Sheila Ennis - Senior Vice President, ICR LLC Philippe F. Courtot - Chairman, President & Chief Executive Officer Melissa Fisher - Chief Financial Officer, Qualys, Inc. Nancy Hsiang - V.P., Corporate Controller, Qualys, Inc..

Sitikantha Panigrahi - Credit Suisse Securities (USA) LLC (Broker) Steve M. Ashley - Robert W. Baird & Co., Inc. (Broker) Sterling Auty - JPMorgan Securities LLC Michael Wonchoon Kim - Imperial Capital LLC Rob Owens - Pacific Crest Securities Christopher Speros - Stifel, Nicolaus & Co., Inc. Srini S. Nandury - Summit Research Jack Andrews - D. A.

Davidson & Co. Matthew Swanson - RBC Capital Markets LLC Erik L. Suppiger - JMP Securities LLC Robert Breza - Wunderlich Securities, Inc..

Good day, ladies and gentlemen and welcome to the Qualys First Quarter 2016 Investor Conference Call. At this time, all participants are in a listen-only mode. Later, we will conduct the question-and-answer session and instructions will follow at that time. As a reminder, this conference call is being recorded.

I would now like to introduce your host for today's conference, Ms. Sheila Ennis, Investor Relations for Qualys. Ma'am, you may begin..

statements related to our business and financial performance and expectations for future periods including the rate of our growth or of our business, our expectations regarding capital expenditures including investments in our cloud infrastructure and the intended uses and benefits of those expenditures, trends related to the diversification of our revenue base, our ability to sell additional solutions to our customer base and the strength of demand for those solutions, our plans regarding the development of our technology and its expected timing, our expectations regarding the capabilities of our platform and solutions, the anticipated needs of our customers, our strategy, the scalability of our strategy, our ability to execute our strategy and our expectations regarding our market position, the expansion of our platform and our delivery of new solution, the expansion of our partnerships and the related benefits of those partnerships, our ability to effectively manage our cost, our expectations for foreign currency exchange rates, our plans to pursue arrangements with MSSPs which are multi-year contracts at fixed prices, and finally our expectations for the number of weighted average diluted shares outstanding and effective GAAP and non-GAAP income tax rates for the second quarter and full year of 2016.

Our expectations and beliefs regarding these matters may not materialize, and actual results in future periods are subject to risks and uncertainties that could cause actual results to differ materially from those projected.

These risks include those set forth in the press release that we issued earlier today, as well as those more fully described in our filings with the Securities and Exchange Commission including our annual report on Form 10-K that we filed on February 26, 2016.

The forward-looking statements in this presentation are based on information available to us as of today, and we disclaim any obligation to update any forward-looking statements except as required by law. We also remind you that this call will include a discussion of GAAP and non-GAAP financial measures.

The non-GAAP financial measures are not intended to be considered in isolation or as a substitute for results prepared in accordance with GAAP.

A discussion of why we present the non-GAAP financial measures and a reconciliation of the non-GAAP financial measures discussed in this call to the most directly comparable GAAP financial measures are included in our press release issued earlier today.

Joining me for today's call are Philippe Courtot, Chairman, President and CEO of Qualys; Nancy Hsiang, VP and Corporate Controller, who will run through our financial results from the first quarter and Melissa Fisher, our newly appointed CFO.

Philippe?.

Vulnerability Management, Policy Compliance, PCI and Web Application Scanning. More importantly, he stressed how important it is for Qualys to continue to leverage our platform by adding to our suite of solution. He is in fact eager to reduce the number of security vendors he has under contract and views Qualys as one of its key strategic vendor.

We believe market concerns about putting security solution on the cloud platform are behind us and has created tremendous data wins for our business on both the top and bottom line. As I noted, we have released on schedule and on budget the agent technology that we believe permanently change the Vulnerability Management landscape.

One indicator of the pent-up market demand for new approaches is that the uptake of our Cloud Agent is an order of magnitude faster than for any other product released in our history.

We believe it is our technological lead as well as the extensibility of our platform that has prompted MSSPs and outsourcers to feature Qualys products in their offerings. Let me describe the new MSSP arrangement we've reached in the first quarter.

While the existing days of renewing end customers we share, this MSSP has extended their commitment to Qualys by entering into a multi-year with six quarterly payments instead of individual contract for each customers.

I am pleased to report that these improve our revenue productivity (11:34), as revenues that would have been subject to allowing (11:36) renewal dates is now on a quarterly program. The streamline arrangement also reduces our cost.

Expanding the scope of our capabilities also allows customers to standardize on the Qualys Security platform, while seeing more and more enterprises adopt multiple solution in their initial contract with us.

We have already shared that the majority of our customers have more than one of our offerings, and we believe that the increasing occurrence of standardization arrangements, both with customers and with partners, will result in our winning a larger share of the security wallet, and allows us to outpace the core VM market growth rate, which I anticipate at 10%.

