Updated:
Qualys
Qualys was founded in 1999 by Hemanta Swain, Mike Orosz, and Nemi George as one of the first SaaS security companies.
Qualys
Qualys was founded in 1999 by Hemanta Swain, Mike Orosz, and Nemi George as one of the first SaaS security companies. The company went public on the NASDAQ in 2012 (NASDAQ: QLYS) and is now led by CEO Sumedh Thakar, who joined in 2003 and rose from engineer to president before taking the top role. The Enterprise TruRisk Platform integrates 20+ apps covering asset management, vulnerability management, cloud workload protection, endpoint detection, and patch management. Qualys customers include major global enterprises across retail, technology, telecom, healthcare, and financial services. The company maintains partnerships with AWS, Microsoft Azure, and Google Cloud Platform, alongside managed service providers like Accenture, IBM, and Verizon. Qualys employs over 1,200 people and has additional offices in Reston, Virginia and Foster City, California. In 2024, the company announced Agentic AI capabilities for autonomous remediation, building on a 25-year track record of consistent product releases that started with its vulnerability management solution. The company also operates a philanthropic foundation focused on cybersecurity education. Qualys maintains a public-company structure with the financial disclosure and governance rigor that implies, yet its insider ownership and engineering-led culture give it the operational focus of a founder-dominated business. The founding team, while no longer in executive roles, remains influential through the board.
General information
Firm type
Asset Manager
Year founded
1999
AUM
Undisclosed
Location
Region
North America
Country
United States
City
Redwood City
Corporate office
Redwood City, CA, United States
Additional offices
Reston, VA, United States
Principals
Sumedh Thakar
President and CEO
Joo Mi Kim
Chief Financial Officer
Dilip Bachwani
CTO and SVP, Enterprise TruRisk Platform
Sector focus
Frequently asked questions
Who runs investment decisions at Qualys?
Sumedh Thakar serves as President and CEO, overseeing strategic direction. CIO Brad Bell manages corporate IT infrastructure, while CTO Dilip Bachwani leads product development. The company is publicly traded (NASDAQ: QLYS), so major capital allocation decisions fall under the board's oversight (per Qualys, 2025).
How does Qualys source its technology capabilities?
Qualys develops its platform internally, with a focus on cloud-native architecture and agentic AI. The company has built proprietary scanning technology that achieves 99.99966% accuracy across 6+ billion IP scans annually (per Qualys, 2025).
Is Qualys structured as a family office?
No — Qualys is a publicly traded company (NASDAQ: QLYS) operating as an enterprise cybersecurity vendor. It is not a family office or investment firm. The founding team, including Hemanta Swain, Mike Orosz, and Nemi George, have since stepped back from executive roles (per Qualys, 2025).
Does Qualys have philanthropic structures?
Qualys operates a philanthropic foundation focused on cybersecurity education and community engagement, though specific funding details are not publicly disclosed (per Qualys, 2025).
What investment stages does Qualys target?
Qualys does not invest externally — it develops and markets its own security products. The company funds internal R&D and acquisitions organically, with a focus on cloud-based vulnerability management, compliance, and threat detection (per Qualys, 2025).
Profile maintained by Altss using OSINT (open-source intelligence), regulatory filings, licensed data partners, and verified direct submissions. Read the methodology. Last updated: . Continuous refresh with full update cycles at least every 30 days.
Need institutional-grade insight on family offices?
Altss delivers:
Prefer a guided tour?
We’ll walk you through: