QLYS — what changed in the latest 10-Q
A section-by-section comparison of QLYS's newest periodic SEC filing (10-K/10-Q) against the prior same-form filing: paragraphs added and removed per section, with verbatim excerpts. Purely a deterministic text diff — no similarity scores, no directional read, not investment advice.
Comparing 10-Q · 2026-05-05 vs the prior 10-Q · 2025-11-04
| Section | Outcome | Added | Removed | Minor | Unchanged |
|---|---|---|---|---|---|
| MD&A | Text added/removed | +14 | −29 | ~17 | 36 |
| Market risk (Item 3) | Text added/removed | 0 | 0 | ~2 | 1 |
| Controls & procedures | Text added/removed | 0 | 0 | ~1 | 1 |
| Legal proceedings | Text added/removed | 0 | 0 | ~1 | 0 |
| Risk factors | Text added/removed | +3 | 0 | ~24 | 198 |
| Other information | Text added/removed | +5 | −16 | 0 | 1 |
Counts are paragraphs; added/removed means text added or removed vs the prior filing — no direction or judgement implied.
Representative excerpts
Up to 5 excerpts of about 300 characters per section, quoted verbatim from the two SEC filings.
MD&A
Text added vs the prior filing · source: 10-Q · 2026-05-05
You should not rely on forward-looking statements as predictions of future events. Except as required by law, neither we nor any other person assumes responsibility for the accuracy and completeness of the forward-looking statements, and
we undertake no obligation to update any forward-looking statements to reflect events or circumstances after the date of such statements.
We are a leading provider of a cloud-based platform delivering information technology (“IT”), security and compliance solutions that enable organizations to identify security risks to their IT infrastructures, help protect their IT systems and applications from ever-evolving cyber-attacks and achiev…
We were founded and incorporated in December 1999 with a vision of transforming the way organizations secure and protect their IT infrastructure and applications and initially launched our first cloud solution, Vulnerability Management (“VM”), in 2000. As VM gained acceptance, we introduced addition…
On July 4, 2025, OBBBA was signed into law. Beginning in 2026, the OBBBA changes to FDDEI Deduction and NCTI become effective. We have recognized the effects of these OBBBA provisions in our financial results for the three months ended March 31, 2026. These changes generally resulted in a decrease t…
Text removed vs the prior filing · source: 10-Q · 2025-11-04
We are a leading provider of a cloud-based platform delivering information technology ("IT"), security and compliance solutions that enable organizations to identify security risks to their IT infrastructures, help protect their IT systems and applications from ever-evolving cyber-attacks and achiev…
We were founded and incorporated in December 1999 with a vision of transforming the way organizations secure and protect their IT infrastructure and applications and initially launched our first cloud solution, Vulnerability Management ("VM"), in 2000. As VM gained acceptance, we introduced addition…
On July 4, 2025, OBBBA was signed into law. The OBBBA permanently extends and modifies certain domestic and international provisions from the 2017 TCJA and phases out certain provisions from the 2022 Inflation Reduction Act. Beginning in 2025, the OBBBA provides an elective deduction for domestic re…
Comparison of Three and Nine Months Ended September 30, 2025 and 2024
(in thousands, except percentages)(in thousands, except percentages)
Risk factors
Text added vs the prior filing · source: 10-Q · 2026-05-05
the duration of customer relationships and result in additional compliance and operational costs, which may affect our business.
business and reputation. Disclosing our proprietary source code also could allow our competitors to create similar products with lower development effort and time and ultimately could result in a loss of sales for us. Any of these events could have a material adverse effect on our business, operatin…
right to practice the patented invention. As a result, we may not be able to obtain adequate patent protection or to enforce our issued patents effectively.
Other information
Text added vs the prior filing · source: 10-Q · 2026-05-05
On February 20, 2026, Wendy M. Pfeiffer, a member of our board of directors, adopted a Rule 10b5-1 trading arrangement providing for the sale from time to time of an aggregate of up to 2,000 shares of our common stock. The trading arrangement is intended to satisfy the affirmative defense in Rule 10…
On February 25, 2026, Jeffrey P. Hank, the chair of our board of directors, adopted a Rule 10b5-1 trading arrangement providing for the sale from time to time of an aggregate of up to 940 shares of our common stock. The trading arrangement is intended to satisfy the affirmative defense in Rule 10b5-…
On February 27, 2026, Thomas P. Berquist, a member of our board of directors, adopted a Rule 10b5-1 trading arrangement providing for the sale from time to time of an aggregate of up to 1,450 shares of our common stock. The trading arrangement is intended to satisfy the affirmative defense in Rule 1…
On February 27, 2026, Sumedh S. Thakar, our Chief Executive Officer and a member of our board of directors, adopted a Rule 10b5-1 trading arrangement providing for the sale from time to time of an aggregate of up to 98,400 shares of our common stock, which represents the gross number of shares autho…
No other director or officer, as defined in Rule 16a-1(f), adopted or terminated a “Rule 10b5-1 trading arrangement” or a “non-Rule 10b5-1 trading arrangement,” each as defined in Regulation S-K Item 408, during the three months ended March 31, 2026.
Text removed vs the prior filing · source: 10-Q · 2025-11-04
On August 12, 2025, Joo Mi Kim, our Chief Financial Officer, adopted a Rule 10b5-1 trading arrangement providing for the sale from time to time of an aggregate of up to 51,509 shares of our common stock, which represents the gross number of shares authorized to be sold during the duration of the pla…
On August 21, 2025, Bruce Posey, our Chief Legal Officer, adopted a Rule 10b5-1 trading arrangement providing for the sale from time to time of an aggregate of up to 22,234 shares of our common stock, which represents the gross number of shares authorized to be sold during the duration of the plan, …
No other director or officer, as defined in Rule 16a-1(f), adopted or terminated a "Rule 10b5-1 trading arrangement" or a "non-Rule 10b5-1 trading arrangement," each as defined in Regulation S-K Item 408, during the three months ended September 30, 2025.
On October 30, 2025, the board of directors (the “Board”) of Qualys, Inc. (the “Company”) appointed Bradford L. Brooks to serve on the Board as a Class II director until the Company’s 2026 annual meeting of stockholders or until his successor is duly elected and qualified. There are no arrangements …
Mr. Brooks has served as Chief Executive Officer of Censys, Inc., a leading provider of continuous attack surface management, from January 2022 through May 2025. Previously, Mr. Brooks served as a member of the board of directors of ARC Document Solutions from April 2018 through November 2024 where …
How to read Risk Factors (Item 1A) in a 10-Q
A 10-Q risk-factor section usually takes one of three forms; this page classifies it as one of:
- Pointer — the filer states there have been no material changes and points back to the annual 10-K risk factors; there is no own risk text to compare this quarter.
- Partial update — the filer carves out specific updated risks ("except as set forth below"); the excerpts show exactly what is new this quarter.
- Restated in full — the quarter carries the complete risk-factor text. When the prior quarter was only a pointer there is no prior full text to diff against, so the page flags the section as restated instead.
This describes the filing structure only — it is never a judgement on whether risk went up or down.
Source: text-level diff of the two SEC EDGAR filings · deterministic (no AI-generated content) · for reference only · not investment advice