growth and profitability. With that, Samed and I would be happy to answer any of your questions.

[Operator]

Thank you. And the first question will come from Jonathan Ho with William Blair. Your line is open.

[Jonathan Ho, Research Analyst at William Blair]

Hi, good afternoon and congrats on the strong quarter. I just wanted to maybe understand a little bit better what your thoughts are around the macro environment, perhaps what you're seeing from customer spending so far, and maybe what underpins your confidence to tighten the guidance range a little bit higher?

[Sumedh Thakar, President and CEO at Qualys]

Yeah, I would say that at a high level, we're seeing is similar to what we've seen the last couple of years where cybersecurity still continues to be an important aspect of risk management for the company, and there is continued focus. However, as we have seen, there is more scrutiny on the spend, ROI of the spend is important, and we're seeing longer cycles, because people are taking longer time to make the decision. So I think that is what we continue to see right now. Of course, given more recent changes, there is a little bit of uncertainty, I would say. And so a little bit of that is factored into how we're thinking about the rest of the year, though we haven't particularly seen anything specific yet.

[Sumedh Thakar, President and CEO at Qualys]

We're just being prudent about sort of what we see now, and a little bit of expectation around, you know, people scrutinizing things a little bit more, and continuing to inspect budgets, but not just in cyber, but overall budget spend across the board with everything.

[Jonathan Ho, Research Analyst at William Blair]

Got it. And then just in terms of your discussion of the ROC, can you talk a little bit about how that works from a customer journey perspective, what they maybe add to their existing solutions and what that looks like from a financial perspective? Thank you.

[Sumedh Thakar, President and CEO at Qualys]

Yeah, that's a great question. Think really where everybody's struggling right now is all their investments across multiple tools are generating tons and tons of risk signals, and we routinely see that if you take vulnerabilities as an example, less than 95% of those vulnerabilities are, you know, or I would say like less than 5% of the vulnerabilities that even have some form of potential immediate attack vector. And so customers, as they are trying to figure out how they don't end up with 10 different consoles from them, different solutions when they look at risk. What we're seeing is our ability to take the risk operation center idea of consolidating all assets from all tools, all findings, applying threat intelligence, providing contextual from a business perspective, adding dollar values to the business potential loss that they could have, and then providing remediation plans, as well as board reporting, is what is sort of the journey of a risk corporation center, and it starts with consolidation of assets. And for us, what we are seeing with ETM, we're able to walk into customers who today have multiple solutions, and not necessarily start off with a conversation of replacing something that they have.

[Sumedh Thakar, President and CEO at Qualys]

And so I took some of them vendor names that we are currently pulling data from, and so we're able to say, look, if you have this particular VM solution, if you have this particular integration solution, if you have this particular identity solution, you can keep that. We can ingest the data from these tools and provide you a higher level visibility of what your actual risk is that is aligned with your dollar value risk from your business entities that you have, and then provide you reporting that you can take to the board and also to IT teams in terms of prioritizing what is the most important thing that they need to fix. And what we're finding is that this approach is helping them partner with the IT team to not spend time on fixing hundreds and thousands of issues that actually are not exploitable or not attackable right now. And so this is actually creating potential cost savings for the company in terms of not wasting developer and time, as well as not wasting IT team's time on fixing things that are not immediately actionable, and then going back and focusing on the things that are immediately actionable.

[Sumedh Thakar, President and CEO at Qualys]

So from a customer journey perspective, they look at it as something that layers on top of what they have, so they don't need to work through a replacement plan. And they essentially pay an additional amount to Qualys for the cost saving that they end up getting in terms of consolidation, and not having to waste time on fixing things that are not important. And so they are able to walk in and make a case for additional budget for risk cooperation center, because they see the savings that are coming out from the outcome of the risk cooperation center.

[Jonathan Ho, Research Analyst at William Blair]

Got it. Thank you.

[Operator]

And the next question will come from Patrick Colville with Scotiabank. Your line is open.