I will note that these larger contracts and renewals with upsells can sometimes take a bit longer to close. At the end of the first quarter, a few renewing customers took longer than we expected to close the upsell components of the contract, which delayed the issuance of this purchase order.

Most of the deals were received early in the second quarter. So the differential is days, not months. You will note the effect of their timing in lower-than-expected backlog growth and deferred revenues in Q1. However, there is no change to the revenue we expect to recognize from these contracts for the full-year 2016.

With upsells becoming larger, in some cases, multiple of our customer (13:15) VM subscription. We have decided to decouple the renewals from the upsell negotiations. Renewals will be executed when they are due and upsell will be completed separately. We expect these will restore the price stability of the renewal revenue streams.

However, in general, the timing of larger contract encompassing in multiple products is harder to predict, reducing somewhat our visibility of the timing of revenue streams for new business and upsells.

As this is a sign of our becoming a more strategic vendor to our customers, increasing our shares of our customers' spend, this is a trade I'm quite happy to make. We're making terrific progress in our evolution from a single-product company to a strategic platform vendor, with multiple integrated solutions.

One key aspect of scaling up is adding talent. I could not be more pleased to introduce our newly appointed CFO, Melissa Fisher, who joined us last week. Melissa is joining Qualys at a pivotal time in our history. She brings a unique blend of tech industry operational experience and Wall Street savvy.

She was most recently at Zynga, and before that, at Digital River, an enterprise SaaS software company. Before moving into industry, Melissa built a tremendous amount of public markets experience in her 15 years career in investment banking.

She worked with technology companies on both M&A and financing for such banks as Goldman Sachs and Bank of America. Melissa will lead all the elements of the company's financial organization including finance, accounting, investor relations, treasury and tax. Welcome to Qualys, Melissa..

Thanks, Philippe. I'm thrilled to join the Qualys team at this exciting time as the company continues to leverage its cloud-based platform to be a strategic partner to its customers.

I've spent most of my career working with software companies, and it's unusual to find a SaaS company so focused on customer success and yet which developed early on a sustainable, scalable business model with both leading margins and multiple levers of growth in front of it.

I see Qualys as a pioneer and visionary, having built a disruptive offering that eliminates the infrastructure operations and maintenance costs of traditional enterprise security software solutions.

Like we've already seen with commercial software, the security industry is ripe for the adoption of cloud-based solutions, and is in much need of vendor consolidation.

Qualys is uniquely positioned with its platform to easily enable additional features and applications, thus becoming a one-stop shop for IT security and compliance solutions for its customers, a significant competitive advantage.

This added value can enable higher growth for Qualys as it enlarges its market opportunity by expanding the scope of the solution and coverage to additional devices. I look forward to leading the dialogue with our investors and analysts in the coming weeks about our competitive positioning in the market, our business and opportunities for growth..

Thanks, Melissa. I look forward to working with you, and welcome. We are indeed at an exciting point in our history. Qualys has evolved from the point solution vendor to a strategic platform.

Today, we are becoming recognized as the disruptive cloud-based security and compliance platform, delivering centrally-managed and self-updating security and compliance solutions.

While IDC estimate that the vulnerability management market will grow at 10% in 2016, we are sustaining top line growth at about twice that rate by offering a rich set of incremental capabilities such as ElasticSearch, dynamic dashboards, AssetView, Cloud Agent and ThreatPROTECT, which had our customers deployed state-of-the-art security and compliance at a much lower total cost of ownership.

We are seeing strong demand for agent technology as we see both our existing and new clients driving rapid uptake rates. We believe our platform provide us with a unique ability to benefit from the trend toward vendor consolidation, which we're beginning to see in our expanding deal sizes and the standardization on Qualys by MSSPs and outsourcers.

We have enhanced our management team with the addition of Melissa as well as new business development, sales, and product marketing talent. We've continued to add the executives that we believe are necessary to support our next phase of growth. We could not be more pleased with the talent we're attracting. We are off to an excellent start for 2016.

Nancy will now take you through the details of the first quarter financials.

Nancy?.

Thanks, Philippe. And good afternoon. Total revenues in the first quarter were $46.2 million, which represented 23% growth over the first quarter of 2015. As Philippe noted, our first quarter results include the benefit of the new arrangement with one of our MSSPs.

The change resulted in some revenues that would have been recognized over the course of 2016 being additionally recognized in the first quarter. Excluding the effect of this change, our revenue growth would have been at the high-end of our guidance at 21%.

Our current deferred revenue balance was $102 million at March 31, 2016, 15.5% greater than our balance at March 31, 2015.

While there were some negative impact from the new contract terms associated with the MSSPs we've mentioned, specifically the effect of quarterly billing instead of annual billing, we also had a few renewals that we expected would close in Q1, push out a few days into Q2.

As Philippe noted, these delays were the result of the longer procurement processes associated with customers purchasing additional solutions on top of their renewing subscription. While the timing impacts our current deferred balance as of March 31, it does not impact our expectations for the contribution from these accounts for the full year.

