Qualys Achieves FedRAMP High Authorization for TotalCloud, Extending Protection to Cloud Workloads in its Government Platform

Qualys (NASDAQ: QLYS) announced its TotalCloud solution has achieved FedRAMP High Authorization, sponsored by the U.S. Drug Enforcement Agency.

Rhea-AI Summary

Qualys (NASDAQ: QLYS) announced its TotalCloud solution has achieved FedRAMP High Authorization, sponsored by the U.S. Drug Enforcement Agency. This extends the FedRAMP High status of the Qualys Government Platform to include its Cloud-Native Application Protection Platform (CNAPP).

TotalCloud is now listed on the FedRAMP Marketplace, offering unified cloud security, compliance monitoring, threat detection, and attack surface discovery for federal agencies, contractors, and highly regulated industries.

Positive

• TotalCloud attains FedRAMP High Authorization, backed by the U.S. Drug Enforcement Agency
• FedRAMP High status extends to Qualys Government Platform’s CNAPP capabilities
• Listing on FedRAMP Marketplace expands access to federal agencies and contractors
• Unified cloud security platform integrates risk-based prioritization, compliance, and threat detection
• Pre-validated controls may help customers streamline ATO processes and audits

Negative

• None.

Argus May 14 session

+0.27% close to close Open Argus

Details

News Market Reaction – QLYS

In the May 14 session, QLYS gained 0.27%, reflecting a mild positive market reaction.

Data tracked by StockTitan Argus on the day of publication.

Market Context

This announcement highlights Qualys securing FedRAMP High Authorization for TotalCloud, extending it...

Analysis

This announcement highlights Qualys securing FedRAMP High Authorization for TotalCloud, extending its Government Platform to cover CNAPP and sensitive federal cloud workloads. It underscores alignment with NIST SP 800-53 High Impact controls and a unified, code-to-cloud security approach. In context of recent earnings growth and AI-driven product launches, this adds to a series of capability upgrades. Investors may watch adoption within federal agencies, commercialization of the broader platform, and subsequent product or compliance milestones.

Historical Context

5 past events · Latest: May 11

5 events

1. May 11

   Investor conference

   24h Move

   -2.9%

   Announcement of participation in William Blair growth stock conference.

2. May 05

   Earnings results

   24h Move

   -1.4%

   Q1 2026 beat with raised full‑year revenue and EPS guidance.

3. May 05

   Partnership launch

   24h Move

   -0.4%

   Joint offering with Converge linking ETM data to underwriting.

4. Apr 22

   Earnings date set

   24h Move

   +1.7%

   Scheduled Q1 2026 earnings release and conference call date.

5. Mar 23

   AI product launch

   24h Move

   +0.9%

   Launch of Agent Val AI agent for exploit validation and remediation.

24h Move is the share-price change in the day after each event; other market factors may also have contributed.

Key Terms

fedramp, fedramp marketplace, nist sp 800-53, cloud-native application protection platform, +2 more

6 terms

fedramp regulatory

"TotalCloud solution has achieved FedRAMP High Authorization, sponsored by the U.S."

FedRAMP (Federal Risk and Authorization Management Program) is a U.S. government initiative that sets security standards for cloud computing services used by federal agencies. It ensures that these online platforms protect sensitive information, similar to how a security system safeguards a building. For investors, FedRAMP indicates that a cloud service meets strict security requirements, which can influence its reliability and trustworthiness in handling data.

fedramp marketplace regulatory

"TotalCloud is now listed on the FedRAMP Marketplace, enabling federal agencies,"

A FedRAMP Marketplace is the official catalog of cloud services that have passed a standardized U.S. federal security review and are approved for use by government agencies. Think of it as a government-approved storefront: being listed makes it much easier for a vendor to win federal contracts because agencies can quickly find, trust, and buy their cloud offerings. For investors, a presence in the FedRAMP Marketplace signals validated security practices, reduced sales friction into a large customer base, and a clearer path to recurring government revenue.

