SEC Info℠

Home

Search

My Interests

Help

Sign In

Please Sign In

Qualys, Inc. – IPO: ‘S-1/A’ on 9/11/12 – ‘EX-10.2’

On:  Tuesday, 9/11/12, at 9:46pm ET   ·   As of:  9/12/12   ·   Private-to-Public:  Document/Exhibit ¶  –  Release Delayed   ·   Accession #:  1193125-12-388433   ·   File #:  333-182027

Previous ‘S-1’:  ‘S-1/A’ on 8/27/12   ·   Next & Latest:  ‘S-1/A’ on 9/21/12   ·   7 References:   By:  Qualys, Inc. – ‘10-K’ on 2/22/24 for 12/31/23 By:  Qualys, Inc. – ‘10-K’ on 2/23/23 for 12/31/22 By:  Qualys, Inc. – ‘S-8’ on 2/22/22 By:  Qualys, Inc. – ‘10-K’ on 2/22/22 for 12/31/21 By:  Qualys, Inc. – ‘S-8’ on 7/2/21 By:  Qualys, Inc. – ‘S-8’ on 2/22/21 By:  Qualys, Inc. – ‘10-K’ on 2/22/21 for 12/31/20 

in

this entire Filing. an “Entity” Search.

Show

Documents searched

and

each “hit”. the 1st “hit”.

↓↑Hints

 Text Wildcards:  ? (any letter/digit),  * (many).  Search Logic:  for Documents:  & (and),  | (or);  for Text:  | (anywhere),  "(&)" (near).  Details... 

  As Of                Filer                Filing    For·On·As Docs:Size              Issuer               Agent

 9/12/12  Qualys, Inc.                      S-1/A¶                15:6.8M                                   Donnelley … Solutions/FA

Document/Exhibit                   Description                      Pages   Size 

 1: S-1/A       Amendment No.4 to Form S-1                          HTML   2.19M 
15: CORRESP   ¶ Comment-Response or Other Letter to the SEC         HTML     16K 
 2: EX-1.1      Form of Underwriting Agreement                      HTML    195K 
 3: EX-3.3      Form of Amended and Restated Certificate of         HTML     33K 
                Incorporation                                                    
 4: EX-3.5      Form of Amended and Restated Bylaws of Qualys       HTML    163K 
 5: EX-3.6      Amendment No. 8 to Amended and Restated             HTML     16K 
                Certificate of Incorporation                                     
 6: EX-4.1      Form of Common Stock Certificate                    HTML     34K 
 7: EX-5.1      Opinion of Wilson Sonsini Goodrich & Rosati, P.C.   HTML     14K 
10: EX-10.14    Master Services Agreement - Savvis Communications   HTML     43K 
                Corporation                                                      
11: EX-10.15    Master Agreement - Interoute Communications         HTML    249K 
                Limited                                                          
12: EX-10.16    Manufacturing Services Agreement - Synnex           HTML     73K 
                Corporation                                                      
 8: EX-10.2     2012 Equity Incentive Plan and Forms of Agreements  HTML    257K 
                Thereunder                                                       
 9: EX-10.6     Offer Letter - Donald C. McCauley                   HTML     29K 
13: EX-23.1     Consent of Grant Thornton LLP                       HTML      8K 
14: EX-23.2     Consent of Grant Thornton LLP                       HTML      8K 

Exhibit 10.2

QUALYS, INC.

2012 EQUITY INCENTIVE PLAN

1. Purposes of the Plan. The purposes of this Plan are:

The Plan permits the grant of Incentive Stock Options, Nonstatutory Stock Options, Restricted Stock, Restricted Stock Units, Stock Appreciation Rights, Performance Units and Performance Shares.

2. Definitions. As used herein, the following definitions will apply:

(a) “Administrator” means the Board or any of its Committees as will be administering the Plan, in accordance with Section 4 of the Plan.

(b) “Applicable Laws” means the requirements relating to the administration of equity-based awards under U.S. state corporate laws, U.S. federal and state securities laws, the Code, any stock exchange or quotation system on which the Common Stock is listed or quoted and the applicable laws of any foreign country or jurisdiction where Awards are, or will be, granted under the Plan.

(c) “Award” means, individually or collectively, a grant under the Plan of Options, Stock Appreciation Rights, Restricted Stock, Restricted Stock Units, Performance Units or Performance Shares.

(d) “Award Agreement” means the written or electronic agreement setting forth the terms and provisions applicable to each Award granted under the Plan. The Award Agreement is subject to the terms and conditions of the Plan.

(e) “Board” means the Board of Directors of the Company.

(f) “Change in Control” means the occurrence of any of the following events:

(i) A change in the ownership of the Company which occurs on the date that any one person, or more than one person acting as a group (“Person”), acquires ownership of the stock of the Company that, together with the stock held by such Person, constitutes more than fifty percent (50%) of the total voting power of the stock of the Company; provided, however, that for purposes of this subsection, the acquisition of additional stock by any one Person, who is considered

to own more than fifty percent (50%) of the total voting power of the stock of the Company will not be considered a Change in Control; or

(ii) A change in the effective control of the Company which occurs on the date that a majority of members of the Board is replaced during any twelve (12) month period by Directors whose appointment or election is not endorsed by a majority of the members of the Board prior to the date of the appointment or election. For purposes of this clause (ii), if any Person is considered to be in effective control of the Company, the acquisition of additional control of the Company by the same Person will not be considered a Change in Control; or

(iii) A change in the ownership of a substantial portion of the Company’s assets which occurs on the date that any Person acquires (or has acquired during the twelve (12) month period ending on the date of the most recent acquisition by such person or persons) assets from the Company that have a total gross fair market value equal to or more than fifty percent (50%) of the total gross fair market value of all of the assets of the Company immediately prior to such acquisition or acquisitions; provided, however, that for purposes of this subsection (iii), the following will not constitute a change in the ownership of a substantial portion of the Company’s assets: (A) a transfer to an entity that is controlled by the Company’s stockholders immediately after the transfer, or (B) a transfer of assets by the Company to: (1) a stockholder of the Company (immediately before the asset transfer) in exchange for or with respect to the Company’s stock, (2) an entity, fifty percent (50%) or more of the total value or voting power of which is owned, directly or indirectly, by the Company, (3) a Person, that owns, directly or indirectly, fifty percent (50%) or more of the total value or voting power of all the outstanding stock of the Company, or (4) an entity, at least fifty percent (50%) of the total value or voting power of which is owned, directly or indirectly, by a Person described in this subsection (iii)(B)(3). For purposes of this subsection (iii), gross fair market value means the value of the assets of the Company, or the value of the assets being disposed of, determined without regard to any liabilities associated with such assets.

For purposes of this definition, persons will be considered to be acting as a group if they are owners of a corporation that enters into a merger, consolidation, purchase or acquisition of stock, or similar business transaction with the Company.

Notwithstanding the foregoing, a transaction will not be deemed a Change in Control unless the transaction qualifies as a change in control event within the meaning of Code Section 409A, as it has been and may be amended from time to time, and any proposed or final Treasury Regulations and Internal Revenue Service guidance that has been promulgated or may be promulgated thereunder from time to time.

Further and for the avoidance of doubt, a transaction will not constitute a Change in Control if: (i) its sole purpose is to change the state of the Company’s incorporation, or (ii) its sole purpose is to create a holding company that will be owned in substantially the same proportions by the persons who held the Company’s securities immediately before such transaction.

(g) “Code” means the Internal Revenue Code of 1986, as amended. Reference to a specific section of the Code or regulation thereunder shall include such section or regulation, any

-2-

valid regulation promulgated under such section, and any comparable provision of any future legislation or regulation amending, supplementing or superseding such section or regulation.

(h) “Committee” means a committee of Directors or of other individuals satisfying Applicable Laws appointed by the Board, or a duly authorized committee of the Board, in accordance with Section 4 hereof.

(i) “Common Stock” means the common stock of the Company.

(j) “Company” means Qualys, Inc., a Delaware corporation, or any successor thereto.

(k) “Consultant” means any person, including an advisor, engaged by the Company or a Parent or Subsidiary to render services to such entity.

(l) “Director” means a member of the Board.

(m) “Disability” means total and permanent disability as defined in Section 22(e)(3) of the Code, provided that in the case of Awards other than Incentive Stock Options, the Administrator in its discretion may determine whether a permanent and total disability exists in accordance with uniform and non-discriminatory standards adopted by the Administrator from time to time.

(n) “Employee” means any person, including Officers and Directors, employed by the Company or any Parent or Subsidiary of the Company. Neither service as a Director nor payment of a director’s fee by the Company will be sufficient to constitute “employment” by the Company.

(o) “Exchange Act” means the Securities Exchange Act of 1934, as amended.

(p) “Exchange Program” means a program under which (i) outstanding Awards are surrendered or cancelled in exchange for awards of the same type (which may have higher or lower exercise prices and different terms), awards of a different type, and/or cash, (ii) Participants would have the opportunity to transfer any outstanding Awards to a financial institution or other person or entity selected by the Administrator, and/or (iii) the exercise price of an outstanding Award is increased or reduced. The Administrator will determine the terms and conditions of any Exchange Program in its sole discretion.

(q) “Fair Market Value” means, as of any date, the value of Common Stock determined as follows:

(i) If the Common Stock is listed on any established stock exchange or a national market system, including without limitation the New York Stock Exchange, the NASDAQ Global Select Market, the NASDAQ Global Market or the NASDAQ Capital Market of The NASDAQ Stock Market, its Fair Market Value will be the closing sales price for such stock (or the closing bid, if no sales were reported) as quoted on such exchange or system on the day of determination, as reported in The Wall Street Journal or such other source as the Administrator deems reliable;

-3-

(ii) If the Common Stock is regularly quoted by a recognized securities dealer but selling prices are not reported, the Fair Market Value of a Share will be the mean between the high bid and low asked prices for the Common Stock on the day of determination (or, if no bids and asks were reported on that date, as applicable, on the last trading date such bids and asks were reported), as reported in The Wall Street Journal or such other source as the Administrator deems reliable;

(iii) For purposes of any Awards granted on the Registration Date, the Fair Market Value will be the initial price to the public as set forth in the final prospectus included within the registration statement in Form S-1 filed with the Securities and Exchange Commission for the initial public offering of the Company’s Common Stock; or

(iv) In the absence of an established market for the Common Stock, the Fair Market Value will be determined in good faith by the Administrator.

(r) “Fiscal Year” means the fiscal year of the Company.

(s) “Incentive Stock Option” means an Option intended to qualify as an incentive stock option within the meaning of Section 422 of the Code and the regulations promulgated thereunder.

(t) “Inside Director” means a Director who is an Employee.

(u) “Nonstatutory Stock Option” means an Option that by its terms does not qualify or is not intended to qualify as an Incentive Stock Option.

(v) “Officer” means a person who is an officer of the Company within the meaning of Section 16 of the Exchange Act and the rules and regulations promulgated thereunder.

(w) “Option” means a stock option granted pursuant to the Plan.

(x) “Outside Director” means a Director who is not an Employee.

(y) “Parent” means a “parent corporation,” whether now or hereafter existing, as defined in Section 424(e) of the Code.

(z) “Participant” means the holder of an outstanding Award.

(aa) “Performance Share” means an Award denominated in Shares which may be earned in whole or in part upon attainment of performance goals or other vesting criteria as the Administrator may determine pursuant to Section 10.

(bb) “Performance Unit” means an Award which may be earned in whole or in part upon attainment of performance goals or other vesting criteria as the Administrator may determine and which may be settled for cash, Shares or other securities or a combination of the foregoing pursuant to Section 10.

-4-

(cc) “Period of Restriction” means the period during which the transfer of Shares of Restricted Stock are subject to restrictions and therefore, the Shares are subject to a substantial risk of forfeiture. Such restrictions may be based on the passage of time, the achievement of target levels of performance, or the occurrence of other events as determined by the Administrator.

(dd) “Plan” means this 2012 Equity Incentive Plan.

(ee) “Registration Date” means the effective date of the first registration statement that is filed by the Company and declared effective pursuant to Section 12(g) of the Exchange Act, with respect to any class of the Company’s securities.

(ff) “Restricted Stock” means Shares issued pursuant to a Restricted Stock award under Section 7 of the Plan, or issued pursuant to the early exercise of an Option.

(gg) “Restricted Stock Unit” means a bookkeeping entry representing an amount equal to the Fair Market Value of one Share, granted pursuant to Section 8. Each Restricted Stock Unit represents an unfunded and unsecured obligation of the Company.

(hh) “Rule 16b-3” means Rule 16b-3 of the Exchange Act or any successor to Rule 16b-3, as in effect when discretion is being exercised with respect to the Plan.

(ii) “Section 16(b)” means Section 16(b) of the Exchange Act.

(jj) “Service Provider” means an Employee, Director or Consultant.

(kk) “Share” means a share of the Common Stock, as adjusted in accordance with Section 13 of the Plan.

(ll) “Stock Appreciation Right” means an Award, granted alone or in connection with an Option, that pursuant to Section 9 is designated as a Stock Appreciation Right.

(mm) “Subsidiary” means a “subsidiary corporation,” whether now or hereafter existing, as defined in Section 424(f) of the Code.

3. Stock Subject to the Plan.

(a) Stock Subject to the Plan. Subject to the provisions of Section 13 of the Plan, the maximum aggregate number of Shares that may be issued under the Plan is 3,050,000 Shares. The Shares may be authorized, but unissued, or reacquired Common Stock.

(b) Automatic Share Reserve Increase. Subject to the provisions of Section 13 of the Plan, the number of Shares available for issuance under the Plan will be increased on the first day of each Fiscal Year beginning with the 2014 Fiscal Year, in an amount equal to the least of (i) 3,050,000 Shares, (ii) five percent (5%) of the outstanding Shares on the last day of the immediately preceding Fiscal Year or (iii) such number of Shares determined by the Board.

(c) Lapsed Awards. If an Award expires or becomes unexercisable without having been exercised in full, is surrendered pursuant to an Exchange Program, or, with respect to

-5-

Restricted Stock, Restricted Stock Units, Performance Units or Performance Shares, is forfeited to or repurchased by the Company due to failure to vest, the unpurchased Shares (or for Awards other than Options or Stock Appreciation Rights the forfeited or repurchased Shares), which were subject thereto will become available for future grant or sale under the Plan (unless the Plan has terminated). With respect to Stock Appreciation Rights, only Shares actually issued (i.e., the net Shares issued) pursuant to a Stock Appreciation Right will cease to be available under the Plan; all remaining Shares under Stock Appreciation Rights will remain available for future grant or sale under the Plan (unless the Plan has terminated). Shares that have actually been issued under the Plan under any Award will not be returned to the Plan and will not become available for future distribution under the Plan; provided, however, that if Shares issued pursuant to Awards of Restricted Stock, Restricted Stock Units, Performance Shares or Performance Units are repurchased by the Company or are forfeited to the Company, such Shares will become available for future grant under the Plan. Shares used to pay the exercise price of an Award or to satisfy the tax withholding obligations related to an Award will become available for future grant or sale under the Plan. To the extent an Award under the Plan is paid out in cash rather than Shares, such cash payment will not result in reducing the number of Shares available for issuance under the Plan. Notwithstanding the foregoing and, subject to adjustment as provided in Section 13, the maximum number of Shares that may be issued upon the exercise of Incentive Stock Options will equal the aggregate Share number stated in Section 3(a), plus, to the extent allowable under Section 422 of the Code and the Treasury Regulations promulgated thereunder, any Shares that become available for issuance under the Plan pursuant to Sections 3(b) and 3(c).

