The Company and Summary of Significant Accounting Policies (Policies)	12 Months Ended
Dec. 31, 2019
Accounting Policies [Abstract]
Description of Business	Description of Business Qualys, Inc. (the “Company”, "we", "us", "our") was incorporated in the state of Delaware on December 30, 1999. The Company is headquartered in Foster City, California and has wholly-owned subsidiaries throughout the world. The Company is a pioneer and leading provider of cloud-based IT, security and compliance solutions that enable organizations to identify security risks to their IT infrastructures, help protect their IT systems and applications from ever-evolving cyber-attacks and achieve compliance with internal policies and external regulations. The Company’s cloud solutions address the growing security and compliance complexities and risks that are amplified by the dissolving boundaries between internal and external IT infrastructures and web environments, the rapid adoption of cloud computing and the proliferation of geographically dispersed IT assets. Organizations can use the Company’s integrated suite of solutions delivered on its Qualys Cloud Platform to cost-effectively obtain a unified view of their security and compliance posture across globally-distributed IT infrastructures.
Basis of presentation	Basis of Presentation The accompanying consolidated financial statements and footnotes have been prepared in accordance with U.S. GAAP as well as the instructions to Form 10-K and the rules and regulations of SEC. In the opinion of management, the accompanying consolidated financial statements reflect all adjustments, which include only normal recurring adjustments, necessary for the fair presentation of the Company’s consolidated financial position, results of operations and cash flows for the periods presented. The accompanying consolidated financial statements include the accounts of the Company and its wholly-owned subsidiaries. All intercompany transactions and balances have been eliminated upon consolidation.
Use of estimates	Use of Estimates The preparation of the consolidated financial statements in conformity with U.S. GAAP requires management to make certain estimates and assumptions that affect the reported amounts of assets and liabilities and disclosure of assets and liabilities at the date of the consolidated financial statements and the reported results of operations during the reporting period. The Company’s management regularly assesses these estimates, which primarily affect revenue recognition, the valuation of accounts receivable, goodwill and intangible assets, capitalization of internally developed software, stock-based compensation and the provision for income taxes. Actual results could differ from those estimates and such differences may be material to the accompanying consolidated financial statements.
Concentration of credit risk	Concentration of Credit Risk The Company invests its cash and cash equivalents with major financial institutions. Cash balances with any one institution at times may be in excess of federally insured limits. Cash equivalents are invested in high-quality investment grade financial instruments and are diversified. The Company has not experienced any losses in such accounts and believes it is not exposed to any significant credit risk. Credit risk with respect to accounts receivable is dispersed due to the large number of customers. Collateral is not required for accounts receivable. As of December 31, 2019 and 2018, no customer or channel partner accounted for more than 10% of the Company's revenues and accounts receivable balance.
Cash, cash equivalents and short-term and long-term investments	Cash, Cash Equivalents, Short-Term and Long-Term Marketable Securities Cash and cash equivalents include cash held in banks, highly liquid money market funds and commercial paper, all with original maturities of three months or less when acquired. The Company’s short-term and long-term marketable securities consist of fixed-income U.S. government agency securities, corporate bonds, asset-backed securities and commercial paper. Management determines the appropriate classification of the Company's investments at the time of purchase and reevaluates such designation at each balance sheet date. The Company classifies its marketable securities as either short-term or long-term based on each instrument's underlying contractual maturity date. Cash equivalents are stated at cost, which approximates fair market value. Short-term and long-term marketable securities are classified as available-for-sale debt securities and are carried at fair value. Unrealized gains and losses in fair value of the available-for-sale debt securities are reported in other comprehensive income (loss). When the available-for- sale debt securities are sold, cost is based on the specific identification method, and the realized gains and losses are included in other income (expense), net in the consolidated statements of operations. Available-for-sale debt securities are reviewed quarterly for impairment that is deemed to be other-than-temporary. An investment is considered other-than-temporarily impaired when its fair value is below its amortized cost and (1) there is an intent to sell the security, (2) it is “more likely than not” that the security will be sold before recovery of its amortized cost basis or (3) the present value of expected cash flows from the investment is not expected to recover the entire amortized cost basis. Declines in value that are considered to be other-than-temporary are recorded in other income (expense), net. Adjustments to amortized cost for the amortization of premiums, the accretion of discounts and Interest and dividends are recorded in interest income as earned.
Accounts receivable	Accounts Receivable Accounts receivable are recorded at the invoiced amount and do not bear interest. The allowance for doubtful accounts represents the Company’s best estimate of the amount of probable credit losses and is determined based on a review of existing accounts receivable by aging category to identify significant customers or invoices with collectability issues. For those invoices not specifically reviewed, the reserve is calculated based on the age of the receivable and historical write-offs. Any change in the assumptions used in analyzing a specific account receivable may result in an additional provision for doubtful accounts being recognized in the period in which the change occurs. When the Company ultimately concludes that a receivable is uncollectible, the balance is written off against the allowance for doubtful accounts. Payments subsequently received on such receivables are credited back to the allowance for doubtful accounts.
Cost method investments	During the fiscal year ended December 31, 2018, the Company invested $2.5 million in preferred stock of a privately-held company. The fair value of the investment is not readily available, and there are no quoted market prices for the investment. The investment is included in other noncurrent assets on the consolidated balance sheets and measured at cost less impairment, adjusted for observable price changes. The investment is assessed for impairment annually or whenever events or changes in circumstances indicate that the carrying amount may not be recoverable. The Company has not received any dividends or other-than-temporary impairment charges related to the investment.
