QLYS: AI Security Headlines Will Likely Temper But Not Disrupt Core Remediation

Qualys fair value estimate is updated to $85 from $113, reflecting analysts' lower price targets across the sector while still citing the company as relatively insulated by its focus on remediation and patching capabilities in the context of recent AI driven cybersecurity headlines.

Analyst Commentary

Street research around Qualys in recent weeks has centered on two themes: the impact of new AI coding security tools on cybersecurity valuations and how resilient Qualys may be given its emphasis on remediation and patching. Several firms have adjusted price targets while reiterating that AI assistants, such as Claude Code Security, are seen as complementary tools rather than direct replacements for dedicated security platforms.

One research note highlights that large language model providers are likely to roll out more security related products that compete for cyber budget, and that headlines around these launches could create ongoing pressure on cybersecurity names before the long term role of AI in security becomes clearer. Within virtual machine focused vendors, that same note identifies Qualys as relatively more insulated than some peers because of its remediation and patching focus. However, it still groups the company within a broader cohort facing sentiment headwinds tied to AI related news flow.

Another recent report argues that AI coding assistants can improve software quality and productivity but do not replace security platforms or reduce the underlying demand for security. In that context, Qualys appears in a list of established cybersecurity providers that the research views as exposed to short term market reactions around AI headlines, even as the structural need for security tools remains part of the thesis.

Price target revisions for Qualys from multiple firms, including JPMorgan and several other bearish analysts, sit against this backdrop of AI themed volatility and sector wide reassessment. These moves reflect a more cautious stance around how quickly Qualys can execute on growth opportunities while managing competitive noise from AI tools and broader cybersecurity spending debates.

Bearish Takeaways

Bearish analysts have cut Qualys price targets, including several US$10 and US$4 reductions and a US$55 cut, which signals increased skepticism around the risk and reward balance for the stock at prior valuation levels.
These lower targets point to concerns that recent AI related headlines, such as the release of Claude Code Security, could limit near term multiple expansion for Qualys even if its core remediation and patching strengths are acknowledged.
The cluster of downward revisions within a short window suggests some investors may worry about execution risk, including the pace at which Qualys can defend and grow its share against both traditional competitors and new AI enabled tools.
With multiple bearish analysts marking down expectations at the same time, there is a clear signal that markets could apply a tighter valuation framework to Qualys until there is more clarity on growth durability and the real world impact of AI security offerings on customer budgets.

What's in the News

Qualys launched Agent Val within Enterprise TruRisk Management to bring agent led exploit validation and autonomous risk remediation into its Risk Operations Center, using the TruConfirm AI orchestration layer to focus on verified exploitability and reduce remediation noise across more than 1,600 covered CVEs (Key Developments).
Agent Val is described as shifting vulnerability and exposure management from assumption driven prioritization to evidence based execution, with the tool feeding confirmed results directly into ETM to support prioritized remediation and board level risk reporting (Key Developments).
From October 1, 2025 to December 31, 2025, Qualys repurchased 328,162 shares, or 0.91%, for US$44.67m, completing a total of 10,712,964 shares repurchased, or 28.1%, for US$1,239.37m under the buyback first announced on February 12, 2018 (Key Developments).
On February 5, 2026, Qualys increased its equity buyback authorization by US$200m to a total of US$1.6b, extending the capacity of its existing repurchase program (Key Developments).
Qualys issued earnings guidance for Q1 2026 and full year 2026, with revenue ranges of US$172.5m to US$174.5m for the quarter and US$717.0m to US$725.0m for the year, and GAAP net income per diluted share ranges of US$1.29 to US$1.36 for Q1 and US$5.20 to US$5.48 for the full year, based on 36.0m and 35.4m weighted average diluted shares respectively (Key Developments).

Valuation Changes

Fair Value: cut from $113.00 to $85.00, a significant reset that lowers the implied valuation range investors might use as a reference point.
Discount Rate: adjusted slightly from 8.53% to 8.51%, indicating only a marginal change in the assumed risk profile.
Revenue Growth: tweaked from 6.81% to 7.00%, reflecting a small uplift in projected top line expansion assumptions.
Net Profit Margin: inched down from 24.88% to 24.83%, a very small reduction in expected profitability levels.
Future P/E: moved down from 23.50x to 17.61x, a sizeable compression in the multiple applied to expected earnings.

5 views

Key Takeaways

Embedded security features in major cloud platforms threaten to reduce demand for Qualys’ tools as customers consolidate spending with larger providers.
Shifts toward integrated security, regulatory hurdles, and aggressive competition could compress margins, slow growth, and erode Qualys’ market share.
Strong industry demand, innovative platform expansion, and effective partner strategies position Qualys for resilient recurring revenue, improved margins, and competitive advantage amid rising cybersecurity needs.

Catalysts

About Qualys

Provides cloud-based platform delivering information technology (IT), security, and compliance solutions in the United States and internationally.What are the underlying business or industry changes driving this perspective?