The U.S. represented 71% of revenue, slightly higher than the first quarter of 2015. Foreign currency continue to present a headwind, which we expect to decline over the course of the year, becoming negligible by year-end. Moving down the P&L, for the first quarter of 2016, we are reporting both GAAP and non-GAAP results.

A full reconciliation of all GAAP to non-GAAP measures is provided in the financial tables of the press release we issued earlier today and is available on the investor section of our website.

To provide investors with additional information regarding our financial results, we disclose adjusted EBITDA, adjusted EBITDA margin and free cash flows, which are non-GAAP measures. We have provided a full reconciliation table in our press release. GAAP gross profit increased by 25% to $36.8 million in the first quarter of 2016.

GAAP gross margin was 80% compared to 79% in the same period last year. Non-GAAP gross margin was 80% in both periods. Adjusted EBITDA for the first quarter of 2016 increased by 35% to $16.1 million compared to $12.0 million in the first quarter of 2015. Again, the MSSP contract change had a positive effect since revenues were higher.

But excluding this impact, adjusted EBITDA would have still increased over the first quarter of 2015. Adjusted EBITDA margin increased to 35% in the first quarter of 2016 compared to 32% in the prior-year first quarter. Margins are expanding as we add services to our platform and get better at leveraging channel partners.

Net cash from operations in the first quarter of 2016 increased by 71% to $17.1 million, compared to $10.0 million in the same period in 2015. Free cash flow generated in the first quarter of 2016 was $12.8 million compared to $3.8 million in the comparable period of 2015.

The significant change is a strong indicator that our business is scaling up successfully. In the first quarter of 2016, capital expenditures were $4.2 million, compared to $6.1 million in the first quarter of 2015. In the second quarter of 2016, we expect capital expenditures to be in the range of $5 million to $6 million.

Moving on to earnings per share. For the first quarter of 2016, GAAP EPS was $0.13 per diluted share versus $0.08 for the first quarter of 2015. Non-GAAP EPS was $0.21 per diluted share in the first quarter of 2016, up from $0.15 in the first quarter of 2015 and also ahead of our guidance of $0.14 per diluted share to $0.16 per diluted share.

Now turning to guidance, starting with revenues. For the second quarter of 2016, we expect revenues to be in the range of $47.6 million to $48.3 million. At the midpoint, this represents 20% growth over second quarter 2015 revenues.

For the full-year 2016, balancing the effect of the increased revenue from the new MSSP arrangement and the momentum we are seeing in the business with somewhat uncertain timing of increasingly larger contracts, we are reiterating our outlook for revenues to be in the range of $195.6 million to $198.6 million.

At the midpoint, this represents 20% growth over 2015 revenues. As to earnings per share guidance, we expect GAAP EPS for the second quarter of 2016 to be in the range of $0.06 per diluted share to $0.08 per diluted share, and non-GAAP EPS is expected to be in the range of $0.15 per diluted share to $0.17 per diluted share.

For the full year of 2016, we are reiterating our expectations for GAAP EPS to be in the range of $0.36 to $0.41 and non-GAAP EPS to be in the range of $0.74 to net $0.79.

Our second quarter EPS estimates are based on approximately 38.4 million weighted average diluted shares outstanding, and our full-year 2016 EPS estimates are based on approximately 38.9 million shares outstanding.

For the second quarter and full-year 2016, we have used an expected effective GAAP tax rate of 37% and an expected effective non-GAAP tax rate of 36%. With that, Philippe, and I would be happy to answer any of your questions.

Operator?.

Thank you. And our first question comes from the line of Sitikantha Panigrahi of Credit Suisse. Your line is now open. Please go ahead..

Oh, thanks. Melissa, congratulation on your role as CFO..

Thank you..

So, Philippe, I just wanted to dig into this billings weakness. How much of that as a percentage of your business? And then also you talk about some of the deals miss, did you close all the deals that in Q2? And I just have a follow-up..

So, it's essentially, I would just say it's a combination of the fact that we wanted to do quarterly payments instead of yearly payments with these larger MSSPs. That's one factor. The other factor is that, which is a good thing, is that we are seeing larger upsell with our renewals.

And some of these renewals which arrive at the end of the quarter have since dragged because of these additional purchases which put them back into procurement, and that's a few delays. And so that shifted the business. But as I mentioned in the script, this is not months.

This is days, and in fact, yes, we did receive the majority or most of these orders if not all, and we expect to have them all. So this is why we took some measures now to decouple the revenues, the renewals, be it from the upsell, and insisting that our customers renew at the date at which they will renew.

And if the upsell come later, then so be it, instead of having to drag everything together. So that's a new measure that we've implemented with our sales force..

And then just digging into your – the VM market, you said it's growing around 10%.

What was the growth rate for you guys in Q1? And if you could give some color in terms of what you are seeing in the market in terms of competition or pricing pressure, anything you are seeing there?.

