Slides
Page 1
Investor Presentation Sumedh Thakar, President and CEO Joo Mi Kim, CFO November 4, 2025 Security and Compliance for the Digital T ransformation
Page 2
2 Safe harbor This presentation includes forward-looking statements within the meaning of the federal securities laws. Forward-looking statements generally relate to future events or our future financial or operating performance. Forward-looking statements in this presentation include, but are not limited to, the following list: - our business and financial performance and expectations for future periods, including the rate of growth of our business and market share gains; - our expectations regarding our Qualys Enterprise TruRisk Platform and the benefits and capabilities of our platform; - our expectations regarding the growth, benefits, and market acceptance of the Qualys Enterprise TruRisk Platform; - our total addressable market; - our expectations regarding the timing of future products and features; - the benefits of our new and upcoming products, features, integrations, collaborations and joint solutions; - our strategy and our business model and our ability to execute such strategy; - our guidance for revenues, EBITDA margin, capital expenditure, GAAP EPS, and non-GAAP EPS for the fourth quarter and full year 2025; and - our expectations for the number of weighted average diluted shares outstanding and the GAAP and non-GAAP effective income tax rate for the fourth quarter and full year 2025. Our expectations and beliefs regarding these matters may not materialize, and actual results in future periods are subject to risks and uncertainties that could cause actual results to differ materially from those projected. These risks include: - our ability to continue to develop platform capabilities and solutions; - the ability of our platform and solutions to perform as intended; - customer acceptance and purchase of our existing solutions and new solutions; - real or perceived defects, errors, or vulnerabilities in our products or services; - our ability to retain existing customers and generate new customers; - the budgeting cycles and seasonal buying patterns of our customers, and the length of our sales cycle; - our ability to maintain government authorizations applicable to our platform; - the general market, political, economic, and business conditions in the United States as well as globally; - our ability to manage costs as we increase our customer base and the number of our platform solutions; - the cloud solutions market for IT security and compliance not increasing at the rate we expect; - competition from other products and services; - fluctuations in currency exchange rates; - unexpected fluctuations in our effective income tax rate on a GAAP and non-GAAP basis; - our ability to effectively manage our rapid growth and our ability to anticipate future market needs and opportunities; and - any unanticipated accounting charges. These additional risks include those set forth in our filings with the Securities and Exchange Commission, including our latest Form 10-Q and 10-K. The forward-looking statements in this presentation are based on information available to us as of today, and we disclaim any obligation to update any forward-looking statements, except as required by law. We also remind you that this presentation will include a discussion of GAAP and non-GAAP financial measures. The non-GAAP financial measures are not intended to be considered in isolation or as a substitute for results prepared in accordance with GAAP. The GAAP financial measures, and a reconciliation of the non-GAAP financial measures discussed in this presentation to the most directly comparable GAAP financial measures are included in the appendix of this presentation.
Page 3
Investment highlights Industry-leading cloud security and compliance platform for comprehensive risk management Multiple levers of recurring revenue growth Scalable business model and industry- leading profitability Uniquely positioned to capitalize on stack consolidation and cloud transformation 3
Page 4
4 Legacy Qualys Cloud Platform Control Center • SecOps • ITOps • Devops • Risk • Compliance • C-suite Virtual Scanners APIs Cloud Connector SaaS Connector Internet Scanners Network Scanner Passive Sensor Sensors SINGLECLOUDAGENT Asset Management Vulnerability Management Response & Remediation Compliance Threat Detection API & Integrations Unified Data Platform Data Normalization • Indexing • Categorization • Enrichment Platform Services RBAC • ML/AI • Scalability • Alerts/Notifications • Workflow • Scripting • Dashboards & Reporting Qualys Threat Research & Intelligence Unit 100+ world-leading experts enabling rapid protection across all threat vectors Qualys Cloud Platform IT Environment Workstations Servers Virtual Machines Cloud Mobile Containers IOT/OT/ICS Transforming from focus on providing visibility, vulnerability management, and data analytics to…
