Qualys

Overview

Qualys is a US cybersecurity company built around a model that was contrarian in its early years: delivering security and compliance as a cloud service at a time when enterprises still resisted running anything sensitive off their own servers (Infosecurity Magazine). Selling security as a remotely delivered, always-on service — software-as-a-service applied to vulnerability management and compliance — put the company ahead of the enterprise SaaS wave rather than riding it (Infosecurity Magazine). The company’s defining leadership arc belongs to Philippe Courtot, who invested in Qualys in 1999, took the chief executive role in March 2001, and led the company to its initial public offering in 2012 (Infosecurity Magazine). By 2018 the public company was reporting $278.9M in annual revenue (CRN) — an early SaaS-era pioneer whose core insight was that the network, not the customer’s own servers, was the right place to run security (Infosecurity Magazine).

Security from the cloud before the cloud was fashionable

Qualys’s bet was that vulnerability management and compliance scanning could be sold as a remote service rather than as on-premises software — a SaaS model for security adopted before enterprise SaaS itself was widely accepted (Infosecurity Magazine). In the late 1990s and early 2000s that proposition was genuinely hard to sell: corporate security teams treated their own data centers as the only trustworthy perimeter, and trusting a vendor’s cloud with security telemetry was the opposite of conventional wisdom. Qualys’s corporate strategy was inseparable from its leadership. Philippe Courtot, who had previously founded the email software company cc:Mail, invested in Qualys in 1999 and became chief executive in March 2001 (Infosecurity Magazine). He held the top job through the company’s growth into a publicly traded security vendor, making his tenure — investor in 1999, CEO from 2001, through IPO in 2012 — the spine of the company’s formative decade (Infosecurity Magazine).

The 2012 IPO and after

Courtot led the company to its initial public offering in 2012 (Infosecurity Magazine). This profile deliberately does not repeat IPO pricing, date or exchange specifics, because the only IPO-dedicated page identified was a press-release reprint, which is not citable as an independent source. What the independent record does confirm is the company’s post-listing trajectory: Qualys continued expanding its cloud-security footprint by acquisition, buying the software assets of cloud-security startup Adya (CRN). By 2018 the company was reporting $278.9M in annual revenue — a public-company scale that traces back to the cloud-delivered model Courtot championed when the market still doubted it (CRN). The through-line of the verified record is continuity of strategy: an investor-CEO who arrived in 1999, took control in 2001, listed the company in 2012, and left behind a cloud-security business still expanding through targeted acquisitions like Adya’s software assets (Infosecurity Magazine, CRN).

What this profile does not claim

• It does not state IPO pricing, the exact IPO date or the listing exchange — the only IPO-dedicated page found was a press-release reprint, which is not citable as an independent source.
• The current product lineup and current financials are not stated; no verified sources support them.
• This profile does not evaluate Qualys’s products against competitors.