Yes. So, in fact, yes, IDC projects that the growth rate of the overall vulnerability management and application is about 10% growth rate and were essentially growing. And we have been by the way growing at that rate for the last eight quarters, nine quarters, two years.

And we believe we can absolutely maintain if not exceed that growth rate, and it's because of the addition of the new services which now fall into the bucket of (27:26) monitoring, the Cloud Agents and now ThreatPROTECT, which by the way, went GA as we had announced, went GA this month. And we are expecting this quite a big uptake from ThreatPROTECT.

We have already the big pent-up demand and quite a few trials, which I think will turn into purchase order pretty quickly.

So that's the new dynamic, if you prefer on VM, as I mentioned also earlier, our Cloud Agents are not only significant upsell potential for the VM, but also brings real-time capabilities to VM and have become a significant differentiator.

So, while we see our competitors fighting and trying to reduce the price as they compete (28:18) capable of really maintaining our pricing..

And just to clarify, Siti, when we were talking about the market versus our growth rate, we've been growing at double the market rate and we don't see any reason that should slowdown..

Correct. That's what I think I said. Yeah..

Thank you..

Thank you. And our next question comes from the line of Steve Ashley of Robert W. Baird. Your line is now open. Please go ahead..

Terrific. Just like to go back on Siti's question regarding the impact of the slipped deals and then the one MSSP deal on deferred revenue. Can you give us any idea how many millions of dollars we're talking about associated with those events? Is it a couple million dollars? Is it more than that? Any quantification there would be helpful..

Yes, we're under a couple of millions of dollars, yes..

Okay..

And it's the combination of both, so....

Right..

Excluding the impact of the MSSP as well as the slipped deals, deferred revenue growth would have been largely in line with the historical period..

Yeah, so maybe a couple of million higher. That's perfect.

And then I was just going to ask on the CAP business, what was the impact in the period? Meaning, was there actually billings and did you sign deals? And can you tell us a little bit more color on that?.

Yes, no, we did sign deals. They are part of the billings and we see significant pent-up demand to give you – so this is something that we expect to accelerate and to continue. So a huge success, huge success, from, by the way, every components of our business, which means the large enterprise, the mid-market and the SMB.

Everybody is taking on the agent. And we saw first of all to be a bit more with – we see more today an uptake of the agent for the VM and now we're starting to see an uptake on the agent on the policy compliance application as well..

Perfect. Thank you..

Thank you. And our next question comes from the line of Sterling Auty of JPMorgan. Your line is now open. Please go ahead..

Yeah. Thanks. One question and one follow-up. I guess it wasn't clear. You usually give vulnerability management as a percentage of the total.

What was the percentage this quarter?.

So the split between VM and non-VM is still largely about 80-20 as we have with previous periods. But we wanted to point out that the characterization is changing. The VM business is evolving and a lot of our new services are VM related; Continuous Monitoring, Cloud Agent, ThreatPROTECT.

And so we expect that VM and non-VM will continue to both grow at similar paces. So it may still be 80-20 and....

Yeah, and I could add even some more specific, Sterling, and I think we discussed that as well at the last earning call. If you look today at the agent, the agent does two things.

One is that it increase the value of our existing renewal base, as people are adding the agent to the devices that they are currently scanning, and that essentially creates an uplift to our subscription. They also bring us now to two new market for us, which are the endpoints and as well as the elastic cloud environment.

So that's a significant new driver of our business. Other example like the Continuous Monitoring which we see a continuous adoption of the Continuous Monitoring, at about 20% of the VM subscription for those who adopted Continuous Monitoring. ThreatPROTECT was priced out at 30% of the current subscription.

So as you can see, we've build significant accelerator around our VM business and the thing to point out here is that this is an extremely leveraged business. It doesn't cost us significant more to essentially provide this new capabilities to our customers. The purchasing for them is very easy. They do the trial. They like what they see.

And then they just send us a purchase order. So it's very efficient and effective model that we have built.

Okay?.

Gotcha. And then as a follow up, if I add a couple of million into kind of the revenue plus change in deferred revenue, I'm still seeing a pretty healthy deceleration.

I want to connect the dots between that along with, sales and marketing I imagine was a little bit light as some commission expenses probably slipped into the second quarter on the timing of those deals, but also the commentary about deal sizes growing and some of the factors that would intimate that maybe we're seeing some acceleration in the fundamental business..

I'm not so sure that I understand here your meaning – the acceleration that you mean, so what's – I'm not sure that I understand exactly the point here..

So if I add $2 million into – if I look at revenue plus a change in deferred, if I add $2 million to account for the MSSP deal and the slipped deals, it would put kind of a proxy for billings at about $50.3 million, which would be up about 14% as compared to through most of last year. It was growing anywhere between 20% and 29%.

So I didn't know if there was other structural changes in terms of the billings on other contracts that just aren't showing up in deferred revenue? Because I wonder, what's going to be the better indication of the top line revenue growth sustainability? Is it what's the top line growing today or is the revenue plus change in deferred maybe a leading indicator of perhaps some slowdown in revenue growth as we move through the year?.