Property and equipment, net	Property and Equipment, net Property and equipment are stated at cost less accumulated depreciation and amortization. Depreciation is computed using the straight-line method over the estimated useful lives of the assets, which range from three to five years. Leasehold improvements are amortized on a straight-line basis over the lesser of the estimated useful life of the asset or the remaining lease term. The Company purchases physical scanner appliances and other computer equipment that are provided to customers on a subscription basis. This equipment is recorded within property and equipment and the depreciation is recorded in cost of revenues over an estimated useful life of three years. Upon retirement or disposal, the cost of assets and the related accumulated depreciation are removed from the accounts and any resulting gain or loss is reflected in the consolidated statements of operations. Repairs and maintenance that do not extend the life of an asset are expensed as incurred and major improvements are capitalized as property and equipment.
Impairment of long-lived assets	Impairment of Long-Lived Assets The Company evaluates its long-lived assets, which consist of property and equipment, and intangible assets subject to amortization, for indicators of possible impairment when events or changes in circumstances indicate the carrying amount of an asset may not be recoverable. Impairment exists if the carrying amounts of such assets exceed the estimates of future undiscounted cash flows expected to be generated by such assets. Should an impairment exist, the impairment loss would be measured based on the excess carrying value of the asset over the asset’s estimated fair value. In each of 2019, 2018 and 2017, the Company had no impairment of long-lived assets.
Goodwill and intangible assets	Goodwill and Intangible Assets Goodwill represents the excess of the purchase price over the fair value of the net tangible and identifiable intangible assets acquired in a business combination and is not subject to amortization. Goodwill and other intangible assets with indefinite lives are not amortized, but tested for impairment at least annually or more frequently if certain circumstances indicate a possible impairment may exist. These tests are performed at the reporting unit level. The Company’s operations are organized as one reporting unit. In testing for a potential impairment of goodwill, the Company first performs a qualitative assessment of its reporting unit to determine if it is more likely than not (a more than 50% likelihood) that the fair value of the reporting unit is less than its carrying amount. If the fair value is not considered to be less than the carrying amount, no further evaluation is necessary. The Company performed the annual assessment on December 1, 2019 and 2018 and concluded there was no potential impairment of goodwill. In testing for a potential impairment of intangible assets with indefinite lives that are not subject to amortization, the Company first performs a qualitative assessment to determine if it is more likely than not (a more than 50% likelihood) that the fair value of the indefinite-lived intangible assets is less than the carrying amount. If the fair value is not considered to be less than the carrying amount, no further evaluation is necessary. The Company performs the annual qualitative assessment in the fourth quarter each fiscal year. There were no such impairment losses during 2019, 2018 and 2017.
Software development cost	SoftwareCosts incurred in the development phase are capitalized and amortized over the product’s estimated useful life, which is three years. Capitalized costs include salaries, benefits and stock-based compensation charges for employees that are directly involved in developing its cloud security platform during the post planning and implementation phases. Capitalized costs related to internally developed software under development are treated as construction in progress until the program, feature or functionality is ready for its intended use, at which time amortization commences. These capitalized costs are included in other noncurrent assets on the consolidated balance sheets.
Business combinations	Business Combinations The Company applies the provisions of ASC 805, Business Combinations, in accounting for its acquisitions. It requires the Company to recognize separately from goodwill the assets acquired and the liabilities assumed at their acquisition date fair values. Goodwill as of the acquisition date is measured as the excess of consideration transferred over the net of the acquisition date fair values of the assets acquired and the liabilities assumed. While the Company uses its best estimates and assumptions to accurately value assets acquired and liabilities assumed at the acquisition date as well as any contingent consideration, where applicable, its estimates are inherently uncertain and subject to refinement. As a result, during the measurement period, which may be up to one year from the acquisition date, the Company records adjustments to the assets acquired and liabilities assumed with the corresponding offset to goodwill. Upon the conclusion of the measurement period or final determination of the values of assets acquired or liabilities assumed, whichever comes first, any subsequent adjustments are recorded to its consolidated statements of operations.
Derivative financial instruments	Derivative Financial Instruments Derivative financial instruments are utilized by the Company to reduce foreign currency exchange risks. The Company uses foreign currency forward contracts to mitigate the impact of foreign currency fluctuations of certain non-U.S. dollar denominated asset positions, to date primarily cash and accounts receivable (non-designated forward contracts), as well as to manage foreign currency fluctuation risk related to forecasted transactions (designated cash flow hedges). Open contracts are recorded within prepaid expenses and other current assets, other noncurrent assets, accrued liabilities, or other noncurrent liabilities in the consolidated balance sheets. Gains and losses resulting from currency exchange rate movements on non-designated forward contracts are recognized in other income (expense), net. Any gains or losses from derivatives designated as cash flow hedges are first accumulated in AOCI and then reclassified to revenue when the hedged item impacts the consolidated statements of operations.
Share-based compensation	Stock-Based Compensation The Company recognizes the fair value of its employee stock options and restricted stock units (RSUs) over the requisite service periods for those awards ultimately expected to vest. The fair value of each option is estimated on date of grant using the Black-Scholes-Merton option pricing model and the fair value of each RSU is based on the fair value of the Company's stock on the date of grant. Forfeitures are estimated on the date of grant and revised if actual or expected forfeiture activity differs materially from original estimates.