(d) Share Reserve. The Company, during the term of this Plan, will at all times reserve and keep available such number of Shares as will be sufficient to satisfy the requirements of the Plan.

4. Administration of the Plan.

(a) Procedure.

(i) Multiple Administrative Bodies. Different Committees with respect to different groups of Service Providers may administer the Plan.

(ii) Section 162(m). To the extent that the Administrator determines it to be desirable to qualify Awards granted hereunder as “performance-based compensation” within the meaning of Section 162(m) of the Code, the Plan will be administered by a Committee of two (2) or more “outside directors” within the meaning of Section 162(m) of the Code.

(iii) Rule 16b-3. To the extent desirable to qualify transactions hereunder as exempt under Rule 16b-3, the transactions contemplated hereunder will be structured to satisfy the requirements for exemption under Rule 16b-3.

(iv) Other Administration. Other than as provided above, the Plan will be administered by (A) the Board or (B) a Committee, which committee will be constituted to satisfy Applicable Laws.

-6-

(b) Powers of the Administrator. Subject to the provisions of the Plan, and in the case of a Committee, subject to the specific duties delegated by the Board to such Committee, the Administrator will have the authority, in its discretion:

(i) to determine the Fair Market Value;

(ii) to select the Service Providers to whom Awards may be granted hereunder;

(iii) to determine the number of Shares to be covered by each Award granted hereunder;

(iv) to approve forms of Award Agreements for use under the Plan;

(v) to determine the terms and conditions, not inconsistent with the terms of the Plan, of any Award granted hereunder. Such terms and conditions include, but are not limited to, the exercise price, the time or times when Awards may be exercised (which may be based on performance criteria), any vesting acceleration or waiver of forfeiture restrictions, and any restriction or limitation regarding any Award or the Shares relating thereto, based in each case on such factors as the Administrator will determine;

(vi) to institute and determine the terms and conditions of an Exchange Program;

(vii) to construe and interpret the terms of the Plan and Awards granted pursuant to the Plan;

(viii) to prescribe, amend and rescind rules and regulations relating to the Plan, including rules and regulations relating to sub-plans established for the purpose of satisfying applicable foreign laws or for qualifying for favorable tax treatment under applicable foreign laws;

(ix) to modify or amend each Award (subject to Section 18 of the Plan), including but not limited to the discretionary authority to extend the post-termination exercisability period of Awards and to extend the maximum term of an Option (subject to Section 6(b) of the Plan regarding Incentive Stock Options);

(x) to allow Participants to satisfy withholding tax obligations in such manner as prescribed in Section 14 of the Plan;

(xi) to authorize any person to execute on behalf of the Company any instrument required to effect the grant of an Award previously granted by the Administrator;

(xii) to allow a Participant to defer the receipt of the payment of cash or the delivery of Shares that would otherwise be due to such Participant under an Award; and

(xiii) to make all other determinations deemed necessary or advisable for administering the Plan.

-7-

(c) Effect of Administrator’s Decision. The Administrator’s decisions, determinations and interpretations will be final and binding on all Participants and any other holders of Awards.

5. Eligibility. Nonstatutory Stock Options, Stock Appreciation Rights, Restricted Stock, Restricted Stock Units, Performance Shares and Performance Units may be granted to Service Providers. Incentive Stock Options may be granted only to Employees.

6. Stock Options.

(a) Limitations. Each Option will be designated in the Award Agreement as either an Incentive Stock Option or a Nonstatutory Stock Option. However, notwithstanding such designation, to the extent that the aggregate Fair Market Value of the Shares with respect to which Incentive Stock Options are exercisable for the first time by the Participant during any calendar year (under all plans of the Company and any Parent or Subsidiary) exceeds one hundred thousand dollars ($100,000), such Options will be treated as Nonstatutory Stock Options. For purposes of this Section 6(a), Incentive Stock Options will be taken into account in the order in which they were granted. The Fair Market Value of the Shares will be determined as of the time the Option with respect to such Shares is granted.

(b) Term of Option. The term of each Option will be stated in the Award Agreement. In the case of an Incentive Stock Option, the term will be ten (10) years from the date of grant or such shorter term as may be provided in the Award Agreement. Moreover, in the case of an Incentive Stock Option granted to a Participant who, at the time the Incentive Stock Option is granted, owns stock representing more than ten percent (10%) of the total combined voting power of all classes of stock of the Company or any Parent or Subsidiary, the term of the Incentive Stock Option will be five (5) years from the date of grant or such shorter term as may be provided in the Award Agreement.

(c) Option Exercise Price and Consideration.

(i) Exercise Price. The per share exercise price for the Shares to be issued pursuant to exercise of an Option will be determined by the Administrator, subject to the following:

(1) In the case of an Incentive Stock Option

(A) granted to an Employee who, at the time the Incentive Stock Option is granted, owns stock representing more than ten percent (10%) of the voting power of all classes of stock of the Company or any Parent or Subsidiary, the per Share exercise price will be no less than one hundred ten percent (110%) of the Fair Market Value per Share on the date of grant.

(B) granted to any Employee other than an Employee described in paragraph (A) immediately above, the per Share exercise price will be no less than one hundred percent (100%) of the Fair Market Value per Share on the date of grant.

-8-

(2) In the case of a Nonstatutory Stock Option, the per Share exercise price will be no less than one hundred percent (100%) of the Fair Market Value per Share on the date of grant.

(3) Notwithstanding the foregoing, Options may be granted with a per Share exercise price of less than one hundred percent (100%) of the Fair Market Value per Share on the date of grant pursuant to a transaction described in, and in a manner consistent with, Section 424(a) of the Code.

(ii) Waiting Period and Exercise Dates. At the time an Option is granted, the Administrator will fix the period within which the Option may be exercised and will determine any conditions that must be satisfied before the Option may be exercised.

(iii) Form of Consideration. The Administrator will determine the acceptable form of consideration for exercising an Option, including the method of payment. In the case of an Incentive Stock Option, the Administrator will determine the acceptable form of consideration at the time of grant. Such consideration may consist entirely of: (1) cash; (2) check; (3) promissory note, to the extent permitted by Applicable Laws, (4) other Shares, provided that such Shares have a Fair Market Value on the date of surrender equal to the aggregate exercise price of the Shares as to which such Option will be exercised and provided that accepting such Shares will not result in any adverse accounting consequences to the Company, as the Administrator determines in its sole discretion; (5) consideration received by the Company under a broker-assisted (or other) cashless exercise program (whether through a broker or otherwise) implemented by the Company in connection with the Plan; (6) by net exercise; (7) such other consideration and method of payment for the issuance of Shares to the extent permitted by Applicable Laws; or (8) any combination of the foregoing methods of payment.

(d) Exercise of Option.

(i) Procedure for Exercise; Rights as a Stockholder. Any Option granted hereunder will be exercisable according to the terms of the Plan and at such times and under such conditions as determined by the Administrator and set forth in the Award Agreement. An Option may not be exercised for a fraction of a Share.

An Option will be deemed exercised when the Company receives: (i) a notice of exercise (in such form as the Administrator may specify from time to time) from the person entitled to exercise the Option, and (ii) full payment for the Shares with respect to which the Option is exercised (together with applicable withholding taxes). Full payment may consist of any consideration and method of payment authorized by the Administrator and permitted by the Award Agreement and the Plan. Shares issued upon exercise of an Option will be issued in the name of the Participant or, if requested by the Participant, in the name of the Participant and his or her spouse. Until the Shares are issued (as evidenced by the appropriate entry on the books of the Company or of a duly authorized transfer agent of the Company), no right to vote or receive dividends or any other rights as a stockholder will exist with respect to the Shares subject to an Option, notwithstanding the exercise of the Option. The Company will issue (or cause to be issued) such Shares promptly after the Option is exercised. No adjustment will be made for a dividend or other right for which the record date is prior to the date the Shares are issued, except as provided in Section 13 of the Plan.

-9-

Exercising an Option in any manner will decrease the number of Shares thereafter available, both for purposes of the Plan and for sale under the Option, by the number of Shares as to which the Option is exercised.

(ii) Termination of Relationship as a Service Provider. If a Participant ceases to be a Service Provider, other than upon the Participant’s termination as the result of the Participant’s death or Disability, the Participant may exercise his or her Option within such period of time as is specified in the Award Agreement to the extent that the Option is vested on the date of termination (but in no event later than the expiration of the term of such Option as set forth in the Award Agreement). In the absence of a specified time in the Award Agreement, the Option will remain exercisable for three (3) months following the Participant’s termination. Unless otherwise provided by the Administrator, if on the date of termination the Participant is not vested as to his or her entire Option, the Shares covered by the unvested portion of the Option will revert to the Plan. If after termination the Participant does not exercise his or her Option within the time specified by the Administrator, the Option will terminate, and the Shares covered by such Option will revert to the Plan.

(iii) Disability of Participant. If a Participant ceases to be a Service Provider as a result of the Participant’s Disability, the Participant may exercise his or her Option within such period of time as is specified in the Award Agreement to the extent the Option is vested on the date of termination (but in no event later than the expiration of the term of such Option as set forth in the Award Agreement). In the absence of a specified time in the Award Agreement, the Option will remain exercisable for twelve (12) months following the Participant’s termination. Unless otherwise provided by the Administrator, if on the date of termination the Participant is not vested as to his or her entire Option, the Shares covered by the unvested portion of the Option will revert to the Plan. If after termination the Participant does not exercise his or her Option within the time specified herein, the Option will terminate, and the Shares covered by such Option will revert to the Plan.

(iv) Death of Participant. If a Participant dies while a Service Provider, the Option may be exercised following the Participant’s death within such period of time as is specified in the Award Agreement to the extent that the Option is vested on the date of death (but in no event may the option be exercised later than the expiration of the term of such Option as set forth in the Award Agreement), by the Participant’s designated beneficiary, provided such beneficiary has been designated prior to Participant’s death in a form acceptable to the Administrator. If no such beneficiary has been designated by the Participant, then such Option may be exercised by the personal representative of the Participant’s estate or by the person(s) to whom the Option is transferred pursuant to the Participant’s will or in accordance with the laws of descent and distribution. In the absence of a specified time in the Award Agreement, the Option will remain exercisable for twelve (12) months following Participant’s death. Unless otherwise provided by the Administrator, if at the time of death Participant is not vested as to his or her entire Option, the Shares covered by the unvested portion of the Option will immediately revert to the Plan. If the Option is not so exercised within the time specified herein, the Option will terminate, and the Shares covered by such Option will revert to the Plan.

-10-

7. Restricted Stock.

(a) Grant of Restricted Stock. Subject to the terms and provisions of the Plan, the Administrator, at any time and from time to time, may grant Shares of Restricted Stock to Service Providers in such amounts as the Administrator, in its sole discretion, will determine.

(b) Restricted Stock Agreement. Each Award of Restricted Stock will be evidenced by an Award Agreement that will specify the Period of Restriction, the number of Shares granted, and such other terms and conditions as the Administrator, in its sole discretion, will determine. Unless the Administrator determines otherwise, the Company as escrow agent will hold Shares of Restricted Stock until the restrictions on such Shares have lapsed.

(c) Transferability. Except as provided in this Section 7 or the Award Agreement, Shares of Restricted Stock may not be sold, transferred, pledged, assigned, or otherwise alienated or hypothecated until the end of the applicable Period of Restriction.

(d) Other Restrictions. The Administrator, in its sole discretion, may impose such other restrictions on Shares of Restricted Stock as it may deem advisable or appropriate.

(e) Removal of Restrictions. Except as otherwise provided in this Section 7, Shares of Restricted Stock covered by each Restricted Stock grant made under the Plan will be released from escrow as soon as practicable after the last day of the Period of Restriction or at such other time as the Administrator may determine. The Administrator, in its discretion, may accelerate the time at which any restrictions will lapse or be removed.

(f) Voting Rights. During the Period of Restriction, Service Providers holding Shares of Restricted Stock granted hereunder may exercise full voting rights with respect to those Shares, unless the Administrator determines otherwise.

(g) Dividends and Other Distributions. During the Period of Restriction, Service Providers holding Shares of Restricted Stock will be entitled to receive all dividends and other distributions paid with respect to such Shares, unless the Administrator provides otherwise. If any such dividends or distributions are paid in Shares, the Shares will be subject to the same restrictions on transferability and forfeitability as the Shares of Restricted Stock with respect to which they were paid.

(h) Return of Restricted Stock to Company. On the date set forth in the Award Agreement, the Restricted Stock for which restrictions have not lapsed will revert to the Company and again will become available for grant under the Plan.

-11-

8. Restricted Stock Units.

(a) Grant. Restricted Stock Units may be granted at any time and from time to time as determined by the Administrator. After the Administrator determines that it will grant Restricted Stock Units under the Plan, it will advise the Participant in an Award Agreement of the terms, conditions, and restrictions related to the grant, including the number of Restricted Stock Units.

(b) Vesting Criteria and Other Terms. The Administrator will set vesting criteria in its discretion, which, depending on the extent to which the criteria are met, will determine the number of Restricted Stock Units that will be paid out to the Participant. The Administrator may set vesting criteria based upon the achievement of Company-wide, divisional, business unit, or individual goals (including, but not limited to, continued employment or service), applicable federal or state securities laws or any other basis determined by the Administrator in its discretion.

(c) Earning Restricted Stock Units. Upon meeting the applicable vesting criteria, the Participant will be entitled to receive a payout as determined by the Administrator. Notwithstanding the foregoing, at any time after the grant of Restricted Stock Units, the Administrator, in its sole discretion, may reduce or waive any vesting criteria that must be met to receive a payout.

(d) Form and Timing of Payment. Payment of earned Restricted Stock Units will be made as soon as practicable after the date(s) determined by the Administrator and set forth in the Award Agreement. The Administrator, in its sole discretion, may only settle earned Restricted Stock Units in cash, Shares, or a combination of both.

(e) Cancellation. On the date set forth in the Award Agreement, all unearned Restricted Stock Units will be forfeited to the Company.

9. Stock Appreciation Rights.

(a) Grant of Stock Appreciation Rights. Subject to the terms and conditions of the Plan, a Stock Appreciation Right may be granted to Service Providers at any time and from time to time as will be determined by the Administrator, in its sole discretion.

(b) Number of Shares. The Administrator will have complete discretion to determine the number of Stock Appreciation Rights granted to any Service Provider.

(c) Exercise Price and Other Terms. The per share exercise price for the Shares to be issued pursuant to exercise of a Stock Appreciation Right will be determined by the Administrator and will be no less than one hundred percent (100%) of the Fair Market Value per Share on the date of grant. Otherwise, the Administrator, subject to the provisions of the Plan, will have complete discretion to determine the terms and conditions of Stock Appreciation Rights granted under the Plan.

(d) Stock Appreciation Right Agreement. Each Stock Appreciation Right grant will be evidenced by an Award Agreement that will specify the exercise price, the term of the Stock

-12-

Appreciation Right, the conditions of exercise, and such other terms and conditions as the Administrator, in its sole discretion, will determine.

(e) Expiration of Stock Appreciation Rights. A Stock Appreciation Right granted under the Plan will expire upon the date determined by the Administrator, in its sole discretion, and set forth in the Award Agreement. Notwithstanding the foregoing, the rules of Section 6(b) relating to the maximum term and Section 6(d) relating to exercise also will apply to Stock Appreciation Rights.

(f) Payment of Stock Appreciation Right Amount. Upon exercise of a Stock Appreciation Right, a Participant will be entitled to receive payment from the Company in an amount determined by multiplying:

(i) The difference between the Fair Market Value of a Share on the date of exercise over the exercise price; times

(ii) The number of Shares with respect to which the Stock Appreciation Right is exercised.

