STOCK TITAN

Qualys Achieves FedRAMP High Authorization for TotalCloud, Extending Protection to Cloud Workloads in its Government Platform

Rhea-AI Impact
(Neutral)
Rhea-AI Sentiment
(Positive)
Tags

Qualys (NASDAQ: QLYS) announced its TotalCloud solution has achieved FedRAMP High Authorization, sponsored by the U.S. Drug Enforcement Agency. This extends the FedRAMP High status of the Qualys Government Platform to include its Cloud-Native Application Protection Platform (CNAPP).

TotalCloud is now listed on the FedRAMP Marketplace, offering unified cloud security, compliance monitoring, threat detection, and attack surface discovery for federal agencies, contractors, and highly regulated industries.

Loading...
Loading translation...

AI-generated analysis. Not financial advice.

Positive

  • TotalCloud attains FedRAMP High Authorization, backed by the U.S. Drug Enforcement Agency
  • FedRAMP High status extends to Qualys Government Platform’s CNAPP capabilities
  • Listing on FedRAMP Marketplace expands access to federal agencies and contractors
  • Unified cloud security platform integrates risk-based prioritization, compliance, and threat detection
  • Pre-validated controls may help customers streamline ATO processes and audits

Negative

  • None.

Market Reality Check

Price: $86.50 Vol: Volume 772,467 is below 2...
normal vol
$86.50 Last Close
Volume Volume 772,467 is below 20-day average 893,158 (relative volume 0.86x). normal
Technical Price $86.50 is well below 200-day MA at $120.81 and 44.36% below 52-week high.

Peers on Argus

QLYS fell 4.02% while key peers were mixed: BOX -0.31%, STNE -4.08%, ACIW -2.13%...
1 Up

QLYS fell 4.02% while key peers were mixed: BOX -0.31%, STNE -4.08%, ACIW -2.13%, WEX +0.59%. Momentum scanner only flagged CLBT up 4.05% with no news, reinforcing a stock-specific move.

Historical Context

5 past events · Latest: May 11 (Neutral)
Pattern 5 events
Date Event Sentiment Move Catalyst
May 11 Investor conference Neutral -2.9% Announcement of participation in William Blair growth stock conference.
May 05 Earnings results Positive -1.4% Q1 2026 beat with raised full‑year revenue and EPS guidance.
May 05 Partnership launch Positive -0.4% Joint offering with Converge linking ETM data to underwriting.
Apr 22 Earnings date set Neutral +1.7% Scheduled Q1 2026 earnings release and conference call date.
Mar 23 AI product launch Positive +0.9% Launch of Agent Val AI agent for exploit validation and remediation.
Pattern Detected

Recent fundamentally and strategically positive headlines often saw muted or negative next-day price reactions.

Recent Company History

Over the past few months, Qualys reported solid Q1 2026 results with revenue of $175.6M, strong profitability, and raised full-year 2026 revenue guidance to $721.0M–$727.0M, yet the stock declined the next day. Product and partnership announcements, including the March 23, 2026 launch of the AI agent “Agent Val” and the May 5, 2026 joint cyber‑insurance offering, saw only modest positive or slightly negative moves. Today’s FedRAMP High Authorization news continues the theme of strategic progress not immediately reflected in share performance.

Market Pulse Summary

This announcement highlights Qualys securing FedRAMP High Authorization for TotalCloud, extending it...
Analysis

This announcement highlights Qualys securing FedRAMP High Authorization for TotalCloud, extending its Government Platform to cover CNAPP and sensitive federal cloud workloads. It underscores alignment with NIST SP 800-53 High Impact controls and a unified, code-to-cloud security approach. In context of recent earnings growth and AI-driven product launches, this adds to a series of capability upgrades. Investors may watch adoption within federal agencies, commercialization of the broader platform, and subsequent product or compliance milestones.

Key Terms

fedramp, fedramp marketplace, nist sp 800-53, ato
4 terms
fedramp regulatory
"TotalCloud solution has achieved FedRAMP High Authorization, sponsored by the U.S."
FedRAMP (Federal Risk and Authorization Management Program) is a U.S. government initiative that sets security standards for cloud computing services used by federal agencies. It ensures that these online platforms protect sensitive information, similar to how a security system safeguards a building. For investors, FedRAMP indicates that a cloud service meets strict security requirements, which can influence its reliability and trustworthiness in handling data.
fedramp marketplace regulatory
"TotalCloud is now listed on the FedRAMP Marketplace, enabling federal agencies,"
A FedRAMP Marketplace is the official catalog of cloud services that have passed a standardized U.S. federal security review and are approved for use by government agencies. Think of it as a government-approved storefront: being listed makes it much easier for a vendor to win federal contracts because agencies can quickly find, trust, and buy their cloud offerings. For investors, a presence in the FedRAMP Marketplace signals validated security practices, reduced sales friction into a large customer base, and a clearer path to recurring government revenue.
nist sp 800-53 regulatory
"It aligns with NIST SP 800-53 High Impact controls, ensuring the platform"
NIST SP 800-53 is a U.S. government publication that lists recommended security and privacy protections organizations should use to safeguard information systems. Investors care because adherence signals that a company is proactively managing cyber and data risks—like using a checklist to lock doors and alarms—which can reduce the chance of costly breaches, regulatory fines, and interruptions to business operations.
ato regulatory
"model, organizations can streamline their ATO processes, minimize audit complexity,"
An ATO ("At The Open") order is a type of stock trade instruction to buy or sell shares at the market opening price rather than at a specific price. For investors it matters because it guarantees participation in the market’s opening—like stepping into a store the moment it opens to get whatever’s available—so you capture the initial price but give up control over the exact execution price.