Revenue recognition	Revenue Recognition The Company derives revenues from subscriptions that require customers to pay a fee in order to access the Company’s cloud solutions. Customers generally enter into one-year renewable subscriptions though some customers do enter into subscriptions with longer terms. The subscription fee entitles the customer to an unlimited number of scans for a specified number of networked devices or web applications and, if requested by a customer as part of their subscription, a specified number of physical or virtual scanner appliances. Revenue is recognized when control of these subscription services is transferred to its customers, in an amount that reflects the consideration the Company expects to be entitled to in exchange for those services. The Company’s physical and virtual scanner appliances are requested by certain customers as part of their subscriptions in order to scan IT infrastructures within their firewalls and do not function without, and are not sold separately from, subscriptions for the Company’s solutions. In some limited cases, the Company also provides certain computer equipment used to extend its Qualys Cloud Platform into its customers’ private cloud environment. Customers are required to return physical scanner appliances and computer equipment if they do not renew their subscriptions. Physical equipment (scanners and private cloud platforms) are accounted for as operating leases under ASC 842. The company used the practical expedient to combine lease and nonlease components as a combined component under ASC 606 due to the software subscription nonlease components being the predominant component of the combined component. Therefore, the Company recognizes revenue for the physical equipment ratably over the related subscription period. The Company determines revenue recognition through the following steps: •Identification of the contract, or contracts, with a customer; •Identification of the performance obligations in the contract; •Determination of the transaction price •Allocation of the transaction price to the performance obligations in the contract; and •Recognition of revenue when, or as, the Company satisfies a performance obligation. At the inception of a customer contract, the Company makes an assessment as to that customer's ability to pay for the services provided. The Company assesses collectability based on a number of factors, including credit worthiness of the customer along with past transaction history. In addition, the Company performs periodic evaluations of its customers’ financial condition. Deferred revenues consist of customer contracts billed or cash received that will be recognized in the future under subscriptions existing at the balance sheet date. The current portion of deferred revenues represents amounts that are expected to be recognized within one year of the balance sheet date. Costs of shipping and handling charges incurred by the Company associated with physical scanner appliances and other computer equipment are included in cost of revenues. Sales taxes and other taxes collected from customers to be remitted to government authorities are excluded from revenues.
Advertising expenses	Advertising Expenses Advertising costs are expensed as incurred and include costs of advertising and promotional materials. The Company incurred advertising costs of $74 thousand, $87 thousand and $482 thousand for 2019, 2018 and 2017, respectively.
Income taxes	Income Taxes The Company provides for the effect of income taxes in its consolidated financial statements using the asset and liability method which requires the recognition of deferred tax assets and liabilities for the expected future tax consequences of events that have been included in the consolidated financial statements. Under this method, deferred tax assets and liabilities are recognized for the future tax consequences attributable to differences between the financial statement carrying amounts of existing assets and liabilities and their respective tax bases, net operating loss carryovers, and tax credit carry forwards. Deferred tax assets and liabilities are measured using enacted tax rates expected to apply to taxable income in the years in which those temporary differences are expected to be recovered or settled. The effect on deferred tax assets and liabilities of a change in tax rates is recognized in the period that includes the enactment date. Income tax expense or benefit is recognized for the amount of taxes payable or refundable for the current year and for deferred tax assets and liabilities for the tax consequences of events that have been recognized in an entity’s financial statements or tax returns. The Company must make significant assumptions, judgments and estimates to determine its current provision for (benefit from) income taxes, its deferred tax assets and liabilities, and any valuation allowance to be recorded against its deferred tax assets. The Company's judgments, assumptions and estimates relating to the current provision for (benefit from) income taxes include the geographic mix and amount of income (loss), its interpretation of current tax laws, and possible outcomes of current and future audits conducted by foreign and domestic tax authorities. The Company's judgments also include anticipating the tax positions the Company will record in the consolidated financial statements before actually preparing and filing the tax returns. The Company's estimates and assumptions may differ from the actual results as reflected on its income tax returns and will record the required adjustments when they are identified or resolved. Changes in the Company's business, tax laws or interpretation of tax laws, and developments in current and future tax audits, could significantly impact the amounts provided for income taxes in the Company's results of operations, financial position, or cash flows. Deferred tax assets and liabilities are recognized for the estimated future tax consequences attributable to tax benefit carry-forwards and to differences between the financial statement amounts of assets and liabilities and their respective tax basis. The Company regularly reviews its deferred tax assets for recoverability and establishes a valuation allowance if it is more likely than not that some portion or all of the deferred tax assets will not be realized. To make this assessment, the Company takes into account predictions of the amount and category of taxable income from various sources and all available positive and negative evidence about these possible sources of taxable income. The weight given to the potential effect of negative and positive evidence is commensurate with the extent to which the strength of the evidence can be objectively verified. The Company applies a two-step approach to determining the financial statement recognition and measurement of uncertain tax positions. The Company only recognizes an income tax expense or benefit with respect to uncertain tax positions in its financial statements that the Company judges is more likely than not to be sustained solely on its technical merits in a tax audit, including resolution of any related appeals or litigation processes. To make this judgment, the Company must interpret complex and sometimes ambiguous tax laws, regulations and administrative practices. If an income tax position meets the more likely than not recognition threshold, then the Company must measure the amount of the tax benefit to be recognized by determining the largest amount of tax benefit that has a greater than a 50% likelihood of being realized upon effective settlement with a taxing authority that has full knowledge of all of the relevant facts. It is inherently difficult and subjective to estimate such amounts, as this requires the Company to determine the probability of various possible settlement outcomes. To determine if a tax position is effectively settled after a tax examination has been completed, the Company must also estimate the likelihood that another taxing authority could review the respective tax position. The Company must also determine when it is reasonably possible that the amount of unrecognized tax benefits will significantly increase or decrease in the 12 months after each fiscal year-end. These judgments are difficult because a taxing authority may change its behavior as a result of the Company's disclosures in its financial statements. The Company must reevaluate its income tax positions on a quarterly basis to consider factors such as changes in facts or circumstances, changes in tax law, effectively settled issues under audit, and new audit activity. Such a change in recognition or measurement would result in recognition of a tax benefit or an additional charge to the tax provision. The Company's policy is to recognize interest and penalties related to unrecognized tax benefits as a component of the provision for income taxes.
