QLYS · Qualys, Inc. · Stock research

Current Thesis

Qualys entered 2026 as a de-rated legacy vuln-management name: decelerating growth, an AI-commoditization overhang, and price bleeding from a $155.47 high toward ~$111 by mid-June as it lost every moving average. That read has been overturned. The AI story that drove the de-rate flipped sign — AI-generated code and AI-augmented attackers are now framed as an expanding vulnerability surface that feeds scan-and-remediation demand back into the installed base rather than commoditizing it. JP Morgan crystallized the reframe on 2026-06-30 (Underweight→Neutral, PT $87→$139); Scotiabank confirmed it with a full upgrade to Sector Outperform and a $190 target on 2026-07-06; TD Cowen ($145, 2026-07-13) and Truist ($160, 2026-07-21) followed with target hikes. The stock has run ~33%+ off the June low, reclaimed all moving averages, and is pressing the 52-week high. The narrative leg on offer is a left-for-dead security compounder re-rating on a 2nd-order AI-demand tailwind, with a cluster of firms now confirming what began as a lone call. The unresolved question: whether the ~2026-08-05 Q2 print converts the sentiment re-rate into re-accelerating numbers, or exposes it as multiple expansion on an 8–9% grower.

Bullish and bearish views on Qualys, Inc.

The model's bull view on Qualys, Inc. (QLYS), in brief: Analyst cohort confirmed the reframe inside three weeks: JPM Underweight→Neutral PT $87→$139 (2026-06-30), Scotiabank upgrade to Sector Outperform PT $190 (2026-07-06), TD Cowen PT→$145 (2026-07-13), Truist PT→$160 (2026-07-21). The bear view: The re-rate is multiple, not fundamentals. Both cases follow in full.

Bull Case

• Analyst cohort confirmed the reframe inside three weeks: JPM Underweight→Neutral PT $87→$139 (2026-06-30), Scotiabank upgrade to Sector Outperform PT $190 (2026-07-06), TD Cowen PT→$145 (2026-07-13), Truist PT→$160 (2026-07-21). What the prior tape called a fragile single-analyst move is now a clustered target migration to a $139–190 band.
• Q1 2026 print (2026-05-05) never broke: revenue $175.6M (+10% YoY), non-GAAP EPS ~$1.95, adjusted EBITDA $83.3M; FY2026 guide raised to $721–727M revenue and non-GAAP EPS $7.44–7.65 — compounding at 40%+ EBITDA margins.
• The AI-demand mechanism: AI code-generation and AI-augmented attackers expand the vulnerability surface, feeding demand back to the installed base — the inverse of the early-2026 "AI commoditizes scanning" bear case.
• Balance-sheet optionality as a floor: ~$5.2B cap, no debt, high FCF conversion, sticky ARR — the profile a Thoma Bravo-style take-private targets. An unscheduled strategic/PE bid is upside gap risk.
• Structure fully reclaimed from the June ~$111 base: the 50-day and every average lost in February taken back on the run to $148.12 (2026-07-02 close), turning a broken tape into a trending one.

Bear Case

• The re-rate is multiple, not fundamentals. Q2 is still guided to ~8–9% growth ($177.5–179.5M revenue, non-GAAP EPS $1.73–1.80). Nothing in the numbers has re-accelerated; an in-line print leaves the ~27x multiple room to compress.
• The entry here is the snapback. Clean accumulation was $111–125 in mid-June; the stock is now extended near the $155.47 high after a near-vertical two-month leg, above two of four posted targets (JPM $139, Cowen $145).
• Momentum is stretched. A 2026-07-02 Benzinga screen tagged QLYS among "tech stocks that could sink your portfolio," citing overbought RSI and 52-week-high proximity.
• Platform encirclement is unchanged: Tenable's Vulcan Cyber buy ($147M), CrowdStrike Falcon Exposure Management, and Wiz-inside-Google own the exposure-management conversation. Qualys remains the like-for-like standalone in a suite-consolidation market.
• The ~2026-08-05 Q2 print is binary for a thesis that is not earnings-mechanical: the AI-demand reframe has to show in net-new-ARR/bookings, or the re-rate loses its justification.

Setup & Price Structure

• Range: 52-week $74.51–$155.47; June low ~$111; reclaimed all MAs into the $148.12 (2026-07-02) close and has pressed higher toward the high since as targets climbed.
• The reclaim shelf $132–140 defines the re-rate: the $140 breakout zone separates "de-rate over" from "failed bounce." Holding above it keeps the trend intact.
• Extended and overbought into the print — RSI flagged 2026-07-02. A fresh entry at current levels chases the extension rather than the base; cleaner risk/reward sits on a pullback retest of the $132–140 shelf, not the high. Avoid initiating momentum size into the ~2026-07-31 blackout.
• ~27x earnings, ~$5.2B cap. The cohort's $139–190 target band now brackets spot — headroom to Scotiabank's $190, little margin under JPM's $139.

Catalyst Calendar (next 30 days)

• ~2026-08-05 (est.): Q2 2026 earnings (quarter ended June 30). Guide: revenue $177.5–179.5M (8–9%), non-GAAP EPS $1.73–1.80. The event that converts the AI-demand reframe into numbers or exposes it as sentiment.
• Unscheduled: strategic/PE take-private headline (no debt, 40%+ EBITDA margin, high FCF) — gap-up tail with no fixed date.

Elapsed catalysts

• ~2026-07-31 (est.): pre-earnings quiet period begins (~3 trading days before the print) — binary-risk blackout window for fresh momentum entries. (passed 2d ago)
• Ongoing: analyst target migration ($139–190 band as of 2026-07-21). A further upgrade before the print confirms cohort conviction; a downgrade would flag the re-rate topping. (passed 12d ago)

What Would Change Our Mind

• A weekly close below $140 forfeits the reclaimed breakout shelf and 50-day, re-opening the failed-de-rate structure and inviting a retrace toward the $111 base. A weekly close below $132 confirms the entire reclaim has failed.
• Secondary: a Q2 print (~2026-08-05) that holds growth at 8–9% with no net-new-ARR re-acceleration and no raised AI-demand commentary — numbers that fail to ratify the re-rate, leaving the ~27x multiple to compress.
• Theme break: the cybersecurity bid rotating to SATURATED with QLYS lagging — TENB/RPD not confirming the AI-vuln-demand tape — would strip the cohort tailwind and mark the move as idiosyncratic.

Correlation Notes

• Read-across peers: Tenable (TENB) and Rapid7 (RPD) are the like-for-like vuln-management cohort; their tape confirms or denies the durability of the AI-demand bid. A QLYS-only advance without peer participation is more fragile than a cohort breakout.
• Narrative leaders: CrowdStrike (CRWD), Palo Alto (PANW), and Wiz-inside-Google set the exposure-management agenda; QLYS trades as the value-re-rate laggard beneficiary of the broader security bid.
• Multiple sensitivity: as a ~27x, high-single-digit-growth software compounder, QLYS is exposed to macro multiple compression — a tightening regime pressures the re-rate independent of the AI story.