The ongoing rise of cloud infrastructure managed by hyperscale providers such as AWS and Azure is likely to result in significant security capabilities being embedded natively in cloud offerings, which could substantially erode demand for Qualys’ third-party security tools and negatively impact future revenue growth as customers consolidate spend within the hyperscaler ecosystem.
Increasing regulatory scrutiny around data privacy and cross-border data flows is expected to create additional compliance costs or impede Qualys’ ability to scale internationally, leading to margin compression and slower expansion of overall earnings power.
The rapid shift towards integrated, all-in-one security platforms by larger enterprises may favor more diversified or horizontally integrated cybersecurity companies, leaving Qualys, with its reliance on vulnerability management and slower entry into adjacent markets, at risk of declining customer retention and weaker top-line growth.
Intense competition and the accelerating pace of AI-driven security innovation among peers could expose Qualys’ slower innovation cycles, resulting in long-term erosion of market share and stagnation in revenue from its core product offerings.
Growing industry consolidation may lead to dominant players bundling security solutions at aggressive price points, thereby elevating customer acquisition costs for Qualys and ultimately exerting sustained downward pressure on both net margins and earnings growth over the long run.

Qualys Future Earnings and Revenue Growth

Assumptions

How have these above catalysts been quantified?

This narrative explores a more pessimistic perspective on Qualys compared to the consensus, based on a Fair Value that aligns with the bearish cohort of analysts.
The bearish analysts are assuming Qualys's revenue will grow by 7.0% annually over the next 3 years.
The bearish analysts assume that profit margins will shrink from 29.6% today to 24.8% in 3 years time.
The bearish analysts expect earnings to reach $203.5 million (and earnings per share of $5.58) by about April 2029, up from $198.3 million today. However, there is some disagreement amongst the analysts with the more bullish ones expecting earnings as high as $240.3 million.
In order for the above numbers to justify the price target of the more bearish analyst cohort, the company would need to trade at a PE ratio of 18.0x on those 2029 earnings, up from 15.1x today. This future PE is lower than the current PE for the US Software industry at 31.3x.
The bearish analysts expect the number of shares outstanding to decline by 1.79% per year for the next 3 years.
To value all of this in today's terms, we will use a discount rate of 8.51%, as per the Simply Wall St company report.

Risks

What could happen that would invalidate this narrative?

The acceleration of digital transformation and the proliferation of cloud adoption are greatly expanding organizations’ cybersecurity needs, fueling persistent demand for unified cloud-native solutions like Qualys, which could drive sustained revenue growth and help maintain strong earnings.
Intensifying regulation worldwide around cybersecurity and audit readiness is proving to be a strong secular tailwind, as organizations must invest in automated risk management, compliance, and evidence collection solutions—an area where Qualys is innovating and gaining customer traction, which could help stabilize and grow net margins.
Qualys’ expansion and rapid innovation of its unified cloud platform—including new products like the Enterprise TruRisk Management (ETM) and TotalAI—are driving greater customer stickiness, furthering upsell opportunities, and increasing average revenue per user, which in turn supports predictable recurring revenues and long-term profitability.
The company’s partner-first strategy is accelerating, with nearly half of revenue now coming through partners, international growth outpacing domestic, and partner-led bookings increasing, all of which could lower customer acquisition costs and expand revenue opportunities, thus improving earnings and operating leverage over time.
As cyber threats escalate and enterprise customers seek to consolidate fragmented security tooling onto integrated platforms, Qualys’ ability to ingest and orchestrate data across its own and third-party solutions sets it up to benefit from industry consolidation, allowing continued margin expansion and top-line growth even as competitors enter the space.

Valuation

How have all the factors above been brought together to estimate a fair value?

The assumed bearish price target for Qualys is $85.0, which represents up to two standard deviations below the consensus price target of $128.07. This valuation is based on what can be assumed as the expectations of Qualys's future earnings growth, profit margins and other risk factors from analysts on the more bearish end of the spectrum.
However, there is a degree of disagreement amongst analysts, with the most bullish reporting a price target of $170.0, and the most bearish reporting a price target of just $85.0.
In order for you to agree with the more bearish analyst cohort, you'd need to believe that by 2029, revenues will be $819.7 million, earnings will come to $203.5 million, and it would be trading on a PE ratio of 18.0x, assuming you use a discount rate of 8.5%.
Given the current share price of $84.04, the analyst price target of $85.0 is 1.1% higher. The relatively low difference between the current share price and the analyst consensus price target indicates that they believe on average, the company is fairly priced.
We always encourage you to reach your own conclusions though. So sense check these analyst numbers against your own assumptions and expectations based on your understanding of the business and what you believe is probable.

Have other thoughts on Qualys?

Create your own narrative on this stock, and estimate its Fair Value using our Valuator tool.

Create Narrative

How well do narratives help inform your perspective?

Disclaimer

AnalystLowTarget is a tool utilizing a Large Language Model (LLM) that ingests data on consensus price targets, forecasted revenue and earnings figures, as well as the transcripts of earnings calls to produce qualitative analysis. The narratives produced by AnalystLowTarget are general in nature and are based solely on analyst data and publicly-available material published by the respective companies. These scenarios are not indicative of the company's future performance and are exploratory in nature. Simply Wall St has no position in the company(s) mentioned. Simply Wall St may provide the securities issuer or related entities with website advertising services for a fee, on an arm's length basis. These relationships have no impact on the way we conduct our business, the content we host, or how our content is served to users. The price targets and estimates used are consensus data, and do not constitute a recommendation to buy or sell any stock, and they do not take account of your objectives, or your financial situation. Note that AnalystLowTarget's analysis may not factor in the latest price-sensitive company announcements or qualitative material.

Hyperscale Cloud Centralization Will Erode Third Party Security Demand