[Patrick Colville, Lead Equity Research Analyst at Scotiabank]

Thank you guys for taking my question. I guess let me just ask one to Sumed and Jimmy. I mean, your prepared remarks, there

[Patrick Colville, Lead Equity Research Analyst at Scotiabank]

was

[Patrick Colville, Lead Equity Research Analyst at Scotiabank]

a comment that macro at the end of the quarter was a challenge. Did that I mean, were there any deals that pushed at the end of 1Q into 2Q or pulled? Or was that comment kind of in isolation and didn't have an impact on current billings?

[Joo Mi Kim, CFO at Qualys]

Yeah. There wasn't any material deals that was pushed or pulled in the current quarter. That was more the commentary around the fact that, let's say a customer that was set to renew in the quarter, we had anticipated a higher upsell rate potentially from that customer increasing their spend with us. We saw some pushback. And so that doesn't necessarily mean that it's going to be closed in Q2.

[Joo Mi Kim, CFO at Qualys]

It's in the quarter impact I was calling out.

[Patrick Colville, Lead Equity Research Analyst at Scotiabank]

Okay, crystal clear. And congrats on all these terrific announcements made by Qualys at RSA Conference. I wanna actually touch on the announcement made by a competitor, you know, best known for endpoint security. They GA ed a product expanding into network based VM. I mean, you mind just commenting on, like your thoughts on, I guess, you know, cybersecurity players moving into network based VM and, you know, how Qualys is defending against these guys?

[Patrick Colville, Lead Equity Research Analyst at Scotiabank]

Thank you.

[Sumedh Thakar, President and CEO at Qualys]

Yeah, great question. And I think we're actually pretty happy to see that competitors are acknowledging that their current solutions, which are agent only are not enough to give customers a full view of what their overall attack surface is from a vulnerability perspective. And so while we haven't really seen that solution with any of our current customer prospect engagements, we've heard about it. To me, I think, I had mentioned earlier, and even going back four or five years ago, Qualys really has been talking about the evolution of vulnerability management and less about finding more vulnerabilities that you're not able to fix, and more about focusing on the ones that actually matter to the risk, and then actually helping them remediate. And so our focus really has been about how do we help them prioritize and remediate the findings, and rather than just finding more findings, which are not being fixed anyway.

[Sumedh Thakar, President and CEO at Qualys]

And to that extent, are taking data of those findings from the competitor and providing customers a higher value capability around taking that information, which is just a big bob of findings that are hard to decipher and adding the right context with over twenty plus years of significant research that we have done in vulnerabilities and vulnerability exploitation, and using that to provide additional value on top of that. And so I think it's really leading to the customer having the choice that they can either use Qualys or if the other solution, you know, is something that satisfies their need for that particular environment, we will still be able to take that data and we're already seeing consuming data from competitors. So I think when the solution comes out, we will take a look at it and see how our customers feel about that. But having said that, we're not dependent on the customers leveraging Qualyscanner necessarily to find the vulnerabilities as we move forward with our focus on risk operation center and the ATM.

[Patrick Colville, Lead Equity Research Analyst at Scotiabank]

Yep, that's very clear. And keep up the good work. Thank you so much.

[Operator]

And the next question comes from Kingsley Crane with Canaccord. Your line is open.

[Kingsley Crane, Director, Senior Analyst at Canaccord Genuity Group]

Hi, thanks for taking the question. I appreciated your comments on total AI. Curious how you would characterize the competitive market in AISDM, and then how do you think security budgets are going to play out with respect to that market? Do you think that they need to lag as we wait for more upstream adoption, or are you already seeing some nice uptick? Thanks.

