Qualys (QLYS) 46th Annual William Blair Growth Stock Conference summary

Industry trends and challenges

• AI-driven models like Mythos and Claude are accelerating vulnerability discovery and exploitation, increasing the urgency for rapid remediation.

• Customers are shifting focus to autonomous, AI-powered remediation to address the growing volume and speed of threats.

• Only a small fraction of vulnerabilities are truly exploitable in a given environment, emphasizing the need for precise prioritization.

• CISOs are increasingly responsible for risk management and are seeking sustainable, phased approaches to autonomous patching.

• Cloud and identity risks are rising alongside vulnerabilities, requiring integrated risk management platforms.

Product innovation and differentiation

• The platform enables native, autonomous remediation, deploying 150 million patches in the past year, with 40 million done autonomously and high reliability.

• TruConfirm and Agent Val leverage AI to safely test and validate exploits, reducing the number of issues requiring remediation.

• Patch Reliability Score, built from half a billion patches, boosts confidence in autonomous patching by predicting patch outcomes.

• Mitigations can be deployed without full patches, minimizing operational risk and outages.

• The platform integrates vulnerability, configuration, and identity data to provide a unified risk score aligned to business impact.

Customer adoption and budget considerations

• Customers are exploring budget reallocation from legacy scanning, patch management, or red team solutions to fund AI-driven remediation.

• AI and automation budgets are increasingly tapped for these solutions, with phased adoption expected (e.g., starting with 20% of assets and expanding over time).

• Conversations are ongoing about replacing outdated patch management tools with integrated, AI-powered platforms.

• Cybersecurity budgets are growing modestly, but AI-driven efficiency is creating new opportunities for investment.