So I think the couple of million is actually a little low, as probably the combination of both the MSSP deal plus the slipped deals into Q2 is little bit more than that. I think the other thing that we should be considering as well is that historically most of our subscriptions have had annual bulling.

And so this MSSP deal specifically was a quarterly billing arrangement. So that changes a little bit of how we look at deferred revenue..

Yeah, and I would add also that we have a very healthy pipeline. So as we see – we see still a very strong business. So I think this is more the fact that today timing is becoming a much bigger element than it used to be in the past and I think we'd discussed that also earlier on.

So the timing of big deals, when they arrive, whether they arrive at the end, in the beginning or in the middle of the quarter, all of that are starting to be significant, as we do million dollars of sales. For example, today, which was a year ago was essentially extremely rare. So, our business has changed in many ways and for the better.

I think we have a very, very strong pipeline. So we see the market fundamentally coming our way. And let me reemphasize again that we don't see our VM market going down as some people have predicted. We see the market going up significantly.

The VM market is becoming very strategic and for one very simple reason, today, companies are realizing that you cannot secure what you don't know. What Vulnerability Management does is it's allowing you to identify all of your global IT assets and Qualys does that better than anybody else.

And then from there, you want to ensure that you have a good view on the security and compliance of those assets, that you understand the vulnerabilities, and now with ThreatPROTECT, we allows you to prioritize the remediation according to the threats of theirs. So that's another significant advancement. It's totally native.

Our current customers today could only do that by either buying additional solution or just putting the data into Splunk and doing the correlation themselves. Now all of that is native on Qualys, and that's what I've mentioned earlier, that we see a significant pent-up demand this solution, Cloud Agent and ThreatPROTECT.

Okay?.

Thank you..

Thank you, and our next question comes from the line of Michael Kim of Imperial Capital. Your line is now open. Please go ahead..

Hi. Good afternoon, guys and welcome Melissa to your appointment to your new position..

Thank you..

So, regards to the MSSP channel, do you see an underlying shift towards multi-year and quarterly billings away from annual, and more broadly, with the indirect channel, are you continuing to see that becoming a larger portion of the mix?.

Yes. So in fact the MSSP channel, we like it very much. And as you may recall we have already a significant share of the MSSPs, and we believe we are going to continue adding more. For us, we're becoming very strategic for them, because it's a natural complement. The services that we provide are a natural complement of their business.

We also add additional profitability, and that's the reason why we see them more and more looking instead of having – like they were doing in the past, buying – a customer at a time, they are really coming to us to essentially negotiate a longer-term contract, which of course gains some preferable treatment in terms of the pricing that give us significantly more predictability, and I would say exclusivity also to our contract, because of course they are not going to provide any other solution than Qualys.

So, we see that as a recognition. One of the fact that we are out-of-the-box essentially, highly scalable, we deploy globally. We integrate very easily with our services. So that's a huge position of strength and of probability.

So it's also very cost-effective for us, because we don't need of course to have sales people out there, pushing our solution as it comes with the (38:44) of the service provider's offering. And they have huge sales force as well. We see that same trend now happening with the outsourcers, which see Qualys as a very strategic component.

And to finish, on the channel, we see the traditional enterprise channel, which are very much interested of Qualys, because now the breadth of product and because of the platforms. So we see also the traditional channel coming our way.

So bottom line, as I mentioned earlier, we do anticipate to see more, and we have been seeing an increased market, increased volume from our channels. Now, we don't see that yet that much on the revenue side, because we, as I mentioned earlier, are doing very big upsell with our current and large customers.

So that in a way mask the fact that a lot of new business for example is coming now through our channel partners.

But of course, it's not yet enough volume growth there to compensate for the big large upsell that we're seeing with our current installed base, which again – and direct partners, which again is quite sizeable as we have 60% of the Fortune 100 today..

And with regards to the upsells, can you categorize what's driving the larger upsells? Is it primarily focused on VM? Or are they taking on additional Qualys Solutions, Policy Compliance or Web App Scanning? Any color would be helpful..

It's a combination. It's a combination of everything. First of all, as we've mentioned many, many times, we are still far being penetrated fully with all of our customers. For example, we have some customers, you know, large financial institution that deployed Qualys and that representing seven times the initial VM subscription.

So it has been a long process to get to this huge deployment. The advantage of Qualys here is that we deploy at a scale that no competitor can follow us. So that's very good for us. So we have very large external VM.

But also, of course, some customers are ultimately adding the Policy Compliance, the Vulnerability Management application, again, the Cloud Agent, and very soon ThreatPROTECT. All of that creates naturally large upsell on the customer base, which today is pretty big.

So, we have very good upsells on the enterprise market, on the mid-market; much less upsells on the low-end of the marketplace, the SMB, because this is more like an all-in-one solution. But on the SME and the enterprise, we see very healthy business of upsells..