[Sumedh Thakar, President and CEO at Qualys]

Great question. Right now, everybody seems more in the exploratory phase rather than, you know, there's always there are some very, very early adopters, but I think overall, we feel like a lot of customers are just trying to understand the risk factors that are coming out from potentially AI, they're looking at what are the solutions out there. So I don't think this is more of a competitor thing as much as an educational phase that customers are going through as they're looking at various AI security solutions that are out there and trying to figure out where within the AI journey is the place that have the maximum risk from a business perspective that they need to mitigate. And so we have had some great conversations around Total AI, we already have a couple customers that are engaged with POC with us on Total AI, in terms of being able to focusing on LLMs that they're going to put out, and now with our new announcement that they will be able to run LLM scans within their dev environment, means that they can actually test these LLMs in the pre production before they go out, and the dynamic that is playing out right now is IT teams are ready to say, Hey, here's a few LLMs we are ready to go to production with, they're asking security team for a sign off before they go, and the security team doesn't necessarily have a good knowledge or idea of what they can do from the sign off perspective.

[Sumedh Thakar, President and CEO at Qualys]

And so, the Qualys Total AI solution, it's like a point and shoot scanner, you point it at the LLM, it gives you a green, yellow, or a red signal to say whether this LLM is good to go or not. So that's the dynamic in terms of people who are evaluating, looking at it, and trying to figure out. I think the second dynamic is, given that overall security budgets are not, you know, increased significantly when with the onset of AI, people are in the mode right now of trying to figure out what the potential loss that they could have from an AI security related incident perspective, and then using that this year to formulate their ask for budgets for next year. So while we will continue to see more interest and more adoption in terms of POCs this year, and maybe a few customers signing up for a few more AI related scans. I think this is a journey that is going to take a couple more years where people really have to go and make the case for why they need additional budget for AI security, and then the willingness of the business to give them additional versus asking them to adjust against existing budget that's been allocated to them.

[Sumedh Thakar, President and CEO at Qualys]

I think that remains to be seen.

[Kingsley Crane, Director, Senior Analyst at Canaccord Genuity Group]

Thanks, Ahmed. That's really helpful. And then for Jimmy, a quarter ago, we were looking at EPS guidance that was down year over year. Now we've meaningfully raised it this quarter. I think the midpoint's roughly flat from last year.

[Kingsley Crane, Director, Senior Analyst at Canaccord Genuity Group]

But can you speak to what went into the change over the past quarter? I think last quarter, you had called out investments in data centers and aligning some product marketing with to break into federal. Just kinda curious, any specific points that have changed. Thanks.

[Joo Mi Kim, CFO at Qualys]

Yeah, last quarter, the guidance was informed by our annual planning. And so what we like to do is we like to set aside sufficient funds to be able to execute on the priorities that we had set at the beginning of the year. And as we move through the quarter, you see that our EBITDA margin came in at 47% with our sales and marketing growing by 15%, which is a healthy growth in and of itself. But with that said, looking back at Q1 performance and achievements and initiatives that we have set for ourselves for the rest of the year, we felt that the growth right now we're expecting on the OpEx is more along the lines of 15% to 17%. What we've seen a great success or traction in is in our ability to work very closely with our partners, which may not really translate to a significant increase in sales and marketing spend this year.

[Joo Mi Kim, CFO at Qualys]

And so that kind of speaks to why the margin contraction is not as significant as what we had anticipated at the beginning of the year.

[Kingsley Crane, Director, Senior Analyst at Canaccord Genuity Group]

Okay, helpful. Thank you.

[Operator]

And the next question comes from Rudy Kessinger with D. A. Davidson. Your line is open.

[Rudy Kessinger, Managing Director - Senior Equity Research Analyst at D.A. Davidson]

Hey, thanks for taking my questions. I saw the LTM 500 ks plus ACV customer count actually dropped by four versus Q4. One of your competitors had called out a record quarter of 7 figure deals. The same time I heard you guys call out, I believe, improved gross retention. So, were there any large customer losses or some down sell that that push customers below that threshold or just any comment on

[Sumedh Thakar, President and CEO at Qualys]

Hey, Rudy, nothing out of the ordinary to call out for, our win rates have been stable and as you saw, we improved our gross retention and so that metric you talk about is an LTM metric and so we continue to see in some quarters, sometimes customers might have a down sell, but that has been offset by a larger upsell with another customer, or we might, you know, that sometimes can drop them below the 500 ks, but again, I think we're glad to see that there continues to be growth in that area

[Sumedh Thakar, President and CEO at Qualys]

and year over year. And

[Sumedh Thakar, President and CEO at Qualys]

from our perspective, we're glad to see that with our focused efforts, we're seeing some good incremental improvement in our retention.