Comprehensive income (loss)	Comprehensive Income (Loss) Other comprehensive income (loss) consists of unrealized gains (losses) on marketable securities, net of tax, and derivative financial instruments designated as cash flow hedges which are not included in the Company’s net income. Total comprehensive income includes net income and other comprehensive income (loss) and is included in the consolidated statements of comprehensive income.
Foreign currency translation and transactions	Foreign Currency Transactions The Company’s operations are conducted in various countries around the world and the financial statements of its foreign subsidiaries are reported in the U.S. dollar as their respective functional currency. Monetary assets and liabilities denominated in foreign currencies have been re-measured into U.S. dollars using the exchange rates in effect at the balance sheet date, and income and expenses are re-measured at average exchange rates during the period. Foreign currency re-measurement gains and losses and foreign currency transaction gains and losses are recognized in other income (expense), net. The Company recorded total foreign currency transaction losses of $0.4 million, $0.6 million and $0.4 million during 2019, 2018 and 2017, respectively.
Fair value measurement
Net income per share attributable to common stockholders	Net Income Per Share Basic net income per share is computed by dividing net income by the weighted-average number of common shares outstanding during the period. All participating securities are excluded from basic weighted average common shares outstanding. Diluted net income per share is computed by dividing net income by the weighted-average number of shares of common stock outstanding during the period, adjusted for the effects of potentially dilutive common shares, which are comprised of outstanding stock options and RSUs. The dilutive potential common shares are computed using the treasury stock method or the as-if converted method, as applicable. The outstanding stock options and RSUs which would be anti-dilutive are excluded from the computation of diluted net income per common share. Reclassification Reclassification has been made to the shares issued for RSUs and taxes related to net share settlement of equity awards and options in the consolidated statement of stockholders' equity for the fiscal year 2017. The reclassification had no effect on the total number of shares outstanding at the end of each period presented in the consolidated statements of stockholders' equity.
Recent accounting pronouncements	Recently Adopted Accounting Pronouncements In August 2018, the Financial Accounting Standards Board (FASB) issued Accounting Standards Updates (ASU) 2018-13, Disclosure Framework - Changes to the Disclosure requirements for Fair Value Measurement, which adds, modifies and removes certain fair value measurement disclosure requirements. The ASU is effective for the Company for fiscal years beginning after December 15, 2019, including interim periods therein. The Company early adopted the guidance in the fiscal year 2019. The adoption of this ASU did not have a material impact on the Company's consolidated financial statements. In June 2018, the FASB issued ASU 2018-07, Compensation - Stock Compensation (Topic 718): Improvements to Nonemployee Share-Based Payment Accounting. This ASU expands the scope of Topic 718 to include share-based payment transactions for acquiring goods and services from nonemployees. The Company adopted this guidance as of January 1, 2019. The adoption of this ASU did not have a material impact on the Company's consolidated financial statements. In January 2017, the FASB issued ASU 2017-04, Simplifying the Test for Goodwill Impairment (Topic 350). This standard eliminates Step 2 from the goodwill impairment test, instead requiring an entity to recognize a goodwill impairment charge for the amount by which the goodwill carrying amount exceeds the reporting unit’s fair value. This ASU is effective for interim and annual goodwill impairment tests in fiscal years beginning after December 15, 2019 with early adoption permitted. The Company adopted this ASU on a prospective basis during the first quarter of fiscal 2019 and the adoption did not have a material impact on the Company's consolidated financial statements. In February 2016, the FASB issued ASU 2016-02, Leases (Topic 842), which requires lessees to recognize all leases, including operating leases, on the balance sheet as a lease asset and lease liability, unless the lease is a short-term lease. ASU 2016-02 also requires additional disclosures regarding leasing arrangements. ASU 2016-02 is effective for the Company beginning in the first quarter of fiscal 2019 and early adoption is permitted. In July 2018, the FASB issued ASU 2018-11, Targeted Improvements - Leases (Topic 842). This update provides an optional transition method that allows entities to elect to apply the standard prospectively at its effective date, versus recasting the prior periods presented. If elected, an entity would recognize a cumulative-effect adjustment to the opening balance of retained earnings in the period of adoption. Pursuant to the leasing criteria, most of the Company's leased space and equipment leases will be required to be accounted for as right-of-use assets (ROU) on the balance sheet with offsetting financing obligations. In the statement of operations, what was formerly rent expense for operating leases will be lease expense; and finance leases will be bifurcated into amortization of right-of-use assets and interest on lease liabilities. The Company adopted the ASU utilizing the current period adjustment method on January 1, 2019, and recognized a ROU asset of $30.8 million and a lease liability of $41.6 million on its consolidated financial statements. As of January 1, 2019, $3.9 million of deferred rent and $6.9 million related to tenant improvement allowance was removed upon adoption. As part of this adoption, the Company elected the package of transitional practical expedients to not reassess (1) whether any contracts that existed prior to adoption have or contain leases, (2) the classification of existing leases or (3) initial direct costs for existing leases. The Company also elected to make the accounting policy election for short-term leases, permitting the Company to not apply the recognition requirements of this standard to short-term leases with terms of 12 months or less. Recently Issued Accounting Pronouncements Not Yet Adopted In December 2019, the FASB issued ASU No. 2019-12, Simplifying the Accounting for Income Taxes (ASU 2019-12), which simplifies the accounting for income taxes, eliminates certain exceptions within ASC 740, Income Taxes, and clarifies certain aspects of the current guidance to promote consistency among reporting entities. ASU 2019-12 is effective for the Company for fiscal years beginning after December 15, 2020. Most amendments within the standard are required to be applied on a prospective basis, while certain amendments must be applied on a retrospective or modified retrospective basis. The Company is currently evaluating the impacts of the provisions of ASU 2019-12 on its consolidated financial statements. In August 2018, the FASB issued ASU 2018-15, Intangibles - Goodwill and Other - Internal-Use Software (Subtopic 350-40): Customer's Accounting for Implementation Costs Incurred in a Cloud Computing Arrangement That Is a Service Contract. This ASU aligns the requirements for capitalizing implementation costs incurred in a hosting arrangement that is a service contract with the requirements for capitalizing implementation costs related to internal-use software. ASU 2018-15 is effective for the Company beginning in the first quarter of fiscal 2020 and early adoption is permitted. The Company is currently evaluating the impact of this ASU on its consolidated financial statements.

The Company and Summary of Significant Accounting Policies (Policies)

12 Months Ended

Dec. 31, 2019

Qualys, Inc. (the “Company”, "we", "us", "our") was incorporated in the state of Delaware on December 30, 1999. The Company is headquartered in Foster City, California and has wholly-owned subsidiaries throughout the world. The Company is a pioneer and leading provider of cloud-based IT, security and compliance solutions that enable organizations to identify security risks to their IT infrastructures, help protect their IT systems and applications from ever-evolving cyber-attacks and achieve compliance with internal policies and external regulations. The Company’s cloud solutions address the growing security and compliance complexities and risks that are amplified by the dissolving boundaries between internal and external IT infrastructures and web environments, the rapid adoption of cloud computing and the proliferation of geographically dispersed IT assets. Organizations can use the Company’s integrated suite of solutions delivered on its Qualys Cloud Platform to cost-effectively obtain a unified view of their security and compliance posture across globally-distributed IT infrastructures.

Basis of presentation

Basis of Presentation

The accompanying consolidated financial statements and footnotes have been prepared in accordance with U.S. GAAP as well as the instructions to Form 10-K and the rules and regulations of SEC. In the opinion of management, the accompanying consolidated financial statements reflect all adjustments, which include only normal recurring adjustments, necessary for the fair presentation of the Company’s consolidated financial position, results of operations and cash flows for the periods presented. The accompanying consolidated financial statements include the accounts of the Company and its wholly-owned subsidiaries. All intercompany transactions and balances have been eliminated upon consolidation.

Use of estimates

Use of Estimates

The preparation of the consolidated financial statements in conformity with U.S. GAAP requires management to make certain estimates and assumptions that affect the reported amounts of assets and liabilities and disclosure of assets and liabilities at the date of the consolidated financial statements and the reported results of operations during the reporting period. The Company’s management regularly assesses these estimates, which primarily affect revenue recognition, the valuation of accounts receivable, goodwill and intangible assets, capitalization of internally developed software, stock-based compensation and the provision for income taxes. Actual results could differ from those estimates and such differences may be material to the accompanying consolidated financial statements.

Concentration of credit risk

Concentration of Credit Risk

The Company invests its cash and cash equivalents with major financial institutions. Cash balances with any one institution at times may be in excess of federally insured limits. Cash equivalents are invested in high-quality investment grade financial instruments and are diversified. The Company has not experienced any losses in such accounts and believes it is not exposed to any significant credit risk.

Credit risk with respect to accounts receivable is dispersed due to the large number of customers. Collateral is not required for accounts receivable. As of December 31, 2019 and 2018, no customer or channel partner accounted for more than 10% of the Company's revenues and accounts receivable balance.

Cash, cash equivalents and short-term and long-term investments

Cash, Cash Equivalents, Short-Term and Long-Term Marketable Securities

Cash and cash equivalents include cash held in banks, highly liquid money market funds and commercial paper, all with original maturities of three months or less when acquired. The Company’s short-term and long-term marketable securities consist of fixed-income U.S. government agency securities, corporate bonds, asset-backed securities and commercial paper. Management determines the appropriate classification of the Company's investments at the time of purchase and reevaluates such designation at each balance sheet date. The Company classifies its marketable securities as either short-term or long-term based on each instrument's underlying contractual maturity date.

Cash equivalents are stated at cost, which approximates fair market value. Short-term and long-term marketable securities are classified as available-for-sale debt securities and are carried at fair value. Unrealized gains and losses in fair value of the available-for-sale debt securities are reported in other comprehensive income (loss). When the available-for-

sale debt securities are sold, cost is based on the specific identification method, and the realized gains and losses are included in other income (expense), net in the consolidated statements of operations. Available-for-sale debt securities are reviewed quarterly for impairment that is deemed to be other-than-temporary. An investment is considered other-than-temporarily impaired when its fair value is below its amortized cost and (1) there is an intent to sell the security, (2) it is “more likely than not” that the security will be sold before recovery of its amortized cost basis or (3) the present value of expected cash flows from the investment is not expected to recover the entire amortized cost basis. Declines in value that are considered to be other-than-temporary are recorded in other income (expense), net. Adjustments to amortized cost for the amortization of premiums, the accretion of discounts and Interest and dividends are recorded in interest income as earned.

Accounts receivable

Accounts Receivable

Accounts receivable are recorded at the invoiced amount and do not bear interest. The allowance for doubtful accounts represents the Company’s best estimate of the amount of probable credit losses and is determined based on a review of existing accounts receivable by aging category to identify significant customers or invoices with collectability issues. For those invoices not specifically reviewed, the reserve is calculated based on the age of the receivable and historical write-offs.

Any change in the assumptions used in analyzing a specific account receivable may result in an additional provision for doubtful accounts being recognized in the period in which the change occurs. When the Company ultimately concludes that a receivable is uncollectible, the balance is written off against the allowance for doubtful accounts. Payments subsequently received on such receivables are credited back to the allowance for doubtful accounts.

Cost method investments

During the fiscal year ended December 31, 2018, the Company invested $2.5 million in preferred stock of a privately-held company. The fair value of the investment is not readily available, and there are no quoted market prices for the investment. The investment is included in other noncurrent assets on the consolidated balance sheets and measured at cost less impairment, adjusted for observable price changes. The investment is assessed for impairment annually or whenever events or changes in circumstances indicate that the carrying amount may not be recoverable. The Company has not received any dividends or other-than-temporary impairment charges related to the investment.

Property and equipment, net

Property and Equipment, net

Property and equipment are stated at cost less accumulated depreciation and amortization. Depreciation is computed using the straight-line method over the estimated useful lives of the assets, which range from three to five years. Leasehold improvements are amortized on a straight-line basis over the lesser of the estimated useful life of the asset or the remaining lease term.

The Company purchases physical scanner appliances and other computer equipment that are provided to customers on a subscription basis. This equipment is recorded within property and equipment and the depreciation is recorded in cost of revenues over an estimated useful life of three years.

Upon retirement or disposal, the cost of assets and the related accumulated depreciation are removed from the accounts and any resulting gain or loss is reflected in the consolidated statements of operations. Repairs and maintenance that do not extend the life of an asset are expensed as incurred and major improvements are capitalized as property and equipment.

Impairment of long-lived assets

Impairment of Long-Lived Assets

The Company evaluates its long-lived assets, which consist of property and equipment, and intangible assets subject to amortization, for indicators of possible impairment when events or changes in circumstances indicate the carrying amount of an asset may not be recoverable. Impairment exists if the carrying amounts of such assets exceed the estimates of future undiscounted cash flows expected to be generated by such assets. Should an impairment exist, the impairment loss would be measured based on the excess carrying value of the asset over the asset’s estimated fair value. In each of 2019, 2018 and 2017, the Company had no impairment of long-lived assets.

Goodwill and intangible assets

Goodwill and Intangible Assets

Goodwill represents the excess of the purchase price over the fair value of the net tangible and identifiable intangible assets acquired in a business combination and is not subject to amortization. Goodwill and other intangible assets with indefinite lives are not amortized, but tested for impairment at least annually or more frequently if certain circumstances indicate a possible impairment may exist. These tests are performed at the reporting unit level. The Company’s operations are organized as one reporting unit.

In testing for a potential impairment of goodwill, the Company first performs a qualitative assessment of its reporting unit to determine if it is more likely than not (a more than 50% likelihood) that the fair value of the reporting unit is less than its carrying amount. If the fair value is not considered to be less than the carrying amount, no further evaluation is necessary. The Company performed the annual assessment on December 1, 2019 and 2018 and concluded there was no potential impairment of goodwill.

In testing for a potential impairment of intangible assets with indefinite lives that are not subject to amortization, the Company first performs a qualitative assessment to determine if it is more likely than not (a more than 50% likelihood) that the fair value of the indefinite-lived intangible assets is less than the carrying amount. If the fair value is not considered to be less than the carrying amount, no further evaluation is necessary. The Company performs the annual qualitative assessment in the fourth quarter each fiscal year. There were no such impairment losses during 2019, 2018 and 2017.

Software development cost

SoftwareCosts incurred in the development phase are capitalized and amortized over the product’s estimated useful life, which is three years. Capitalized costs include salaries, benefits and stock-based compensation charges for employees that are directly involved in developing its cloud security platform during the post planning and implementation phases. Capitalized costs related to internally developed software under development are treated as construction in progress until the program, feature or functionality is ready for its intended use, at which time amortization commences. These capitalized costs are included in other noncurrent assets on the consolidated balance sheets.

Business combinations

Business Combinations

The Company applies the provisions of ASC 805, Business Combinations, in accounting for its acquisitions. It requires the Company to recognize separately from goodwill the assets acquired and the liabilities assumed at their acquisition date fair values. Goodwill as of the acquisition date is measured as the excess of consideration transferred over the net of the acquisition date fair values of the assets acquired and the liabilities assumed. While the Company uses its best estimates and assumptions to accurately value assets acquired and liabilities assumed at the acquisition date as well as any contingent consideration, where applicable, its estimates are inherently uncertain and subject to refinement. As a result, during the measurement period, which may be up to one year from the acquisition date, the Company records adjustments to the assets acquired and liabilities assumed with the corresponding offset to goodwill. Upon the conclusion of the measurement period or final determination of the values of assets acquired or liabilities assumed, whichever comes first, any subsequent adjustments are recorded to its consolidated statements of operations.

Derivative financial instruments

Derivative Financial Instruments

Derivative financial instruments are utilized by the Company to reduce foreign currency exchange risks. The Company uses foreign currency forward contracts to mitigate the impact of foreign currency fluctuations of certain non-U.S. dollar denominated asset positions, to date primarily cash and accounts receivable (non-designated forward contracts), as well as to manage foreign currency fluctuation risk related to forecasted transactions (designated cash flow hedges). Open contracts are recorded within prepaid expenses and other current assets, other noncurrent assets, accrued liabilities, or other noncurrent liabilities in the consolidated balance sheets. Gains and losses resulting from currency exchange rate movements on non-designated forward contracts are recognized in other income (expense), net. Any gains or losses from derivatives designated as cash flow hedges are first accumulated in AOCI and then reclassified to revenue when the hedged item impacts the consolidated statements of operations.

Share-based compensation

Stock-Based Compensation

The Company recognizes the fair value of its employee stock options and restricted stock units (RSUs) over the requisite service periods for those awards ultimately expected to vest. The fair value of each option is estimated on date of grant using the Black-Scholes-Merton option pricing model and the fair value of each RSU is based on the fair value of the Company's stock on the date of grant. Forfeitures are estimated on the date of grant and revised if actual or expected forfeiture activity differs materially from original estimates.

Revenue recognition

Revenue Recognition

The Company derives revenues from subscriptions that require customers to pay a fee in order to access the Company’s cloud solutions. Customers generally enter into one-year renewable subscriptions though some customers do enter into subscriptions with longer terms. The subscription fee entitles the customer to an unlimited number of scans for a specified number of networked devices or web applications and, if requested by a customer as part of their subscription, a specified number of physical or virtual scanner appliances. Revenue is recognized when control of these subscription services is transferred to its customers, in an amount that reflects the consideration the Company expects to be entitled to in exchange for those services.

The Company’s physical and virtual scanner appliances are requested by certain customers as part of their subscriptions in order to scan IT infrastructures within their firewalls and do not function without, and are not sold separately from, subscriptions for the Company’s solutions. In some limited cases, the Company also provides certain computer equipment used to extend its Qualys Cloud Platform into its customers’ private cloud environment. Customers are required to return physical scanner appliances and computer equipment if they do not renew their subscriptions. Physical equipment (scanners and private cloud platforms) are accounted for as operating leases under ASC 842. The company used the practical expedient to combine lease and nonlease components as a combined component under ASC 606 due to the software subscription nonlease components being the predominant component of the combined component. Therefore, the Company recognizes revenue for the physical equipment ratably over the related subscription period.

The Company determines revenue recognition through the following steps:

•Identification of the contract, or contracts, with a customer;

•Identification of the performance obligations in the contract;

•Determination of the transaction price

•Allocation of the transaction price to the performance obligations in the contract; and

•Recognition of revenue when, or as, the Company satisfies a performance obligation.

At the inception of a customer contract, the Company makes an assessment as to that customer's ability to pay for the services provided. The Company assesses collectability based on a number of factors, including credit worthiness of the customer along with past transaction history. In addition, the Company performs periodic evaluations of its customers’ financial condition.

Deferred revenues consist of customer contracts billed or cash received that will be recognized in the future under subscriptions existing at the balance sheet date. The current portion of deferred revenues represents amounts that are expected to be recognized within one year of the balance sheet date.

Costs of shipping and handling charges incurred by the Company associated with physical scanner appliances and other computer equipment are included in cost of revenues.

Sales taxes and other taxes collected from customers to be remitted to government authorities are excluded from revenues.

Advertising expenses

Advertising Expenses

Advertising costs are expensed as incurred and include costs of advertising and promotional materials. The Company incurred advertising costs of $74 thousand, $87 thousand and $482 thousand for 2019, 2018 and 2017, respectively.

Income taxes

Income Taxes

The Company provides for the effect of income taxes in its consolidated financial statements using the asset and liability method which requires the recognition of deferred tax assets and liabilities for the expected future tax consequences of events that have been included in the consolidated financial statements. Under this method, deferred tax assets and liabilities are recognized for the future tax consequences attributable to differences between the financial statement carrying amounts of existing assets and liabilities and their respective tax bases, net operating loss carryovers, and tax credit carry forwards. Deferred tax assets and liabilities are measured using enacted tax rates expected to apply to taxable income in the years in which those temporary differences are expected to be recovered or settled. The effect on deferred tax assets and liabilities of a change in tax rates is recognized in the period that includes the enactment date.

Income tax expense or benefit is recognized for the amount of taxes payable or refundable for the current year and for deferred tax assets and liabilities for the tax consequences of events that have been recognized in an entity’s financial statements or tax returns. The Company must make significant assumptions, judgments and estimates to determine its current provision for (benefit from) income taxes, its deferred tax assets and liabilities, and any valuation allowance to be recorded against its deferred tax assets. The Company's judgments, assumptions and estimates relating to the current provision for (benefit from) income taxes include the geographic mix and amount of income (loss), its interpretation of current tax laws, and possible outcomes of current and future audits conducted by foreign and domestic tax authorities. The Company's judgments also include anticipating the tax positions the Company will record in the consolidated financial statements before actually preparing and filing the tax returns. The Company's estimates and assumptions may differ from the actual results as reflected on its income tax returns and will record the required adjustments when they are identified or resolved. Changes in the Company's business, tax laws or interpretation of tax laws, and developments in current and future tax audits, could significantly impact the amounts provided for income taxes in the Company's results of operations, financial position, or cash flows.

Deferred tax assets and liabilities are recognized for the estimated future tax consequences attributable to tax benefit carry-forwards and to differences between the financial statement amounts of assets and liabilities and their respective tax basis. The Company regularly reviews its deferred tax assets for recoverability and establishes a valuation allowance if it is more likely than not that some portion or all of the deferred tax assets will not be realized. To make this assessment, the Company takes into account predictions of the amount and category of taxable income from various sources and all available positive and negative evidence about these possible sources of taxable income. The weight given to the potential effect of negative and positive evidence is commensurate with the extent to which the strength of the evidence can be objectively verified.

The Company applies a two-step approach to determining the financial statement recognition and measurement of uncertain tax positions. The Company only recognizes an income tax expense or benefit with respect to uncertain tax positions in its financial statements that the Company judges is more likely than not to be sustained solely on its technical merits in a tax audit, including resolution of any related appeals or litigation processes. To make this judgment, the Company must interpret complex and sometimes ambiguous tax laws, regulations and administrative practices. If an income tax position meets the more likely than not recognition threshold, then the Company must measure the amount of the tax benefit to be recognized by determining the largest amount of tax benefit that has a greater than a 50% likelihood of being realized upon effective settlement with a taxing authority that has full knowledge of all of the relevant facts. It is inherently difficult and subjective to estimate such amounts, as this requires the Company to determine the probability of various possible settlement outcomes. To determine if a tax position is effectively settled after a tax examination has been completed, the Company must also estimate the likelihood that another taxing authority could review the respective tax position. The Company must also determine when it is reasonably possible that the amount of unrecognized tax benefits will significantly increase or decrease in the 12 months after each fiscal year-end. These judgments are difficult because a taxing authority may change its behavior as a result of the Company's disclosures in its financial statements. The Company must reevaluate its income tax positions on a quarterly basis to consider factors such as changes in facts or circumstances, changes in tax law, effectively settled issues under audit, and new audit activity. Such a change in recognition or measurement would result in recognition of a tax

benefit or an additional charge to the tax provision. The Company's policy is to recognize interest and penalties related to unrecognized tax benefits as a component of the provision for income taxes.

Comprehensive income (loss)

Comprehensive Income (Loss)

Other comprehensive income (loss) consists of unrealized gains (losses) on marketable securities, net of tax, and derivative financial instruments designated as cash flow hedges which are not included in the Company’s net income. Total comprehensive income includes net income and other comprehensive income (loss) and is included in the consolidated statements of comprehensive income.