Page 5
5 Introducing Qualys Enterprise TruRisk Platform … leveraging risk analytics to deliver desired business outcomes
Page 6
6 Asset Management Threat Detection TotalCloudRemediationVulnerabilityAsset Management Discover All Assets Get inside-out and outside-in visibility of all assets with an attackers view of the network Get Complete Asset Context & Visibility Add business context, tags, enhance visibility by seamlessly integrating with CMDB’s, Third Party & ITSM solutions, bring business context into asset criticality for managing risk Identify Security Gaps Detect EOL/EOS software, unmanaged assets, unauthorized software, missing business critical software, evaluate cyber risk per subsidiary, inventory open-source software, packages & libraries Qualys Enterprise TruRisk Platform CyberSecurity Asset Management
Page 7
7 Asset Management Threat Detection TotalCloudRemediationVulnerabilityVulnerability Qualys Enterprise TruRisk Platform VMDR Measure Cyber Risk Quantify risk across vulnerabilities, assets, and groups of assets helping organizations proactively reduce risk exposure and track risk reduction over time with Qualys TruRisk Communicate Cyber Risk Communicate risk across different teams, business units and geographic locations by leveraging dashboards, reports and ITSM tools Reduce Risk Faster Unify security and IT threat response paths for faster remediation with seamless integration between ITSM tools and path management solutions. Automate and orchestrate operational tasks with Qualys Qflow
Page 8
8 Asset Management Threat Detection TotalCloudRemediationVulnerability Remediation Qualys Enterprise TruRisk Platform Comprehensive Risk Reduction Eliminate Cyber Risk Deploy the right remediation, mitigations or isolation strategies to balance risk reduction with business impact Save time and reduce MTTR Leverage smart automation to ensure software is up to date, risky vulnerabilities are patched or mitigated, and misconfigurations are fixed across hybrid environments Consolidate IT-Security Stack Orchestrate risk reduction by seamlessly integrating with your SCCM, ITOps, and developer tools
Page 9
9 Asset Management Threat Detection TotalCloudRemediationVulnerability Threat Detection Qualys Enterprise TruRisk Platform Threat Detection and Response Protect Against Zero-day threats Leverage behavior & AI/ML-based antivirus to thwart exploits, ransomware, phishing attacks, and zero-days Unify VM, Patching, and Endpoint Security Correlate endpoint threats to identify vulnerabilities actively exploited in your environment with integrated patch management Automate & Orchestrate Comprehensive endpoint (EDR) and Cloud Detection and Response with enterprise integrations (i.e., SIEM, ITSM, CMDB)
Page 10
10 Asset Management Threat Detection TotalCloudRemediationVulnerability Unified Multi-Cloud Security Unified vulnerability, threat and posture management from development through runtime in cloud and container environments Extended TruRisk Insights TruRisk insights for cloud and multi-cloud assets, unifying risk posture and remediation actions between on-prem, hybrid, and cloud workloads Comprehensive Security across IaaS and SaaS Orchestrate security between multi-cloud environments, asset inventories, and users leveraging a single agent, sensors, snapshots, and APIs or all four methods with Qualys FlexScan Qualys Enterprise TruRisk Platform TotalCloud (CNAPP)
Page 11
11 Qualys Enterprise TruRisk Platform Enterprise TruRisk Management Centralized Risk Aggregation Visualize the entire attack surface with unified asset inventory, integrate data from Qualys and third-party sources, consolidate risk finding across all asset types and environments Risk Quantification with Business Context Enrich risk data with Qualys curated feeds from over 25 threat intelligence sources, add business and financial context to quantify and prioritize cyber risk by evaluating loss attributes based on severity, exploitability, asset criticality and business impact Risk Response Orchestration Orchestrate precise risk response using AI-driven workflows for integrated patching and other mitigating controls with Qualys TruRisk Eliminate, automated tickets, and real-time alerts Asset Management Threat Detection TotalCloudRemediationVulnerability
Page 12
