Cloud security and compliance management provider Qualys, Inc. on Monday reported financial results for the third quarter ended September 30, 2026, delivering steady double-digit top-line expansion alongside historic cash generation. Third-quarter revenue increased 11% year-over-year to $188.0 million, driven by expanding adoption of its Risk Operations Center platform across enterprise cybersecurity environments. Operating cash flow surpassed the $100 million milestone for the first time, climbing 13% to $101.8 million. Enterprise demand for consolidated cloud security remains robust. Financial analysts affirmed the company's strong margin profile.
Risk Operations Platform Expands Revenue as Gross Margins Hold Above 83%
According to quarterly financial disclosures released Monday, third-quarter revenue reached $188.05 million compared with $169.88 million during the same period in 2025. GAAP gross profit expanded 10% to $156.7 million, maintaining an exceptional GAAP gross margin of 83.3%. Scalable cloud-native software architectures continued to generate high incremental margin returns. Platform customer retention remained exceptionally high.
Operating profitability exhibited strong commercial discipline throughout the quarter. GAAP operating income climbed 11% year-over-year to $66.3 million. GAAP net income expanded 14% to $57.2 million, or $1.62 per diluted share, up from $50.3 million, or $1.39 per diluted share, in the third quarter of 2025. Adjusted EBITDA reached $89.9 million, preserving an adjusted EBITDA margin of 48%. Operating leverage remained firmly intact. Balance sheet liquidity ranked among the strongest in the software sector.
Qualys President and Chief Executive Officer Sumedh Thakar detailed operational milestones in the official corporate earnings release. He stated: "Our third-quarter performance reflects increasing customer commitment to our unified Risk Operations Center architecture. As organizations confront automated, AI-driven exploitation techniques, security leaders are actively retiring fragmented point solutions. Our integrated cloud platform enables global enterprises to measurably reduce mean time to remediation." Technical leadership confirmed sustainable competitive differentiation. Enterprise market penetration expanded steadily.
Operating Cash Flow Crosses Century Mark with Asset Management Enhancements
Sustained cash conversion efficiency represented the standout metric across third-quarter disclosures. Cash provided by operating activities climbed 13% year-over-year to $101.8 million, marking an all-time quarterly record for the software enterprise. Strong cash generation enabled the debt-free company to maintain aggressive software research investments without external capital constraints. Available balance sheet reserves remained substantial. Structural financial resilience was clearly demonstrable.
Within product engineering, Qualys deployed major machine-learning enhancements across its External Attack Surface Management and compliance validation engines. The updated analytical architecture processes millions of public-facing enterprise assets continuously to identify unpatched perimeter vulnerabilities. Automated remediation features were welcomed across security operations centers. Annual contract renewals among Fortune 500 accounts remained resilient.
Industry cybersecurity analysts observed that corporate chief information security officers are consolidating overlapping point products to lower administrative complexity. By unifying vulnerability management, compliance telemetry, and endpoint posture into a single lightweight sensor architecture, Qualys substantially reduces infrastructure management overhead. Integrated platforms continue to capture market share.
Full-Year 2026 Financial Guidance Affirmed Amid Resilient Cyber Budgets
Building upon three quarters of consistent operational execution, executive management updated its financial guidance for the fourth quarter and full fiscal year 2026. The company expects full-year revenue between $735 million and $745 million. Annual earnings per share are projected to sustain solid growth above consensus expectations. Defensive software profiles featuring strong cash conversion continue to attract long-term equity capital. Market valuation multiples remained stable.
Despite broader macroeconomic uncertainties across enterprise capital spending, corporate allocations toward essential cybersecurity operations remain resilient. Mandatory regulatory reporting guidelines and severe ransomware liability ensure that security infrastructure maintains top corporate priority. Qualys' disciplined operating model provides an industry benchmark for durable SaaS profitability.
Shares of Qualys traded higher during Monday's trading session following the morning release. Institutional investors reacted favorably to double-digit revenue expansion and record operating cash generation. The enterprise cybersecurity landscape is prioritizing unified cloud architectures. Well-capitalized vendors maintaining proprietary vulnerability research platforms will continue to expand market share. Long-term commercial visibility remains strong.
