Document:

Form of common stock certificate

 Exhibit 4.1 

 

	
	

 016570| 003590|127C|RESTRICTED||4|057-423 

COMMON STOCK 
 PAR VALUE $0.001 
 COMMON STOCK 

THIS CERTIFICATE IS TRANSFERABLE IN CANTON, MA AND NEW YORK, NY 

Certificate Number ZQ 000000 
 Shares 
 * * 0 0 0 0 0 0 * * * * * * 

* * * 0 0 0 0 0 0 * * * * * 
 * * * * 0 0 0 0 0 0 * * * * 
 * * * * * 0 0 0 0 0 0
* * * 
 * * * * * * 0 0 0 0 0 0 * * 
 QUALYS, INC. 
 INCORPORATED UNDER THE LAWS OF THE
STATE OF DELAWARE 
 THIS CERTIFIES THAT MR. SAMPLE & MRS. SAMPLE & MR. SAMPLE & MRS. SAMPLE

 CUSIP 74758T 30 3 
 SEE REVERSE FOR CERTAIN DEFINITIONS 
 ** Mr.
Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample
**** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David
Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander
David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr.
Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample
**** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David
Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Alexander David Sample **** Mr. Sample **** Mr. Sample 

is the owner of 
 ***ZERO HUNDRED THOUSAND ZERO HUNDRED AND ZERO*** 

**000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****00

0000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000

 **Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**

 Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**

 Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**

 Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**

 Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**

 Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**

 Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**

 Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**

 Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**

 Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**

 Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**

 Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**Shares****000000**

 Shares****000000**Shares****000000**Shares****000000**Shares****000000**S 

FULLY-PAID AND NON-ASSESSABLE SHARES OF THE COMMON STOCK OF 

Qualys, Inc. (hereinafter called the “Company”), transferable on the books of the Company in person or by duly
authorized attorney, upon surrender of this Certificate properly endorsed. This Certificate and the shares represented hereby, are issued and shall be held subject to all of the provisions of the Certificate of Incorporation, as amended, and the
By-Laws, as amended, of the Company (copies of which are on file with the Company and with the Transfer Agent), to all of which each holder, by acceptance hereof, assents. This Certificate is not valid unless countersigned and registered by the
Transfer Agent and Registrar. 
 Witness the facsimile seal of the Company and the facsimile signatures of its
duly authorized officers. 
 Chief Financial Officer 

Vice President, General Counsel and Corporate Secretary 

QUALYS, INC. 
 CORPORATE 
 SEAL 

1999 
 DELAWARE 
 DATED <<Month Day, Year>>

 COUNTERSIGNED AND REGISTERED: 
 COMPUTERSHARE TRUST COMPANY, N.A. 
 TRANSFER AGENT
AND REGISTRAR, 
 By 
 AUTHORIZED SIGNATURE 
 SECURITY INSTRUCTIONS ON
REVERSE 
 1234567 
 Qualys, Inc. 
 PO BOX 43004, Providence, RI
02940-3004 
 MR A SAMPLE DESIGNATION (IF ANY) ADD 1 ADD 2 ADD 3 ADD 4 

CUSIP XXXXXX XX X 
 Holder ID XXXXXXXXXX 
 Insurance Value 1,000,000.00

 Number of Shares 123456 
 DTC 12345678 123456789012345 
 Certificate Numbers

 1234567890/1234567890 
 1234567890/1234567890 
 1234567890/1234567890

 1234567890/1234567890 
 1234567890/1234567890 
 1234567890/1234567890

 Num/No. 1 2 3 4 5 6 
 Denom. 1 2 3 4 5 6 
 Total 1 2 3 4 5 6 

Total Transaction 7 

  

QUALYS, INC. 
 THE COMPANY WILL FURNISH WITHOUT
CHARGE TO EACH SHAREHOLDER WHO SO REQUESTS, A SUMMARY OF THE POWERS, DESIGNATIONS, PREFERENCES AND RELATIVE, PARTICIPATING, OPTIONAL OR OTHER SPECIAL RIGHTS OF EACH CLASS OF STOCK OF THE COMPANY AND THE QUALIFICATIONS, LIMITATIONS OR RESTRICTIONS OF
SUCH PREFERENCES AND RIGHTS, AND THE VARIATIONS IN RIGHTS, PREFERENCES AND LIMITATIONS DETERMINED FOR EACH SERIES, WHICH ARE FIXED BY THE CERTIFICATE OF INCORPORATION OF THE COMPANY, AS AMENDED, AND THE RESOLUTIONS OF THE BOARD OF DIRECTORS OF THE
COMPANY, AND THE AUTHORITY OF THE BOARD OF DIRECTORS TO DETERMINE VARIATIONS FOR FUTURE SERIES. SUCH REQUEST MAY BE MADE TO THE OFFICE OF THE SECRETARY OF THE COMPANY OR TO THE TRANSFER AGENT. THE BOARD OF DIRECTORS MAY REQUIRE THE OWNER OF A LOST
OR DESTROYED STOCK CERTIFICATE, OR HIS LEGAL REPRESENTATIVES, TO GIVE THE COMPANY A BOND TO INDEMNIFY IT AND ITS TRANSFER AGENTS AND REGISTRARS AGAINST ANY CLAIM THAT MAY BE MADE AGAINST THEM ON ACCOUNT OF THE ALLEGED LOSS OR DESTRUCTION OF ANY SUCH
CERTIFICATE. 
  

									
	 	 	 The following abbreviations, when
used in the inscription on the face of this certificate, shall be construed as though they were written out in full according to applicable laws or regulations:

 

	 	 	TEN COM	 	- as tenants in common	 	UNIF GIFT MIN ACT -                       
                         	 	Custodian                  
                                         
         
	 	 		 		 	                              
                            (Cust)	 	                    
                          (Minor)
	 	 	TEN ENT	 	- as tenants by the entireties	 	                  
                      under Uniform Gifts to Minors Act         
                                         
                              
	 	 		 		 	                  
                                         
                                         
                                  (State)
	 	 	JT TEN	 	- as joint tenants with right of survivorship	 	UNIF TRF MIN ACT -                       
                          	 	Custodian (until age               
                                    )
	 	 		 	  and not as tenants in common	 	                              
                            (Cust)	 	 
	 	 		 		 	                              
                                         
                	 	under Uniform Transfers to Minors Act         
           
	 	 		 		 	                              
                            (Minor)	 	                    
                                         
         (State)
	 	 	 Additional abbreviations may also
be used though not in the above list.
  

