Qualys
{{short description|American web security company}}
{{Infobox company
| name = Qualys, Inc.
| logo = Logo-Qualys.svg
| logo_size = 160px
| type = Public
| traded_as = {{ubl|{{NASDAQ|QLYS}}|S&P 400 component}}
| predecessor =
| successor =
| founders = {{ubl|Philippe Langlois|Gilles Samoun}}
| defunct =
| fate =
| area_served = Global
| key_people =
Sumedh Thakar (president and CEO){{cite web |last1=Singh |first1=Meghavi |title=Qualys Board Names Sumedh Thakar as CEO |url=https://finance.yahoo.com/news/qualys-board-names-sumedh-thakar-130000826.html |website=Yahoo Finance |publisher=Yahoo |access-date=30 April 2021}}
| industry = CyberSecurity Company Network Security
IT Security
Information Security
| genre =
| products =
| production =
| services = {{ubl|Asset management|IT security|Compliance|Cloud/container security|Web app security|Vulnerability management}}
| revenue = {{increase}} {{US$|554.5 million|link=yes}} (2023)
| operating_income = {{increase}} {{US$|163.1 million}} (2023)
| net_income = {{increase}} {{US$|151.6 million}} (2023)
| equity = {{decrease}} {{US$|368.2 million}} (2023)
| assets = {{decrease}} {{US$|822.3 million}} (2023)
| num_employees = {{increase}} 2,188{{cite web | title=Qualys (QLYS) Financials | website=Stock Analysis | date=2024-11-01 | url=https://stockanalysis.com/stocks/qlys/financials/ | access-date=2024-11-01}}
| foundation = {{Start date and age|1999}}
| location_city = Foster City, California
| location_country = U.S.
| website = {{url|qualys.com}}
}}
Qualys, Inc. is an American technology firm based in Foster City, California, specializing in cloud security, compliance and related services.
Qualys has over 10,300 customers in more than 130 countries. The company has strategic partnerships with major managed services providers and consulting organizations including BT, Dell SecureWorks, Fujitsu, IBM, NTT, Symantec, Verizon, and Wipro.{{cite web | last=Evans | first=Jonny | title=Qualys now supports macOS in its cloud security tools | website=Computerworld | date=2023-02-07 | url=https://www.computerworld.com/article/1617790/qualys-now-supports-macos-in-its-cloud-security-tools.html | access-date=2024-11-01}}{{cite web | title=Qualys has raised the bar in vulnerability management by reducing cyber risk and remediation times for customers – Sumedh Thakar | website=CXOToday.com | date=2022-09-30 | url=https://cxotoday.com/interviews/qualys-has-raised-the-bar-in-vulnerability-management-by-reducing-cyber-risk-and-remediation-times-for-customers-sumedh-thakar/ | access-date=2024-11-01}}
History
Qualys has been described as "one of the earliest software-as-a-service security vendors."{{cite news |title=Cloud control: you want your cloud provider to share security risk. Your provider wants to limit its liability. The result is a negotiation. Here's what CFOs should know to gain the upper hand |first=David |last=Rosenbaum |date=September 2011 |work= CFO |volume=27 |issue=7 }}
Philippe Courtot first invested in the company in 1999.{{cite magazine | last=Villano | first=Matt | title=Cloud Cover | magazine=TIME | date=2009-10-12 | url=https://time.com/archive/6689663/cloud-cover/ | access-date=2024-11-01}} He became CEO and board chair in 2001.{{cite web | last=Schleier | first=Curt | title=What's The Next Big Thing In Tech? Just Ask Qualys' CEO | website=Investor's Business Daily | date=2020-08-27 | url=https://www.investors.com/news/management/leaders-and-success/qualys-ceo-ceo-shows-you-how-find-next-big-thing/ | access-date=2024-11-01}} Courtot described Qualys as addressing a "mounting need for automatic detection of network vulnerabilities" when he announced the second round of financing.{{cite press release |title=Qualys, Inc. Secures $20M in Second Round Financing |date=April 10, 2001 |publisher=PR Newswire }}{{cite news |title=Using your browser for security |date=April 28, 2003 |work=Network World |publisher=IDG Communications, Inc. }}
