10-Q: Qualys Reports Strong Q3 2025 Growth, Boosted by Cloud Demand

Qualys, Inc. announced robust financial results for Q3 2025, with significant revenue and profit increases driven by strong demand for its cloud-based IT, security, and compliance solutions.

Summary

• Revenues for the three months ended September 30, 2025, increased by 10% to $169.9 million, up from $153.9 million in the same period of 2024.
• Net income for the three months ended September 30, 2025, rose 9% to $50.3 million, compared to $46.2 million in Q3 2024.
• Diluted earnings per share (EPS) for Q3 2025 increased by 12.1% to $1.39, up from $1.24 in Q3 2024.
• For the nine months ended September 30, 2025, revenues grew 10% to $493.8 million, and net income increased 11.9% to $145.2 million.
• Adjusted EBITDA for Q3 2025 was $82.6 million, representing 49% of revenues, an increase from $69.7 million (45% of revenues) in Q3 2024.
• Net cash provided by operating activities for the nine months ended September 30, 2025, was $233.7 million, a 19% increase from $196.4 million in the prior year.
• The net dollar expansion rate improved to 104% as of September 30, 2025, up from 103% a year prior.
• The company repurchased 1.0 million shares of common stock for approximately $138.2 million during the nine months ended September 30, 2025, with $205.2 million remaining under the share repurchase program.
• The income tax provision significantly increased due to the enactment of the One Big Beautiful Bill Act (OBBBA) and a decrease in tax benefits from discrete adjustments.

Sentiment

Score: 8

Explanation: The company demonstrated strong financial performance with significant revenue and profit growth, improved operational efficiency, and robust cash flow. The increase in tax provision is a notable negative, but it's primarily due to a specific tax law change (OBBBA) rather than core operational issues. The continued share repurchase program signals confidence and commitment to shareholder returns. The risks outlined are comprehensive but typical for a growing technology company in the cybersecurity space.

Positives

• Strong revenue growth of 10% for both the three and nine months ended September 30, 2025, driven by increased demand for subscription services from both existing and new customers.
• Net income increased by 9% for the quarter and 11.9% for the nine-month period, demonstrating solid profitability.
• Diluted EPS saw a healthy increase of 12.1% for the quarter and 14.7% for the nine-month period.
• Gross profit margin improved to 84% for the quarter (from 81% in Q3 2024) and 83% for the nine-month period (from 82% in 2024).
• Cost of revenues decreased by $1.0 million (4%) for the three months ended September 30, 2025, primarily due to cloud platform optimization and fully depreciated assets, indicating improved operational efficiency.
• Adjusted EBITDA margin expanded to 49% for the quarter, up from 45% in Q3 2024, reflecting enhanced operational performance.
• Net cash provided by operating activities increased by 19% to $233.7 million for the nine months, highlighting strong cash generation.
• The net dollar expansion rate improved to 104%, indicating successful retention and growth from existing customers.
• Continued commitment to shareholder returns through an active share repurchase program, with $205.2 million remaining available.

Negatives

• Total other income, net, decreased by $2.0 million (28%) for the three months ended September 30, 2025, primarily due to unfavorable changes in foreign currency and a decrease in interest income.
• Income tax provision increased significantly by 144% for the quarter and 42% for the nine-month period, mainly due to the impact of the One Big Beautiful Bill Act (OBBBA) and decreased tax benefits from discrete adjustments.
• Net cash used in investing activities increased to $97.3 million for the nine months ended September 30, 2025, compared to $59.5 million in the prior year, primarily due to higher purchases of marketable securities.
• Net cash used in financing activities increased to $143.3 million for the nine months ended September 30, 2025, compared to $106.6 million in the prior year, largely due to increased share repurchases and tax payments related to equity awards.

