Qualys

Qualys
Name	Qualys
Type	Public
Founded	1999
Founder	Philippe Courtot
Headquarters	Foster City, California, United States
Key people	Sumedh Thakar
Industry	Cybersecurity
Products	Vulnerability management, cloud security, compliance

Qualys Qualys is a US-based cloud security company offering vulnerability management, compliance, and related services. It serves enterprise customers across sectors including finance, healthcare, retail, and government, and competes with firms in the cybersecurity and cloud computing markets. The company operates a global platform that integrates scanning, asset inventory, and remediation workflows for IT, OT, and cloud environments.

History

Qualys was founded in 1999 by Philippe Courtot and grew during the dot-com era alongside firms such as Symantec, McAfee, Cisco Systems, IBM, and Microsoft. The company expanded its offerings through the 2000s amid regulatory events like the Sarbanes–Oxley Act and market shifts that benefited security vendors including RSA Security and Trend Micro. Qualys completed an initial public offering on the NASDAQ in 2012, joining peers such as CrowdStrike and Palo Alto Networks among publicly traded cybersecurity firms. Executive leadership transitions and board-level governance have linked Qualys to broader industry developments involving companies like VMware, Oracle Corporation, and Hewlett-Packard.

Products and Services

Qualys provides a suite of cloud-native services comparable to offerings from Rapid7, Tenable, Amazon Web Services, Microsoft Azure, and Google Cloud Platform. Core products include vulnerability scanning akin to tools from Nessus and endpoint detection similar to products from Carbon Black and Cylance. The platform supports compliance workflows related to standards such as PCI DSS, HIPAA, and ISO/IEC 27001 and complements governance tools used by enterprises like Accenture, Deloitte, and KPMG. Additional services address container security used with Docker and Kubernetes, web application scanning in the style of OWASP testing, and cloud posture management paralleling solutions from Check Point Software Technologies.

Technology and Architecture

Qualys operates a cloud-native architecture that integrates asset discovery, authenticated scanning, and continuous monitoring across on-premises, cloud, and hybrid environments, interoperating with infrastructure platforms such as Amazon EC2, Microsoft Azure Virtual Machines, and Google Compute Engine. Its scanner appliances and virtual scanners function similarly to probe-based systems used by Nmap and OpenVAS, while APIs enable orchestration with automation frameworks like Ansible, Terraform, and Puppet. The platform ingests telemetry and vulnerability feeds, correlating indicators with threat intelligence sources including feeds from MITRE and signature databases akin to those maintained by VirusTotal and AlienVault. Data storage and analytics leverage distributed processing patterns familiar from Hadoop and Elasticsearch, and the SaaS model aligns with cloud service patterns promoted by Salesforce.

Corporate Affairs

Qualys is headquartered in Foster City, California, and has offices and customers across North America, Europe, and Asia, operating in markets alongside multinational corporations such as JPMorgan Chase, Bank of America, Walmart, Pfizer, and Siemens. The company’s governance and reporting follow standards relevant to listings on the NASDAQ and interactions with regulators like the Securities and Exchange Commission. Partnerships and client engagements often involve system integrators such as Capgemini, IBM Global Services, and Accenture, and the firm participates in industry events and standards bodies alongside organizations including ISACA and (ISC)².

Security Research and Vulnerability Data

Qualys conducts research that discloses vulnerabilities and publishes advisories comparable to bulletins from CERT Coordination Center, US-CERT, and vendors such as Microsoft Corporation and Adobe Systems. Its research contributes to vulnerability databases and coordinates with frameworks like the Common Vulnerabilities and Exposures (CVE) program and the Common Vulnerability Scoring System (CVSS) used by entities including MITRE and the National Institute of Standards and Technology. Findings by Qualys researchers have been referenced in security analyses by media outlets and technical communities involving researchers from Google Project Zero, Zero Day Initiative, and academic groups at institutions such as MIT and Stanford University.

Partnerships and Integrations

Qualys integrates with cloud providers and enterprise platforms including Amazon Web Services, Microsoft Azure, Google Cloud Platform, VMware, and ServiceNow. It collaborates with security orchestration vendors and SIEM solutions such as Splunk, IBM QRadar, and ArcSight, and partners with managed security service providers similar to SecureWorks and BT Group for delivery at scale. Technology alliances and joint go-to-market efforts align Qualys with channel partners like CDW, Insight Enterprises, and global consultancies including PwC and EY.

Category:Computer security companies Category:Companies based in Foster City, California