At the discretion of the Administrator, the payment upon Stock Appreciation Right exercise may be in cash, in Shares of equivalent value, or in some combination thereof.

10. Performance Units and Performance Shares.

(a) Grant of Performance Units/Shares. Performance Units and Performance Shares may be granted to Service Providers at any time and from time to time, as will be determined by the Administrator, in its sole discretion. The Administrator will have complete discretion in determining the number of Performance Units and Performance Shares granted to each Participant.

(b) Value of Performance Units/Shares. Each Performance Unit will have an initial value that is established by the Administrator on or before the date of grant. Each Performance Share will have an initial value equal to the Fair Market Value of a Share on the date of grant.

(c) Performance Objectives and Other Terms. The Administrator will set performance objectives or other vesting provisions (including, without limitation, continued status as a Service Provider) in its discretion which, depending on the extent to which they are met, will determine the number or value of Performance Units/Shares that will be paid out to the Service Providers. The time period during which the performance objectives or other vesting provisions must be met will be called the “Performance Period.” Each Award of Performance Units/Shares will be evidenced by an Award Agreement that will specify the Performance Period, and such other terms and conditions as the Administrator, in its sole discretion, will determine. The Administrator may set performance objectives based upon the achievement of Company-wide, divisional, business unit or individual goals (including, but not limited to, continued employment or service), applicable federal or state securities laws, or any other basis determined by the Administrator in its discretion.

(d) Earning of Performance Units/Shares. After the applicable Performance Period has ended, the holder of Performance Units/Shares will be entitled to receive a payout of the

-13-

number of Performance Units/Shares earned by the Participant over the Performance Period, to be determined as a function of the extent to which the corresponding performance objectives or other vesting provisions have been achieved. After the grant of a Performance Unit/Share, the Administrator, in its sole discretion, may reduce or waive any performance objectives or other vesting provisions for such Performance Unit/Share.

(e) Form and Timing of Payment of Performance Units/Shares. Payment of earned Performance Units/Shares will be made as soon as practicable after the expiration of the applicable Performance Period. The Administrator, in its sole discretion, may pay earned Performance Units/Shares in the form of cash, in Shares (which have an aggregate Fair Market Value equal to the value of the earned Performance Units/Shares at the close of the applicable Performance Period) or in a combination thereof.

(f) Cancellation of Performance Units/Shares. On the date set forth in the Award Agreement, all unearned or unvested Performance Units/Shares will be forfeited to the Company, and again will be available for grant under the Plan.

11. Leaves of Absence/Transfer Between Locations. Unless the Administrator provides otherwise, vesting of Awards granted hereunder will be suspended during any unpaid leave of absence. A Participant will not cease to be an Employee in the case of (i) any leave of absence approved by the Company or (ii) transfers between locations of the Company or between the Company, its Parent, or any Subsidiary. For purposes of Incentive Stock Options, no such leave may exceed three (3) months, unless reemployment upon expiration of such leave is guaranteed by statute or contract. If reemployment upon expiration of a leave of absence approved by the Company is not so guaranteed, then six (6) months following the first (1st) day of such leave any Incentive Stock Option held by the Participant will cease to be treated as an Incentive Stock Option and will be treated for tax purposes as a Nonstatutory Stock Option.

12. Transferability of Awards. Unless determined otherwise by the Administrator, an Award may not be sold, pledged, assigned, hypothecated, transferred, or disposed of in any manner other than by will or by the laws of descent or distribution and may be exercised, during the lifetime of the Participant, only by the Participant. If the Administrator makes an Award transferable, such Award will contain such additional terms and conditions as the Administrator deems appropriate.

13. Adjustments; Dissolution or Liquidation; Merger or Change in Control.

(a) Adjustments. In the event that any dividend or other distribution (whether in the form of cash, Shares, other securities, or other property), recapitalization, stock split, reverse stock split, reorganization, merger, consolidation, split-up, spin-off, combination, repurchase, or exchange of Shares or other securities of the Company, or other change in the corporate structure of the Company affecting the Shares occurs, the Administrator, in order to prevent diminution or enlargement of the benefits or potential benefits intended to be made available under the Plan, will adjust the number and class of Shares that may be delivered under the Plan and/or the number, class, and price of Shares covered by each outstanding Award, and the numerical Share limits in Section 3 of the Plan.

-14-

(b) Dissolution or Liquidation. In the event of the proposed dissolution or liquidation of the Company, the Administrator will notify each Participant as soon as practicable prior to the effective date of such proposed transaction. To the extent it has not been previously exercised, an Award will terminate immediately prior to the consummation of such proposed action.

(c) Change in Control. In the event of a merger of the Company with or into another corporation or other entity or a Change in Control, each outstanding Award will be treated as the Administrator determines, including, without limitation, that each Award be assumed or an equivalent option or right substituted by the successor corporation or a Parent or Subsidiary of the successor corporation. The Administrator will not be required to treat all Awards similarly in the transaction.

In the event that the successor corporation does not assume or substitute for the Award, the Participant will fully vest in and have the right to exercise all of his or her outstanding Options and Stock Appreciation Rights, including Shares as to which such Awards would not otherwise be vested or exercisable, all restrictions on Restricted Stock and Restricted Stock Units will lapse, and, with respect to Awards with performance-based vesting, all performance goals or other vesting criteria will be deemed achieved at one hundred percent (100%) of target levels and all other terms and conditions met. In addition, if an Option or Stock Appreciation Right is not assumed or substituted in the event of a Change in Control, the Administrator will notify the Participant in writing or electronically that the Option or Stock Appreciation Right will be exercisable for a period of time determined by the Administrator in its sole discretion, and the Option or Stock Appreciation Right will terminate upon the expiration of such period.

For the purposes of this subsection (c), an Award will be considered assumed if, following the Change in Control, the Award confers the right to purchase or receive, for each Share subject to the Award immediately prior to the Change in Control, the consideration (whether stock, cash, or other securities or property) received in the Change in Control by holders of Common Stock for each Share held on the effective date of the transaction (and if holders were offered a choice of consideration, the type of consideration chosen by the holders of a majority of the outstanding Shares); provided, however, that if such consideration received in the Change in Control is not solely common stock of the successor corporation or its Parent, the Administrator may, with the consent of the successor corporation, provide for the consideration to be received upon the exercise of an Option or Stock Appreciation Right or upon the payout of a Restricted Stock Unit, Performance Unit or Performance Share, for each Share subject to such Award, to be solely common stock of the successor corporation or its Parent equal in fair market value to the per share consideration received by holders of Common Stock in the Change in Control.

Notwithstanding anything in this Section 13(c) to the contrary, an Award that vests, is earned or paid-out upon the satisfaction of one or more performance goals will not be considered assumed if the Company or its successor modifies any of such performance goals without the Participant’s consent; provided, however, a modification to such performance goals only to reflect the successor corporation’s post-Change in Control corporate structure will not be deemed to invalidate an otherwise valid Award assumption.

(d) Outside Director Awards. With respect to Awards granted to an Outside Director that are assumed or substituted for, if on the date of or following such assumption or

-15-

substitution the Participant’s status as a Director or a director of the successor corporation, as applicable, is terminated other than upon a voluntary resignation by the Participant (unless such resignation is at the request of the acquirer), then the Participant will fully vest in and have the right to exercise Options and/or Stock Appreciation Rights as to all of the Shares underlying such Award, including those Shares which would not otherwise be vested or exercisable, all restrictions on Restricted Stock and Restricted Stock Units will lapse, and, with respect to Awards with performance-based vesting, all performance goals or other vesting criteria will be deemed achieved at one hundred percent (100%) of target levels and all other terms and conditions met.

14. Tax.

(a) Withholding Requirements. Prior to the delivery of any Shares or cash pursuant to an Award (or exercise thereof) or such earlier time as any tax withholding obligations are due, the Company will have the power and the right to deduct or withhold, or require a Participant to remit to the Company, an amount sufficient to satisfy federal, state, local, foreign or other taxes (including the Participant’s FICA obligation) required to be withheld with respect to such Award (or exercise thereof).

(b) Withholding Arrangements. The Administrator, in its sole discretion and pursuant to such procedures as it may specify from time to time, may permit a Participant to satisfy such tax withholding obligation, in whole or in part by (without limitation) (a) paying cash, (b) electing to have the Company withhold otherwise deliverable cash or Shares having a Fair Market Value equal to the minimum statutory amount required to be withheld, or (c) delivering to the Company already-owned Shares having a Fair Market Value equal to the minimum statutory amount required to be withheld. The Fair Market Value of the Shares to be withheld or delivered will be determined as of the date that the taxes are required to be withheld.

(c) Compliance With Code Section 409A. Awards will be designed and operated in such a manner that they are either exempt from the application of, or comply with, the requirements of Code Section 409A such that the grant, payment, settlement or deferral will not be subject to the additional tax or interest applicable under Code Section 409A, except as otherwise determined in the sole discretion of the Administrator. The Plan and each Award Agreement under the Plan is intended to meet the requirements of Code Section 409A and will be construed and interpreted in accordance with such intent, except as otherwise determined in the sole discretion of the Administrator. To the extent that an Award or payment, or the settlement or deferral thereof, is subject to Code Section 409A the Award will be granted, paid, settled or deferred in a manner that will meet the requirements of Code Section 409A, such that the grant, payment, settlement or deferral will not be subject to the additional tax or interest applicable under Code Section 409A.

15. No Effect on Employment or Service. Neither the Plan nor any Award will confer upon a Participant any right with respect to continuing the Participant’s relationship as a Service Provider with the Company, nor will they interfere in any way with the Participant’s right or the Company’s right to terminate such relationship at any time, with or without cause, to the extent permitted by Applicable Laws.

16. Date of Grant. The date of grant of an Award will be, for all purposes, the date on which the Administrator makes the determination granting such Award, or such other later date as is

-16-

determined by the Administrator. Notice of the determination will be provided to each Participant within a reasonable time after the date of such grant.

17. Term of Plan. Subject to Section 21 of the Plan, the Plan will become effective upon the later to occur of (i) its adoption by the Board or (ii) the business day immediately prior to the Registration Date. It will continue in effect for a term of ten (10) years from the date adopted by the Board, unless terminated earlier under Section 18 of the Plan.

18. Amendment and Termination of the Plan.

(a) Amendment and Termination. The Administrator may at any time amend, alter, suspend or terminate the Plan.

(b) Stockholder Approval. The Company will obtain stockholder approval of any Plan amendment to the extent necessary and desirable to comply with Applicable Laws.

(c) Effect of Amendment or Termination. No amendment, alteration, suspension or termination of the Plan will impair the rights of any Participant, unless mutually agreed otherwise between the Participant and the Administrator, which agreement must be in writing and signed by the Participant and the Company. Termination of the Plan will not affect the Administrator’s ability to exercise the powers granted to it hereunder with respect to Awards granted under the Plan prior to the date of such termination.

19. Conditions Upon Issuance of Shares.

(a) Legal Compliance. Shares will not be issued pursuant to the exercise of an Award unless the exercise of such Award and the issuance and delivery of such Shares will comply with Applicable Laws and will be further subject to the approval of counsel for the Company with respect to such compliance.

(b) Investment Representations. As a condition to the exercise of an Award, the Company may require the person exercising such Award to represent and warrant at the time of any such exercise that the Shares are being purchased only for investment and without any present intention to sell or distribute such Shares if, in the opinion of counsel for the Company, such a representation is required.

20. Inability to Obtain Authority. The inability of the Company to obtain authority from any regulatory body having jurisdiction or to complete or comply with the requirements of any registration or other qualification of the Shares under any state, federal or foreign law or under the rules and regulations of the Securities and Exchange Commission, the stock exchange on which Shares of the same class are then listed, or any other governmental or regulatory body, which authority, registration, qualification or rule compliance is deemed by the Company’s counsel to be necessary or advisable for the issuance and sale of any Shares hereunder, will relieve the Company of any liability in respect of the failure to issue or sell such Shares as to which such requisite authority, registration, qualification or rule compliance will not have been obtained.

21. Stockholder Approval. The Plan will be subject to approval by the stockholders of the Company within twelve (12) months after the date the Plan is adopted by the Board. Such

-17-

stockholder approval will be obtained in the manner and to the degree required under Applicable Laws.

-18-

QUALYS, INC.

2012 EQUITY INCENTIVE PLAN

RESTRICTED STOCK UNIT AGREEMENT

Unless otherwise defined herein, the terms defined in the Qualys, Inc. 2012 Equity Incentive Plan (the “Plan”) will have the same defined meanings in this Restricted Stock Unit Agreement, including the Notice of Restricted Stock Unit Grant (the “Notice of Grant”), the Terms and Conditions of Restricted Stock Unit Grant, attached hereto as Exhibit A, and any Appendix, attached hereto as Exhibit B (all together, the “Award Agreement”).

NOTICE OF RESTRICTED STOCK UNIT GRANT

Participant Name:

Address:

Participant has been granted the right to receive an Award of Restricted Stock Units, subject to the terms and conditions of the Plan and this Award Agreement, as follows:

Vesting Schedule:

Subject to any acceleration provisions contained in the Plan or set forth below, the Restricted Stock Units will vest in accordance with the following schedule:

[Twenty-five percent (25%) of the Restricted Stock Units will vest on the one (1) year anniversary of the Vesting Commencement Date, and twenty-five percent (25%) of the Restricted Stock Units will vest each year thereafter on the same day as the Vesting Commencement Date, subject to Participant continuing to be a Service Provider through each such date.]

In the event Participant ceases to be a Service Provider for any or no reason before Participant vests in the Restricted Stock Units, the Restricted Stock Units and Participant’s right to acquire any Shares hereunder will immediately terminate.

By Participant’s signature and the signature of the representative of Qualys, Inc. (the “Company”) below, Participant and the Company agree that this Award of Restricted Stock Units is granted under and governed by the terms and conditions of the Plan and this Award Agreement, which are made a part of this document. Participant has reviewed the Plan and this Award Agreement in their entirety, has had an opportunity to obtain the advice of counsel prior to executing this Award Agreement and fully understands all provisions of the Plan and Award

Agreement. Participant hereby agrees to accept as binding, conclusive and final all decisions or interpretations of the Administrator upon any questions relating to the Plan and Award Agreement. Participant further agrees to notify the Company upon any change in the residence address indicated below.

-2-

EXHIBIT A

TERMS AND CONDITIONS OF RESTRICTED STOCK UNIT GRANT

1. Grant. The Company hereby grants to the individual named in the Notice of Grant (the “Participant”) under the Plan an Award of Restricted Stock Units, subject to all of the terms and conditions in this Award Agreement and the Plan, which is incorporated herein by reference. Subject to Section 18(c) of the Plan, in the event of a conflict between the terms and conditions of the Plan and the terms and conditions of this Award Agreement, the terms and conditions of the Plan will prevail.

2. Company’s Obligation to Pay. Each Restricted Stock Unit represents the right to receive a Share on the date it vests. Unless and until the Restricted Stock Units will have vested in the manner set forth in Sections 3 or 4, Participant will have no right to payment of any such Restricted Stock Units. Prior to actual payment of any vested Restricted Stock Units, such Restricted Stock Units will represent an unsecured obligation of the Company, payable (if at all) only from the general assets of the Company. Any Restricted Stock Units that vest in accordance with Sections 3 or 4 will be paid to Participant (or in the event of Participant’s death, to his or her estate) in whole Shares, subject to Participant satisfying any obligations for Tax-Related Items (as defined in Section 7). Subject to the provisions of Section 4, such vested Restricted Stock Units shall be paid in whole Shares as soon as practicable after vesting, but in each such case within the period sixty (60) days following the vesting date. In no event will Participant be permitted, directly or indirectly, to specify the taxable year of the payment of any Restricted Stock Units payable under this Award Agreement.

3. Vesting Schedule. Except as provided in Section 4, and subject to Section 5, the Restricted Stock Units awarded by this Award Agreement will vest in accordance with the vesting provisions set forth in the Notice of Grant. Restricted Stock Units scheduled to vest on a certain date or upon the occurrence of a certain condition will not vest in Participant in accordance with any of the provisions of this Award Agreement, unless Participant will have been continuously a Service Provider from the Date of Grant until the date such vesting occurs.

4. Administrator Discretion. The Administrator, in its discretion, may accelerate the vesting of the balance, or some lesser portion of the balance, of the unvested Restricted Stock Units at any time, subject to the terms of the Plan. If so accelerated, such Restricted Stock Units will be considered as having vested as of the date specified by the Administrator. The payment of Shares vesting pursuant to this Section 4 shall in all cases be paid at a time or in a manner that is exempt from, or complies with, Section 409A.

Notwithstanding anything in the Plan or this Award Agreement to the contrary, if the vesting of the balance, or some lesser portion of the balance, of the Restricted Stock Units is accelerated in connection with Participant’s termination as a Service Provider (provided that such termination is a “separation from service” within the meaning of Section 409A, as determined by the Company), other than due to death, and if (x) Participant is a “specified employee” within the meaning of Section 409A at the time of such termination as a Service Provider and (y) the payment of such accelerated Restricted Stock Units will result in the imposition of additional tax under Section 409A if paid to Participant on or within the six (6)

-3-

month period following Participant’s termination as a Service Provider, then the payment of such accelerated Restricted Stock Units will not be made until the date six (6) months and one (1) day following the date of Participant’s termination as a Service Provider, unless Participant dies following his or her termination as a Service Provider, in which case, the Restricted Stock Units will be paid in Shares to Participant’s estate as soon as practicable following his or her death. It is the intent of this Award Agreement that it and all payments and benefits hereunder be exempt from, or comply with, the requirements of Section 409A so that none of the Restricted Stock Units provided under this Award Agreement or Shares issuable thereunder will be subject to the additional tax imposed under Section 409A, and any ambiguities herein will be interpreted to be so exempt or so comply. Each payment payable under this Award Agreement is intended to constitute a separate payment for purposes of Treasury Regulation Section 1.409A-2(b)(2). For purposes of this Award Agreement, “Section 409A” means Section 409A of the Code, and any final Treasury Regulations and Internal Revenue Service guidance thereunder, as each may be amended from time to time.

5. Forfeiture upon Termination of Status as a Service Provider. Notwithstanding any contrary provision of this Award Agreement, the balance of the Restricted Stock Units that have not vested as of the time of Participant’s termination as a Service Provider for any or no reason and Participant’s right to acquire any Shares hereunder will immediately terminate. The date of Participant’s termination as a Service Provider is detailed in Section 10(h).

6. Death of Participant. Any distribution or delivery to be made to Participant under this Award Agreement will, if Participant is then deceased, be made to Participant’s designated beneficiary, or if no beneficiary survives Participant, the administrator or executor of Participant’s estate. Any such transferee must furnish the Company with (a) written notice of his or her status as transferee, and (b) evidence satisfactory to the Company to establish the validity of the transfer and compliance with any laws or regulations pertaining to said transfer.

7. Withholding of Taxes. Notwithstanding any contrary provision of this Award Agreement, no certificate representing the Shares will be issued to Participant, unless and until satisfactory arrangements (as determined by the Administrator) will have been made by Participant with respect to the payment of income, employment, social insurance, payroll tax, fringe benefit tax, payment on account or other tax-related items related to Participant’s participation in the Plan and legally applicable to Participant (“Tax-Related Items”) which the Company determines must be withheld with respect to such Shares. Prior to vesting and/or settlement of the Restricted Stock Units, Participant will pay or make adequate arrangements satisfactory to the Company and/or Participant’s employer (the “Employer”) to satisfy all withholding and payment obligations of Tax-Related Items of the Company and/or the Employer. In this regard, Participant authorizes the Company and/or the Employer to withhold any Tax-Related Items legally payable by Participant from his or her wages or other cash compensation paid to Participant by the Company and/or the Employer or from proceeds of the sale of Shares. Alternatively, or in addition, if permissible under applicable local law, the Administrator, in its sole discretion and pursuant to such procedures as it may specify from time to time, may permit or require Participant to satisfy such tax withholding obligation, in whole or in part (without limitation) by (a) paying cash, (b) electing to have the Company withhold otherwise deliverable Shares having a Fair Market Value equal to the minimum amount required to be withheld, (c) selling a sufficient number of such Shares otherwise deliverable to Participant

-4-

through such means as the Company may determine in its sole discretion (whether through a broker or otherwise) equal to the amount required to be withheld, or (d) if Participant is a U.S. employee, delivering to the Company already vested and owned Shares having a Fair Market Value equal to the amount required to be withheld. To the extent determined appropriate by the Company in its discretion, it will have the right (but not the obligation) to satisfy any obligations for Tax-Related Items by reducing the number of Shares otherwise deliverable to Participant [and, until determined otherwise by the Company, this will be the method by which such tax withholding obligations are satisfied]. Further, if Participant is subject to tax in more than one jurisdiction between the Date of Grant and a date of any relevant taxable or tax withholding event, as applicable, Participant acknowledges and agrees that the Company and/or the Employer (or former employer, as applicable) may be required to withhold or account for tax in more than one jurisdiction. If Participant fails to make satisfactory arrangements for the payment of any Tax-Related Items hereunder at the time any applicable Restricted Stock Units otherwise are scheduled to vest pursuant to Sections 3 or 4 or Tax-Related Items related to Restricted Stock Units otherwise are due, Participant will permanently forfeit such Restricted Stock Units and any right to receive Shares thereunder and the Restricted Stock Units will be returned to the Company at no cost to the Company.

8. Rights as Stockholder. Neither Participant nor any person claiming under or through Participant will have any of the rights or privileges of a stockholder of the Company in respect of any Shares deliverable hereunder unless and until certificates representing such Shares will have been issued, recorded on the records of the Company or its transfer agents or registrars, and delivered to Participant. After such issuance, recordation and delivery, Participant will have all the rights of a stockholder of the Company with respect to voting such Shares and receipt of dividends and distributions on such Shares.

9. No Guarantee of Continued Service. PARTICIPANT ACKNOWLEDGES AND AGREES THAT THE VESTING OF THE RESTRICTED STOCK UNITS PURSUANT TO THE VESTING SCHEDULE HEREOF IS EARNED ONLY BY CONTINUING AS A SERVICE PROVIDER AT THE WILL OF THE COMPANY (OR THE PARENT OR SUBSIDIARY EMPLOYING OR RETAINING PARTICIPANT) AND NOT THROUGH THE ACT OF BEING HIRED, BEING GRANTED THIS AWARD OF RESTRICTED STOCK UNITS OR ACQUIRING SHARES HEREUNDER. PARTICIPANT FURTHER ACKNOWLEDGES AND AGREES THAT THIS AWARD AGREEMENT, THE TRANSACTIONS CONTEMPLATED HEREUNDER AND THE VESTING SCHEDULE SET FORTH HEREIN DO NOT CONSTITUTE AN EXPRESS OR IMPLIED PROMISE OF CONTINUED ENGAGEMENT AS A SERVICE PROVIDER FOR THE VESTING PERIOD, FOR ANY PERIOD, OR AT ALL, AND WILL NOT INTERFERE IN ANY WAY WITH PARTICIPANT’S RIGHT OR THE RIGHT OF THE COMPANY (OR THE PARENT OR SUBSIDIARY EMPLOYING OR RETAINING PARTICIPANT) TO TERMINATE PARTICIPANT’S RELATIONSHIP AS A SERVICE PROVIDER AT ANY TIME, WITH OR WITHOUT CAUSE.

10. Nature of Grant. In accepting the grant, Participant acknowledges, understands and agrees that:

-5-

-6-

11. No Advice Regarding Grant. The Company is not providing any tax, legal or financial advice, nor is the Company making any recommendations regarding Participant’s participation in the Plan, or Participant’s acquisition or sale of the underlying Shares. Participant is hereby advised to consult with his or her own personal tax, legal and financial advisors regarding his or her participation in the Plan before taking any action related to the Plan.

12. Data Privacy. Participant hereby explicitly and unambiguously consents to the collection, use and transfer, in electronic or other form, of Participant’s personal data as described in this Award Agreement and any other Restricted Stock Unit grant materials by and among, as applicable, the Employer, the Company and any Parent or Subsidiary for the exclusive purpose of implementing, administering and managing Participant’s participation in the Plan.

-7-

Participant understands that the Company and the Employer may hold certain personal information about Participant, including, but not limited to, Participant’s name, home address and telephone number, date of birth, social insurance number or other identification number, salary, nationality, job title, any shares of stock or directorships held in the Company, details of all Restricted Stock Units or any other entitlement to shares of stock awarded, canceled, exercised, vested, unvested or outstanding in Participant’s favor (“Data”), for the exclusive purpose of implementing, administering and managing the Plan.

Participant understands that Data will be transferred to a stock plan service provider as may be selected by the Company in the future, which is assisting the Company with the implementation, administration and management of the Plan. Participant understands that the recipients of the Data may be located in the United States or elsewhere, and that the recipients’ country (e.g., the United States) may have different data privacy laws and protections than Participant’s country. Participant understands that if he or she resides outside the United States, he or she may request a list with the names and addresses of any potential recipients of the Data by contacting his or her local human resources representative. Participant authorizes the Company, any stock plan service provider selected by the Company and any other possible recipients which may assist the Company (presently or in the future) with implementing, administering and managing the Plan to receive, possess, use, retain and transfer the Data, in electronic or other form, for the sole purpose of implementing, administering and managing his or her participation in the Plan. Participant understands that Data will be held only as long as is necessary to implement, administer and manage Participant’s participation in the Plan. Participant understands if he or she resides outside the United States, he or she may, at any time, view Data, request additional information about the storage and processing of Data, require any necessary amendments to Data or refuse or withdraw the consents herein, in any case without cost, by contacting in writing his or her local human resources representative. Further, Participant understands that he or she is providing the consents herein on a purely voluntary basis. If Participant does not consent, or if Participant later seeks to revoke his or her consent, his or her status as a Service Provider and career with the Employer will not be adversely affected; the only adverse consequence of refusing or withdrawing Participant’s consent is that the Company would not be able to grant Participant Restricted Stock Units or other equity awards or administer or maintain such awards. Therefore, Participant understands that refusing or withdrawing his or her consent may affect Participant’s ability to participate in the Plan. For more information on the consequences of Participant’s refusal to consent or withdrawal of consent, Participant understands that he or she may contact his or her local human resources representative.

13. Address for Notices. Any notice to be given to the Company under the terms of this Award Agreement will be addressed to the Company at Qualys, Inc., 1600 Bridge Parkway, Redwood Shores, California 94065, or at such other address as the Company may hereafter designate in writing.

14. Grant is Not Transferable. Except to the limited extent provided in Section 6, this grant and the rights and privileges conferred hereby will not be transferred, assigned, pledged or hypothecated in any way (whether by operation of law or otherwise) and will not be subject to sale under execution, attachment or similar process. Upon any attempt to transfer, assign, pledge, hypothecate or otherwise dispose of this grant, or any right or privilege conferred hereby,

-8-

or upon any attempted sale under any execution, attachment or similar process, this grant and the rights and privileges conferred hereby immediately will become null and void.

15. Binding Agreement. Subject to the limitation on the transferability of this grant contained herein, this Award Agreement will be binding upon and inure to the benefit of the heirs, legatees, legal representatives, successors and assigns of the parties hereto.

16. Additional Conditions to Issuance of Stock. If at any time the Company will determine, in its discretion, that the listing, registration, qualification or rule compliance of the Shares upon any securities exchange or under any state, federal or foreign law, the tax code and related regulations or the consent or approval of any governmental regulatory authority is necessary or desirable as a condition to the issuance of Shares to Participant (or his or her estate) hereunder, such issuance will not occur unless and until such listing, registration, qualification, rule compliance, consent or approval will have been completed, effected or obtained free of any conditions not acceptable to the Company. Where the Company determines that the delivery of the payment of any Shares will violate federal securities laws or other applicable laws, the Company will defer delivery until the earliest date at which the Company reasonably anticipates that the delivery of Shares will no longer cause such violation. The Company will make all reasonable efforts to meet the requirements of any such state, federal or foreign law or securities exchange and to obtain any such consent or approval of any such governmental authority or securities exchange.

17. Plan Governs. This Award Agreement is subject to all terms and provisions of the Plan. In the event of a conflict between one or more provisions of this Award Agreement and one or more provisions of the Plan, the provisions of the Plan will govern. Capitalized terms used and not defined in this Award Agreement will have the meaning set forth in the Plan.

18. Administrator Authority. The Administrator will have the power to interpret the Plan and this Award Agreement and to adopt such rules for the administration, interpretation and application of the Plan as are consistent therewith and to interpret or revoke any such rules (including, but not limited to, the determination of whether or not any Restricted Stock Units have vested). All actions taken and all interpretations and determinations made by the Administrator in good faith will be final and binding upon Participant, the Company and all other interested persons. No member of the Administrator will be personally liable for any action, determination or interpretation made in good faith with respect to the Plan or this Award Agreement.

19. Electronic Delivery and Acceptance. The Company may, in its sole discretion, decide to deliver any documents related to Restricted Stock Units awarded under the Plan or future Restricted Stock Units that may be awarded under the Plan by electronic means or request Participant’s consent to participate in the Plan by electronic means. Participant hereby consents to receive such documents by electronic delivery and agrees to participate in the Plan through any on-line or electronic system established and maintained by the Company or a third party designated by the Company.

20. Language. If Participant has received this Award Agreement or any other document related to the Plan translated into a language other than English and if the meaning of

-9-

the translated version is different than the English version, the English version will control.

21. Captions. Captions provided herein are for convenience only and are not to serve as a basis for interpretation or construction of this Award Agreement.

22. Agreement Severable. In the event that any provision in this Award Agreement will be held invalid or unenforceable, such provision will be severable from, and such invalidity or unenforceability will not be construed to have any effect on, the remaining provisions of this Award Agreement.

23. Amendment, Suspension or Termination of the Plan. By accepting this Award, Participant expressly warrants that he or she has received an Award of Restricted Stock Units under the Plan, and has received, read and understood a description of the Plan. Participant understands that the Plan is discretionary in nature and may be amended, suspended or terminated by the Company at any time.

24. Governing Law and Venue. This Award Agreement will be governed by the laws of California without giving effect to the conflict of law principles thereof. For purposes of litigating any dispute that arises under this Award of Restricted Stock Units or this Award Agreement, the parties hereby submit to and consent to the jurisdiction of the State of California, and agree that such litigation will be conducted in the courts of San Mateo County, California, or the federal courts for the United States for the Northern District of California, and no other courts, where this Award of Restricted Stock Units is made and/or to be performed.

25. [Appendix. Notwithstanding any provisions in this Award Agreement, the Restricted Stock Unit grant shall be subject to any special terms and conditions set forth in any appendix to this Award Agreement for Participant’s country (the “Appendix”). Moreover, if Participant relocates to one of the countries included in the Appendix, the special terms and conditions for such country will apply to Participant, to the extent the Company determines that the application of such terms and conditions is necessary or advisable for legal or administrative reasons. The Appendix constitutes part of this Award Agreement.]

26. Modifications to the Award Agreement. This Award Agreement constitutes the entire understanding of the parties on the subjects covered. Participant expressly warrants that he or she is not accepting this Award Agreement in reliance on any promises, representations, or inducements other than those contained herein. Modifications to this Award Agreement or the Plan can be made only in an express written contract executed by a duly authorized officer of the Company. Notwithstanding anything to the contrary in the Plan or this Award Agreement, the Company reserves the right to revise the Award Agreement as it deems necessary or advisable, in its sole discretion and without the consent of Participant, to comply with Section 409A or to otherwise avoid imposition of any additional tax or income recognition under Section 409A in connection to this Award of Restricted Stock.

27. Waiver. Participant acknowledges that a waiver by the Company of breach of any provision of this Award Agreement shall not operate or be construed as a waiver of any other provision of this Award Agreement, or of any subsequent breach by Participant or any other Participant.

-10-

EXHIBIT B

[ANY APPLICABLE APPENDIX TO BE ADDED]

-11-

QUALYS, INC.

2012 EQUITY INCENTIVE PLAN

RESTRICTED STOCK AGREEMENT

Unless otherwise defined herein, the terms defined in the Qualys, Inc. 2012 Equity Incentive Plan (the “Plan”) will have the same defined meanings in this Restricted Stock Agreement, including the Notice of Restricted Stock Grant (the “Notice of Grant”), the Terms and Conditions of Restricted Stock Grant, attached hereto as Exhibit A, and any Appendix, attached hereto as Exhibit B (all together, the “Agreement”).

NOTICE OF RESTRICTED STOCK GRANT

Participant has been granted the right to receive an Award of Restricted Stock, subject to the terms and conditions of the Plan and this Agreement, as follows:

Vesting Schedule:

Subject to any acceleration provisions contained in the Plan or set forth below, the Restricted Stock will vest and the Company’s right to reacquire the Restricted Stock will lapse in accordance with the following schedule:

[Twenty-five percent (25%) of the Shares of Restricted Stock will vest on the one (1) year anniversary of the Vesting Commencement Date, and twenty-five percent (25%) of the Shares of Restricted Stock will vest each year thereafter on the same day as the Vesting Commencement Date, subject to Participant continuing to be a Service Provider through each such date.]

-1-

By Participant’s signature and the signature of the representative of Qualys, Inc. (the “Company”) below, Participant and the Company agree that this Award of Restricted Stock is granted under and governed by the terms and conditions of the Plan and this Agreement, including exhibits hereto, all of which are made a part of this document. Participant has reviewed the Plan and this Agreement in their entirety, has had an opportunity to obtain the advice of counsel prior to executing this Agreement and fully understands all provisions of the Plan and Agreement. Participant hereby agrees to accept as binding, conclusive and final all decisions or interpretations of the Administrator upon any questions relating to the Plan and Agreement. Participant further agrees to notify the Company upon any change in the residence address indicated below.

-2-

EXHIBIT A

TERMS AND CONDITIONS OF RESTRICTED STOCK GRANT

1. Grant of Restricted Stock. The Company hereby grants to the Participant named in the Notice of Grant (the “Participant”) under the Plan for past services and as a separate incentive in connection with his or her services and not in lieu of any salary or other compensation for his or her services, an Award of Shares of Restricted Stock, subject to all of the terms and conditions in this Agreement and the Plan, which is incorporated herein by reference. Subject to Section 18(c) of the Plan, in the event of a conflict between the terms and conditions of the Plan and the terms and conditions of this Agreement, the terms and conditions of the Plan will prevail.

2. Escrow of Shares.

(a) All Shares of Restricted Stock will, upon execution of this Agreement, be delivered and deposited with an escrow holder designated by the Company (the “Escrow Holder”). The Shares of Restricted Stock will be held by the Escrow Holder until such time as the Shares of Restricted Stock vest or the date Participant ceases to be a Service Provider.

(b) The Escrow Holder will not be liable for any act it may do or omit to do with respect to holding the Shares of Restricted Stock in escrow while acting in good faith and in the exercise of its judgment.

(c) Upon Participant’s termination as a Service Provider for any reason, the Escrow Holder, upon receipt of written notice of such termination, will take all steps necessary to accomplish the transfer of the unvested Shares of Restricted Stock to the Company. Participant hereby appoints the Escrow Holder with full power of substitution, as Participant’s true and lawful attorney-in-fact with irrevocable power and authority in the name and on behalf of Participant to take any action and execute all documents and instruments, including, without limitation, stock powers which may be necessary to transfer the certificate or certificates evidencing such unvested Shares of Restricted Stock to the Company upon such termination.

(d) The Escrow Holder will take all steps necessary to accomplish the transfer of Shares of Restricted Stock to Participant after they vest following Participant’s request that the Escrow Holder do so.

(e) Subject to the terms hereof, Participant will have all the rights of a stockholder with respect to the Shares while they are held in escrow, including without limitation, the right to vote the Shares and to receive any cash dividends declared thereon.

(f) In the event of any dividend or other distribution (whether in the form of cash, Shares, other securities, or other property), recapitalization, stock split, reverse stock split, reorganization, merger, consolidation, split-up, spin-off, combination, repurchase, or exchange of Shares or other securities of the Company, or other change in the corporate structure of the Company affecting the Shares, the Shares of Restricted Stock will be increased, reduced or otherwise changed, and by virtue of any such change Participant will in his or her capacity as owner of unvested Shares of Restricted Stock be entitled to new or additional or different shares

-3-

of stock, cash or securities (other than rights or warrants to purchase securities); such new or additional or different shares, cash or securities will thereupon be considered to be unvested Shares of Restricted Stock and will be subject to all of the conditions and restrictions which were applicable to the unvested Shares of Restricted Stock pursuant to this Agreement. If Participant receives rights or warrants with respect to any unvested Shares of Restricted Stock, such rights or warrants may be held or exercised by Participant, provided that until such exercise any such rights or warrants and after such exercise any shares or other securities acquired by the exercise of such rights or warrants will be considered to be unvested Shares of Restricted Stock and will be subject to all of the conditions and restrictions which were applicable to the unvested Shares of Restricted Stock pursuant to this Agreement. The Administrator in its absolute discretion at any time may accelerate the vesting of all or any portion of such new or additional shares of stock, cash or securities, rights or warrants to purchase securities or shares or other securities acquired by the exercise of such rights or warrants.

(g) The Company may instruct the transfer agent for its Common Stock to place a legend on the certificates representing the Restricted Stock or otherwise note its records as to the restrictions on transfer set forth in this Agreement.

3. Vesting Schedule. Except as provided in Section 4, and subject to Section 5, the Shares of Restricted Stock awarded by this Agreement will vest in accordance with the vesting provisions set forth in the Notice of Grant. Shares of Restricted Stock scheduled to vest on a certain date or upon the occurrence of a certain condition will not vest in Participant in accordance with any of the provisions of this Agreement, unless Participant will have been continuously a Service Provider from the Date of Grant until the date such vesting occurs.

4. Administrator Discretion. The Administrator, in its discretion, may accelerate the vesting of the balance, or some lesser portion of the balance, of the unvested Restricted Stock at any time, subject to the terms of the Plan. If so accelerated, such Restricted Stock will be considered as having vested as of the date specified by the Administrator.

5. Forfeiture upon Termination of Status as a Service Provider. Notwithstanding any contrary provision of this Agreement, the balance of the Shares of Restricted Stock that have not vested as of the time of Participant’s termination as a Service Provider for any or no reason will be forfeited and automatically transferred to and reacquired by the Company at no cost to the Company upon the date of such termination and Participant will have no further rights thereunder. The date of Participant’s termination as a Service Provider is detailed in Section 10(h). Participant will not be entitled to a refund of the price paid for the Shares of Restricted Stock, if any, returned to the Company pursuant to this Section 5. Participant hereby appoints the Escrow Agent with full power of substitution, as Participant’s true and lawful attorney-in-fact with irrevocable power and authority in the name and on behalf of Participant to take any action and execute all documents and instruments, including, without limitation, stock powers which may be necessary to transfer the certificate or certificates evidencing such unvested Shares to the Company upon such termination of service.

6. Death of Participant. Any distribution or delivery to be made to Participant under this Agreement will, if Participant is then deceased, be made to Participant’s designated beneficiary, or if no beneficiary survives Participant, the administrator or executor of

-4-

Participant’s estate. Any such transferee must furnish the Company with (a) written notice of his or her status as transferee, and (b) evidence satisfactory to the Company to establish the validity of the transfer and compliance with any laws or regulations pertaining to said transfer.

7. Withholding of Taxes. Notwithstanding any contrary provision of this Agreement, no certificate representing the Shares of Restricted Stock may be released from the escrow established pursuant to Section 2, unless and until satisfactory arrangements (as determined by the Administrator) will have been made by Participant with respect to the payment of income, employment, social insurance, payroll tax, fringe benefit tax, payment on account or other tax-related items related to Participant’s participation in the Plan and legally applicable to Participant (“Tax-Related Items”) which the Company determines must be withheld with respect to such Shares. Prior to vesting of the Restricted Stock, Participant will pay or make adequate arrangements satisfactory to the Company and/or the Participant’s employer (the “Employer”) to satisfy all withholding and payment obligations of Tax-Related Items of the Company and/or the Employer. In this regard, Participant authorizes the Company and/or the Employer to withhold any Tax-Related Items legally payable by Participant from his or her wages or other cash compensation paid to Participant by the Company and/or the Employer or from proceeds of the sale of Shares. Alternatively, or in addition, if permissible under applicable local law, the Administrator, in its sole discretion and pursuant to such procedures as it may specify from time to time, may permit or require Participant to satisfy such tax withholding obligation, in whole or in part (without limitation) by (a) paying cash, (b) electing to have the Company withhold otherwise deliverable Shares having a Fair Market Value equal to the minimum amount required to be withheld, (c) selling a sufficient number of such Shares otherwise deliverable to Participant through such means as the Company may determine in its sole discretion (whether through a broker or otherwise) equal to the amount required to be withheld, or (d) if Participant is a U.S. employee, delivering to the Company already vested and owned Shares having a Fair Market Value equal to the amount required to be withheld. To the extent determined appropriate by the Company in its discretion, it will have the right (but not the obligation) to satisfy any obligations for Tax-Related Items by reducing the number of Shares otherwise deliverable to Participant [and, until determined otherwise by the Company, this will be the method by which such tax withholding obligations are satisfied]. Further, if Participant is subject to tax in more than one jurisdiction between the Date of Grant and a date of relevant taxable or tax withholding event, as applicable, Participant acknowledges and agrees that the Company and/or the Employer (or former employer, as applicable) may be required to withhold or account for tax in more than one jurisdiction. If Participant fails to make satisfactory arrangements for the payment of any Tax-Related Items hereunder at the time any applicable Shares otherwise are scheduled to vest pursuant to Sections 3 or 4 or Tax-Related Items related to the applicable Shares otherwise are due, Participant will permanently forfeit such Shares and the Shares will be returned to the Company at no cost to the Company.

8. Rights as Stockholder. Neither Participant nor any person claiming under or through Participant will have any of the rights or privileges of a stockholder of the Company in respect of any Shares deliverable hereunder unless and until certificates representing such Shares will have been issued, recorded on the records of the Company or its transfer agents or registrars, and delivered to Participant or the Escrow Agent. Except as provided in Section 2(f), after such issuance, recordation and delivery, Participant will have all the rights of a stockholder of the

-5-

Company with respect to voting such Shares and receipt of dividends and distributions on such Shares.

9. No Guarantee of Continued Service. PARTICIPANT ACKNOWLEDGES AND AGREES THAT THE VESTING OF THE SHARES OF RESTRICTED STOCK PURSUANT TO THE VESTING SCHEDULE HEREOF IS EARNED ONLY BY CONTINUING AS A SERVICE PROVIDER AT THE WILL OF THE COMPANY (OR THE PARENT OR SUBSIDIARY EMPLOYING OR RETAINING PARTICIPANT) AND NOT THROUGH THE ACT OF BEING HIRED, BEING GRANTED THIS RESTRICTED STOCK OR ACQUIRING SHARES HEREUNDER. PARTICIPANT FURTHER ACKNOWLEDGES AND AGREES THAT THIS AGREEMENT, THE TRANSACTIONS CONTEMPLATED HEREUNDER AND THE VESTING SCHEDULE SET FORTH HEREIN DO NOT CONSTITUTE AN EXPRESS OR IMPLIED PROMISE OF CONTINUED ENGAGEMENT AS A SERVICE PROVIDER FOR THE VESTING PERIOD, FOR ANY PERIOD, OR AT ALL, AND WILL NOT INTERFERE IN ANY WAY WITH PARTICIPANT’S RIGHT OR THE RIGHT OF THE COMPANY (OR THE PARENT OR SUBSIDIARY EMPLOYING OR RETAINING PARTICIPANT) TO TERMINATE PARTICIPANT’S RELATIONSHIP AS A SERVICE PROVIDER AT ANY TIME, WITH OR WITHOUT CAUSE.

10. Nature of Grant. In accepting the grant, Participant acknowledges, understands and agrees that:

-6-

-7-

11. No Advice Regarding Grant. The Company is not providing any tax, legal or financial advice, nor is the Company making any recommendations regarding Participant’s participation in the Plan, or Participant’s acquisition or sale of the underlying Shares. Participant is hereby advised to consult with his or her own personal tax, legal and financial advisors regarding his or her participation in the Plan before taking any action related to the Plan.

12. Data Privacy. Participant hereby explicitly and unambiguously consents to the collection, use and transfer, in electronic or other form, of Participant’s personal data as described in this Agreement and any other Restricted Stock grant materials by and among, as applicable, the Employer, the Company and any Parent or Subsidiary for the exclusive purpose of implementing, administering and managing Participant’s participation in the Plan.

Participant understands that the Company and the Employer may hold certain personal information about Participant, including, but not limited to, Participant’s name, home address and telephone number, date of birth, social insurance number or other identification number, salary, nationality, job title, any shares of stock or directorships held in the Company, details of all Restricted Stock or any other entitlement to shares of stock awarded, canceled, exercised, vested, unvested or outstanding in Participant’s favor (“Data”), for the exclusive purpose of implementing, administering and managing the Plan.

Participant understands that Data will be transferred to a stock plan service provider as may be selected by the Company in the future, which is assisting the Company with the implementation, administration and management of the Plan. Participant understands that the recipients of the Data may be located in the United States or elsewhere, and that the recipients’ country (e.g., the United States) may have different data privacy laws and protections than Participant’s country. Participant understands that if he or she resides outside the United States, he or she may request a list with the names and addresses of any potential recipients of the Data by contacting his or her local human resources representative. Participant authorizes the Company, any stock plan service provider selected by the Company and any other possible recipients which may assist the Company (presently or in the future) with implementing, administering and managing the Plan to receive, possess, use, retain and transfer the Data, in electronic or other form, for the sole purpose of implementing, administering and managing his or her participation in the Plan. Participant understands that Data will be held only as long as is necessary to implement, administer and manage Participant’s participation in the Plan. Participant understands if he or she resides outside the United States, he or she may, at any time, view Data, request additional information about the storage and processing of Data, require any necessary amendments to Data or refuse or withdraw the consents herein, in any case without cost, by contacting in writing his or her local human resources representative. Further, Participant understands that he or she is providing the consents herein on a purely voluntary basis. If Participant does not consent, or if Participant later seeks to revoke his or her consent, his or her status as a Service Provider

-8-

and career with the Employer will not be adversely affected; the only adverse consequence of refusing or withdrawing Participant’s consent is that the Company would not be able to grant Participant Restricted Stock or other equity awards or administer or maintain such awards. Therefore, Participant understands that refusing or withdrawing his or her consent may affect Participant’s ability to participate in the Plan. For more information on the consequences of Participant’s refusal to consent or withdrawal of consent, Participant understands that he or she may contact his or her local human resources representative.

13. Address for Notices. Any notice to be given to the Company under the terms of this Agreement will be addressed to the Company at Qualys, Inc., 1600 Bridge Parkway, Redwood Shores, California 94065, or at such other address as the Company may hereafter designate in writing.

14. Grant is Not Transferable. Except to the limited extent provided in Section 6, the unvested Shares subject to this grant and the rights and privileges conferred hereby will not be transferred, assigned, pledged or hypothecated in any way (whether by operation of law or otherwise) and will not be subject to sale under execution, attachment or similar process. Upon any attempt to transfer, assign, pledge, hypothecate or otherwise dispose of any unvested Shares of Restricted Stock subject to this grant, or any right or privilege conferred hereby, or upon any attempted sale under any execution, attachment or similar process, this grant and the rights and privileges conferred hereby immediately will become null and void.

15. Binding Agreement. Subject to the limitation on the transferability of this grant contained herein, this Agreement will be binding upon and inure to the benefit of the heirs, legatees, legal representatives, successors and assigns of the parties hereto.

16. Additional Conditions to Release from Escrow. The Company will not be required to issue any certificate or certificates for Shares hereunder or release such Shares from the escrow established pursuant to Section 2 prior to fulfillment of all the following conditions: (a) the admission of such Shares to listing on all stock exchanges on which such class of stock is then listed; (b) the completion of any registration or other qualification of such Shares under any state or federal law or under the rulings or regulations of the Securities and Exchange Commission or any other governmental regulatory body or the securities exchange on which the Shares are then registered, which the Administrator will, in its absolute discretion, deem necessary or advisable; (c) the obtaining of any approval or other clearance from any state or federal governmental agency, which the Administrator will, in its absolute discretion, determine to be necessary or advisable; and (d) the lapse of such reasonable period of time following the Date of Grant of the Restricted Stock as the Administrator may establish from time to time for reasons of administrative convenience.

17. Plan Governs. This Agreement is subject to all terms and provisions of the Plan. In the event of a conflict between one or more provisions of this Agreement and one or more provisions of the Plan, the provisions of the Plan will govern. Capitalized terms used and not defined in this Agreement will have the meaning set forth in the Plan.

18. Administrator Authority. The Administrator will have the power to interpret the Plan and this Agreement and to adopt such rules for the administration, interpretation and

-9-

application of the Plan as are consistent therewith and to interpret or revoke any such rules (including, but not limited to, the determination of whether or not any Shares of Restricted Stock have vested). All actions taken and all interpretations and determinations made by the Administrator in good faith will be final and binding upon Participant, the Company and all other interested persons. No member of the Administrator will be personally liable for any action, determination or interpretation made in good faith with respect to the Plan or this Agreement.

19. Electronic Delivery and Acceptance. The Company may, in its sole discretion, decide to deliver any documents related to the Shares of Restricted Stock awarded under the Plan or future Restricted Stock that may be awarded under the Plan by electronic means or request Participant’s consent to participate in the Plan by electronic means. Participant hereby consents to receive such documents by electronic delivery and agrees to participate in the Plan through any on-line or electronic system established and maintained by the Company or another third party designated by the Company.

20. Language. If Participant has received this Agreement or any other document related to the Plan translated into a language other than English and if the meaning of the translated version is different than the English version, the English version will control.

21. Captions. Captions provided herein are for convenience only and are not to serve as a basis for interpretation or construction of this Agreement.

22. Agreement Severable. In the event that any provision in this Agreement will be held invalid or unenforceable, such provision will be severable from, and such invalidity or unenforceability will not be construed to have any effect on, the remaining provisions of this Agreement.

23. Amendment, Suspension or Termination of the Plan. By accepting this Award, Participant expressly warrants that he or she has received an Award of Restricted Stock under the Plan, and has received, read and understood a description of the Plan. Participant understands that the Plan is discretionary in nature and may be amended, suspended or terminated by the Company at any time.

24. Governing Law and Venue. This Agreement will be governed by the laws of California, without giving effect to the conflict of law principles thereof. For purposes of litigating any dispute that arises under this Award of Restricted Stock or this Agreement, the parties hereby submit to and consent to the jurisdiction of the State of California, and agree that such litigation will be conducted in the courts of San Mateo County, California, or the federal courts for the United States for the Northern District of California, and no other courts, where this Award of Restricted Stock is made and/or to be performed.

25. [Appendix. Notwithstanding any provisions in this Agreement, the Restricted Stock grant shall be subject to any special terms and conditions set forth in any appendix to this Agreement for Participant’s country (the “Appendix”). Moreover, if Participant relocates to one of the countries included in the Appendix, the special terms and conditions for such country will apply to Participant, to the extent the Company determines that the application of such terms and

-10-

conditions is necessary or advisable for legal or administrative reasons. The Appendix constitutes part of this Agreement.]

26. Modifications to the Agreement. This Agreement constitutes the entire understanding of the parties on the subjects covered. Participant expressly warrants that he or she is not accepting this Agreement in reliance on any promises, representations, or inducements other than those contained herein. Modifications to this Agreement or the Plan can be made only in an express written contract executed by a duly authorized officer of the Company. Notwithstanding anything to the contrary in the Plan or this Agreement, the Company reserves the right to revise this Agreement as it deems necessary or advisable, in its sole discretion and without the consent of Participant, to comply with Section 409A of the Internal Revenue Code of 1986, as amended (the “Code”) or to otherwise avoid imposition of any additional tax or income recognition under Section 409A of the Code in connection to this Award of Restricted Stock.

27. Waiver. Participant acknowledges that a waiver by the Company of breach of any provision of this Agreement shall not operate or be construed as a waiver of any other provision of this Agreement, or of any subsequent breach by Participant or any other Participant.

-11-

EXHIBIT B

[ANY APPLICABLE APPENDIX TO BE ADDED]

-12-

QUALYS, INC.

2012 EQUITY INCENTIVE PLAN

STOCK OPTION AGREEMENT

Unless otherwise defined herein, the terms defined in the Qualys, Inc. 2012 Equity Incentive Plan (the “Plan”) will have the same defined meanings in this Stock Option Agreement, including the Notice of Stock Option Grant (the “Notice of Grant”), the Terms and Conditions of Stock Option Grant, attached hereto as Exhibit A, and the Appendix, attached hereto as Exhibit B (all together, the “Agreement”).

NOTICE OF STOCK OPTION GRANT

Participant has been granted an Option to purchase Common Stock of Qualys, Inc. (the “Company”), subject to the terms and conditions of the Plan and this Agreement, as follows:

Vesting Schedule:

Subject to accelerated vesting as set forth below or in the Plan, this Option will be exercisable, in whole or in part, in accordance with the following schedule:

[Twenty-five percent (25%) of the Shares subject to the Option shall vest on the one (1) year anniversary of the Vesting Commencement Date, and one forty-eighth (1/48^th) of the Shares subject

- 1 -

to the Option shall vest each month thereafter on the same day of the month as the Vesting Commencement Date (and if there is no corresponding day, on the last day of the month), subject to Participant continuing to be a Service Provider through each such date.]

Termination Period:

This Option will be exercisable for [three (3) months] after Participant ceases to be a Service Provider, unless such termination is due to Participant’s death or Disability, in which case this Option will be exercisable for [twelve (12) months] after Participant ceases to be a Service Provider. Notwithstanding the foregoing sentence, in no event may this Option be exercised after the Term/Expiration Date as provided above and may be subject to earlier termination as provided in Section 13(c) of the Plan.

By Participant’s signature and the signature of the Company’s representative below, Participant and the Company agree that this Option is granted under and governed by the terms and conditions of the Plan and this Agreement, all of which are made a part of this document. Participant has reviewed the Plan and this Agreement in their entirety, has had an opportunity to obtain the advice of counsel prior to executing this Agreement and fully understands all provisions of the Plan and Agreement. Participant hereby agrees to accept as binding, conclusive and final all decisions or interpretations of the Administrator upon any questions relating to the Plan and Agreement. Participant further agrees to notify the Company upon any change in the residence address indicated below.

- 2 -

EXHIBIT A

TERMS AND CONDITIONS OF STOCK OPTION GRANT

1. Grant of Option. The Company hereby grants to the Participant named in the Notice of Grant (the “Participant”) an option (the “Option”) to purchase the number of Shares, as set forth in the Notice of Grant, at the exercise price per Share set forth in the Notice of Grant (the “Exercise Price”), subject to all of the terms and conditions in this Agreement and the Plan, which is incorporated herein by reference. Subject to Section 18(c) of the Plan, in the event of a conflict between the terms and conditions of the Plan and the terms and conditions of this Agreement, the terms and conditions of the Plan will prevail.

(a) For U.S. taxpayers, the Option will be designated as either an Incentive Stock Option (“ISO”) or a Nonstatutory Stock Option (“NSO”). If designated in the Notice of Grant as an ISO, this Option is intended to qualify as an ISO under Section 422 of the Internal Revenue Code of 1986, as amended (the “Code”). However, if this Option is intended to be an Incentive Stock Option, to the extent that it exceeds the $100,000 rule of Code Section 422(d) it will be treated as an NSO. Further, if for any reason this Option (or portion thereof) will not qualify as an ISO, then, to the extent of such nonqualification, such Option (or portion thereof) shall be regarded as a NSO granted under the Plan. In no event will the Administrator, the Company or any Parent or Subsidiary or any of their respective employees or directors have any liability to Participant (or any other person) due to the failure of the Option to qualify for any reason as an ISO.

(b) For non-U.S. taxpayers, the Option will be designated as an NSO.

2. Vesting Schedule. Except as provided in Section 3, the Option awarded by this Agreement will vest in accordance with the vesting provisions set forth in the Notice of Grant. Shares scheduled to vest on a certain date or upon the occurrence of a certain condition will not vest in Participant in accordance with any of the provisions of this Agreement, unless Participant will have been continuously a Service Provider from the Date of Grant until the date such vesting occurs.

3. Administrator Discretion. The Administrator, in its discretion, may accelerate the vesting of the balance, or some lesser portion of the balance, of the unvested Option at any time, subject to the terms of the Plan. If so accelerated, such Option will be considered as having vested as of the date specified by the Administrator.

4. Exercise of Option.

(a) Right to Exercise. This Option may be exercised only within the term set out in the Notice of Grant, and may be exercised during such term only in accordance with the Plan and the terms of this Agreement.

(b) Method of Exercise. This Option is exercisable by delivery of an exercise notice, in the form attached as Exhibit C (the “Exercise Notice”) or in a manner and pursuant to such procedures as the Administrator may determine, which will state the election to exercise the Option, the number of Shares in respect of which the Option is being exercised (the “Exercised Shares”), and such other representations and agreements as may be required by the Company pursuant to the

- 3 -

provisions of the Plan. The Exercise Notice will be completed by Participant and delivered to the Company. The Exercise Notice will be accompanied by payment of the aggregate Exercise Price as to all Exercised Shares together and of any Tax-Related Items (as defined in Section 6(a)). This Option will be deemed to be exercised upon receipt by the Company of such fully executed Exercise Notice accompanied by the aggregate Exercise Price.

5. Method of Payment. Payment of the aggregate Exercise Price will be by any of the following, or a combination thereof, at the election of Participant:

(a) cash;

(b) check;

(c) consideration received by the Company under a formal cashless exercise program adopted by the Company in connection with the Plan; or

(d) if Participant is a U.S. employee, surrender of other Shares which have a Fair Market Value on the date of surrender equal to the aggregate Exercise Price of the Exercised Shares, provided that accepting such Shares, in the sole discretion of the Administrator, will not result in any adverse accounting consequences to the Company.

6. Tax Obligations.

(a) Withholding of Taxes. Notwithstanding any contrary provision of this Agreement, no certificate representing the Shares will be issued to Participant, unless and until satisfactory arrangements (as determined by the Administrator) will have been made by Participant with respect to the payment of income, employment, social insurance, payroll tax, fringe benefit tax, payment on account or other tax-related items related to Participant’s participation in the Plan and legally applicable to Participant (“Tax-Related Items”) which the Company determines must be withheld with respect to such Shares. If Participant is a non-U.S. employee, payment of Tax-Related Items may not be effectuated by surrender of other Shares with a Fair Market Value equal to the amount of any Tax-Related Items. To the extent determined appropriate by the Company in its discretion, it will have the right (but not the obligation) to satisfy any Tax-Related Items by reducing the number of Shares otherwise deliverable to Participant. If Participant fails to make satisfactory arrangements for the payment of any required Tax-Related Items hereunder at the time of the Option exercise, Participant acknowledges and agrees that the Company may refuse to honor the exercise and refuse to deliver the Shares if such amounts are not delivered at the time of exercise. Further, if Participant is subject to tax in more than one jurisdiction between the Date of Grant and the date of any relevant taxable or tax withholding event, as applicable, Participant acknowledges and agrees that the Company and/or Participant’s employer (the “Employer”), or former employer, as applicable, may be required to withhold or account for tax in more than one jurisdiction.

(b) Notice of Disqualifying Disposition of ISO Shares. If the Option granted to Participant herein is an ISO, and if Participant sells or otherwise disposes of any of the Shares acquired pursuant to the ISO on or before the later of (i) the date two (2) years after the Date of Grant, or (ii) the date one (1) year after the date of exercise, Participant will immediately notify the

- 4 -

Company in writing of such disposition. Participant agrees that Participant may be subject to income tax withholding by the Company on the compensation income recognized by Participant.

(c) Code Section 409A. Under Code Section 409A, an option that vests after December 31, 2004 (or that vested on or prior to such date but which was materially modified after October 3, 2004) that was granted with a per share exercise price that is determined by the Internal Revenue Service (the “IRS”) to be less than the fair market value of a share on the date of grant (a “Discount Option”) may be considered “deferred compensation.” A Discount Option may result in (i) income recognition by Participant prior to the exercise of the option, (ii) an additional twenty percent (20%) federal income tax, and (iii) potential penalty and interest charges. The Discount Option may also result in additional state income, penalty and interest charges to Participant. Participant acknowledges that the Company cannot and has not guaranteed that the IRS will agree that the per Share Exercise Price of this Option equals or exceeds the Fair Market Value of a Share on the Date of Grant in a later examination. Participant agrees that if the IRS determines that the Option was granted with a per Share Exercise Price that was less than the Fair Market Value of a Share on the Date of Grant, Participant will be solely responsible for Participant’s costs related to such a determination.

7. Rights as Stockholder. Neither Participant nor any person claiming under or through Participant will have any of the rights or privileges of a stockholder of the Company in respect of any Shares deliverable hereunder unless and until certificates representing such Shares will have been issued, recorded on the records of the Company or its transfer agents or registrars, and delivered to Participant. After such issuance, recordation and delivery, Participant will have all the rights of a stockholder of the Company with respect to voting such Shares and receipt of dividends and distributions on such Shares.