Risks

• Quarterly and annual operating results may vary due to factors like demand, renewals, sales cycle length, competition, economic conditions, and foreign currency exchange rates.
• Failure to anticipate market needs, enhance existing solutions, or develop new solutions on a timely or cost-effective basis could harm competitiveness.
• Inability to effectively scale and adapt the cloud platform to meet customer performance requirements could harm operating results.
• Failure to renew existing subscriptions, sell additional subscriptions, or attract new customers would harm operating results.
• Current research and development efforts may not produce successful products or enhancements that result in significant revenue or cost savings.
• The platform, products, website, and internal systems may be subject to intentional disruption or other security incidents, including cyber-attacks, ransomware, and social engineering, which could result in liability and reputational damage.
• The sales cycle can be long and unpredictable, requiring considerable time and expense, leading to fluctuating revenues.
• Adverse economic conditions, reduced IT spending, inflationary pressures, high interest rates, and geopolitical conflicts may negatively impact business.
• Disruption of service at any of the 14 shared cloud platforms would interrupt or delay solution delivery, reducing revenues.
• Intense competition in the markets, potentially leading to a lack of sufficient financial or other resources to maintain or improve competitive position.
• Sales prices of solutions are subject to competitive pressures and may decrease, reducing gross profits.
• Solutions failing to detect vulnerabilities or incorrectly detecting them could harm brand and reputation.
• Inability to recruit and retain qualified sales personnel would harm sales and business growth.
• Reliance on third-party channel partners to generate a substantial amount of revenues, with risks if these partners do not effectively market or sell solutions.
• Risks associated with conducting international operations, including foreign currency fluctuations, economic instability, regulatory changes, and intellectual property protection challenges.
• Failure to appropriately manage future growth or improve systems and processes could negatively affect operating results.
• Dependence on the continued services and performance of senior management and other key employees, the loss of whom could adversely affect the business.
• Challenges and risks associated with sales to government entities, including certification requirements (e.g., FedRAMP), budgetary cycles, and audits.
• Risks associated with acquiring and integrating other businesses, products, or technologies, including potential dilution, debt, and integration difficulties.
• Undetected software errors or flaws in solutions could harm reputation, decrease market acceptance, or result in liability.
• Privacy and data handling concerns, including compliance with GDPR, CCPA, CPRA, and the EU's Data Act, could result in additional cost and liability.
• Use of AI/machine learning technologies in solutions could create additional cybersecurity risks, ethical issues, or subject the company to new legal obligations.
• Reliance on third-party open source software components, with risks of non-compliance with licenses or required source code disclosure.
• Reliance on third-party software and data that may be difficult to replace or cause errors/failures.
• Failure to protect proprietary technology and intellectual property rights could substantially harm the business.
• Assertions by third parties of infringement or other violations of their intellectual property rights could result in significant costs.
• Governmental export or import controls could subject the company to liability or limit its ability to compete in foreign markets.
• Requirement to collect higher sales and use or other taxes could result in liability for past sales and decrease future sales.
• Changes in income tax provision or adverse outcomes from tax return examinations could adversely affect operating results.
• Market volatility may affect stock price and the value of an investment.
• Actual operating results may differ significantly from guidance.
• Future sales of shares by existing stockholders could cause the stock price to decline.
• The share repurchase program may not be fully consummated or enhance stockholder value.
• Anti-takeover provisions in charter documents and Delaware law could make an acquisition more difficult.
• Disruptive technologies could gain wide adoption and supplant cloud-based solutions.
• May not maintain profitability in the future.
• Forecasts of market growth may prove inaccurate.
• Financial results based on estimates or judgments relating to critical accounting policies may prove incorrect.
• Changes in financial accounting standards may cause adverse and unexpected revenue fluctuations.
• Failure to maintain an effective system of internal control over financial reporting could impair ability to produce timely and accurate financial statements.

Future Outlook

The company expects continued revenue growth from new and existing customers due to its strong market position and demand for its solutions. It plans to continue investing in shared cloud platform infrastructures, customer support, operations teams, research and development, and sales and marketing to support growth and new solutions. The company anticipates a reduction in cash taxes paid for U.S. federal and state income taxes for fiscal year 2025 due to the One Big Beautiful Bill Act (OBBBA) provisions, including the elective deduction for domestic R&D expenses and 100% first-year bonus depreciation. The company believes existing cash, cash equivalents, marketable securities, and expected cash flow from operations will be sufficient to fund operations for the next twelve months and beyond. It also expects to continue using cash for share repurchases in 2025.

Management Comments

• Management attributes the revenue increase to increased demand for subscription services by end customers.
• The decrease in cost of revenues for the three-month period was primarily due to the completion of efforts to migrate certain cloud platform footprint to a lower cost region to optimize infrastructure efficiency, and a decrease in depreciation and amortization expense.
• Research and development expenses remained relatively flat for the three-month period due to headcount growth partially offset by lower average personnel costs and geographic mix of hires.
• The increase in sales and marketing expenses is attributed to increased headcount and marketing initiatives like digital advertising and partner events.
• The decrease in general and administrative expenses for the three-month period was primarily due to lower average grant-date fair value and less incremental expense recorded to reflect the change in estimated achievement rate for PRSUs, partially offset by additional employees hired.
• The increase in income tax provision is primarily due to the tax effect of a decrease in the benefit from the Foreign-Derived Intangible Income (FDII) deduction as a result of the enactment of the OBBBA and a decrease in tax benefits from discrete adjustments.