Great. Thank you very much..

Thank you. And our next question comes from the line of Rob Owens of Pacific Crest. Your line is now open. Please go ahead..

Great, and thanks for taking my question. Curious how the quarter put out from a linearity standpoint..

Oh. Okay.

So Nancy, do you want to?.

So in Q1, it actually was okay. Excluding the impact of MSSP and these large deals, our revenue actually ended up in the high end of the guidance anyway. So it proves that the activities this quarter really didn't have a huge impact on linearity. It does a little bit going forward. The timing of when these larger deals are closed will have an impact.

But in Q1, it didn't have much..

So to that point then, Nancy, what happened to DSOs, because they seemed to slip quite a bit? And I would think given your relationship with the MSSP and the payment terms associated with that, you would have shown better DSO. But given that slip, it just points to weaker linearity. So just trying to, I guess, understand the two different comments..

I'd have to take a look at the DSOs, but I – from a revenue standpoint, it didn't really have an impact.

I think we have had continued work to do on the collection side of things that carried over a little bit from year-end, that you're probably still seeing a little bit of that impacting or you're still seeing some of that on the March 31 balance sheet..

Okay. Great.

And then in terms of the growth, the 20% year-over-year, can you help me understand what's coming from existing customers in terms of, you know, renewals, upsell or expanded opportunities versus new customers and what they're driving in terms of growth? And I know it's not something you've historically split out, but any color would be helpful.

Thanks..

Yeah, so what I would say here, this is part of maybe a much bigger discussion here, as it's very clear that some the guidance that we've provided with regards that because they do not represent anymore really the Qualys business.

One example of that is the number of customers which have acquired more than one solution which is around 62%, if I remember correctly. But that doesn't represent at all anymore, you know, the adoption.

We know that most of our customers, they're adopting our new solution, but the SMBs again, being an all-in-one, there's not much upsell there and they do represent the sizable segment of our customer base. So, we do (44:09) provided the mix between existing customers and new customers.

But, I think now with Melissa coming on board, I think one of her tasks will be to really sit down and absolutely look at what is the color that we should be providing with you guys..

Great. Thanks for taking my questions..

Thank you. And our next question comes from the line of Gur Talpaz of Stifel. Your line is now open. Please go ahead..

Great. This is actually Chris Speros on for Gur.

Can you guys talk about traction you're seeing with your secondary solutions, specifically the WAS? And are customers outside of your VM install base expressing interest in those products?.

Okay. So, the WAS, the WAS specifically, as we discussed, you know, last time on the earning call, it's doing well. We are expecting that component of the marketplace to accelerate with the combination of our WAS.

If you recall when introduced the WAS, the web application firewall quite a while ago and we put it back because we wanted to do some more engineering work on it.

We still believe (45:25) that we are on track to bring that at the end of the summer, and I think the combination of WAS and WAP (45:33) will essentially bring us into defining a new category, which will be the Web Application Security instead of making the distinction between Web Application Scanning on one hand, which is to identify the vulnerabilities on your Web Application and Qualys does that at a scale that again none of our competitors follow, but then adding the WAS, which is the remediation so being essentially WAS and WAP (45:56) together and that's I think will really provide a very strong offering in the marketplace..

Great. And one follow-up if you don't mind.

Are you guys seeing any benefit from McAfee discontinuing of their VM product?.

Oh, significant. In fact, today we have been, in fact replacing gradually the large installation of McAfee. So, I could divide that McAfee market into two large accounts and the more smaller accounts.

So, on the large account, Qualys was always essentially the market dominant, but it was taking time because to displace this kind of solution once they've been established takes time.

So, now of course with the fact that they have thrown down the gauntlet, abandoned that marketplace, this is in fact accelerating the demand for the Qualys solution for the large accounts. And they were very uniquely positioned against our competition, because of scale, again.

On the mid-market, that's where we're competing more actively with our competitors there. So, for us, it's very good news, because it accelerates the adoption of Qualys by these large McAfee accounts since they have abandoned them and who are contributing quite a few of them..

All right. Thank you..

Thank you. And our next question comes from the line of Srini Nandury of Summit Research. Your line is now open. Please go ahead..

All right. Thank you for taking my call.

Philippe, can you talk about the competitive landscape for a moment? How do you see Rapid7 and Tanium in the market? And do you see them in your accounts and can you talk about the win loss rate if you're competing against them? And in general, can you also talk about your deal cycles last one year? Have you seen any venting (47:51) of the deal cycles over the past one year? Thank you..

What was the last question? If I see the deals increasing? Or....

No. The deal cycles. The deal cycles..

Oh, the deal cycles. Okay, so to speak about the competition, today we see Rapid7 – they're strong, where they have always have been strong, which is in the mid-market and we compete very actively against them and I would say successfully. And we do not see them being really capable of moving into the cloud, because that's a huge undertaking.