AI-generated analysis. Not financial advice.

Achievement reaffirms Qualys' commitment to delivering trusted, best-in-class security solutions for federal agencies and highly regulated industries

FOSTER CITY, Calif., May 14, 2026 /PRNewswire/ -- Qualys, Inc. (NASDAQ: QLYS), a leading provider of cloud-based IT, security and compliance solutions, today announced that its TotalCloud solution has achieved FedRAMP High Authorization, sponsored by the U.S. Drug Enforcement Agency (DEA). This milestone extends the FedRAMP High status of the Qualys Government Platform to include Cloud-Native Application Protection Platform (CNAPP). Qualys TotalCloud is now listed on the FedRAMP Marketplace, enabling federal agencies, suppliers, and highly regulated industries to leverage its comprehensive cloud security capabilities.

The FedRAMP High Authorization represents the most stringent level of compliance within the Federal Risk and Authorization Management Program (FedRAMP). It aligns with NIST SP 800-53 High Impact controls, ensuring the platform meets the rigorous security requirements for handling the government's most sensitive unclassified data.

Unified Cloud Security for Federal Agencies
Now part of the Qualys Government Platform, TotalCloud provides federal agencies and commercial suppliers with a unified approach to cloud-native security. The platform integrates risk-based prioritization from code to cloud, compliance monitoring, runtime/threat detection, full attack surface discovery, and cloud-native application protection into a single, scalable platform. This comprehensive solution helps organizations accelerate compliance, reduce cyber risk, and streamline security operations.

"In a world where AI-driven threats are shrinking the time to exploit, achieving FedRAMP High Authorization for TotalCloud underscores Qualys' commitment to mission velocity, aligning with the government's Cloud Smart strategy, so our cyber defenders can gain the upper hand," said Sumedh Thakar, president and CEO of Qualys. "Adding this milestone for CNAAP ensures agencies can modernize with confidence, securing their most sensitive workloads, while meeting the highest federal standards for trust and resilience."

Benefits for Federal Agencies and Regulated Industries
Federal agencies, contractors, and organizations aligned to NIST SP 800-53 can leverage Qualys TotalCloud's FedRAMP High Authorization to reduce operational risk and accelerate compliance. TotalCloud supports organizations that need visibility and control over cloud workloads, assuring the posture and risk management of those systems. Through inheritance of pre-validated controls within a shared responsibility model, organizations can streamline their ATO processes, minimize audit complexity, and gain faster access to highly regulated federal environments.

Availability
TotalCloud is now available as part of the Qualys Government Platform on the FedRAMP Marketplace. To learn more, visit qualys.com/fedramp-marketplace or request a demo at qualys.com/gov.

Additional Resources

About Qualys
Qualys, Inc. (NASDAQ: QLYS) is a leading provider of cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings.

The Qualys Enterprise TruRisk Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Oracle Cloud Infrastructure, Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com.

Qualys, Qualys VMDR®, Qualys TruRisk and the Qualys logo are proprietary trademarks of Qualys, Inc. All other products or names may be trademarks of their respective companies. 

Media Contact:   
Rachel Yap Winship 
Qualys
Media@Qualys.com

Qualys, Inc., Redwood City, Calif.

Cision View original content to download multimedia:https://www.prnewswire.com/news-releases/qualys-achieves-fedramp-high-authorization-for-totalcloud-extending-protection-to-cloud-workloads-in-its-government-platform-302771534.html

SOURCE Qualys, Inc.

FAQ

What did Qualys (NASDAQ: QLYS) announce about FedRAMP High Authorization for TotalCloud on May 14, 2026?

Qualys announced that its TotalCloud solution achieved FedRAMP High Authorization, sponsored by the U.S. Drug Enforcement Agency. According to Qualys, this authorization extends the existing FedRAMP High status of the Qualys Government Platform to include its Cloud-Native Application Protection Platform (CNAPP) capabilities.

What does FedRAMP High Authorization mean for Qualys TotalCloud and government cloud security?

FedRAMP High Authorization indicates TotalCloud meets the program’s most stringent compliance level. According to Qualys, it aligns with NIST SP 800-53 High Impact controls, supporting protection of the government’s most sensitive unclassified data and enabling broader use across federal agencies and regulated organizations.

How does Qualys TotalCloud support federal agencies and contractors after gaining FedRAMP High status?

TotalCloud provides a unified approach to cloud-native security for agencies and suppliers. According to Qualys, it integrates risk-based prioritization, compliance monitoring, runtime and threat detection, attack surface discovery, and cloud-native application protection to help reduce cyber risk and accelerate compliance efforts.

Where is Qualys TotalCloud available for FedRAMP-authorized government cloud deployments?

TotalCloud is available as part of the Qualys Government Platform on the FedRAMP Marketplace. According to Qualys, this listing enables federal agencies, contractors, and highly regulated industries to adopt its cloud security capabilities within approved federal environments under a shared responsibility model.

How can organizations leverage Qualys TotalCloud FedRAMP High Authorization to streamline ATO processes?

Organizations can inherit pre-validated controls from TotalCloud within a shared responsibility model. According to Qualys, this inheritance may help streamline Authority to Operate (ATO) processes, minimize audit complexity, and speed access to highly regulated federal cloud environments aligned with NIST SP 800-53.

What cloud security capabilities are included in Qualys TotalCloud for government customers?

TotalCloud includes risk-based prioritization from code to cloud, compliance monitoring, runtime and threat detection, and full attack surface discovery. According to Qualys, these features, combined with CNAPP functionality, provide a single scalable platform to manage cloud workload posture and risk.