The company launched QualysGuard in 2000, making Qualys one of the first entrants in the vulnerability management market.{{Cite web|url=https://www.sramanamitra.com/2012/06/12/cloud-security-vendor-qualys-ready-for-ipo/|title=Cloud Security Vendor Qualys Ready for IPO |date=2012-06-12 |website=Sramana Mitra |language=en-US |access-date=2020-03-23}} This software could automatically scan corporate local area networks (LANs) for vulnerabilities and search for an available patch. The company subsequently added compliance, malware detection, and web application scanning to its platform.{{cite news |title=Tool scours networks for threats |first=Marin |last=Courtney |publisher=Network Week |date=30 September 2002}}{{cite news |title=Free Network Check |first=David M. |last=Ewalt |publisher=Information Week |date= 26 May 2003}}{{cite news|url=http://www.infoworld.com/d/security-central/core-qualys-enter-web-apps-scanning-market-250|title=Core, Qualys to enter Web apps scanning market|last=Hines|first=Matt|date=October 16, 2007|work=InfoWorld|access-date=10 January 2010}}
Qualys went public on the Nasdaq under the stock ticker QLYS on September 28, 2012, raising net proceeds of $87.5 million.{{cite news | title = Cloud security company Qualys up 18 percent on IPO after the markets close | publisher = VentureBeat | first=Meghan |last=Kelly | date= September 28, 2012 | access-date = 1 May 2014 | url = https://venturebeat.com/2012/09/28/qualys-ipo-trading/ }}{{ cite web | title = Cloud Security Firm Qualys' IPO Opens At $12/Share, Raising $71.8M | publisher = TechCrunch | first=Ingrid |last=Lunden | date = 28 September 2012 | access-date = 1 May 2014 | url = https://techcrunch.com/2012/09/28/qualys-ip/ }}
In 2015, Qualys launched its cloud platform and lightweight cloud agent, aimed at providing continuous monitoring of an organization's IT infrastructure and applications.{{cite web | last=Kovacs | first=Eduard | title=Qualys Web Application Firewall 2.0 Brings Virtual Patching, Event Response | website=SecurityWeek | date=2015-04-21 | url=https://www.securityweek.com/qualys-web-application-firewall-20-brings-virtual-patching-event-response/ | access-date=2024-11-01}} The cloud platform introduced several new features designed to help organizations address cybersecurity and compliance issues.{{cite web|url=http://www.securityweek.com/qualys-web-application-firewall-20-brings-virtual-patching-event-response|title=Qualys Web Application Firewall 2.0 Brings Virtual Patching, Event Response |publisher=Security Week |first=Eduard |last=Kovacs |date=21 April 2015 |access-date=18 December 2016}}{{cite web|url=http://betanews.com/2015/04/21/new-cloud-agent-brings-enterprises-greater-security-and-asset-control/ |title=Cloud Agent Brings Enterprises Greater Security and Asset Control |publisher=BetaNews |first=Ian |last=Barker |access-date=18 December 2016|date=2015-04-21}}
Another security service that Qualys offers is its Network Passive Sensor service, an advanced technology layer that monitors network traffic and detects what is on the network that needs to be secured.{{cite web | last=Bridgwater | first=Adrian | title=Qualys Security Conference 2022: Corralling horses in an expanding edge rodeo | website=TechRepublic | date=2022-11-10 | url=https://www.techrepublic.com/article/qualys-security-conference-edge/ | access-date=2024-11-01}} The Network Passive Sensor immediately sends asset metadata to the Qualys Cloud Platform, where it is analyzed for comprehensive security insights.{{cite web |last=Bridgwater |first=Adrian |title=Qualys Security Conference 2022: Corralling horses in an expanding edge rodeo |website=TechRepublic |date=2022-11-10 |url=https://www.techrepublic.com/article/qualys-security-conference-edge/ |access-date=2024-09-05}}
In 2021, Courtot resigned from his role as Qualys' CEO for health reasons after leading the company for two decades. Sumedh Thakar became president and CEO following Courtot. He was previously president and Chief Product Officer at Qualys.{{cite web | last=Novinson | first=Michael | title=Longtime Qualys CEO Philippe Courtot Exits For Health Reasons | website=CRN | date=2021-03-22 | url=https://www.crn.com/news/security/longtime-qualys-ceo-philippe-courtot-exits-for-health-reasons | access-date=2024-11-01}}