  

			
	For value received,
                            hereby sell, assign and transfer unto	 	PLEASE INSERT SOCIAL SECURITY OR OTHER IDENTIFYING NUMBER OF ASSIGNEE
	 	 
		 	 

  
  

(PLEASE PRINT OR TYPEWRITE NAME AND ADDRESS, INCLUDING POSTAL ZIP CODE, OF ASSIGNEE) 

 
  
  

 
  

			
	  
	 	Shares
	of the common stock represented by the within Certificate, and do hereby irrevocably constitute and appoint
	  
	 	Attorney
	to transfer the said stock on the books of the within-named Company with full power of substitution in the premises.

  

													
	Dated:	 	  
	 	20	 	  
	 	 	 	Signature(s) Guaranteed: Medallion Guarantee Stamp
		 		 		 		 		 	 	 	THE SIGNATURE(S) SHOULD BE GUARANTEED BY AN ELIGIBLE GUARANTOR INSTITUTION (Banks, Stockbrokers, Savings and
Loan Associations and Credit Unions) WITH MEMBERSHIP IN AN APPROVED SIGNATURE GUARANTEE MEDALLION PROGRAM, PURSUANT TO S.E.C. RULE 17Ad-15.
	Signature:	 	  
	 	 	 
	  
 Signature:
	 	  
  
	 	 	 
		 	Notice:	 	The signature to this assignment must correspond with the name as written upon the face of the certificate, in every particular, without alteration or enlargement, or
any change whatever.	 	 	 	 
		 		 		 	 	 	 
		 		 		 	 	 	 

  

					
	

	 	The IRS requires that we report the cost basis of certain shares acquired after January 1, 2011. If your shares were covered by the legislation and you have sold or
transferred the shares and requested a specific cost basis calculation method, we have processed as requested. If you did not specify a cost basis calculation method, we have defaulted to the first in, first out (FIFO) method. Please visit our
website or consult your tax advisor if you need additional information about cost basis.	 	

 
	 	  
 If you do not keep in contact with us or do not have any
activity in your account for the time periods specified by state law, your property could become subject to state unclaimed property laws and transferred to the appropriate state.2012 Equity Incentive Plan and forms of agreements thereunder

 Exhibit 10.2 
 QUALYS, INC. 
 2012 EQUITY INCENTIVE PLAN 

1. Purposes of the Plan. The purposes of this Plan are: 

 

	 	•	 	 to attract and retain the best available personnel for positions of substantial responsibility, 

 

	 	•	 	 to provide additional incentive to Employees, Directors and Consultants, and 

 

	 	•	 	 to promote the success of the Company’s business. 

 The Plan permits the grant of Incentive Stock Options, Nonstatutory Stock Options, Restricted Stock, Restricted Stock Units, Stock Appreciation Rights, Performance Units and Performance Shares.

 2. Definitions. As used herein, the following definitions will apply: 

(a) “Administrator” means the Board or any of its Committees as will be administering the Plan, in accordance with
Section 4 of the Plan. 
 (b) “Applicable Laws” means the requirements relating to the administration of
equity-based awards under U.S. state corporate laws, U.S. federal and state securities laws, the Code, any stock exchange or quotation system on which the Common Stock is listed or quoted and the applicable laws of any foreign country or
jurisdiction where Awards are, or will be, granted under the Plan. 
 (c) “Award” means, individually or
collectively, a grant under the Plan of Options, Stock Appreciation Rights, Restricted Stock, Restricted Stock Units, Performance Units or Performance Shares. 
 (d) “Award Agreement” means the written or electronic agreement setting forth the terms and provisions applicable to each Award granted under the Plan. The Award Agreement is subject to
the terms and conditions of the Plan. 
 (e) “Board” means the Board of Directors of the Company. 

(f) “Change in Control” means the occurrence of any of the following events: 

(i) A change in the ownership of the Company which occurs on the date that any one person, or more than one person acting as a group
(“Person”), acquires ownership of the stock of the Company that, together with the stock held by such Person, constitutes more than fifty percent (50%) of the total voting power of the stock of the Company; provided, however,
that for purposes of this subsection, the acquisition of additional stock by any one Person, who is considered 

 
to own more than fifty percent (50%) of the total voting power of the stock of the Company will not be considered a Change in Control; or 

(ii) A change in the effective control of the Company which occurs on the date that a majority of members of the Board is replaced
during any twelve (12) month period by Directors whose appointment or election is not endorsed by a majority of the members of the Board prior to the date of the appointment or election. For purposes of this clause (ii), if any Person is
considered to be in effective control of the Company, the acquisition of additional control of the Company by the same Person will not be considered a Change in Control; or 
 (iii) A change in the ownership of a substantial portion of the Company’s assets which occurs on the date that any Person acquires (or has acquired during the twelve (12) month period ending on
the date of the most recent acquisition by such person or persons) assets from the Company that have a total gross fair market value equal to or more than fifty percent (50%) of the total gross fair market value of all of the assets of the
Company immediately prior to such acquisition or acquisitions; provided, however, that for purposes of this subsection (iii), the following will not constitute a change in the ownership of a substantial portion of the Company’s assets:
(A) a transfer to an entity that is controlled by the Company’s stockholders immediately after the transfer, or (B) a transfer of assets by the Company to: (1) a stockholder of the Company (immediately before the asset
transfer) in exchange for or with respect to the Company’s stock, (2) an entity, fifty percent (50%) or more of the total value or voting power of which is owned, directly or indirectly, by the Company, (3) a Person, that
owns, directly or indirectly, fifty percent (50%) or more of the total value or voting power of all the outstanding stock of the Company, or (4) an entity, at least fifty percent (50%) of the total value or voting power of which is
owned, directly or indirectly, by a Person described in this subsection (iii)(B)(3). For purposes of this subsection (iii), gross fair market value means the value of the assets of the Company, or the value of the assets being disposed of,
determined without regard to any liabilities associated with such assets. 
 For purposes of this definition, persons will be
considered to be acting as a group if they are owners of a corporation that enters into a merger, consolidation, purchase or acquisition of stock, or similar business transaction with the Company. 