[Rudy Kessinger, Managing Director - Senior Equity Research Analyst at D.A. Davidson]

Got it, okay. And then Jimmy for your apologies, I joined the call a bit late. I just wanna understand maybe some of the increased conservatism that guide the macro for the remainder of the year. I guess, you now expecting net retention rate to to maybe come down a point or two versus kinda staying flat at the one zero three? And and what are you expecting on a new book new logo bookings standpoint for the rest of the year, I guess, versus prior guidance and versus last year?

[Joo Mi Kim, CFO at Qualys]

No material change as indicated by their annual revenue guidance, Rudy. Right now, what we're seeing in the business today is the end of the close to the end of the quarter, we did see some pushbacks and some impact from the macro. And what that resulted in is even with lower than what we would have liked the accelerate to be, it was more than offset by the fact that our retention rate was a little bit better. And so all in all, did end the quarter at 103%. And so we're assuming 103% will pull throughout the rest of the year.

[Joo Mi Kim, CFO at Qualys]

We do expect to continue to see some headwinds in the new bookings and its ability to contribute to revenue growth. And hence, we're guiding to a revenue growth rate of 7% to 8% for the full year.

[Operator]

And the next question comes from Trevor Walsh with Citizens. Your line is open.

[Trevor Walsh, Director - Equity Research at JMP Securities LLC]

Great. Hi team. Thanks for taking the questions. Sven, maybe for you. Could you just walk us through how you're thinking about the mRock kind of roll out with partners and how you're gaining mind share with them when they've got a lot of different managed services that they are probably trying to bring to market?

[Trevor Walsh, Director - Equity Research at JMP Securities LLC]

Then kind of with that, not why just kind of the six to start? There's probably a lot of other players you go after out there to partner with. So is there kind of more to follow or how you're thinking about just onboarding of those? Thanks.

[Sumedh Thakar, President and CEO at Qualys]

That's a really good question. And we're pretty excited about this because as you know, the last three years or so, we have really been focused on a partner strategy and a partner first strategy, and you can see that in the numbers and the way the business is moving more towards partners. So part of that, we really felt like we wanted to do something that was meaningful to our partners and wasn't just about a few points here or there, in terms of resell. And when we talked to some of the partners, as you said, they are, have managed services today, a lot of their managed services are around MDR, which is becoming more and more commoditized or price sensitive because everybody's offering some sort of an MDR service. However, MDR services are post breach detection, right?

[Sumedh Thakar, President and CEO at Qualys]

Is there somebody in my environment that I can detect and be able to alert and take action by looking at data from all of their different tools, and that's a different architecture. We talk when we talk to our partners, they felt like they did not have really great services from a managed service perspective, other than sort of point solution type services for, you know, scanning service as a managed service or patching as a managed service. And so when we introduced the concept of a risk operation center, it was also pretty clear that implementing the risk operation center, we have a great platform that we have with ETM that consolidates all these findings. However, the customer does need help with risk quantification, putting dollar value terms in terms of how their business is evolving with the risk card, they need some help with connectors, need help with actively monitoring risk, because today the issue is they have millions and millions of findings, which out of those, once Qualys has prioritized, truly actually impact their environment by looking at their environment, so sort of a risk monitoring service, and then ultimately a risk remediation service. And so, are fairly new services that most MSSPs don't have when we talk to them, and so they were excited about the ability to launch new or different services in the market, rather than just launching another MDR, which is pretty saturated.

