{ "@context": "https://orbyd.app/schemas/dossier.v1.json", "ticker": "QLYS", "name": "Qualys, Inc.", "url": "https://orbyd.app/dossiers/QLYS/", "json_url": "https://orbyd.app/dossiers/QLYS.json", "status": "DORMANT", "current_conviction": "MEDIUM", "graded_conviction": null, "archetype": { "code": "a4", "n": 4 }, "current_thesis": "Left-for-dead vuln-management de-rate re-rating on a 2nd-order AI-demand reframe — AI code-gen and attackers expand the vulnerability surface, feeding demand to the installed base. A cohort (JPM, Scotiabank, Cowen, Truist) has now confirmed the once-single-analyst call, but the stock is extended near its 52-week high into the ~2026-08-05 Q2 print that must turn sentiment into numbers.", "invalidation_trigger": "A weekly close below $140 forfeits the reclaimed breakout shelf and 50-day, re-opening the failed-de-rate structure toward the $111 base (below $132 confirms the whole reclaim failed); secondary break if the ~2026-08-05 Q2 print holds growth at 8–9% with no net-new-ARR re-acceleration, compressing the ~27x multiple.", "catalyst_date": "2026-08-05", "outcome": "OPEN", "outcome_date": null, "invalidation_fired": null, "themes": [ "cybersecurity" ], "tags": [], "sources": [], "notes": [ "Fundamentals still 8-9% growth; re-rate is multiple expansion on sentiment, unconfirmed by numbers until Q2. 52-week range $74.51-$155.47, ~27x P/E.", "Q2 2026 earnings ~2026-08-05 (quarter ended June 30); pre-earnings blackout ~2026-07-31 (~3 trading days prior). Guide: revenue $177.5–179.5M (8–9%), non-GAAP EPS $1.73–1.80.", "Analyst cohort confirmed the AI-vuln-demand reframe: JPM UW→Neutral $87→$139 (2026-06-30), Scotiabank upgrade to Sector Outperform $190 (2026-07-06), TD Cowen $145 (2026-07-13), Truist $160 (2026-07-21). Target band $139–190 now brackets spot — no longer a fragile single-analyst move.", "Chase caution: extended near the $155.47 52-week high after a ~33% two-month run, above JPM $139 and Cowen $145. Cleaner risk/reward on a pullback retest of the $132–140 reclaim shelf than the extension into the print.", "Re-rate is multiple expansion on sentiment; fundamentals still 8–9% growth, ~27x P/E, unconfirmed by numbers until Q2. An in-line print risks multiple compression.", "Cluster read: needs TENB/RPD confirming the AI-demand bid for durability; leaders CRWD/PANW/Wiz(Google). QLYS is the value-re-rate laggard beneficiary of the broader security bid.", "Take-private tail intact: no debt, 40%+ EBITDA margin, high FCF, ~$5.2B cap — unscheduled strategic/PE bid is upside gap risk.", "Q1 2026 print (2026-05-05): revenue $175.6M (+10% YoY), non-GAAP EPS ~$1.95, adjusted EBITDA $83.3M; FY2026 raised to $721–727M rev, non-GAAP EPS $7.44–7.65." ], "body_markdown": "## Current Thesis\n\nQualys entered 2026 as a de-rated legacy vuln-management name: decelerating growth, an AI-commoditization overhang, and price bleeding from a $155.47 high toward ~$111 by mid-June as it lost every moving average. That read has been overturned. The AI story that drove the de-rate flipped sign — AI-generated code and AI-augmented attackers are now framed as an expanding vulnerability surface that feeds scan-and-remediation demand back into the installed base rather than commoditizing it. JP Morgan crystallized the reframe on 2026-06-30 (Underweight→Neutral, PT $87→$139); Scotiabank confirmed it with a full upgrade to Sector Outperform and a $190 target on 2026-07-06; TD Cowen ($145, 2026-07-13) and Truist ($160, 2026-07-21) followed with target hikes. The stock has run ~33%+ off the June low, reclaimed all moving averages, and is pressing the 52-week high. The narrative leg on offer is a left-for-dead security compounder re-rating on a 2nd-order AI-demand tailwind, with a cluster of firms now confirming what began as a lone call. The unresolved question: whether the ~2026-08-05 Q2 print converts the sentiment re-rate into re-accelerating numbers, or exposes it as multiple expansion on an 8–9% grower.\n\n## Bull Case\n\n- Analyst cohort confirmed the reframe inside three weeks: JPM Underweight→Neutral PT $87→$139 (2026-06-30), Scotiabank upgrade to Sector Outperform PT $190 (2026-07-06), TD Cowen PT→$145 (2026-07-13), Truist PT→$160 (2026-07-21). What the prior tape called a fragile single-analyst move is now a clustered target migration to a $139–190 band.\n- Q1 2026 print (2026-05-05) never broke: revenue $175.6M (+10% YoY), non-GAAP EPS ~$1.95, adjusted EBITDA $83.3M; FY2026 guide raised to $721–727M revenue and non-GAAP EPS $7.44–7.65 — compounding at 40%+ EBITDA margins.\n- The AI-demand mechanism: AI code-generation and AI-augmented attackers expand the vulnerability surface, feeding demand back to the installed base — the inverse of the early-2026 \"AI commoditizes scanning\" bear case.