nist sp 800-53 regulatory

"It aligns with NIST SP 800-53 High Impact controls, ensuring the platform"

NIST SP 800-53 is a U.S. government publication that lists recommended security and privacy protections organizations should use to safeguard information systems. Investors care because adherence signals that a company is proactively managing cyber and data risks—like using a checklist to lock doors and alarms—which can reduce the chance of costly breaches, regulatory fines, and interruptions to business operations.

cloud-native application protection platform technical

"to include Cloud-Native Application Protection Platform (CNAPP). Qualys TotalCloud"

A cloud-native application protection platform is a software suite that secures applications built and run in cloud environments by checking configurations, scanning code, and monitoring live services to prevent breaches, misconfigurations and outages. Investors care because it reduces the chance of costly downtime, regulatory fines and reputational damage while enabling safer growth—think of it as a combined alarm system, insurance policy and maintenance team for a company’s cloud-based products.

shared responsibility model regulatory

"controls within a shared responsibility model, organizations can streamline their"

A shared responsibility model is the division of duties between a service provider (often a cloud company) and its customer for protecting data, systems, and complying with rules. Think of it like a landlord who secures the building while tenants lock their own doors: investors care because how responsibilities are split affects a company’s security risk, regulatory exposure, operating costs, and potential liability if something goes wrong.

ato regulatory

"model, organizations can streamline their ATO processes, minimize audit complexity,"

An ATO ("At The Open") order is a type of stock trade instruction to buy or sell shares at the market opening price rather than at a specific price. For investors it matters because it guarantees participation in the market’s opening—like stepping into a store the moment it opens to get whatever’s available—so you capture the initial price but give up control over the exact execution price.

AI-generated analysis. How Rhea-AI works. Not financial advice.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

Achievement reaffirms Qualys' commitment to delivering trusted, best-in-class security solutions for federal agencies and highly regulated industries

FOSTER CITY, Calif., May 14, 2026 /PRNewswire/ -- Qualys, Inc. (NASDAQ: QLYS), a leading provider of cloud-based IT, security and compliance solutions, today announced that its TotalCloud solution has achieved FedRAMP High Authorization, sponsored by the U.S. Drug Enforcement Agency (DEA). This milestone extends the FedRAMP High status of the Qualys Government Platform to include Cloud-Native Application Protection Platform (CNAPP). Qualys TotalCloud is now listed on the FedRAMP Marketplace, enabling federal agencies, suppliers, and highly regulated industries to leverage its comprehensive cloud security capabilities.

The FedRAMP High Authorization represents the most stringent level of compliance within the Federal Risk and Authorization Management Program (FedRAMP). It aligns with NIST SP 800-53 High Impact controls, ensuring the platform meets the rigorous security requirements for handling the government's most sensitive unclassified data.

Unified Cloud Security for Federal Agencies
Now part of the Qualys Government Platform, TotalCloud provides federal agencies and commercial suppliers with a unified approach to cloud-native security. The platform integrates risk-based prioritization from code to cloud, compliance monitoring, runtime/threat detection, full attack surface discovery, and cloud-native application protection into a single, scalable platform. This comprehensive solution helps organizations accelerate compliance, reduce cyber risk, and streamline security operations.

"In a world where AI-driven threats are shrinking the time to exploit, achieving FedRAMP High Authorization for TotalCloud underscores Qualys' commitment to mission velocity, aligning with the government's Cloud Smart strategy, so our cyber defenders can gain the upper hand," said Sumedh Thakar, president and CEO of Qualys. "Adding this milestone for CNAAP ensures agencies can modernize with confidence, securing their most sensitive workloads, while meeting the highest federal standards for trust and resilience."