[Sumedh Thakar, President and CEO at Qualys]

So, but from that perspective, we wanted to work closely and prioritize with the partners that truly understand the vision and are investing together with us in terms of their resources, hiring the right people on their side for quantification type services, and working with us to provide a tightly bundled service. And so today we focused on those first six, there's a launch partners that are a few others we're talking to as well, and ability, the excitement for them is, you know, can they make a few more dollars of services on a dollar of Qualys ATM that they sell is the exciting part for them. So we are going to continue to work with selected strategic partners that are really working closely investing rather than just sort of making it available on the shelf and they're reselling. So that's really the focus. And our thought there is that Emerock partners will be more excited to bring more customers to Qualys, because that will allow them to create more dollars of services, versus maybe a competitor who was competing with them on services or offering professional services, and does not provide a lot of capability to add additional services on top of just reselling.

[Sumedh Thakar, President and CEO at Qualys]

So it's a very strategic move for us, and we're excited to see globally multiple partners actually signing up and excited about this.

[Trevor Walsh, Director - Equity Research at JMP Securities LLC]

Awesome, that's great. I appreciate all the color there. Jimmy, maybe just one quick follow-up for you, kind of along the same lines. I think last quarter you had mentioned some gross margin pressure as these partner programs are rolled out, but it looks like at least from just the results in this quarter that you were a little bit ahead of kind of where expectations generally were around gross margin. So is that just a function of maybe, these partner programs still kind of basically still launching until you're not seeing the kind of added, gross margin requirements there?

[Trevor Walsh, Director - Equity Research at JMP Securities LLC]

Or do you have kind of a new perspective on kind of where gross margin should track kind of heading into the rest of the year?

[Joo Mi Kim, CFO at Qualys]

Yeah, we had talked about the gross margin contraction primarily due to the data center operations investment that we plan to continue to make throughout the year. So that really hasn't changed from the pressure on the partner side. I think that we've ever actually seen it. We don't expect it to be material. If you take a look at our revenue, it continued to tick up with 49% of our revenue coming from the channel side.

[Joo Mi Kim, CFO at Qualys]

And so from that perspective, unless there's any meaningful change to the pricing or incentive program, which we don't foresee for this year, we kind of see no impact on gross margin due to our partner initiatives.

[Trevor Walsh, Director - Equity Research at JMP Securities LLC]

Awesome. Thanks, Appreciate the time.

[Operator]

The next question comes from Joshua Tilton with Wolfe Research. Your line is open.

[Joshua Tilton, Director at Wolfe Research LLC]

Hey guys. Thanks for taking my questions. I have two and I will also apologize if they've been addressed, just jumping around in

[Joshua Tilton, Director at Wolfe Research LLC]

a few calls

[Joshua Tilton, Director at Wolfe Research LLC]

tonight. My first question is on billings. I think it's kind of been asked a few times, but I'm just going be a little bit more direct. Was the billings growth that you saw in the quarter like in line below or above your expectations for the quarter? And then going forward, how should we think about billings growth relative to revenue growth and specifically 2Q given the interesting comp from last year?

[Joo Mi Kim, CFO at Qualys]

Yeah, current billings, because we don't manage to it, we don't really have the necessary expectations for the current quarter. What we did comment on is last quarter, we did expect current billings to be more or less in line with the annual revenue growth rate guidance of 6% to 8%. So 7% current billings for the quarter wasn't a surprise to us. And I would say that even though we don't actively manage 2A, if you were to look for a color for the annual current billings growth, it'll be more or less the same as our prior guidance of six to 8%.

[Joshua Tilton, Director at Wolfe Research LLC]

Super helpful. And maybe just one follow-up here. I think in response to a question about the bottom line beat, you talked about how your plans for the year talked about some potential investments that you guys go into the year, setting yourself cushion for in case you can execute. I guess, from your perspective, like what would it take to ignite growth on the direct side of the business to kind of trend towards or be more in line with what you're seeing on the partner

[Joo Mi Kim, CFO at Qualys]

side of the business, we are not expecting an acceleration on that side just because we are taking the partner first approach for this year, whether it's from a new business perspective as well as an existing customer perspective. So what this year we're really focused on is making sure that we're building the channel partner team in house as well as working closely with our top partners to come out with different programs and initiatives so that they can help us with lead generation as well as us kind of discussing with them for our existing Qualys customers who are currently direct with us, where it makes sense for them to go indirect where the partners could add more value. And so for us, it's it's about the partner kind of driving growth versus trying to moderate the deceleration on the direct side.