\n- Balance-sheet optionality as a floor: ~$5.2B cap, no debt, high FCF conversion, sticky ARR — the profile a Thoma Bravo-style take-private targets. An unscheduled strategic/PE bid is upside gap risk.\n- Structure fully reclaimed from the June ~$111 base: the 50-day and every average lost in February taken back on the run to $148.12 (2026-07-02 close), turning a broken tape into a trending one.\n\n## Bear Case\n\n- The re-rate is multiple, not fundamentals. Q2 is still guided to ~8–9% growth ($177.5–179.5M revenue, non-GAAP EPS $1.73–1.80). Nothing in the numbers has re-accelerated; an in-line print leaves the ~27x multiple room to compress.\n- The entry here is the snapback. Clean accumulation was $111–125 in mid-June; the stock is now extended near the $155.47 high after a near-vertical two-month leg, above two of four posted targets (JPM $139, Cowen $145).\n- Momentum is stretched. A 2026-07-02 Benzinga screen tagged QLYS among \"tech stocks that could sink your portfolio,\" citing overbought RSI and 52-week-high proximity.\n- Platform encirclement is unchanged: Tenable's Vulcan Cyber buy ($147M), CrowdStrike Falcon Exposure Management, and Wiz-inside-Google own the exposure-management conversation. Qualys remains the like-for-like standalone in a suite-consolidation market.\n- The ~2026-08-05 Q2 print is binary for a thesis that is not earnings-mechanical: the AI-demand reframe has to show in net-new-ARR/bookings, or the re-rate loses its justification.\n\n## Setup & Price Structure\n\n- Range: 52-week $74.51–$155.47; June low ~$111; reclaimed all MAs into the $148.12 (2026-07-02) close and has pressed higher toward the high since as targets climbed.\n- The reclaim shelf $132–140 defines the re-rate: the $140 breakout zone separates \"de-rate over\" from \"failed bounce.\" Holding above it keeps the trend intact.\n- Extended and overbought into the print — RSI flagged 2026-07-02. A fresh entry at current levels chases the extension rather than the base; cleaner risk/reward sits on a pullback retest of the $132–140 shelf, not the high. Avoid initiating momentum size into the ~2026-07-31 blackout.\n- ~27x earnings, ~$5.2B cap. The cohort's $139–190 target band now brackets spot — headroom to Scotiabank's $190, little margin under JPM's $139.\n\n## Catalyst Calendar (next 30 days)\n\n- ~2026-08-05 (est.): Q2 2026 earnings (quarter ended June 30). Guide: revenue $177.5–179.5M (8–9%), non-GAAP EPS $1.73–1.80. The event that converts the AI-demand reframe into numbers or exposes it as sentiment.\n- Unscheduled: strategic/PE take-private headline (no debt, 40%+ EBITDA margin, high FCF) — gap-up tail with no fixed date.\n\n## Elapsed catalysts\n\n- ~2026-07-31 (est.): pre-earnings quiet period begins (~3 trading days before the print) — binary-risk blackout window for fresh momentum entries. *(passed 2d ago)*\n- Ongoing: analyst target migration ($139–190 band as of 2026-07-21). A further upgrade before the print confirms cohort conviction; a downgrade would flag the re-rate topping. *(passed 12d ago)*\n\n## What Would Change Our Mind\n\n- A weekly close below $140 forfeits the reclaimed breakout shelf and 50-day, re-opening the failed-de-rate structure and inviting a retrace toward the $111 base. A weekly close below $132 confirms the entire reclaim has failed.\n- Secondary: a Q2 print (~2026-08-05) that holds growth at 8–9% with no net-new-ARR re-acceleration and no raised AI-demand commentary — numbers that fail to ratify the re-rate, leaving the ~27x multiple to compress.\n- Theme break: the cybersecurity bid rotating to SATURATED with QLYS lagging — TENB/RPD not confirming the AI-vuln-demand tape — would strip the cohort tailwind and mark the move as idiosyncratic.\n\n## Correlation Notes\n\n- Read-across peers: Tenable (TENB) and Rapid7 (RPD) are the like-for-like vuln-management cohort; their tape confirms or denies the durability of the AI-demand bid. A QLYS-only advance without peer participation is more fragile than a cohort breakout.\n- Narrative leaders: CrowdStrike (CRWD), Palo Alto (PANW), and Wiz-inside-Google set the exposure-management agenda; QLYS trades as the value-re-rate laggard beneficiary of the broader security bid.\n- Multiple sensitivity: as a ~27x, high-single-digit-growth software compounder, QLYS is exposed to macro multiple compression — a tightening regime pressures the re-rate independent of the AI story.", "first_seen": "2026-06-16", "last_analyzed": "2026-07-25T08:39:10+00:00", "last_synthesized": "2026-07-25", "last_update_source": "watchlist_research", "license": "Content © orbyd. Cite the canonical URL." }