Industry Context

Qualys operates in the rapidly evolving IT, security, and compliance market, characterized by continuous technological advances, intense competition, and changing regulatory mandates. The company's cloud-based platform addresses growing complexities amplified by dissolving IT infrastructure boundaries, rapid cloud adoption, and dispersed IT assets. The increasing use of AI/machine learning technologies, both in solutions and by cyber-attackers, presents new cybersecurity risks and opportunities. The macroeconomic environment, including inflationary pressures, high interest rates, and geopolitical conflicts, continues to impact IT spending, potentially leading to reduced demand and extended sales cycles. Regulatory changes like GDPR, CCPA, CPRA, and the EU's Data Act are creating increasing compliance burdens and costs for companies, driving demand for solutions that help manage data privacy and security.

Comparison to Industry Standards

• Qualys competes with large public companies such as CrowdStrike, Palo Alto Networks, Rapid7, and Tenable Holdings, as well as privately held security providers including Invicti, Tanium, and Wiz (which has announced a pending acquisition by Google).
• The company's net dollar expansion rate of 104% indicates strong customer retention and upsell, which is a key performance indicator for SaaS companies and compares favorably to many industry peers.
• Adjusted EBITDA margin of 49% for Q3 2025 demonstrates strong operational efficiency, positioning Qualys competitively against other cybersecurity and cloud solution providers.
• The company's continued investment in R&D and expansion of its cloud platform, including 14 shared cloud platforms globally, aligns with industry trends of scaling infrastructure to meet growing customer demands and geographic reach, similar to major cloud providers and cybersecurity firms.

Management Changes

Corporate Governance

Legal Proceedings

• As of September 30, 2025, there has not been at least a reasonable possibility that the company has incurred a material loss from any ongoing legal proceedings, individually or taken together. However, litigation is inherently unpredictable and subject to significant uncertainties.

Stakeholder Impact

• Shareholders: Positive impact from strong financial performance, increased EPS, and continued share repurchase program. Potential for stock price appreciation. However, future sales by existing stockholders could cause price declines.
• Employees: Continued headcount growth, particularly in R&D and sales, indicates job creation. Executive severance policy provides enhanced benefits for named executive officers. Stock-based compensation remains a significant component of overall compensation.
• Customers: Increased investment in R&D and cloud platform infrastructure aims to enhance existing solutions and develop new ones, improving service quality and breadth. The company's focus on IT, security, and compliance addresses evolving customer needs.
• Management: New director appointment strengthens board oversight. Executive severance policy provides clarity and security for named executive officers.

Next Steps

• Continue to evaluate the nature and extent of the impact of macroeconomic factors on the business, financial position, results of operations, and cash flows.
• Monitor the impact of the One Big Beautiful Bill Act (OBBBA) and anticipated guidance from the U.S. Department of the Treasury.
• Continue to make significant investments to develop and implement new proprietary and third-party technologies at all levels of the cloud platform to meet expanding customer needs.
• Continue to devote resources to research and development to improve existing solutions and develop new solutions and capabilities.
• Continue to invest in sales and marketing teams and programs to support new solutions on the platform.
• Continue to invest in people and incur professional services to support growth and compliance with legal and regulatory requirements.
• Continue to use cash to repurchase shares under the share repurchase program in 2025.
• Analyze the impact of recently issued accounting pronouncements (ASU 2023-09, ASU 2024-03, ASU 2025-05, ASU 2025-06) on related disclosures and consolidated financial statements.

Key Dates

Recommendation

Qualys, Inc. delivered strong financial results for Q3 and the nine months ended September 30, 2025, demonstrating robust revenue growth, improved profitability, and expanding Adjusted EBITDA margins. The company's cloud-based IT, security, and compliance solutions are in high demand, reflected in a healthy net dollar expansion rate. Despite a significant increase in income tax provision due to new tax legislation (OBBBA), core operational performance remains excellent. The company's strong cash flow from operations and continued commitment to shareholder returns through an active share repurchase program further enhance its investment appeal. While the cybersecurity market is competitive and subject to various risks, Qualys' consistent execution, strategic investments in R&D and infrastructure, and focus on customer retention position it well for continued growth. The current valuation, coupled with these positive indicators, suggests a compelling opportunity for long-term investors.

Keywords

Cybersecurity, Cloud Security, IT Security, Compliance Solutions, Vulnerability Management, SaaS, Enterprise TruRisk Platform, Qualys, 10-Q, Financial Results, Q3 2025, Software-as-a-Service, Risk Management, Corporate Governance, Share Repurchase, AI/Machine Learning, Data Privacy, SEC Filing