[Joshua Tilton, Director at Wolfe Research LLC]

Makes sense. Thank you, guys. I appreciate it.

[Operator]

And the next question comes from Sherenek Kothari with Baird. Your line is open.

[Shrenik Kothari, Senior Research Analyst at Robert W. Baird & Co]

Hey, congrats team. Thanks for squeezing me in. Again, I was running a bit late, so apologies. So, Wade, you disclosed the total cloud CNAP kind of now 5% of bookings and mid 6 figure CNAP deal in that sounds like we're analyzed. So can you can you help kind of break down the elements of that win?

[Shrenik Kothari, Senior Research Analyst at Robert W. Baird & Co]

Like, how are you differentiating and what is arguably a power space, right, with by the way, it's and and did the, I believe you said, the audit readiness message, integrated risk, all of that is serving as as a key reg. So just curious how how it is translating to to wins and how fast overall the the CNAP is growing, and is it mostly greenfield? And then I had a quick follow-up.

[Sumedh Thakar, President and CEO at Qualys]

Yeah, we're still early days with the cloud solution. I think we're happy with having increased that 5% LTM, you know, as a percentage of our bookings, again, that our solution is at the level, our investment in getting our Salesforce trained and our partners working with us is working, even though it's early days. As you said, the market is crowded, I think customers have different requirements. It's not that every customer has the exact same requirements for cloud. What we see is that there are times when customers prefer to take the program that they have built with Qualys all these years.

[Sumedh Thakar, President and CEO at Qualys]

And also from the auditor perspective, just expand that into the cloud. In some cases, they might want to go with some other provider for some part of the cloud and to continue with Qualys on the workload side. So today, our approach really is, you know, we have a pretty mature solution now that is offering all kinds of different capabilities, including CSPM, including identity, cloud identity management, we have a back path and autopsy combinations. So we're seeing those wins when we're going head to head, depending on what that particular customer wants. In some cases, we see the customers are adopting Qualys for one part of the environment, and maybe somebody else for CSPM.

[Sumedh Thakar, President and CEO at Qualys]

I think the exciting thing for us is that with the ETM risk operation center solution, we have customers where they might be using a different cloud provider for part of their cloud estate, and we're actually now able to bring the data from that cloud provider in Qualys to give the customer a unified view of all of their different capabilities, whether it's on laptops, whether it's on their on prem environments, whether it's on their cloud, they are able to see a unified view of the risk. So for us, whenever it makes sense for the customer to leverage our cloud native solution, we're working with them. In some cases, it's a partnership with other providers. And in some cases, they are using other providers, we're still able to, you know, look at potential revenue from them because we're pulling the findings and data, adding meaningful context to the vulnerability and misconfiguration side of it. And to your point on the audit readiness, this is what we see as a big area of focus and spend for CSOs, part of it is on risk management, but other part of the spend for budget for them is around audit readiness, ensuring that, you know, they don't fail audits, because that's fully within your control as an organization to make sure that you don't fail your audit by putting the right controls in place.

[Sumedh Thakar, President and CEO at Qualys]

And so the audits are costly, and they whether it's cloud, in the cloud, or whether it's on prem, and the amount of work that goes into manually collecting evidence, and once the auditor is on board, then they go and ask you to find some data. So we're seeing the combination of Qualys not just about finding buckets, but also helping them put the findings in the bigger context of risk, but also in the context of audit readiness, so that they can be completely prepared for audits, is helping drive that focus on saying, well, maybe we should just leverage the Qualys plug in for cloud security. But if it's not, and they have something else, we're more than happy to take the data, which we're already seeing in the current POC, where we are taking data from other cloud providers already and giving the customer a single view.