Notwithstanding the foregoing, a transaction will not be deemed a Change in Control unless the transaction qualifies as a change in
control event within the meaning of Code Section 409A, as it has been and may be amended from time to time, and any proposed or final Treasury Regulations and Internal Revenue Service guidance that has been promulgated or may be promulgated
thereunder from time to time. 
 Further and for the avoidance of doubt, a transaction will not constitute a Change in Control
if: (i) its sole purpose is to change the state of the Company’s incorporation, or (ii) its sole purpose is to create a holding company that will be owned in substantially the same proportions by the persons who held the
Company’s securities immediately before such transaction. 
 (g) “Code” means the Internal Revenue Code of
1986, as amended. Reference to a specific section of the Code or regulation thereunder shall include such section or regulation, any 

  
 -2-

 
valid regulation promulgated under such section, and any comparable provision of any future legislation or regulation amending, supplementing or superseding such section or regulation.

 (h) “Committee” means a committee of Directors or of other individuals satisfying Applicable Laws appointed
by the Board, or a duly authorized committee of the Board, in accordance with Section 4 hereof. 
 (i) “Common
Stock” means the common stock of the Company. 
 (j) “Company” means Qualys, Inc., a Delaware
corporation, or any successor thereto. 
 (k) “Consultant” means any person, including an advisor, engaged by
the Company or a Parent or Subsidiary to render services to such entity. 
 (l) “Director” means a member of
the Board. 
 (m) “Disability” means total and permanent disability as defined in Section 22(e)(3) of
the Code, provided that in the case of Awards other than Incentive Stock Options, the Administrator in its discretion may determine whether a permanent and total disability exists in accordance with uniform and non-discriminatory standards adopted
by the Administrator from time to time. 
 (n) “Employee” means any person, including Officers and Directors,
employed by the Company or any Parent or Subsidiary of the Company. Neither service as a Director nor payment of a director’s fee by the Company will be sufficient to constitute “employment” by the Company. 

(o) “Exchange Act” means the Securities Exchange Act of 1934, as amended. 

(p) “Exchange Program” means a program under which (i) outstanding Awards are surrendered or cancelled in exchange
for awards of the same type (which may have higher or lower exercise prices and different terms), awards of a different type, and/or cash, (ii) Participants would have the opportunity to transfer any outstanding Awards to a financial
institution or other person or entity selected by the Administrator, and/or (iii) the exercise price of an outstanding Award is increased or reduced. The Administrator will determine the terms and conditions of any Exchange Program in its sole
discretion. 
 (q) “Fair Market Value” means, as of any date, the value of Common Stock determined as follows:

 (i) If the Common Stock is listed on any established stock exchange or a national market system, including without
limitation the New York Stock Exchange, the NASDAQ Global Select Market, the NASDAQ Global Market or the NASDAQ Capital Market of The NASDAQ Stock Market, its Fair Market Value will be the closing sales price for such stock (or the closing bid, if
no sales were reported) as quoted on such exchange or system on the day of determination, as reported in The Wall Street Journal or such other source as the Administrator deems reliable; 

  
 -3-

 (ii) If the Common Stock is regularly quoted by a recognized securities dealer but selling
prices are not reported, the Fair Market Value of a Share will be the mean between the high bid and low asked prices for the Common Stock on the day of determination (or, if no bids and asks were reported on that date, as applicable, on the last
trading date such bids and asks were reported), as reported in The Wall Street Journal or such other source as the Administrator deems reliable; 
 (iii) For purposes of any Awards granted on the Registration Date, the Fair Market Value will be the initial price to the public as set forth in the final prospectus included within the registration
statement in Form S-1 filed with the Securities and Exchange Commission for the initial public offering of the Company’s Common Stock; or 
 (iv) In the absence of an established market for the Common Stock, the Fair Market Value will be determined in good faith by the Administrator. 

(r) “Fiscal Year” means the fiscal year of the Company. 

(s) “Incentive Stock Option” means an Option intended to qualify as an incentive stock option within the meaning of
Section 422 of the Code and the regulations promulgated thereunder. 
 (t) “Inside Director” means a
Director who is an Employee. 
 (u) “Nonstatutory Stock Option” means an Option that by its terms does not
qualify or is not intended to qualify as an Incentive Stock Option. 
 (v) “Officer” means a person who is an
officer of the Company within the meaning of Section 16 of the Exchange Act and the rules and regulations promulgated thereunder. 
 (w) “Option” means a stock option granted pursuant to the Plan. 

(x) “Outside Director” means a Director who is not an Employee. 

(y) “Parent” means a “parent corporation,” whether now or hereafter existing, as defined in
Section 424(e) of the Code. 
 (z) “Participant” means the holder of an outstanding Award.

 (aa) “Performance Share” means an Award denominated in Shares which may be earned in whole or in part upon
attainment of performance goals or other vesting criteria as the Administrator may determine pursuant to Section 10. 

(bb) “Performance Unit” means an Award which may be earned in whole or in part upon attainment of performance goals or
other vesting criteria as the Administrator may determine and which may be settled for cash, Shares or other securities or a combination of the foregoing pursuant to Section 10. 

  
 -4-

 (cc) “Period of Restriction” means the period during which the transfer of
Shares of Restricted Stock are subject to restrictions and therefore, the Shares are subject to a substantial risk of forfeiture. Such restrictions may be based on the passage of time, the achievement of target levels of performance, or the
occurrence of other events as determined by the Administrator. 
 (dd) “Plan” means this 2012 Equity Incentive
Plan. 
 (ee) “Registration Date” means the effective date of the first registration statement that is filed by
the Company and declared effective pursuant to Section 12(g) of the Exchange Act, with respect to any class of the Company’s securities. 
 (ff) “Restricted Stock” means Shares issued pursuant to a Restricted Stock award under Section 7 of the Plan, or issued pursuant to the early exercise of an Option. 

(gg) “Restricted Stock Unit” means a bookkeeping entry representing an amount equal to the Fair Market Value of one
Share, granted pursuant to Section 8. Each Restricted Stock Unit represents an unfunded and unsecured obligation of the Company. 
 (hh) “Rule 16b-3” means Rule 16b-3 of the Exchange Act or any successor to Rule 16b-3, as in effect when discretion is being exercised with respect to the Plan. 

(ii) “Section 16(b)” means Section 16(b) of the Exchange Act. 

(jj) “Service Provider” means an Employee, Director or Consultant. 

(kk) “Share” means a share of the Common Stock, as adjusted in accordance with Section 13 of the Plan. 

(ll) “Stock Appreciation Right” means an Award, granted alone or in connection with an Option, that pursuant to
Section 9 is designated as a Stock Appreciation Right. 
 (mm) “Subsidiary” means a “subsidiary
corporation,” whether now or hereafter existing, as defined in Section 424(f) of the Code. 
 3.
Stock Subject to the Plan. 
 (a) Stock Subject to the Plan. Subject to
the provisions of Section 13 of the Plan, the maximum aggregate number of Shares that may be issued under the Plan is 3,050,000 Shares. The Shares may be authorized, but unissued, or reacquired Common Stock. 