They are made, as I'm sure you know – it has been published by them they try to move more into analytics as a company. So, that's the direction they take. And so, ultimately, I think this is their call competing against Splunk. Of course, this is not the direction that we have taken.

Regarding – you mentioned Tanium, Tanium is trying to enter the security market. So Tanium is not really a security play.

Tanium (48:56) was a replacement of BigFix, where instead of having to build this enterprise, if you prefer infrastructure to deliver the BigFix agent, they went with a peer-to-peer architecture which makes it much easier to deploy patches and also to query these agents to identify what are the searching across your inventory.

So, we compete extremely well now with Tanium with our asset view capabilities, so we can give enterprises two second visibility of their global IT assets. So, we're entering their market essentially. And on the vulnerability management and policy compliance side, we have a far better solution than Tanium.

But, they are trying to enter our market, but I think we do not see them ultimately as a long-term competitor there. And we have essentially another competitor which is Tenable (50:01), which is not public. And which is trying to move into the cloud, but that's a huge undertaking for them.

They are not also very present of the large enterprise, which is a marketplace which we dominate. And we compete with them much more on the consulting side and as well on the federal side, which for us is a very new market that we are entering. As we indicated earlier, we are not counting on much revenues from the federal side in 2016.

But, we are very now focused at essentially getting our share of the federal market..

Philippe, what about the deal sizes?.

Oh, the deal sizes for this have increased significantly. So we start to really do deals which from the get go are $0.5 million and up, which is something relatively new with Qualys. And as far as us selling cycle, I think it's about the same. I think I don't see the selling cycle having changed much.

It varies, of course, depending on a large enterprise. It's typically a one-year selling cycle. And on the mid-market, it's about less than six months. And on the SME market, it's less than three months..

All right. Thank you. Thank you very much for the detailed explanation..

Thank you. And our next question comes from the line of Jack Andrews of D.A. Davidson. Your line is now open. Please go ahead..

Good afternoon. Thanks for taking the question. You announced the addition of a new Chief Marketing Officer during the quarter.

I was just wondering if you could talk a little bit about what his priorities and strategic initiatives are going to be focused on?.

So, today as I mentioned earlier we have embarked in two of the positioning of Qualys this much more of (51:50) platform. The philosophy of Qualys has been always that we don't advertize things until we have reached a point where we can really claim it.

So today, as you will see, essentially a new positioning of Qualys as these disruptive cloud security and compliance platform which essentially consolidates today about six security and compliance enterprise solution and of course multi-com (52:24) so that's the new positioning that we're taking which you're going to see starting at the Gartner conference and that's where we're focusing essentially on the position of Qualys.

Then, all that will be followed by a reach out to the CIOs as today we can essentially answer the question that any CIO asks which are these three question, we can give them the global view of their assets inventory. Second, we can provide them with a continuous view of the security compliance pressure of those assets.

And third, we can essentially aid them in their vendor consolidation efforts and save them millions of dollars, because we eliminate a lot of these enterprise security solutions, security and compliance solution which have their own infrastructure that you need to – that companies have to deploy and to maintain.

So, I think we're extremely well positioned here, as we've mentioned earlier..

Thank you. And just as a quick follow up, are you – you mentioned foreign exchange was a modest headwind in the quarter.

Are you able to quantify that at all?.

No. We didn't say it was a modest effect, in fact we had, if you prefer, last year – because we have very strong presence in Europe today, so we had a big foreign exchange (53:49) headwind last year and it continues essentially in Q1 and Q2 and will gradually disappear by the end of the year.

That's where we are in what we're talking here about is a bit less now than the couple of percent..

Thank you..

Thank you. And our next question comes from the line of Matt Hedberg of RBC Capital Markets. Your line is now open. Please go ahead..

Thanks. This is actually Matt Swanson on for Matt. You talked a lot about the strong customer reaction of ThreatPROTECT.

Could you maybe go over some of the key features that are making that such an attractive solution? And then, with that large pipeline maybe how you see that materializing throughout the year?.

So, yeah. So one of the challenges that we've had before is, if you look at our customers, the number one challenge that, especially large customers is,it's a bitless true albeit still there for the smaller customers.

But, large customers, you're now dealing with millions of vulnerabilities, in some cases hundreds of thousands, and you need to prioritize. You cannot do everything at once. So, anything which can help customers prioritizing the vulnerabilities – the remediation of the vulnerabilities is something which is absolutely needed.

So, in the past, because we didn't have ElasticSearch of sifting through large versions of vulnerabilities and matching that correlating that with threats, which are known out there. Like, for example, we know there's an exploit in – there is an exploit leveraging vulnerability XYZ.

So, for us to do that natively into Qualys was very difficult, because we didn't have these into our platform ElasticSearch capabilities.

Now what our customers were doing, they were essentially going, there are two solutions, either to go to solutions like we're providing these capabilities by extracting the data from Qualys, correlating the data from threat sources, and then providing them that ability then to sort through.

