Qualys
Acquisitions
7
Major Deals Covered
This page covers 7 major deals from 2017 to 2022, each with its price where disclosed and the reason behind it.
| Company | Year | Price | Purpose |
|---|---|---|---|
| Blue Hexagon | 2022 | Undisclosed | Integrate AI and deep learning behavioral threat detection into the Qualys Cloud Platform. |
| TotalCloud | 2021 | Undisclosed | Acquire cloud workflow management and no-code automation platform technology. |
| Spell Security | 2020 | Undisclosed | Acquire specialized endpoint detection and response (EDR) technology and threat hunting talent. |
| Adya | 2019 | Undisclosed | Acquire software assets for SaaS application security posture management (SSPM) and shadow IT administration. |
| Layered Insight | 2018 | Undisclosed | Acquire container-native security technology to provide runtime defense for Docker and Kubernetes. |
| 1Mobility | 2018 | Undisclosed | Acquire enterprise mobile device management (MDM) and security assets. |
| Nevis Networks | 2017 | Undisclosed | Acquire passive network traffic inspection technology and domain engineering talent in Pune, India. |
2022
Integrate AI and deep learning behavioral threat detection into the Qualys Cloud Platform.
Infused real-time network threat defense and AI malware detection into TotalCloud and VMDR.
Enhanced automated cloud detection capabilities and reduced dwell time for weaponized ransomware.
2021
Acquire cloud workflow management and no-code automation platform technology.
Served as the foundational workflow architecture for Qualys TotalCloud CNAPP.
Enabled customers to visually build automated cloud security posture remediation workflows.
2020
Acquire specialized endpoint detection and response (EDR) technology and threat hunting talent.
Bolstered Qualys Multi-Vector EDR with advanced telemetry, process monitoring, and threat hunting playbooks.
Directly accelerated Qualys' native threat hunting and incident response capabilities.
2019
Acquire software assets for SaaS application security posture management (SSPM) and shadow IT administration.
Allowed Qualys customers to discover and control unauthorized SaaS applications like Google Workspace and Microsoft 365.
Integrated into Qualys' broader cloud security posture management offerings.
2018
Acquire container-native security technology to provide runtime defense for Docker and Kubernetes.
Extended Qualys vulnerability management into container images, container registries, and serverless environments.
Established the cornerstone for Qualys Container Security and runtime defense.
2018
Acquire enterprise mobile device management (MDM) and security assets.
Expanded asset inventory and compliance auditing across iOS and Android corporate devices.
Incorporated into Qualys CyberSecurity Asset Management.
2017
Acquire passive network traffic inspection technology and domain engineering talent in Pune, India.
Enabled Qualys to build its Network Passive Sensor, discovering unmanaged devices without active scanning.
Formed the technological basis for Qualys Network Passive Sensor and CSAM discovery.
Under CEO Sumedh Thakar, Qualys is pursuing four clear corporate growth pillars: (1) Scaling Qualys TruRisk Risk Quantification: Expanding TruRisk adoption to translate technical vulnerabilities into quantified monetary risk scores that corporate boards and CISOs can understand and prioritize; (2) Expanding Cloud-Native Patch Management: Driving adoption of integrated automated patch deployment, eliminating the traditional friction between security teams and IT operations; (3) Cybersecurity Asset Management (CSAM) Expansion: Enabling global enterprises to continuously discover unmanaged external-facing assets, IoT devices, and shadow cloud instances across complex hybrid environments; and (4) Strategic Global Alliances & MSSP Scaling: Deepening strategic relationships with Managed Security Service Providers (MSSPs) such as Infosys, HCL, and Accenture, who utilize Qualys as the underlying scanning engine for their global security practices.
Qualys operates a pure-play multi-tenant cloud Software-as-a-Service (SaaS) subscription business model characterized by exceptional software gross margins, high operating profitability, and predictable annual recurring revenue: (1) Qualys Cloud Platform Subscriptions (~95% of revenue), billed annually in advance based on the number of monitored IT assets, IP addresses, web applications, and cloud workloads. Customers purchase access to modular cloud applications—including VMDR (Vulnerability Management, Detection, and Response), Policy Compliance, Cloud Security Assessment (CSAM), and File Integrity Monitoring; (2) Automated Patch Management Add-On (~5% of revenue), which monetizes native automated patch deployment directly from the Qualys Cloud Agent, allowing customers to remediate vulnerabilities without switching to separate endpoint management tools. Qualys generates stellar GAAP gross profit margins exceeding 80% and an extraordinary net profit margin of 27.1%, supported by an ultra-efficient multi-tenant server infrastructure.
Qualys pursues a disciplined, strategic M&A approach focused on acquiring proprietary technologies, expanding customer distribution reach, and unlocking operational cost synergies rather than pursuing unselective scale.
Transformative transactions in Qualys's history include pivotal mergers and acquisitions that secured key regional footprints, consolidated core market share, and brought proprietary software intellectual property in-house.
Qualys deploys dedicated integration teams to harmonize core software stacks, align regulatory compliance systems, and unite company cultures while preserving entrepreneurial agility.
Yes, Qualys periodically evaluates its corporate portfolio, strategically divesting non-core or non-strategic assets to redeploy capital into high-margin core operational divisions.
Compare corporate acquisition records, deal values, and strategic targets
Explore Qualys
Core profile pages, founders and related research hubs for this company.