# Federal Agencies Accelerate Vulnerability Remediation

Qualys reported Q3 2026 revenue of $188 million, up 10.7% year over year, and raised its full-year adjusted EPS outlook, citing federal demand and adoption of automated, AI-enabled vulnerability remediation. CISA Binding Operational Directive 26-04’s 72-hour remediation requirement may contribute to demand for tools that help agencies remediate vulnerabilities quickly. The signal identifies no specific solicitation, award, contract value, or procurement contact.

- Federal procurement teams can assess automated remediation capabilities against the directive’s 72-hour requirement and operational assurance needs.
- Contractors offering vulnerability management or remediation tools may find federal demand relevant, but Qualys’s financial results do not establish a government award or a specific buying opportunity.
- The source identifies agency implementation and the timing of large deals as factors to follow when assessing the market; no procurement deadline beyond the stated remediation requirement is provided.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Artificial Intelligence
**Published:** November 10, 2026

### Government Entities
- Cybersecurity and Infrastructure Security Agency (CISA)

### Vendors
- Qualys ()

### Key Quotes
> Events like the PHP2Shell disclosure are a warning of what lies ahead, and the need for speed from disclosure to remediation is clear.
> — Sumedh Thakar, CEO of Qualys

> We hope to continue this performance, but it can be lumpy.
> — Joo Mi Kim, CFO of Qualys

### Sources
- [QLYS Q3 2026 deep dive: federal strength and AI-driven product adoption shape outlook — TradingView News](https://www.tradingview.com/news/stockstory:d7a6f4a57094b:0-qlys-q3-2026-deep-dive-federal-strength-and-ai-driven-product-adoption-shape-outlook) - TradingView