(b) Automatic Share Reserve Increase. Subject to the provisions of Section 13 of the Plan, the number of Shares available for
issuance under the Plan will be increased on the first day of each Fiscal Year beginning with the 2014 Fiscal Year, in an amount equal to the least of (i) 3,050,000 Shares, (ii) five percent (5%) of the outstanding Shares on the
last day of the immediately preceding Fiscal Year or (iii) such number of Shares determined by the Board. 
 (c) Lapsed
Awards. If an Award expires or becomes unexercisable without having been exercised in full, is surrendered pursuant to an Exchange Program, or, with respect to 

  
 -5-

 
Restricted Stock, Restricted Stock Units, Performance Units or Performance Shares, is forfeited to or repurchased by the Company due to failure to vest, the unpurchased Shares (or for Awards
other than Options or Stock Appreciation Rights the forfeited or repurchased Shares), which were subject thereto will become available for future grant or sale under the Plan (unless the Plan has terminated). With respect to Stock Appreciation
Rights, only Shares actually issued (i.e., the net Shares issued) pursuant to a Stock Appreciation Right will cease to be available under the Plan; all remaining Shares under Stock Appreciation Rights will remain available for future grant or
sale under the Plan (unless the Plan has terminated). Shares that have actually been issued under the Plan under any Award will not be returned to the Plan and will not become available for future distribution under the Plan; provided, however, that
if Shares issued pursuant to Awards of Restricted Stock, Restricted Stock Units, Performance Shares or Performance Units are repurchased by the Company or are forfeited to the Company, such Shares will become available for future grant under the
Plan. Shares used to pay the exercise price of an Award or to satisfy the tax withholding obligations related to an Award will become available for future grant or sale under the Plan. To the extent an Award under the Plan is paid out in cash rather
than Shares, such cash payment will not result in reducing the number of Shares available for issuance under the Plan. Notwithstanding the foregoing and, subject to adjustment as provided in Section 13, the maximum number of Shares that may be
issued upon the exercise of Incentive Stock Options will equal the aggregate Share number stated in Section 3(a), plus, to the extent allowable under Section 422 of the Code and the Treasury Regulations promulgated thereunder, any Shares
that become available for issuance under the Plan pursuant to Sections 3(b) and 3(c). 
 (d) Share Reserve. The
Company, during the term of this Plan, will at all times reserve and keep available such number of Shares as will be sufficient to satisfy the requirements of the Plan. 
 4. Administration of the Plan. 
 (a) Procedure. 

(i) Multiple Administrative Bodies. Different Committees with respect to different groups of Service Providers may administer the
Plan. 
 (ii) Section 162(m). To the extent that the Administrator determines it to be desirable to qualify Awards
granted hereunder as “performance-based compensation” within the meaning of Section 162(m) of the Code, the Plan will be administered by a Committee of two (2) or more “outside directors” within the meaning of
Section 162(m) of the Code. 
 (iii) Rule 16b-3. To the extent desirable to qualify transactions hereunder as
exempt under Rule 16b-3, the transactions contemplated hereunder will be structured to satisfy the requirements for exemption under Rule 16b-3. 
 (iv) Other Administration. Other than as provided above, the Plan will be administered by (A) the Board or (B) a Committee, which committee will be constituted to satisfy Applicable Laws.

  
 -6-

 (b) Powers of the Administrator. Subject to the provisions of the Plan, and in the
case of a Committee, subject to the specific duties delegated by the Board to such Committee, the Administrator will have the authority, in its discretion: 
 (i) to determine the Fair Market Value; 
 (ii) to select the Service Providers to
whom Awards may be granted hereunder; 
 (iii) to determine the number of Shares to be covered by each Award granted hereunder;

 (iv) to approve forms of Award Agreements for use under the Plan; 

(v) to determine the terms and conditions, not inconsistent with the terms of the Plan, of any Award granted hereunder. Such terms and
conditions include, but are not limited to, the exercise price, the time or times when Awards may be exercised (which may be based on performance criteria), any vesting acceleration or waiver of forfeiture restrictions, and any restriction or
limitation regarding any Award or the Shares relating thereto, based in each case on such factors as the Administrator will determine; 
 (vi) to institute and determine the terms and conditions of an Exchange Program; 

(vii) to construe and interpret the terms of the Plan and Awards granted pursuant to the Plan; 

(viii) to prescribe, amend and rescind rules and regulations relating to the Plan, including rules and regulations relating to sub-plans
established for the purpose of satisfying applicable foreign laws or for qualifying for favorable tax treatment under applicable foreign laws; 
 (ix) to modify or amend each Award (subject to Section 18 of the Plan), including but not limited to the discretionary authority to extend the post-termination exercisability period of Awards and to
extend the maximum term of an Option (subject to Section 6(b) of the Plan regarding Incentive Stock Options); 
 (x)
to allow Participants to satisfy withholding tax obligations in such manner as prescribed in Section 14 of the Plan; 

(xi) to authorize any person to execute on behalf of the Company any instrument required to effect the grant of an Award previously
granted by the Administrator; 
 (xii) to allow a Participant to defer the receipt of the payment of cash or the delivery of
Shares that would otherwise be due to such Participant under an Award; and 
 (xiii) to make all other determinations deemed
necessary or advisable for administering the Plan. 

  
 -7-

 (c) Effect of Administrator’s Decision. The Administrator’s decisions,
determinations and interpretations will be final and binding on all Participants and any other holders of Awards. 
 5.
Eligibility. Nonstatutory Stock Options, Stock Appreciation Rights, Restricted Stock, Restricted Stock Units, Performance Shares and Performance Units may be granted to Service Providers. Incentive Stock Options may be granted only to
Employees. 
 6. Stock Options. 
 (a) Limitations. Each Option will be designated in the Award Agreement as either an Incentive Stock Option or a Nonstatutory Stock Option. However, notwithstanding such designation, to the extent
that the aggregate Fair Market Value of the Shares with respect to which Incentive Stock Options are exercisable for the first time by the Participant during any calendar year (under all plans of the Company and any Parent or
Subsidiary) exceeds one hundred thousand dollars ($100,000), such Options will be treated as Nonstatutory Stock Options. For purposes of this Section 6(a), Incentive Stock Options will be taken into account in the order in which they were
granted. The Fair Market Value of the Shares will be determined as of the time the Option with respect to such Shares is granted. 
 (b) Term of Option. The term of each Option will be stated in the Award Agreement. In the case of an Incentive Stock Option, the term will be ten (10) years from the date of grant or such
shorter term as may be provided in the Award Agreement. Moreover, in the case of an Incentive Stock Option granted to a Participant who, at the time the Incentive Stock Option is granted, owns stock representing more than ten percent (10%) of
the total combined voting power of all classes of stock of the Company or any Parent or Subsidiary, the term of the Incentive Stock Option will be five (5) years from the date of grant or such shorter term as may be provided in the Award
Agreement. 
 (c) Option Exercise Price and Consideration. 