Benefits for Federal Agencies and Regulated Industries
Federal agencies, contractors, and organizations aligned to NIST SP 800-53 can leverage Qualys TotalCloud's FedRAMP High Authorization to reduce operational risk and accelerate compliance. TotalCloud supports organizations that need visibility and control over cloud workloads, assuring the posture and risk management of those systems. Through inheritance of pre-validated controls within a shared responsibility model, organizations can streamline their ATO processes, minimize audit complexity, and gain faster access to highly regulated federal environments.

Availability
TotalCloud is now available as part of the Qualys Government Platform on the FedRAMP Marketplace. To learn more, visit qualys.com/fedramp-marketplace or request a demo at qualys.com/gov.

Additional Resources

• Read our blog post, "Qualys TotalCloud Achieves FedRAMP High Authorization for Cloud Security and Compliance Assurance"
• Request a demo of the Qualys Government Platform at qualys.com/gov.
• Register for the webinar, "FedRAMP and NIST Cloud Security and Compliance Requirements"
• Follow Qualys on LinkedIn, Instagram and X

About Qualys
Qualys, Inc. (NASDAQ: QLYS) is a leading provider of cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings.

The Qualys Enterprise TruRisk Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Oracle Cloud Infrastructure, Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com.

Qualys, Qualys VMDR®, Qualys TruRisk and the Qualys logo are proprietary trademarks of Qualys, Inc. All other products or names may be trademarks of their respective companies. 

Media Contact:   
Rachel Yap Winship 
Qualys
Media@Qualys.com

View original content to download multimedia:https://www.prnewswire.com/news-releases/qualys-achieves-fedramp-high-authorization-for-totalcloud-extending-protection-to-cloud-workloads-in-its-government-platform-302771534.html

SOURCE Qualys, Inc.

FAQ

AI-generated questions and answers. How Rhea-AI works. Not financial advice.

What did Qualys (NASDAQ: QLYS) announce about FedRAMP High Authorization for TotalCloud on May 14, 2026?

Qualys announced that its TotalCloud solution achieved FedRAMP High Authorization, sponsored by the U.S. Drug Enforcement Agency. According to Qualys, this authorization extends the existing FedRAMP High status of the Qualys Government Platform to include its Cloud-Native Application Protection Platform (CNAPP) capabilities.

What does FedRAMP High Authorization mean for Qualys TotalCloud and government cloud security?

FedRAMP High Authorization indicates TotalCloud meets the program’s most stringent compliance level. According to Qualys, it aligns with NIST SP 800-53 High Impact controls, supporting protection of the government’s most sensitive unclassified data and enabling broader use across federal agencies and regulated organizations.

How does Qualys TotalCloud support federal agencies and contractors after gaining FedRAMP High status?

TotalCloud provides a unified approach to cloud-native security for agencies and suppliers. According to Qualys, it integrates risk-based prioritization, compliance monitoring, runtime and threat detection, attack surface discovery, and cloud-native application protection to help reduce cyber risk and accelerate compliance efforts.

Where is Qualys TotalCloud available for FedRAMP-authorized government cloud deployments?

TotalCloud is available as part of the Qualys Government Platform on the FedRAMP Marketplace. According to Qualys, this listing enables federal agencies, contractors, and highly regulated industries to adopt its cloud security capabilities within approved federal environments under a shared responsibility model.

How can organizations leverage Qualys TotalCloud FedRAMP High Authorization to streamline ATO processes?

Organizations can inherit pre-validated controls from TotalCloud within a shared responsibility model. According to Qualys, this inheritance may help streamline Authority to Operate (ATO) processes, minimize audit complexity, and speed access to highly regulated federal cloud environments aligned with NIST SP 800-53.

What cloud security capabilities are included in Qualys TotalCloud for government customers?

TotalCloud includes risk-based prioritization from code to cloud, compliance monitoring, runtime and threat detection, and full attack surface discovery. According to Qualys, these features, combined with CNAPP functionality, provide a single scalable platform to manage cloud workload posture and risk.