8. No Guarantee of Continued Service. PARTICIPANT ACKNOWLEDGES AND AGREES THAT THE VESTING OF SHARES PURSUANT TO THE VESTING SCHEDULE HEREOF IS EARNED ONLY BY CONTINUING AS A SERVICE PROVIDER AT THE WILL OF THE COMPANY (OR THE PARENT OR SUBSIDIARY EMPLOYING OR RETAINING PARTICIPANT) AND NOT THROUGH THE ACT OF BEING HIRED, BEING GRANTED THIS OPTION OR ACQUIRING SHARES HEREUNDER. PARTICIPANT FURTHER ACKNOWLEDGES AND AGREES THAT THIS AGREEMENT, THE TRANSACTIONS CONTEMPLATED HEREUNDER AND THE VESTING SCHEDULE SET FORTH HEREIN DO NOT CONSTITUTE AN EXPRESS OR IMPLIED PROMISE OF CONTINUED ENGAGEMENT AS A SERVICE PROVIDER FOR THE VESTING PERIOD, FOR ANY PERIOD, OR AT ALL, AND WILL NOT INTERFERE IN ANY WAY WITH PARTICIPANT’S RIGHT OR THE RIGHT OF THE COMPANY (OR THE PARENT OR SUBSIDIARY EMPLOYING OR RETAINING PARTICIPANT) TO TERMINATE PARTICIPANT’S RELATIONSHIP AS A SERVICE PROVIDER AT ANY TIME, WITH OR WITHOUT CAUSE.

9. Nature of Grant. In accepting the Option, Participant acknowledges, understands and agrees that:

- 5 -

(a) the Plan is established voluntarily by the Company, it is discretionary in nature, and may be amended, suspended or terminated by the Company at any time, to the extent permitted by the Plan;

(b) the grant of the Option is voluntary and occasional and does not create any contractual or other right to receive future grants of options, or benefits in lieu of options, even if options have been granted in the past;

(c) all decisions with respect to future option or other grants, if any, will be at the sole discretion of the Company;

(d) Participant is voluntarily participating in the Plan;

(e) the Option and any Shares acquired under the Plan are not intended to replace any pension rights or compensation;

(f) the Option and Shares acquired under the Plan and the income and value of same, are not part of normal or expected compensation for purposes of calculating any severance, resignation, termination, redundancy, dismissal, end-of-service payments, bonuses, long-service awards, pension or retirement or welfare benefits or similar payments;

(g) the future value of the Shares underlying the Option is unknown, indeterminable, and cannot be predicted with certainty;

(h) if the underlying Shares do not increase in value, the Option will have no value;

(i) if Participant exercises the Option and acquires Shares, the value of such Shares may increase or decrease in value, even below the Exercise Price;

(j) for purposes of the Option, Participant’s engagement as a Service Provider will be considered terminated as of the date Participant is no longer actively providing services to the Company or any Parent or Subsidiary (regardless of the reason for such termination and whether or not later found to be invalid or in breach of employment laws in the jurisdiction where Participant is a Service Provider or the terms of Participant’s engagement agreement, if any), and unless otherwise expressly provided in this Agreement or determined by the Administrator, (i) Participant’s right to vest in the Option under the Plan, if any, will terminate as of such date and will not be extended by any notice period (e.g., Participant’s period of service would not include any contractual notice period or any period of “garden leave” or similar period mandated under employment laws in the jurisdiction where Participant is a Service Provider or Participant’s engagement agreement, if any, unless Participant is providing bona fide services during such time); and (ii) the period (if any) during which Participant may exercise the Option after such termination of Participant’s engagement as a Service Provider will commence on the date Participant ceases to actively provide services and will not be extended by any notice period mandated under employment laws in the jurisdiction where Participant is employed or terms of Participant’s engagement agreement, if any; the Administrator shall have the exclusive discretion to determine when Participant is no longer actively providing services for purposes of his or her Option grant (including whether Participant may still be considered to be providing services while on a leave of absence);

- 6 -

(k) unless otherwise provided in the Plan or by the Company in its discretion, the Option and the benefits evidenced by this Agreement do not create any entitlement to have the Option or any such benefits transferred to, or assumed by, another company nor to be exchanged, cashed out or substituted for, in connection with any corporate transaction affecting the Shares; and

(l) the following provisions apply only if Participant is providing services outside the United States:

10. No Advice Regarding Grant. The Company is not providing any tax, legal or financial advice, nor is the Company making any recommendations regarding Participant’s participation in the Plan, or Participant’s acquisition or sale of the underlying Shares. Participant is hereby advised to consult with his or her own personal tax, legal and financial advisors regarding his or her participation in the Plan before taking any action related to the Plan.

11. Data Privacy. Participant hereby explicitly and unambiguously consents to the collection, use and transfer, in electronic or other form, of Participant’s personal data as described in this Agreement and any other Option grant materials by and among, as applicable, the Employer, the Company and any Parent or Subsidiary for the exclusive purpose of implementing, administering and managing Participant’s participation in the Plan.

- 7 -

Participant understands that the Company and the Employer may hold certain personal information about Participant, including, but not limited to, Participant’s name, home address and telephone number, date of birth, social insurance number or other identification number, salary, nationality, job title, any shares of stock or directorships held in the Company, details of all Options or any other entitlement to stock awarded, canceled, exercised, vested, unvested or outstanding in Participant’s favor (“Data”), for the exclusive purpose of implementing, administering and managing the Plan.

Participant understands that Data will be transferred to a stock plan service provider as may be selected by the Company in the future, which is assisting the Company with the implementation, administration and management of the Plan. Participant understands that the recipients of the Data may be located in the United States or elsewhere, and that the recipient’s country (e.g., the United States) may have different data privacy laws and protections than Participant’s country. Participant understands that if he or she resides outside the United States, he or she may request a list with the names and addresses of any potential recipients of the Data by contacting his or her local human resources representative. Participant authorizes the Company and any other possible recipients which may assist the Company (presently or in the future) with implementing, administering and managing the Plan to receive, possess, use, retain and transfer the Data, in electronic or other form, for the sole purposes of implementing, administering and managing Participant’s participation in the Plan. Participant understands that Data will be held only as long as is necessary to implement, administer and manage Participant’s participation in the Plan. Participant understands that if he or she resides outside the United States, he or she may, at any time, view Data, request additional information about the storage and processing of Data, require any necessary amendments to Data or refuse or withdraw the consents herein, in any case without cost, by contacting in writing his or her local human resources representative. Further, Participant understands that he or she is providing the consents herein on a purely voluntary basis. If Participant does not consent, or if Participant later seeks to revoke his or her consent, his or her engagement as a Service Provider and career with the Employer will not be adversely affected; the only adverse consequence of refusing or withdrawing Participant’s consent is that the Company would not be able to grant Participant Options or other equity awards or administer or maintain such awards. Therefore, Participant understands that refusing or withdrawing his or her consent may affect Participant’s ability to participate in the Plan. For more information on the consequences of Participant’s refusal to consent or withdrawal of consent, Participant understands that he or she may contact his or her local human resources representative.

12. Address for Notices. Any notice to be given to the Company under the terms of this Agreement will be addressed to the Company at Qualys, Inc., 1600 Bridge Parkway, Redwood Shores, CA 94065, or at such other address as the Company may hereafter designate in writing.

13. Non-Transferability of Option. This Option may not be transferred in any manner otherwise than by will or by the laws of descent or distribution and may be exercised during the lifetime of Participant only by Participant.

- 8 -

14. Binding Agreement. Subject to the limitation on the transferability of this grant contained herein, this Agreement will be binding upon and inure to the benefit of the heirs, legatees, legal representatives, successors and assigns of the parties hereto.

15. Additional Conditions to Issuance of Stock. If at any time the Company will determine, in its discretion, that the listing, registration, qualification or rule compliance of the Shares upon any securities exchange or under any state, federal or foreign law, the tax code and related regulations or the consent or approval of any governmental regulatory authority is necessary or desirable as a condition to the purchase by, or issuance of Shares to, Participant (or his or her estate) hereunder, such purchase or issuance will not occur unless and until such listing, registration, qualification, rule compliance, consent or approval will have been completed, effected or obtained free of any conditions not acceptable to the Company. The Company will make all reasonable efforts to meet the requirements of any such state, federal or foreign law or securities exchange and to obtain any such consent or approval of any such governmental authority or securities exchange. Assuming such compliance, for income tax purposes the Exercised Shares will be considered transferred to Participant on the date the Option is exercised with respect to such Exercised Shares.

16. Plan Governs. This Agreement is subject to all terms and provisions of the Plan. In the event of a conflict between one or more provisions of this Agreement and one or more provisions of the Plan, the provisions of the Plan will govern. Capitalized terms used and not defined in this Agreement will have the meaning set forth in the Plan.

17. Administrator Authority. The Administrator will have the power to interpret the Plan and this Agreement and to adopt such rules for the administration, interpretation and application of the Plan as are consistent therewith and to interpret or revoke any such rules (including, but not limited to, the determination of whether or not any Shares subject to the Option have vested). All actions taken and all interpretations and determinations made by the Administrator in good faith will be final and binding upon Participant, the Company and all other interested persons. No member of the Administrator will be personally liable for any action, determination or interpretation made in good faith with respect to the Plan or this Agreement.

18. Electronic Delivery and Acceptance. The Company may, in its sole discretion, decide to deliver any documents related to Options awarded under the Plan or future options that may be awarded under the Plan by electronic means or request Participant’s consent to participate in the Plan by electronic means. Participant hereby consents to receive such documents by electronic delivery and agrees to participate in the Plan through any on-line or electronic system established and maintained by the Company or a third party designated by the Company.

19. Captions. Captions provided herein are for convenience only and are not to serve as a basis for interpretation or construction of this Agreement.

20. Language. If Participant has received this Agreement, or any other document related to the Option and/or the Plan translated into a language other than English and if the meaning of the translated version is different than the English version, the English version will control.

- 9 -

21. Agreement Severable. In the event that any provision in this Agreement will be held invalid or unenforceable, such provision will be severable from, and such invalidity or unenforceability will not be construed to have any effect on, the remaining provisions of this Agreement.

22. Amendment, Suspension or Termination of the Plan. By accepting this Award, Participant expressly warrants that he or she has received an Option under the Plan, and has received, read and understood a description of the Plan. Participant understands that the Plan is discretionary in nature and may be amended, suspended or terminated by the Company at any time.

23. Governing Law and Venue. This Agreement will be governed by the laws of California, without giving effect to the conflict of law principles thereof. For purposes of litigating any dispute that arises under this Option or this Agreement, the parties hereby submit to and consent to the jurisdiction of the State of California, and agree that such litigation will be conducted in the courts of San Mateo County, California, or the federal courts for the United States for the Northern District of California, and no other courts, where this Option is made and/or to be performed.

24. Appendix. Notwithstanding any provisions in this Agreement, the Option grant shall be subject to any special terms and conditions set forth in any appendix to this Agreement for Participant’s country (the “Appendix”). Moreover, if Participant relocates to one of the countries included in the Appendix, the special terms and conditions for such country will apply to Participant, to the extent the Company determines that the application of such terms and conditions is necessary or advisable for legal or administrative reasons. The Appendix constitutes part of this Agreement.

25. Modifications to the Agreement. This Agreement constitutes the entire understanding of the parties on the subjects covered. Participant expressly warrants that he or she is not accepting this Agreement in reliance on any promises, representations, or inducements other than those contained herein. Modifications to this Agreement or the Plan can be made only in an express written contract executed by a duly authorized officer of the Company. Notwithstanding anything to the contrary in the Plan or this Agreement, the Company reserves the right to revise this Agreement as it deems necessary or advisable, in its sole discretion and without the consent of Participant, to comply with Code Section 409A or to otherwise avoid imposition of any additional tax or income recognition under Section 409A of the Code in connection with the Option.

26. Waiver. Participant acknowledges that a waiver by the Company of breach of any provision of this Agreement shall not operate or be construed as a waiver of any other provision of this Agreement, or of any subsequent breach by Participant or any other Participant.

- 10 -

EXHIBIT B

APPENDIX TO STOCK OPTION AGREEMENT

Terms and Conditions

This Appendix to Stock Option Agreement (the “Appendix”) includes additional terms and conditions that govern the Option granted to Participant under the Plan if Participant resides in one of the countries listed below at the time of grant. Certain capitalized terms used but not defined in this Appendix have the meanings set forth in the Plan and/or the Agreement.

Notifications

This Appendix may also include information regarding exchange controls and certain other issues of which Participant should be aware with respect to participation in the Plan. The information is based on the securities, exchange control, and other laws in effect in the respective countries as of August 2012. Such laws are often complex and change frequently. As a result, the Company strongly recommends that Participant not rely on the information in this Appendix as the only source of information relating to the consequences of participation in the Plan because the information may be out of date at the time Participant exercises the Option or sells Shares acquired under the Plan.

In addition, the information contained herein is general in nature and may not apply to Participant’s particular situation, and the Company is not in a position to assure Participant of a particular result. Accordingly, Participant is advised to seek appropriate professional advice as to how the relevant laws in Participant’s country may apply to Participant’s situation.

Finally, if Participant is a citizen or resident of a country other than the one in which Participant is currently working, transfers employment after the Option is granted, or is considered a resident of another country for local law purposes, the notifications contained herein may not be applicable to Participant, and the Company shall, in its discretion, determine to what extent the terms and conditions contained herein shall apply.

BRAZIL

Terms and Conditions

Compliance with Law. By accepting this Option, Participant agrees to comply with applicable Brazilian laws and to report and pay any and all applicable Tax-Related Items associated with the exercise of the Option, the receipt of any dividends, and the sale of Shares acquired under the Plan.

Notifications

Exchange Control Information. If Participant is resident or domiciled in Brazil, Participant will be

- 1 -

required to submit annually a declaration of assets and rights held outside of Brazil to the Central Bank of Brazil if the aggregate value of such assets and rights is equal to or greater than US$100,000. Assets and rights that must be reported include Shares.

CANADA

Terms and Conditions

Method of Payment. Due to regulatory considerations in Canada, Participant is prohibited from surrendering Shares that Participant already owns or attesting to the ownership of Shares to pay the Exercise Price or any Tax-Related Items in connection with the Option.

Termination of Continuous Service. The following provision supplements Section 9(j) of the Agreement and the Termination Period set forth in the Notice of Grant:

Participant’s active engagement as a Service Provider shall be considered terminated for vesting and other purposes as of the earlier of (a) the date that Participant receives notice of termination of Participant’s engagement as a Service Provider from the Company or the Employer; or (b) the date that Participant is no longer actively providing services to the Company or the Employer, regardless of any notice period or period of pay in lieu of such notice required under applicable employment law; the Administrator shall have the exclusive discretion to determine when Participant’s active provision of services is terminated for purposes of the Option (including whether Participant may still be considered actively employed while on a leave of absence).

The following provisions apply if Participant is a resident of Quebec:

Language Consent. The parties acknowledge that it is their express wish that the Agreement, as well as all documents, notices and legal proceedings entered into, given or instituted pursuant hereto or relating directly or indirectly hereto, be drawn up in English.

Les parties reconnaissent avoir exigé la rédaction en anglais de la convention, ainsi que de tous documents, avis et procédures judiciaires, exécutés, donnés ou intentés en vertu de, ou liés directement ou indirectement à, la présente convention.

Data Privacy. Participant hereby authorizes the Company and the Company’s representatives to discuss with and obtain all relevant information from all personnel, professional or not, involved in the administration and operation of the Plan. Participant further authorizes the Company and any Subsidiary and the Plan administrators to disclose and discuss the Plan with their advisors and to record all relevant information and keep such information in Participant’s employee file.

- 2 -

CZECH REPUBLIC

Notifications

Exchange Control Information. The Czech National Bank may require Participant to fulfill certain notification duties in relation to the acquisition of Shares and the opening and maintenance of a foreign account. However, because exchange control regulations change frequently and without notice, Participant should consult with his or her personal legal advisor prior to the exercise of the Option and the sale of Shares acquired at exercise to ensure compliance with current regulations. It is Participant’s responsibility to comply with any applicable Czech exchange control laws.