(i) Exercise Price. The per share exercise price for the Shares to be issued pursuant to exercise of an Option will be determined
by the Administrator, subject to the following: 
 (1) In the case of an Incentive Stock Option 

(A) granted to an Employee who, at the time the Incentive Stock Option is granted, owns stock representing more than ten percent
(10%) of the voting power of all classes of stock of the Company or any Parent or Subsidiary, the per Share exercise price will be no less than one hundred ten percent (110%) of the Fair Market Value per Share on the date of grant.

 (B) granted to any Employee other than an Employee described in paragraph (A) immediately above, the per Share exercise
price will be no less than one hundred percent (100%) of the Fair Market Value per Share on the date of grant. 

  
 -8-

 (2) In the case of a Nonstatutory Stock Option, the per Share exercise price will be no
less than one hundred percent (100%) of the Fair Market Value per Share on the date of grant. 
 (3) Notwithstanding the
foregoing, Options may be granted with a per Share exercise price of less than one hundred percent (100%) of the Fair Market Value per Share on the date of grant pursuant to a transaction described in, and in a manner consistent with,
Section 424(a) of the Code. 
 (ii) Waiting Period and Exercise Dates. At the time an Option is granted, the
Administrator will fix the period within which the Option may be exercised and will determine any conditions that must be satisfied before the Option may be exercised. 
 (iii) Form of Consideration. The Administrator will determine the acceptable form of consideration for exercising an Option, including the method of payment. In the case of an Incentive Stock
Option, the Administrator will determine the acceptable form of consideration at the time of grant. Such consideration may consist entirely of: (1) cash; (2) check; (3) promissory note, to the extent permitted by Applicable Laws,
(4) other Shares, provided that such Shares have a Fair Market Value on the date of surrender equal to the aggregate exercise price of the Shares as to which such Option will be exercised and provided that accepting such Shares will not result
in any adverse accounting consequences to the Company, as the Administrator determines in its sole discretion; (5) consideration received by the Company under a broker-assisted (or other) cashless exercise program (whether through a broker
or otherwise) implemented by the Company in connection with the Plan; (6) by net exercise; (7) such other consideration and method of payment for the issuance of Shares to the extent permitted by Applicable Laws; or (8) any
combination of the foregoing methods of payment. 
 (d) Exercise of Option. 

(i) Procedure for Exercise; Rights as a Stockholder. Any Option granted hereunder will be exercisable according to the terms of
the Plan and at such times and under such conditions as determined by the Administrator and set forth in the Award Agreement. An Option may not be exercised for a fraction of a Share. 

An Option will be deemed exercised when the Company receives: (i) a notice of exercise (in such form as the Administrator may
specify from time to time) from the person entitled to exercise the Option, and (ii) full payment for the Shares with respect to which the Option is exercised (together with applicable withholding taxes). Full payment may consist of any
consideration and method of payment authorized by the Administrator and permitted by the Award Agreement and the Plan. Shares issued upon exercise of an Option will be issued in the name of the Participant or, if requested by the Participant, in the
name of the Participant and his or her spouse. Until the Shares are issued (as evidenced by the appropriate entry on the books of the Company or of a duly authorized transfer agent of the Company), no right to vote or receive dividends or any other
rights as a stockholder will exist with respect to the Shares subject to an Option, notwithstanding the exercise of the Option. The Company will issue (or cause to be issued) such Shares promptly after the Option is exercised. No adjustment
will be made for a dividend or other right for which the record date is prior to the date the Shares are issued, except as provided in Section 13 of the Plan. 

  
 -9-

 Exercising an Option in any manner will decrease the number of Shares thereafter available,
both for purposes of the Plan and for sale under the Option, by the number of Shares as to which the Option is exercised. 

(ii) Termination of Relationship as a Service Provider. If a Participant ceases to be a Service Provider, other than upon the
Participant’s termination as the result of the Participant’s death or Disability, the Participant may exercise his or her Option within such period of time as is specified in the Award Agreement to the extent that the Option is vested on
the date of termination (but in no event later than the expiration of the term of such Option as set forth in the Award Agreement). In the absence of a specified time in the Award Agreement, the Option will remain exercisable for three
(3) months following the Participant’s termination. Unless otherwise provided by the Administrator, if on the date of termination the Participant is not vested as to his or her entire Option, the Shares covered by the unvested portion of
the Option will revert to the Plan. If after termination the Participant does not exercise his or her Option within the time specified by the Administrator, the Option will terminate, and the Shares covered by such Option will revert to the Plan.

 (iii) Disability of Participant. If a Participant ceases to be a Service Provider as a result of the
Participant’s Disability, the Participant may exercise his or her Option within such period of time as is specified in the Award Agreement to the extent the Option is vested on the date of termination (but in no event later than the expiration
of the term of such Option as set forth in the Award Agreement). In the absence of a specified time in the Award Agreement, the Option will remain exercisable for twelve (12) months following the Participant’s termination. Unless otherwise
provided by the Administrator, if on the date of termination the Participant is not vested as to his or her entire Option, the Shares covered by the unvested portion of the Option will revert to the Plan. If after termination the Participant does
not exercise his or her Option within the time specified herein, the Option will terminate, and the Shares covered by such Option will revert to the Plan. 
 (iv) Death of Participant. If a Participant dies while a Service Provider, the Option may be exercised following the Participant’s death within such period of time as is specified in the Award
Agreement to the extent that the Option is vested on the date of death (but in no event may the option be exercised later than the expiration of the term of such Option as set forth in the Award Agreement), by the Participant’s designated
beneficiary, provided such beneficiary has been designated prior to Participant’s death in a form acceptable to the Administrator. If no such beneficiary has been designated by the Participant, then such Option may be exercised by the personal
representative of the Participant’s estate or by the person(s) to whom the Option is transferred pursuant to the Participant’s will or in accordance with the laws of descent and distribution. In the absence of a specified time in the
Award Agreement, the Option will remain exercisable for twelve (12) months following Participant’s death. Unless otherwise provided by the Administrator, if at the time of death Participant is not vested as to his or her entire Option, the
Shares covered by the unvested portion of the Option will immediately revert to the Plan. If the Option is not so exercised within the time specified herein, the Option will terminate, and the Shares covered by such Option will revert to the Plan.