[Shrenik Kothari, Senior Research Analyst at Robert W. Baird & Co]

Got it. Thanks a lot, Souma. Very helpful. And and, Jume, just quick follow-up to some of the previous line of questioning and and you have definitely add on to the long standing margin discipline targeting of course low 40s EBITDA margins. Just as you're shifting your bookings overall towards higher value kind of module C and App Patch Management.

[Shrenik Kothari, Senior Research Analyst at Robert W. Baird & Co]

Curious, like, how are you deciding? And also, Sumit, feel free to chime in as kind of how to deploy the incremental OpEx along the lines of kind of new sales leadership, kind of investments in in Total Cloud, which is trying to accelerate that, just broader S and M and and product? Just just curious how you're thinking about it.

[Joo Mi Kim, CFO at Qualys]

The way we're thinking about it is at the beginning of the year, we do go through the number of initiatives, whether it's from a product development standpoint, the engineering effort, the investment that we have to make on the R and D side, as well as operations and data centers, in addition to the sales and marketing, the go to market, it's basically based on what we think that we'll be able to achieve in the current year, what the goals we've set up for ourselves, and then the risk weighted adjusted targets, if that makes sense. And then because of that, we have set aside significant flexibility for us to execute on a number of initiatives if we have the bandwidth to do it. Aside from that, we did take into consideration that if we were to onboard a new CRO, there will be some kind of reevaluating some of the initiatives. We want to make sure that we have enough funds available for us to make some bets that are appropriate for our business today.

[Shrenik Kothari, Senior Research Analyst at Robert W. Baird & Co]

Got it. Appreciate it. Thanks a lot.

[Operator]

The next question comes from Yoon Kim with Loop. Your line is now open.

[Yun Kim, Managing Director at Loop Capital Markets LLC]

Thank you. Hey, Sumit. On your channel strategy around MSP partners, how long does it take for these m s MSP partners to ramp? And then also, are these m MSP partners that you're initially focused on, are they targeting certain customer segments like, you know, primarily targeting SMB or mid markets?

[Sumedh Thakar, President and CEO at Qualys]

Yeah, these are new services, This is not like MDR, it's a well known service. So as they are ramping up, are also figuring out operationally on their side, what are the investments that they need and they're making those investments to make sure that they're able to work with the customers that needed this kind of a view. So there is excitement around that. I think the time it takes, we're already engaged with a couple of partners who are part of these POCs, who brought us these POCs, so we're seeing the excitement and we're seeing that engagement already. And I think the, what was this the last part of the question?

[Sumedh Thakar, President and CEO at Qualys]

I forgot, sorry.

[Yun Kim, Managing Director at Loop Capital Markets LLC]

Just, are these partners kind of focused on certain customer segments, like are they primarily targeting SMB, through the market?

[Sumedh Thakar, President and CEO at Qualys]

Think the, overall I feel like the risk corporation center solution would pretty much work for anybody who has, you know, more than three security solutions, which is pretty much everybody at this point. However, I think the number of findings and the amount of triage that they have to go through to figure out those findings, I think that is a lot more of high priority for the larger customers right now, so most of the POCs that we see engagement are large enterprises that have multiple tools, multiple solutions, and are really struggling to convince their IT teams to focus on fixing things, as well as they're struggling with showing ROI of large spend to their CFO and to their board. And so that's kind of where we are seeing, so target focus for these customers to the MSSP is the large customers that have a bunch of these large tools and a large number of assets.

[Yun Kim, Managing Director at Loop Capital Markets LLC]

Okay, great. Thanks for that. Hey, Jimmy, if you can remind us how renewals are lined up for the rest of the year. Do you expect typical seasonal pattern like we saw over the last couple of years? Or do you see certain renewals kind of shifting between first half and second half?

[Joo Mi Kim, CFO at Qualys]

Yeah. I would say assume the same seasonality as the prior year.

