Qualys' AI Disruption: Why the Selloff May Be Overdone

Qualys shares slid after Anthropic launched Mythos, an AI tool that automates vulnerability identification. The product goes straight at the core of Qualys' scanning business. Within two sessions the stock had lost roughly 15% of its value, erasing about $800 million in market cap.

The selloff is rational on its face. Mythos, based on a large language model, can find and prioritize software flaws faster than a human analyst using a traditional scanner. If enterprises adopt it widely, the case for buying a standalone vulnerability management platform weakens. Qualys has been a leader in that space for two decades.

Yet the market may be pricing in a worst-case that is not assured. Qualys reported first-quarter earnings in May that beat consensus estimates by a wide margin – $1.95 per share against the $1.78 expected. Revenue grew 11% year over year, and the company raised its full-year guidance. The business is not in decline. Net dollar retention, a key metric for software subscription models, remains above 100%, though it has slipped from the 110%+ levels of 2022.

Valuation after the drop looks more reasonable. The stock now trades at roughly 22 times forward earnings, a discount to its five-year average of 30 times. For a company that still generates $500 million in annual revenue, has no debt, and converts roughly 30% of revenue into free cash flow, the multiple suggests investors are assigning a high probability to long-term revenue erosion from AI competition.

That probability may be too high. Qualys has been integrating machine learning into its platform for years. Parts of its threat detection and patch management already use models similar to what Mythos offers. The company is also close to releasing its own AI-powered scanning assistant, according to a recent product roadmap shared with partners.

What would confirm the bearish thesis: a large customer publicly migrating away from Qualys to an AI-native competitor, or a second-quarter revenue miss that reflects lost deals. What would weaken it: Qualys' AI products gain traction in beta tests, or the Mythos tool proves unreliable in production environments. In past disruption cycles – cloud computing, endpoint detection – incumbents that moved fast enough kept most of their base.

AlphaScala's Alpha Score for QLYS is currently unscored, meaning the model has insufficient data to generate a directional signal. That neutrality fits the moment: the outcome depends on execution, not an inherent flaw in the business.

Qualys reports second-quarter results in early August. The Mythos threat will be a topic on the call. Until then, the stock sits between two narratives: the disruption risk that drove the selloff and the valuation floor that limits further downside. Qualys' Q1 earnings beat with $1.95 EPS shows the company still has momentum. Why the Mythos tool triggered the selloff explains what the market is betting against.