In August 2021, Qualys partnered with Red Hat to bring Qualys' Cloud Agent to Red Hat Enterprise Linux (RHEL) CoreOS and Red Hat OpenShift. The CoreOS Cloud Agent for OpenShift works with Qualys' Container Security Runtime, delivering continuous packages and vulnerabilities for the entire OpenShift stack.{{cite web |last1=Best |first1=Martijn van |last2=Eenbergen |first2=Coen van |last3=Pol |first3=Floris Hulshoff |last4=Zwets |first4=Berry |title=Qualys brings Cloud Agent to RHEL CoreOS and Red Hat OpenShift |website=Techzine Global |date=2021-08-04 |url=https://www.techzine.eu/news/applications/63565/qualys-brings-cloud-agent-to-rhel-coreos-and-red-hat-openshift/ |access-date=2024-09-05}}
Qualys won two Pwnie Awards in 2021, in the "Best Privilege Escalation Bug" and "Most Under-Hyped Research" categories.{{Cite web |title=Pwnie Award Winners 2021 – Pwnies |url=https://pwnies.com/winners/ |access-date=2022-04-29 |website=pwnies.com}}{{Cite web |title=Heap-based buffer overflow in Sudo! – Pwnies |url=https://pwnies.com/heap-based-buffer-overflow-in-sudo/ |access-date=2022-04-29 |website=pwnies.com}}{{Cite web |title=21 Nails – Pwnies |url=https://pwnies.com/sneek-peek-21-nails/ |access-date=2022-04-29 |website=pwnies.com}}
In November 2023, Qualys released its Enterprise TruRisk Platform, which aggregates cyber risk signals to provide a risk-scoring framework for companies to measure and reduce IT risk.{{cite web |last=Bridgwater |first=Adrian |title=Qualys Expands IT Control Posture To 'De-Risk' Business |website=Forbes |date=2023-11-08 |url=https://www.forbes.com/sites/adrianbridgwater/2023/11/08/qualys-expands-it-control-posture-to-de-risk-business/ |access-date=2024-08-08}}
In May 2024, Qualys launched a managed security services partner (MSSP) portal as part of its global partner program. The portal was designed to enhance operational efficiencies for Qualys' partners and offer visibility into client accounts, licenses, and user roles.{{cite web |last=Starc |first=Andrew |title=Qualys launches MSSP portal for partners |website=CRN Australia |date=2024-05-06 |url=https://www.crn.com.au/news/qualys-launches-mssp-portal-for-partners-607710 |access-date=2024-09-05}}
References
{{reflist|35em}}
- [https://www.ssllabs.com/ Qualys SSL Labs Vulnerability Scanner]
- {{cite news|url=http://www.bizjournals.com/sanfrancisco/stories/2008/12/22/story11.html|title=Friday, December 19, 2008 Network security firm Qualys floats to top of cloud computing Redwood City company to do $50M|last=Hoge|first=Patrick|date=December 19, 2008|work=San Francisco Business Times|access-date=10 January 2010}}
- {{cite news|url=http://www.accessmylibrary.com/article-1G1-95177044/inside-information-qualysguard-service.html|title=Inside information – QualysGuard service strengthened with an intranet scanner appliance.(Qualisguard Intranet Scanner Applicance [sic?])(Hardware Review) (Product/Service Evaluation)|last=Rash|first=Wayne|date=December 9, 2002|work= InfoWorld|access-date=10 January 2010}}
- {{cite news|url=http://www.informationweek.com/news/showArticle.jhtml?articleID=8800226|title=Qualys Updates Network Security Auditing Security audits are automated and unalterable, describing when the audit was performed, what vulnerabilities were uncovered, how to fix them, when they were assigned and to whom, and when repairs were successfully implemented.|date=April 16, 2003|work=Internet Week|access-date=10 January 2010}}{{Dead link|date=August 2023 |bot=InternetArchiveBot |fix-attempted=yes }}
External links
- {{Official website}}
- {{Finance links
| symbol = QLYS
| reuters = QLYS.N
| bloomberg = QLYS:US
| sec_cik = 1107843
| yahoo = QLYS
| google = QLYS:NASDAQ
}}
{{S&P 400 companies}}
Category:Companies based in Foster City, California
Category:Software companies based in the San Francisco Bay Area
Category:Computer security software companies
Category:Software companies established in 1999
Category:Companies listed on the Nasdaq
Category:Companies in the S&P 400
Category:2012 initial public offerings