[Yun Kim, Managing Director at Loop Capital Markets LLC]

Okay, great. Thank you so much.

[Operator]

The next question comes from Rob Owens with Piper Sandler. Your line is open.

[Rob Owens, Managing Director & Senior Research Analyst at Piper Sandler Companies]

Yes, good afternoon. Thanks for taking my question. Just a quick one on geographic mix. And I guess more so from the standpoint, if I look over the last year, North America has been very soft for you guys, growing low to mid single digits, while internationally, you've actually put up some some pretty reasonable results. Can you just parse your success internationally and why why domestically it's been so difficult for you guys?

[Rob Owens, Managing Director & Senior Research Analyst at Piper Sandler Companies]

Thanks.

[Sumedh Thakar, President and CEO at Qualys]

Well, said the high level international tends to be more partner oriented business and as we are focusing more on working with our partners and channel partners and business with them, we're naturally seeing a bit more success where already it's a much more partner oriented things. I think we do see opportunity for continuing to improve our execution in North America with our partners. And so that's where part of the MLOC services and lining up with creating abilities for them to be able to provide more services around Qualys can be that sort of a catalyst that we are working with them to see if, as we bring them we bring our existing direct accounts in North America to them, how do we do a gift to get where they're able to bring us additional new business that we don't have today in return from, you know, moving some of these customers to them. So those are the motions that we're going through right now, and we're looking forward to executing on some of these, and improving how we can get this business in North America as well.

[Rob Owens, Managing Director & Senior Research Analyst at Piper Sandler Companies]

Thank you.

[Operator]

And our next question comes from Oscar Salvidra with Morgan Stanley. Your line is open.

[Oscar Saavedra, Equity Research Associate - Software at Morgan Stanley]

Hi, thank you for taking my question and congrats on a great quarter. Jimmy, regarding partners, can you give us an update on performance in terms of lead generation and pipeline generation? How has that been tracking against your internal expectations? And when we think about the guidance, to what extent is it assuming that continues to improve or is it assuming still similar to what you're seeing in the current quarter? Thank you.

[Joo Mi Kim, CFO at Qualys]

Yeah. It's we've been satisfied with the progress that we've been making on the partner side relative to the direct business. We've we've seen, like, pipeline increase, success in increasing the deal reg. What In our guidance, what we're kind of assuming is not a meaningful improvement from what we see today. It's kind of stayed the course given that we are expecting increase in budget scrutiny given the macro.

[Joo Mi Kim, CFO at Qualys]

So we've adjusted, we've taken that into consideration when setting guidance. With that said, we are very happy with the progress that we're making with partners. We kind of are hoping that once the macro improves, we will see meaningful improvements there.

[Oscar Saavedra, Equity Research Associate - Software at Morgan Stanley]

Very clear, thank you very much.

[Operator]

There are no further questions at this time. This does conclude the Q and A session and today's conference call. Thank you for participating and you may now disconnect.

[Joo Mi Kim, CFO at Qualys]

Goodbye.

Participants

Executives

• Blair King, Vice President of Investor Relations & Corporate Development
• Sumedh Thakar, President and CEO
• Joo Mi Kim, CFO

Analysts

• Jonathan Ho, Research Analyst at William Blair
• Patrick Colville, Lead Equity Research Analyst at Scotiabank
• Kingsley Crane, Director, Senior Analyst at Canaccord Genuity Group
• Rudy Kessinger, Managing Director - Senior Equity Research Analyst at D.A. Davidson
• Trevor Walsh, Director - Equity Research at JMP Securities LLC
• Joshua Tilton, Director at Wolfe Research LLC
• Shrenik Kothari, Senior Research Analyst at Robert W. Baird & Co
• Yun Kim, Managing Director at Loop Capital Markets LLC
• Rob Owens, Managing Director & Senior Research Analyst at Piper Sandler Companies
• Oscar Saavedra, Equity Research Associate - Software at Morgan Stanley