  
 -10-

 7. Restricted Stock. 

(a) Grant of Restricted Stock. Subject to the terms and provisions of the Plan, the Administrator, at any time and from time to
time, may grant Shares of Restricted Stock to Service Providers in such amounts as the Administrator, in its sole discretion, will determine. 
 (b) Restricted Stock Agreement. Each Award of Restricted Stock will be evidenced by an Award Agreement that will specify the Period of Restriction, the number of Shares granted, and such other
terms and conditions as the Administrator, in its sole discretion, will determine. Unless the Administrator determines otherwise, the Company as escrow agent will hold Shares of Restricted Stock until the restrictions on such Shares have lapsed.

 (c) Transferability. Except as provided in this Section 7 or the Award Agreement, Shares of Restricted Stock may
not be sold, transferred, pledged, assigned, or otherwise alienated or hypothecated until the end of the applicable Period of Restriction. 
 (d) Other Restrictions. The Administrator, in its sole discretion, may impose such other restrictions on Shares of Restricted Stock as it may deem advisable or appropriate. 

(e) Removal of Restrictions. Except as otherwise provided in this Section 7, Shares of Restricted Stock covered by each
Restricted Stock grant made under the Plan will be released from escrow as soon as practicable after the last day of the Period of Restriction or at such other time as the Administrator may determine. The Administrator, in its discretion, may
accelerate the time at which any restrictions will lapse or be removed. 
 (f) Voting Rights. During the Period of
Restriction, Service Providers holding Shares of Restricted Stock granted hereunder may exercise full voting rights with respect to those Shares, unless the Administrator determines otherwise. 

(g) Dividends and Other Distributions. During the Period of Restriction, Service Providers holding Shares of Restricted Stock will
be entitled to receive all dividends and other distributions paid with respect to such Shares, unless the Administrator provides otherwise. If any such dividends or distributions are paid in Shares, the Shares will be subject to the same
restrictions on transferability and forfeitability as the Shares of Restricted Stock with respect to which they were paid. 

(h) Return of Restricted Stock to Company. On the date set forth in the Award Agreement, the Restricted Stock for which
restrictions have not lapsed will revert to the Company and again will become available for grant under the Plan. 

  
 -11-

 8. Restricted Stock Units. 

(a) Grant. Restricted Stock Units may be granted at any time and from time to time as determined by the Administrator. After the
Administrator determines that it will grant Restricted Stock Units under the Plan, it will advise the Participant in an Award Agreement of the terms, conditions, and restrictions related to the grant, including the number of Restricted Stock Units.

 (b) Vesting Criteria and Other Terms. The Administrator will set vesting criteria in its discretion, which, depending
on the extent to which the criteria are met, will determine the number of Restricted Stock Units that will be paid out to the Participant. The Administrator may set vesting criteria based upon the achievement of Company-wide, divisional, business
unit, or individual goals (including, but not limited to, continued employment or service), applicable federal or state securities laws or any other basis determined by the Administrator in its discretion. 

(c) Earning Restricted Stock Units. Upon meeting the applicable vesting criteria, the Participant will be entitled to receive a
payout as determined by the Administrator. Notwithstanding the foregoing, at any time after the grant of Restricted Stock Units, the Administrator, in its sole discretion, may reduce or waive any vesting criteria that must be met to receive a
payout. 
 (d) Form and Timing of Payment. Payment of earned Restricted Stock Units will be made as soon as practicable
after the date(s) determined by the Administrator and set forth in the Award Agreement. The Administrator, in its sole discretion, may only settle earned Restricted Stock Units in cash, Shares, or a combination of both. 

(e) Cancellation. On the date set forth in the Award Agreement, all unearned Restricted Stock Units will be forfeited to the
Company. 
 9. Stock Appreciation Rights. 
 (a) Grant of Stock Appreciation Rights. Subject to the terms and conditions of the Plan, a Stock Appreciation Right may be granted to Service Providers at any time and from time to time as will be
determined by the Administrator, in its sole discretion. 
 (b) Number of Shares. The Administrator will have complete
discretion to determine the number of Stock Appreciation Rights granted to any Service Provider. 
 (c) Exercise Price and
Other Terms. The per share exercise price for the Shares to be issued pursuant to exercise of a Stock Appreciation Right will be determined by the Administrator and will be no less than one hundred percent (100%) of the Fair Market Value
per Share on the date of grant. Otherwise, the Administrator, subject to the provisions of the Plan, will have complete discretion to determine the terms and conditions of Stock Appreciation Rights granted under the Plan. 

(d) Stock Appreciation Right Agreement. Each Stock Appreciation Right grant will be evidenced by an Award Agreement that will
specify the exercise price, the term of the Stock 

  
 -12-

 
Appreciation Right, the conditions of exercise, and such other terms and conditions as the Administrator, in its sole discretion, will determine. 

(e) Expiration of Stock Appreciation Rights. A Stock Appreciation Right granted under the Plan will expire upon the date
determined by the Administrator, in its sole discretion, and set forth in the Award Agreement. Notwithstanding the foregoing, the rules of Section 6(b) relating to the maximum term and Section 6(d) relating to exercise also will
apply to Stock Appreciation Rights. 
 (f) Payment of Stock Appreciation Right Amount. Upon exercise of a Stock
Appreciation Right, a Participant will be entitled to receive payment from the Company in an amount determined by multiplying: 

(i) The difference between the Fair Market Value of a Share on the date of exercise over the exercise price; times 

(ii) The number of Shares with respect to which the Stock Appreciation Right is exercised. 

At the discretion of the Administrator, the payment upon Stock Appreciation Right exercise may be in cash, in Shares of equivalent value,
or in some combination thereof. 
 10. Performance Units and Performance Shares. 

(a) Grant of Performance Units/Shares. Performance Units and Performance Shares may be granted to Service Providers at any time
and from time to time, as will be determined by the Administrator, in its sole discretion. The Administrator will have complete discretion in determining the number of Performance Units and Performance Shares granted to each Participant. 

