Is Qualys Stock a Buy or Sell After Its CFO Dumped Nearly 7,000 Shares?

Qualys CFO Joo Mi Kim executed a direct open-market sale of 6,799 shares on Feb. 4, 2026 for approximately $873,369.30 at a weighted average price of $128.46, reducing her direct holdings to 88,489 shares (a 7.14% reduction) under a Rule 10b5-1 plan. The sale, materially larger than her recent median transactions, coincided with company guidance that forecasted 2026 revenue of $717M–$725M (7%–8% growth), below recent 10% growth and prompting a sell-off that drove the stock to a 52-week low of $107.17 on Feb. 9. Qualys carries a $4.0B market cap with TTM revenue of ~$669.1M and net income of ~$198.3M; the guidance-driven slowdown and insider disposition amplify negative investor sentiment and have meaningful near-term implications for the share price.

Analysis

Market structure: Qualys' guidance-driven selloff reallocates near-term demand to larger, faster-growing cyber vendors and pure-play XDR providers; winners include deep-pocketed incumbents (e.g., PANW/CRWD) that can capture enterprise spend if Qualys' 7–8% guidance materializes below expectations. The 16% peak-to-close drop inside two trading days and P/E ~20 imply forced liquidation and sentiment-driven supply hitting order books; delta-driven options sellers may amplify intraday volatility while corporate bond spreads for software remain largely untouched.

Risk assessment: Key tail risks are (1) an enterprise IT spending pause that shrinks renewal ARR by >5% YoY, (2) a large breach at Qualys or customer defection that compresses gross retention below 90%, and (3) increased competitive price pressure from XDR aggregators; any of these would push valuation below 15x and test $85–95 support over 3–12 months. Immediate (days) risk is sentiment and liquidity; short-term (weeks–months) risks center on guidance updates and billings cadence; long-term resilience hinges on net retention and multi-year contract mix.

Trade implications: Tactical opportunity: the selloff looks like a company-specific repricing, not secular demand destruction — downside beyond $95 would signal fundamental deterioration; absent that, asymmetric upside exists to $140–160 if management reiterates execution. Use a barbell: small cash long (2–3% NAV) between $105–115 with stop at $95, plus a capped-risk call spread (Jan 2027 100/150) sized to 0.5–1% NAV to capture rebound while limiting downside.

Contrarian angles: Market is conflating guidance slowdown with loss of secular product-market fit; consensus misses Qualys' sticky subscription revenue and cross-sell runway into patch management/asset inventory where gross margins are high. Historical parallels (post-guidance resets like SPLK/ZS) show 6–12 month recoveries when ARR and retention hold; downside risk is real if churn ticks >200bps, so size positions to triggers (ARR growth <5% or gross retention <90% over next two quarters) rather than price alone.

Key Decisions for Investors

• Establish a tactical long position in QLYS equal to 2–3% of portfolio NAV by accumulating between $105 and $115; set a hard stop-loss at $95 and a 12-month target of $140–160 contingent on ARR stability and margin guidance.
• Buy a capped upside options position: QLYS Jan 2027 100/150 call spread sized to 0.5–1% NAV to capture asymmetric upside while capping premium paid; if implied volatility >40% consider reducing size by 50%.
• Initiate a pair trade to isolate company risk: long QLYS (2% NAV) vs short HACK ETF (1.5% NAV) to express idiosyncratic rebound while hedging sector beta; unwind if QLYS underperforms HACK by >10% over 30 days.
• Reduce exposure to high-multiple small-cap cyber names by 25% in favor of larger incumbents (PANW, CRWD) where growth/durability >8% YoY; reallocate within 30 days as guidance clarity emerges.
• Monitor four data points over next 60–90 days before increasing allocation: (1) billings growth rate, (2) net/gross retention >90%, (3) R&D + S&M cadence vs prior guide, and (4) any large customer losses >1% ARR — add to longs only if these metrics hold.