12 Qualys Enterprise TruRisk Platform Advantages One view across the entire global hybrid-IT environment, allowing customers to consolidate their stack for better security outcomes Nothing to install or manage, and all services are accessible via web interface. No hardware to buy or manage With everything in the cloud there is no capex and no extra human resources needed. Lower operating costs Easily perform assessments across global hybrid-IT environment. Easy to deploy and maintain Seamlessly add new coverage, users, and services as you need them. Unprecedented scaling Largest knowledge base of vulnerability signatures. Real time security updates. Always Up-to-date Data stored and processed in a n-tiered architecture of load- balanced servers. Data stored securely Available as a Public or on-premises Private Cloud Full server rack For governments, enterprises, and MSSPs Virtual rack For governments, enterprises, and MSSPs Standalone appliance For small businesses FedRAMP authorized
Page 13
13 Source: IDC, Qualys estimates CY2025E CY2028E $7.3B $10.7B $4.2B $5.5B$7.0B $8.8B$5.5B $9.8B$16.8B $22.7B$14.5B $21.3B $55B $79B Large expanding market opportunity Qualys’ Current Total Addressable Market 1.42x Expand VM & Assessment Compliance IT Asset Management Cloud Security Endpoint Security Security Analytics & Orchestration
Page 14
14 Blue chip global customer base Note: A customer is defined as any customer with subscription revenue at the measurement date 10,000+ Subscription customers 72% of the Forbes Global 50 55% of the Forbes Global 500 33% of the Forbes Global 2000
Page 15
15 Scalable go-to-market model Mark et segmentation & k ey strategic partners 2024 REVENUES Large enterprise (Over 5,000 employees) New customers Existing customers Small / medium business (Up to 5,000 employees) New customers Existing customers MID - MARKET ENTERPRISE 54% 46% Direct Indirect CHANNEL
Page 16
16 Attractive value proposition for partners High-margin recurring revenue with no capex / maintenance costs Value Added Resellers ConsultantsOutsourcing Providers MSSPs Cloud Provider Partners
Page 17
17 Balanced revenue growth and profitability ($ in millions) $490 $554 $608 $448 $494 19% 13% 10% 9% 10% 2022 2023 2024 Q3 2024 YTD Q3 2025 YTD Y/Y growth $219 $259 $283 $209 $231 45% 47% 47% 47% 47% 2022 2023 2024 Q3 2024 YTD Q3 2025 YTD Adj EBITDA % Adjusted EBITDARevenues Adjusted EBITDARevenues Note: Adjusted EBITDA is a non-GAAP measure. See the appendix for a reconciliation of non -GAAP financial measures to the most d irectly comparable GAAP financial measures. 11% CAGR 14% CAGR
Page 18
18 $179 $220 $247 $273 LTM Q3 2022 LTM Q3 2023 LTM Q3 2024 LTM Q3 2025 Platform adoption driving higher customer spend($ in millions) Note: Customer count is defined as customers with $500K or more in annual revenue Aggregate Revenues 11% Growth 151 174 200 211Number of customers
Page 19
19 Strong cash flow generation ($ in millions) $183 $236 $232 $190 $229 37% 43% 38% 42% 46% 2022 2023 2024 Q3 2024 YTD Q3 2025 YTD FCF Margin % $317 $171 $140 $98 $138 39.3 37.6 37.4 37.4 36.5 2022 2023 2024 Q3 2024 YTD Q3 2025 YTD Diluted WASO Share repurchase amountFree Cash Flow Share repurchase amountFree Cash Flow (FCF) Note: Free Cash Flow is a non -GAAP measure. See the appendix for a reconciliation of non -GAAP financial measures to the most dir ectly comparable GAAP financial measures. Returning capital to shareholders 12% CAGR
Page 20
20 Achieving strong margin performance 2024 Adjusted EBITDA margin vs. select Security and SaaS peers Security SaaS Peer Median: 25% QLYS 47% Source: FactSet Note: Adjusted EBITDA is a non-GAAP measure. See the appendix for a reconciliation of non -GAAP financial measures to the most di rectly comparable GAAP financial measures.
Page 21
21 Rule of 40 QLYS 57% 2024 Rule of 40 vs. select Security and SaaS peers Security SaaS Achieving rule of 50+: growth + profitability Source: FactSet Note: 2024 Revenue Growth % + Adj EBITDA Margin %
Page 22
Appendix
Page 23
23 Reconciliation of Adjusted EBITDA ($ in millions) Note: Amounts may not sum due to rounding. 2021 2022 2023 2024 Q3 2024 YTD Q3 2025 YTD Net income $71.0 $108.0 $151.6 $173.7 $129.7 $145.2 Depreciation and amortization of property and equipment 29.2 28.9 23.9 15.6 12.1 9.4 Amortization of intangible assets 6.7 5.7 3.1 2.9 2.3 1.9 Income tax provision 18.4 25.7 27.1 36.1 26.3 37.2 Stock-based compensation 67.6 53.4 69.1 77.1 56.5 56.3 Total other income, net (1.7) (3.2) (15.6) (22.6) (18.2) (19.3) Adjusted EBITDA $191.2 $218.6 $259.1 $282.8 $208.6 $230.8 Adjusted EBITDA Margin 46% 45% 47% 47% 47% 47%
Page 24
24 Reconciliation of Non-GAAP Free Cash Flows ($ in millions) Note: Amounts may not sum due to rounding. 2021 2022 2023 2024 Q3 2024 YTD Q3 2025 YTD GAAP Cash flows provided by operating activities $200.6 $198.9 $244.6 $244.1 $196.4 $233.7 Less: Purchases of property and equipment, net of proceeds from disposal (24.4) (15.4) (8.8) (12.3) (6.5) (4.3) Less: Principal payments under finance lease obligations (0.1) 0.0 0.0 0.0 0.0 0.0 Non-GAAP Free cash flows $176.1 $183.5 $235.8 $231.8 $189.9 $229.5
Page 25
25 Revenue mix 60% 60% 58% 59% 57% 40% 40% 42% 41% 43% 2022 2023 2024 Q3 2024 YTD Q3 2025 YTD Geographic US Foreign 58% 57% 54% 54% 51% 42% 43% 46% 46% 49% 2022 2023 2024 Q3 2024 YTD Q3 2025 YTD Direct vs. Partner Direct Partner