(b) Value of Performance Units/Shares. Each Performance Unit will have an initial value that is established by the Administrator
on or before the date of grant. Each Performance Share will have an initial value equal to the Fair Market Value of a Share on the date of grant. 
 (c) Performance Objectives and Other Terms. The Administrator will set performance objectives or other vesting provisions (including, without limitation, continued status as a Service
Provider) in its discretion which, depending on the extent to which they are met, will determine the number or value of Performance Units/Shares that will be paid out to the Service Providers. The time period during which the performance
objectives or other vesting provisions must be met will be called the “Performance Period.” Each Award of Performance Units/Shares will be evidenced by an Award Agreement that will specify the Performance Period, and such other terms and
conditions as the Administrator, in its sole discretion, will determine. The Administrator may set performance objectives based upon the achievement of Company-wide, divisional, business unit or individual goals (including, but not limited to,
continued employment or service), applicable federal or state securities laws, or any other basis determined by the Administrator in its discretion. 
 (d) Earning of Performance Units/Shares. After the applicable Performance Period has ended, the holder of Performance Units/Shares will be entitled to receive a payout of the

  
 -13-

 
number of Performance Units/Shares earned by the Participant over the Performance Period, to be determined as a function of the extent to which the corresponding performance objectives or other
vesting provisions have been achieved. After the grant of a Performance Unit/Share, the Administrator, in its sole discretion, may reduce or waive any performance objectives or other vesting provisions for such Performance Unit/Share. 

(e) Form and Timing of Payment of Performance Units/Shares. Payment of earned Performance Units/Shares will be made as soon as
practicable after the expiration of the applicable Performance Period. The Administrator, in its sole discretion, may pay earned Performance Units/Shares in the form of cash, in Shares (which have an aggregate Fair Market Value equal to the value of
the earned Performance Units/Shares at the close of the applicable Performance Period) or in a combination thereof. 
 (f)
Cancellation of Performance Units/Shares. On the date set forth in the Award Agreement, all unearned or unvested Performance Units/Shares will be forfeited to the Company, and again will be available for grant under the Plan. 

11. Leaves of Absence/Transfer Between Locations. Unless the Administrator provides otherwise, vesting of Awards granted hereunder
will be suspended during any unpaid leave of absence. A Participant will not cease to be an Employee in the case of (i) any leave of absence approved by the Company or (ii) transfers between locations of the Company or between the Company,
its Parent, or any Subsidiary. For purposes of Incentive Stock Options, no such leave may exceed three (3) months, unless reemployment upon expiration of such leave is guaranteed by statute or contract. If reemployment upon expiration of a
leave of absence approved by the Company is not so guaranteed, then six (6) months following the first (1st) day of such leave any Incentive Stock Option held by the Participant will cease to be treated as an Incentive Stock Option and
will be treated for tax purposes as a Nonstatutory Stock Option. 
 12. Transferability of Awards. Unless determined
otherwise by the Administrator, an Award may not be sold, pledged, assigned, hypothecated, transferred, or disposed of in any manner other than by will or by the laws of descent or distribution and may be exercised, during the lifetime of the
Participant, only by the Participant. If the Administrator makes an Award transferable, such Award will contain such additional terms and conditions as the Administrator deems appropriate. 

13. Adjustments; Dissolution or Liquidation; Merger or Change in Control. 

(a) Adjustments. In the event that any dividend or other distribution (whether in the form of cash, Shares, other securities, or
other property), recapitalization, stock split, reverse stock split, reorganization, merger, consolidation, split-up, spin-off, combination, repurchase, or exchange of Shares or other securities of the Company, or other change in the corporate
structure of the Company affecting the Shares occurs, the Administrator, in order to prevent diminution or enlargement of the benefits or potential benefits intended to be made available under the Plan, will adjust the number and class of Shares
that may be delivered under the Plan and/or the number, class, and price of Shares covered by each outstanding Award, and the numerical Share limits in Section 3 of the Plan. 

  
 -14-

 (b) Dissolution or Liquidation. In the event of the proposed dissolution or
liquidation of the Company, the Administrator will notify each Participant as soon as practicable prior to the effective date of such proposed transaction. To the extent it has not been previously exercised, an Award will terminate immediately prior
to the consummation of such proposed action. 
 (c) Change in Control. In the event of a merger of the Company with or
into another corporation or other entity or a Change in Control, each outstanding Award will be treated as the Administrator determines, including, without limitation, that each Award be assumed or an equivalent option or right substituted by the
successor corporation or a Parent or Subsidiary of the successor corporation. The Administrator will not be required to treat all Awards similarly in the transaction. 
 In the event that the successor corporation does not assume or substitute for the Award, the Participant will fully vest in and have the right to exercise all of his or her outstanding Options and Stock
Appreciation Rights, including Shares as to which such Awards would not otherwise be vested or exercisable, all restrictions on Restricted Stock and Restricted Stock Units will lapse, and, with respect to Awards with performance-based vesting, all
performance goals or other vesting criteria will be deemed achieved at one hundred percent (100%) of target levels and all other terms and conditions met. In addition, if an Option or Stock Appreciation Right is not assumed or substituted in
the event of a Change in Control, the Administrator will notify the Participant in writing or electronically that the Option or Stock Appreciation Right will be exercisable for a period of time determined by the Administrator in its sole discretion,
and the Option or Stock Appreciation Right will terminate upon the expiration of such period. 
 For the purposes of this
subsection (c), an Award will be considered assumed if, following the Change in Control, the Award confers the right to purchase or receive, for each Share subject to the Award immediately prior to the Change in Control, the consideration (whether
stock, cash, or other securities or property) received in the Change in Control by holders of Common Stock for each Share held on the effective date of the transaction (and if holders were offered a choice of consideration, the type of
consideration chosen by the holders of a majority of the outstanding Shares); provided, however, that if such consideration received in the Change in Control is not solely common stock of the successor corporation or its Parent, the Administrator
may, with the consent of the successor corporation, provide for the consideration to be received upon the exercise of an Option or Stock Appreciation Right or upon the payout of a Restricted Stock Unit, Performance Unit or Performance Share, for
each Share subject to such Award, to be solely common stock of the successor corporation or its Parent equal in fair market value to the per share consideration received by holders of Common Stock in the Change in Control. 