GERMANY

Notifications

Exchange Control Information. Cross-border payments in excess of €12,500 must be reported monthly to the German Federal Bank. Participant is solely responsible for obtaining the appropriate form from a German federal bank and complying with applicable reporting requirements.

HONG KONG

Terms and Conditions

Restriction on Sale of Shares. Should any portion of the Option vest within six months of the Date of Grant, Participant agrees that Participant will not dispose of the Shares acquired at exercise prior to the six-month anniversary of the Date of Grant.

Notifications

Securities Law Notice. WARNING: The Options offered and any Shares acquired under the Plan do not constitute a public offering of securities under Hong Kong law and are available only to employees of the Company and any Subsidiary. The Plan, the Agreement, including this Appendix, and any other incidental communication materials distributed in connection with the Plan (i) have not been prepared in accordance with and are not intended to constitute a “prospectus” for a public offering of securities under the applicable securities legislation in Hong Kong, (ii) have not been reviewed by any regulatory authority in Hong Kong, and (iii) are intended only for the personal use of Employees of the Company and any Subsidiary and may not be distributed to any other person. If Participant has any questions about the contents of any materials distributed in connection with participation in the Plan, Participant is advised to obtain independent professional advice.

- 3 -

INDIA

Notifications

Exchange Control Notification. If Participant remits funds outside of India to exercise the Option, it is Participant’s responsibility to comply with any applicable exchange control regulations in India. In particular, Participant will be responsible for determining whether approval from the Reserve Bank of India is required prior to exercise or whether Participant has exhausted his or her investment limit for the relevant fiscal year. Participant further acknowledges that the purchase of Shares under the Agreement may be subject to, inter alia, the Foreign Exchange Management Act, 1999 and the rules and regulations thereunder. Further, Participant must repatriate the proceeds from the sale of Shares acquired upon exercise of the Option to India within 90 days after receipt. Participant must retain the foreign inward remittance certificate received from the bank where the foreign currency is deposited in the event that the Reserve Bank of India or the Employer requests proof of repatriation. It is Participant’s responsibility to comply with these requirements.

JAPAN

Notifications

Exchange Control Information. If Participant pays more than ¥30,000,000 for the purchase of Shares in any one transaction, Participant must file an ex post facto Payment Report with the Ministry of Finance (through the Bank of Japan or the bank carrying out the transaction). The precise reporting requirements vary depending on whether the relevant payment is made through a bank in Japan. If Participant intends to acquire Shares with a value in excess of ¥100,000,000 in a single transaction, Participant must also file an ex post facto Report Concerning Acquisition of Shares with the Ministry of Finance through the Bank of Japan within 20 days of acquiring the Shares. The forms to make these reports may be acquired at the Bank of Japan.

LITHUANIA

There are no country-specific provisions.

LUXEMBOURG

There are no country-specific provisions.

MEXICO

Terms and Conditions

No Entitlement or Claims for Compensation/Policy Statement. In accepting the Option, Participant expressly recognizes that the Company, with offices at 1600 Bridge Parkway, Redwood Shores, CA 94065, U.S.A., is solely responsible for the administration of the Plan and that

- 4 -

participation in the Plan and acquisition of Shares does not constitute an employment relationship between Participant and the Company since Participant is participating in the Plan on a wholly commercial basis and Participant’s sole employer is Qualys Mexico (“Qualys-Mexico”), not the Company in the United States. Based on the foregoing, Participant expressly recognizes that the Plan and the benefits that Participant may derive from participation in the Plan do not establish any rights between Participant and the Employer, Qualys-Mexico, and do not form part of the employment conditions and/or benefits provided by Qualys-Mexico and any modification of the Plan or its termination shall not constitute a change or impairment of the terms and conditions of Participant’s employment.

Participant further understand that participation in the Plan is as a result of a unilateral and discretionary decision of the Company; therefore, the Company reserves the absolute right to amend and/or discontinue participation at any time without any liability to Participant.

Finally, Participant hereby declares that he or she does not reserve any action or right to bring any claim against the Company for any compensation or damages regarding any provision of the Plan or the benefits derived under the Plan, and Participant therefore grants a full and broad release to the Company and any Subsidiary, its shareholders, officers, agents or legal representatives with respect to any claim that may arise.

Aceptando este Opción de Compra de Acciones, el participante reconoce que la Compañía y sus oficinas registradas en 1600 Bridge Parkway Redwood Shores, CA 94065, U.S.A., es el único responsable de la administración del Plan y que la participación del participante en el mismo y la adquisicion de Acciones no constituye de ninguna manera una relación laboral entre el participante y la Compañía, toda vez que la participación del participante en el Plan deriva únicamente de una relación comercial con la Compañía, reconociendo expresamente que el único empleador del participante lo es Qualys Mexico (“Qualys-Mexico”), no es la Compañía en los Estados Unidos. Derivado de lo anterior, el participante expresamente reconoce que el Plan y los beneficios que pudieran derivar del mismo no establecen ningún derecho entre el participante y su empleador, Qualys-México, y no forman parte de las condiciones laborales y/o prestaciones otorgadas por Qualys-México, y expresamente el participante reconoce que cualquier modificación el Plan o la terminación del mismo de manera alguna podrá ser interpretada como una modificación de los condiciones de trabajo del participante.

Asimismo, el participante entiende que su participación en el Plan es resultado de la decisión unilateral y discrecional de la Compañía, por lo tanto, la Compañía. Se reserva el derecho absoluto para modificar y/o terminar la participación del participante en cualquier momento, sin ninguna responsabilidad para el participante.

Finalmente, el partícipant en este acto manifiesta que no se reserva ninguna acción o derecho para interponer una demanda o reclamación en contra de la Compañía por cualquier compensación o daño o perjuicio en relación con cualquier disposición del Plan o los beneficios derivados del Plan y, en consecuencia, otorga un amplio y total finiquito a la Compañía, sus Afiliadas, sucursales, oficinas de representación, accionistas, directores, funcionarios, agentes y representantes con respecto a cualquier demanda o reclamación que pudiera surgir.

- 5 -

NETHERLANDS

Notifications

Insider Trading Information. Participant should be aware of Dutch insider trading rules that may impact the sale of Shares acquired under the Plan. In particular, Participant may be prohibited from effecting certain transactions if he or she has insider information regarding the Company.

By accepting the grant of the Option and participating in the Plan, Participant acknowledges having read and understood this Insider Trading Information and further acknowledges that it is Participant’s responsibility to comply with the following Dutch insider trading rules.

Under Article 5:56 of the Dutch Financial Supervision Act, anyone who has “insider information” related to an issuing company is prohibited from effectuating a transaction in securities in or from the Netherlands. “Inside information” is defined as knowledge of details concerning the issuing company to which the securities relate that is not public and which, if published, would reasonably be expected to affect the stock price, regardless of the development of the price. The insider could be any Participant in the Netherlands who has inside information as described herein.

Given the broad scope of the definition of inside information, certain Participants working in the Netherlands (including a Participant in the Plan) may have inside information and, thus, would be prohibited from effectuating a transaction in securities in the Netherlands at a time when in possession of such inside information. If Participant is uncertain whether the insider trading rules apply to Participant, he or she should consult with a legal advisor.

SINGAPORE

Notifications

Securities Law Information. The grant of the Option under the Plan is being made pursuant to the “Qualifying Person” exemption” under section 273(1)(f) of the Securities and Futures Act (Chapter 289, 2006 Ed.) (“SFA”). The Plan has not been lodged or registered as a prospectus with the Monetary Authority of Singapore. Participant should note that the Option is subject to section 257 of the SFA and that Participant will not be able to make (i) any subsequent sale of the Shares in Singapore or (ii) any offer of such subsequent sale of the Shares subject to the Option in Singapore, unless such sale or offer is made pursuant to the exemptions under Part XIII Division (1) Subdivision (4) (other than section 280) of the SFA (Chapter 289, 2006 Ed.).

Director Notification Obligation. If Participant is a director, associate director or shadow director of a Subsidiary in Singapore, he or she subject to certain notification requirements under the Singapore Companies Act. Among these requirements is an obligation to notify the Singaporean corporation in writing when Participant receives an interest (e.g., an Option, Shares) in the Company or any related companies. In addition, Participant must notify the Singapore employer when Participant sells Shares or shares of any related company (including when Participant sell Shares acquired under the Plan). These notifications must be made within two business days of acquiring or disposing of any interest in the Company or any related company. In addition, a notification must be

- 6 -

made of Participant’s interests in the Company or any related company within two business days of becoming a director.

Insider Trading Information. Participant should be aware of the Singapore insider trading rules, which may impact the acquisition or disposal of Shares or Options under the Plan. Under the Singapore insider trading rules, a Participant is prohibited from selling Shares when he or she is in possession of information which is not generally available and which a Participant knows or should knows will have a material effect on the price of Shares once such information is generally available.

UNITED ARAB EMIRATES

Notifications

Securities Law Information. The Plan, the Agreement, including this Appendix, and any other incidental communication materials are intended for distribution only to Participants for the purpose of an employee incentive scheme. Participant should conduct his or her own due diligence on the Option offered pursuant to the Agreement. If Participant does not understand the contents of the Plan and/or the Agreement, Participant should consult an authorized financial adviser. The Emirates Securities and Commodities Authority and the Dubai Financial Services Authority have no responsibility for reviewing or verifying any documents in connection with the Plan. Further, the Ministry of the Economy and the Dubai Department of Economic Development have not approved the Plan or the Agreement nor taken steps to verify the information set out therein, and have no responsibility for such documents.

UNITED KINGDOM

Terms and Conditions

Joint Election for Transfer of Liability for Employer National Insurance Contributions. As a condition of participation in the Plan and the exercise of the Option, Participant agrees to accept any liability for secondary Class 1 National Insurance contributions that may be payable by the Company, the Employer or any Subsidiary in connection with the Option and any event giving rise to Tax-Related Items (the “Employer NICs”). Without prejudice to the foregoing, Participant agrees to execute a joint election with the Company, the form of such joint election (the “Joint Election”) having been approved formally by Her Majesty’s Revenue and Customs (“HMRC”), and any other required consent or election prior to exercise of the Option. Participant further agrees to execute such other joint elections as may be required between Participant and any successor to the Company, the Employer or any Subsidiary. Participant further agrees that the Company, the Employer or any Subsidiary may collect the Employer NICs from Participant by any of the means set forth in Section 6(a) of the Agreement.

If Participant does not enter into a Joint Election prior to the exercise of the Option, he or she will not be entitled to exercise the Option unless and until he or she enters into a Joint Election, and no Shares will be issued to Participant under the Plan, without any liability to the Company, the Employer or any Subsidiary.

- 7 -

Withholding of Taxes. This provision supplements Section 6(a) of the Agreement:

If payment or withholding of the income tax due is not made within 90 days of the event giving rise to the liability or such other period specified in Section 222(1)(c) of the U.K. Income Tax (Earnings and Pensions) Act 2003 (the “Due Date”), the amount of any uncollected tax will constitute a loan owed by Participant to the Employer, effective on the Due Date. Participant agrees that the loan will bear interest at the then-current HMRC Official Rate, it will be immediately due and repayable, and the Company or the Employer may recover it at any time thereafter by any of the means referred to in Section 6(a) of the Agreement. Notwithstanding the foregoing, if Participant is a director or executive officer of the Company (within the meaning of Section 13(k) of the U.S. Securities Exchange Act of 1934, as amended), Participant will not be eligible for such a loan to cover the tax liability. In the event that Participant is a director or executive officer and the income tax due is not collected from or paid by Participant by the Due Date, the amount of any uncollected income tax will constitute a benefit to Participant on which additional income tax and national insurance contributions will be payable. Participant will be responsible for reporting and paying any income tax and national insurance contributions due on this additional benefit directly to HMRC under the self-assessment regime.

- 8 -

EXHIBIT C

QUALYS, INC.

2012 EQUITY INCENTIVE PLAN

EXERCISE NOTICE

Qualys, Inc.

1600 Bridge Parkway

Redwood Shores, CA 94065

Attention: Stock Administration

1. Exercise of Option. Effective as of today,             ,             , the undersigned (“Purchaser”) hereby elects to purchase             shares (the “Shares”) of the Common Stock of Qualys, Inc. (the “Company”) under and pursuant to the 2012 Equity Incentive Plan (the “Plan”) and the Stock Option Agreement, dated             and including the Notice of Grant, the Terms and Conditions of Stock Option Grant and the Appendix (all together, the “Agreement”). The purchase price for the Shares will be $            , as required by the Agreement.

2. Delivery of Payment. Purchaser herewith delivers to the Company the full purchase price of the Shares and any Tax-Related Items (as defined in Section 6(a) of the Agreement) to be paid in connection with the exercise of the Option.

3. Representations of Purchaser. Purchaser acknowledges that Purchaser has received, read and understood the Plan and the Agreement and agrees to abide by and be bound by their terms and conditions.

4. Rights as Stockholder. Until the issuance (as evidenced by the appropriate entry on the books of the Company or of a duly authorized transfer agent of the Company) of the Shares, no right to vote or receive dividends or any other rights as a stockholder will exist with respect to the Shares subject to the Option, notwithstanding the exercise of the Option. The Shares so acquired will be issued to Purchaser as soon as practicable after exercise of the Option. No adjustment will be made for a dividend or other right for which the record date is prior to the date of issuance, except as provided in Section 13 of the Plan.

5. Tax Consultation. Purchaser understands that Purchaser may suffer adverse tax consequences as a result of Purchaser’s purchase or disposition of the Shares. Purchaser represents that Purchaser has consulted with any tax consultants Purchaser deems advisable in connection with the purchase or disposition of the Shares and that Purchaser is not relying on the Company for any tax advice.

6. Entire Agreement; Governing Law. The Plan and Agreement are incorporated herein by reference. This Exercise Notice, the Plan and the Agreement constitute the entire agreement of

- 9 -

the parties with respect to the subject matter hereof and supersede in their entirety all prior undertakings and agreements of the Company and Purchaser with respect to the subject matter hereof, and may not be modified adversely to the Purchaser’s interest except by means of a writing signed by the Company and Purchaser. This agreement is governed by the internal substantive laws, but not the choice of law rules, of California.

- 10 -

---

Dates Referenced Herein   and   Documents Incorporated by Reference

This ‘S-1/A’ Filing		Date		Other Filings
Filed as of:		9/12/12		None on these Dates
Filed on:		9/11/12
		12/31/04
		10/3/04
				List all Filings

---

7 Subsequent Filings that Reference this Filing

As Of Filer Filing For·On·As Docs:Size Issuer Filing Agent 2/22/24 Qualys, Inc. 10-K 12/31/23 103:11M 2/23/23 Qualys, Inc. 10-K 12/31/22 97:11M RDG Filings/FA 2/22/22 Qualys, Inc. 10-K 12/31/21 98:10M RDG Filings/FA 2/22/22 Qualys, Inc. S-8 2/22/22 4:85K Donnelley … Solutions/FA 7/02/21 Qualys, Inc. S-8 7/02/21 3:81K RDG Filings/FA 2/22/21 Qualys, Inc. 10-K 12/31/20 101:11M RDG Filings/FA 2/22/21 Qualys, Inc. S-8 2/22/21 3:69K Donnelley … Solutions/FA

↑Top

---

Filing Submission 0001193125-12-388433   –   Alternative Formats (Word / Rich Text, HTML, Plain Text, et al.)

---

---

Copyright © 2024 Fran Finnegan & Company LLC – All Rights Reserved.
About — Privacy — Redactions — Help — Thu., Apr. 25, 4:17:33.1am ET