That was one way, which of course added dollars, significant dollars to the subscription, plus the fact that having to maintain another application, another database, et cetera.

The other way they could do it was to go to Splunk and take the data of Qualys, put that into Splunk, and then bring into Splunk the threat information and then started doing the correlation of that information. Again, another additional cost, significant additional cost as well as having to maintain and be vulnerable (56:33).

Now, all of that is native on Qualys. So needless to say, those customers who are already using these solution that I mentioned are very eager to switch to Qualys. So, that's an easy sell. It's almost an OI (56:46) that we can make here and new customers are very attracted to that, because again, it's native into the platform.

So we have today, and we know that for a fact we have a big demand, it went GA at the end of this month, and we're expecting to see orders materialize. Of course, it's too early for us to give some trend. I mentioned earlier that we charge about 30% of the VM subscription of our customers, so that's not an insignificant upsell.

But, still at that pricing is more cost effective than using Qualys than going through other solutions..

So it's safe to say at this point, it's not included in any guidance?.

We never typically do in our guidance include any kind of new services. So, we just try – we're cautious about that, because until we have enough data points on the – enough data points, it's much more difficult to predict the curve, and then of course, from ASV translating that into revenues.

As you know that's one of the disadvantages of the SaaS model, is that we just don't take the revenue upfront, like enterprise software. We just take the revenue across. All that makes that in term of translating into revenues, it takes some time..

All right. Thank you for your time..

Thank you. And our next question comes from the line of Erik Suppiger of JMP. Your line is now open. Please go ahead..

Yeah. Thanks for taking the question. Couple of questions on this MSSP. Can you explain how the nature of that relationship changed? Did they become a much bigger MSSP customer? Or is it just that you wanted a more consistent revenue stream? And how much was the impact – well, first, I'll let you answer that, and then I've got a follow-up..

Yes. The answer to this question is both. Yes, it's – give us more predictability. It's a win-win for both. This was at their request, by the way. This is not us coming to them. This is them coming to us.

Essentially, they see Qualys more strategic, so they're committed to us, so they believe they can essentially grow more business, and so I think it's a win-win for both of us..

Was the impact from the MSSP, in terms of the deferred revenue, was the impact from the MSSP bigger or smaller than the impact from the deals that had slipped?.

Smaller..

That was a smaller portion? Okay.

And then, can you give us a sense for what the growth was with your traditional emerging products, the Web App Scanning and the Policy Compliance?.

So, we have been growing in the – we've been essentially growing the VM in the 20% range and these other ones was around 30% growth rates..

Okay. And then....

And again, it varies today. Because we're not as – today, because we do bigger sales, you know, today, it varies – well, not anymore. Again, this is a business which has become – which is a good thing – which has become a little bit more lumpier in the sense that we do these bigger upsells, both in WAS, both in policy compliance, et cetera.

So, it varies from quarter-to-quarter now..

And our next question comes from the line of Robert Breza of Wunderlich Securities. Your line is now open. Please go ahead..

Hi. Thanks for taking my question. Nancy, I was wondering if you can help us reconcile the EPS beat. If we – you take your guidance, you beat by about $0.06 yet left the full year unchanged.

So, essentially it would tell me that you're expecting those costs that you were able to avoid in the first quarter to occur, you know, throughout the remainder of the year. Can you just help us reconcile the $0.06 beat and not passing that beat on through to the full year number? Thanks..

So the beating – the revenue guidance for full year hasn't changed and we still expect to increase our expenditures in absolute dollars sequentially in the rest of the year. So, really at this point, we're still relatively early in the year.

We've got a new CFO on board, and we just thought it would be best – better judgment to just sort of maintain our EPS guidance for full year..

Okay.

And then, maybe as a follow-up, I think it's, given the commentary and the questions around the MSSP and the quantity, can you just quantify what the MSSP impact was to the quarter and the full year?.

No, that's not something that we're going to provide in detail because it – we talked about it having an impact in Q1 and it is going to have an impact on the rest of the year as well. But given the momentum of the business, the uncertainty of timing in larger deals, we've left our revenue guidance as it is as well.

This is something, as I said, we're still relatively early in the year and we'll look at this as the year progresses..

Thank you..

Thank you. And I'm showing no further questions at this time. I would now like to turn the call over to Mr. Philippe Courtot for closing remarks..

Okay. So, thank you very much, and so again, so we are looking – we have a very strong pipeline.

As I mentioned in the last call, we are now seriously looking at some potential acquisitions or partnerships or OEM relationships so we could accelerate some of the engineering development that we currently have or accelerating our entrance into new markets. (1:03:05) development.

So, I thank you for attending our Q1 earning call and we look forward to seeing you, all of you, in early June at the D.A. Davidson Technology Forum in New York City, at the Bank of America Technology Conference in San Francisco, and the Robert Baird Conference in New York City. And with that, good afternoon. Thank you..

Ladies and gentlemen, thank you for participating in today's conference. This concludes today's program. You may all disconnect. Everyone, have a great day..