Foreign currency translation and transactions

Foreign Currency Transactions

The Company’s operations are conducted in various countries around the world and the financial statements of its foreign subsidiaries are reported in the U.S. dollar as their respective functional currency. Monetary assets and liabilities denominated in foreign currencies have been re-measured into U.S. dollars using the exchange rates in effect at the balance sheet date, and income and expenses are re-measured at average exchange rates during the period. Foreign currency re-measurement gains and losses and foreign currency transaction gains and losses are recognized in other income (expense), net. The Company recorded total foreign currency transaction losses of $0.4 million, $0.6 million and $0.4 million during 2019, 2018 and 2017, respectively.

Fair value measurement

Net income per share attributable to common stockholders

Net Income Per Share

Basic net income per share is computed by dividing net income by the weighted-average number of common shares outstanding during the period. All participating securities are excluded from basic weighted average common shares outstanding. Diluted net income per share is computed by dividing net income by the weighted-average number of shares of common stock outstanding during the period, adjusted for the effects of potentially dilutive common shares, which are comprised of outstanding stock options and RSUs. The dilutive potential common shares are computed using the treasury stock method or the as-if converted method, as applicable. The outstanding stock options and RSUs which would be anti-dilutive are excluded from the computation of diluted net income per common share.

Reclassification

Reclassification has been made to the shares issued for RSUs and taxes related to net share settlement of equity awards and options in the consolidated statement of stockholders' equity for the fiscal year 2017. The reclassification had no effect on the total number of shares outstanding at the end of each period presented in the consolidated statements of stockholders' equity.

Recent accounting pronouncements

Recently Adopted Accounting Pronouncements

In August 2018, the Financial Accounting Standards Board (FASB) issued Accounting Standards Updates (ASU) 2018-13, Disclosure Framework - Changes to the Disclosure requirements for Fair Value Measurement, which adds, modifies and removes certain fair value measurement disclosure requirements. The ASU is effective for the Company for fiscal years beginning after December 15, 2019, including interim periods therein. The Company early adopted the guidance in the fiscal year 2019. The adoption of this ASU did not have a material impact on the Company's consolidated financial statements.

In June 2018, the FASB issued ASU 2018-07, Compensation - Stock Compensation (Topic 718): Improvements to Nonemployee Share-Based Payment Accounting. This ASU expands the scope of Topic 718 to include share-based payment transactions for acquiring goods and services from nonemployees. The Company adopted this guidance as of January 1, 2019. The adoption of this ASU did not have a material impact on the Company's consolidated financial statements.

In January 2017, the FASB issued ASU 2017-04, Simplifying the Test for Goodwill Impairment (Topic 350). This standard eliminates Step 2 from the goodwill impairment test, instead requiring an entity to recognize a goodwill impairment charge for the amount by which the goodwill carrying amount exceeds the reporting unit’s fair value. This ASU is effective for interim and annual goodwill impairment tests in fiscal years beginning after December 15, 2019 with early adoption permitted. The Company adopted this ASU on a prospective basis during the first quarter of fiscal 2019 and the adoption did not have a material impact on the Company's consolidated financial statements.

In February 2016, the FASB issued ASU 2016-02, Leases (Topic 842), which requires lessees to recognize all leases, including operating leases, on the balance sheet as a lease asset and lease liability, unless the lease is a short-term lease. ASU 2016-02 also requires additional disclosures regarding leasing arrangements. ASU 2016-02 is effective for the Company beginning in the first quarter of fiscal 2019 and early adoption is permitted. In July 2018, the FASB issued ASU 2018-11,

Targeted Improvements - Leases (Topic 842). This update provides an optional transition method that allows entities to elect to apply the standard prospectively at its effective date, versus recasting the prior periods presented. If elected, an entity would recognize a cumulative-effect adjustment to the opening balance of retained earnings in the period of adoption. Pursuant to the leasing criteria, most of the Company's leased space and equipment leases will be required to be accounted for as right-of-use assets (ROU) on the balance sheet with offsetting financing obligations. In the statement of operations, what was formerly rent expense for operating leases will be lease expense; and finance leases will be bifurcated into amortization of right-of-use assets and interest on lease liabilities. The Company adopted the ASU utilizing the current period adjustment method on January 1, 2019, and recognized a ROU asset of $30.8 million and a lease liability of $41.6 million on its consolidated financial statements. As of January 1, 2019, $3.9 million of deferred rent and $6.9 million related to tenant improvement allowance was removed upon adoption. As part of this adoption, the Company elected the package of transitional practical expedients to not reassess (1) whether any contracts that existed prior to adoption have or contain leases, (2) the classification of existing leases or (3) initial direct costs for existing leases. The Company also elected to make the accounting policy election for short-term leases, permitting the Company to not apply the recognition requirements of this standard to short-term leases with terms of 12 months or less.

Recently Issued Accounting Pronouncements Not Yet Adopted

In December 2019, the FASB issued ASU No. 2019-12, Simplifying the Accounting for Income Taxes (ASU 2019-12), which simplifies the accounting for income taxes, eliminates certain exceptions within ASC 740, Income Taxes, and clarifies certain aspects of the current guidance to promote consistency among reporting entities. ASU 2019-12 is effective for the Company for fiscal years beginning after December 15, 2020. Most amendments within the standard are required to be applied on a prospective basis, while certain amendments must be applied on a retrospective or modified retrospective basis. The Company is currently evaluating the impacts of the provisions of ASU 2019-12 on its consolidated financial statements.

In August 2018, the FASB issued ASU 2018-15, Intangibles - Goodwill and Other - Internal-Use Software (Subtopic 350-40): Customer's Accounting for Implementation Costs Incurred in a Cloud Computing Arrangement That Is a Service Contract. This ASU aligns the requirements for capitalizing implementation costs incurred in a hosting arrangement that is a service contract with the requirements for capitalizing implementation costs related to internal-use software. ASU 2018-15 is effective for the Company beginning in the first quarter of fiscal 2020 and early adoption is permitted. The Company is currently evaluating the impact of this ASU on its consolidated financial statements.