Notwithstanding anything in this Section 13(c) to the contrary, an Award that vests, is earned or paid-out upon the
satisfaction of one or more performance goals will not be considered assumed if the Company or its successor modifies any of such performance goals without the Participant’s consent; provided, however, a modification to such performance goals
only to reflect the successor corporation’s post-Change in Control corporate structure will not be deemed to invalidate an otherwise valid Award assumption. 
 (d) Outside Director Awards. With respect to Awards granted to an Outside Director that are assumed or substituted for, if on the date of or following such assumption or

  
 -15-

 
substitution the Participant’s status as a Director or a director of the successor corporation, as applicable, is terminated other than upon a voluntary resignation by the Participant
(unless such resignation is at the request of the acquirer), then the Participant will fully vest in and have the right to exercise Options and/or Stock Appreciation Rights as to all of the Shares underlying such Award, including those Shares which
would not otherwise be vested or exercisable, all restrictions on Restricted Stock and Restricted Stock Units will lapse, and, with respect to Awards with performance-based vesting, all performance goals or other vesting criteria will be deemed
achieved at one hundred percent (100%) of target levels and all other terms and conditions met. 
 14. Tax.

 (a) Withholding Requirements. Prior to the delivery of any Shares or cash pursuant to an Award (or exercise
thereof) or such earlier time as any tax withholding obligations are due, the Company will have the power and the right to deduct or withhold, or require a Participant to remit to the Company, an amount sufficient to satisfy federal, state,
local, foreign or other taxes (including the Participant’s FICA obligation) required to be withheld with respect to such Award (or exercise thereof). 
 (b) Withholding Arrangements. The Administrator, in its sole discretion and pursuant to such procedures as it may specify from time to time, may permit a Participant to satisfy such tax withholding
obligation, in whole or in part by (without limitation) (a) paying cash, (b) electing to have the Company withhold otherwise deliverable cash or Shares having a Fair Market Value equal to the minimum statutory amount required to be
withheld, or (c) delivering to the Company already-owned Shares having a Fair Market Value equal to the minimum statutory amount required to be withheld. The Fair Market Value of the Shares to be withheld or delivered will be determined as of
the date that the taxes are required to be withheld. 
 (c) Compliance With Code Section 409A. Awards will be
designed and operated in such a manner that they are either exempt from the application of, or comply with, the requirements of Code Section 409A such that the grant, payment, settlement or deferral will not be subject to the additional tax or
interest applicable under Code Section 409A, except as otherwise determined in the sole discretion of the Administrator. The Plan and each Award Agreement under the Plan is intended to meet the requirements of Code Section 409A and
will be construed and interpreted in accordance with such intent, except as otherwise determined in the sole discretion of the Administrator. To the extent that an Award or payment, or the settlement or deferral thereof, is subject to Code
Section 409A the Award will be granted, paid, settled or deferred in a manner that will meet the requirements of Code Section 409A, such that the grant, payment, settlement or deferral will not be subject to the additional tax or interest
applicable under Code Section 409A. 
 15. No Effect on Employment or Service. Neither the Plan nor any Award will
confer upon a Participant any right with respect to continuing the Participant’s relationship as a Service Provider with the Company, nor will they interfere in any way with the Participant’s right or the Company’s right to terminate
such relationship at any time, with or without cause, to the extent permitted by Applicable Laws. 
 16. Date of Grant.
The date of grant of an Award will be, for all purposes, the date on which the Administrator makes the determination granting such Award, or such other later date as is 

  
 -16-

 
determined by the Administrator. Notice of the determination will be provided to each Participant within a reasonable time after the date of such grant. 

17. Term of Plan. Subject to Section 21 of the Plan, the Plan will become effective upon the later to occur of (i) its
adoption by the Board or (ii) the business day immediately prior to the Registration Date. It will continue in effect for a term of ten (10) years from the date adopted by the Board, unless terminated earlier under Section 18 of the
Plan. 
 18. Amendment and Termination of the Plan. 

(a) Amendment and Termination. The Administrator may at any time amend, alter, suspend or terminate the Plan. 

(b) Stockholder Approval. The Company will obtain stockholder approval of any Plan amendment to the extent necessary and desirable
to comply with Applicable Laws. 
 (c) Effect of Amendment or Termination. No amendment, alteration, suspension or
termination of the Plan will impair the rights of any Participant, unless mutually agreed otherwise between the Participant and the Administrator, which agreement must be in writing and signed by the Participant and the Company. Termination of the
Plan will not affect the Administrator’s ability to exercise the powers granted to it hereunder with respect to Awards granted under the Plan prior to the date of such termination. 

19. Conditions Upon Issuance of Shares. 
 (a) Legal Compliance. Shares will not be issued pursuant to the exercise of an Award unless the exercise of such Award and the issuance and delivery of such Shares will comply with Applicable Laws
and will be further subject to the approval of counsel for the Company with respect to such compliance. 
 (b) Investment
Representations. As a condition to the exercise of an Award, the Company may require the person exercising such Award to represent and warrant at the time of any such exercise that the Shares are being purchased only for investment and without
any present intention to sell or distribute such Shares if, in the opinion of counsel for the Company, such a representation is required. 
 20. Inability to Obtain Authority. The inability of the Company to obtain authority from any regulatory body having jurisdiction or to complete or comply with the requirements of any registration
or other qualification of the Shares under any state, federal or foreign law or under the rules and regulations of the Securities and Exchange Commission, the stock exchange on which Shares of the same class are then listed, or any other
governmental or regulatory body, which authority, registration, qualification or rule compliance is deemed by the Company’s counsel to be necessary or advisable for the issuance and sale of any Shares hereunder, will relieve the Company of any
liability in respect of the failure to issue or sell such Shares as to which such requisite authority, registration, qualification or rule compliance will not have been obtained. 

21. Stockholder Approval. The Plan will be subject to approval by the stockholders of the Company within twelve (12) months
after the date the Plan is adopted by the Board. Such 

  
 -17-

 
stockholder approval will be obtained in the manner and to the degree required under Applicable Laws. 

  
 -18-

 QUALYS, INC. 
 2012 EQUITY INCENTIVE PLAN 
 RESTRICTED STOCK UNIT AGREEMENT

 Unless otherwise defined herein, the terms defined in the Qualys, Inc. 2012 Equity Incentive Plan (the “Plan”)
will have the same defined meanings in this Restricted Stock Unit Agreement, including the Notice of Restricted Stock Unit Grant (the “Notice of Grant”), the Terms and Conditions of Restricted Stock Unit Grant, attached hereto as
Exhibit A, and any Appendix, attached hereto as Exhibit B (all together, the “Award Agreement”). 
 NOTICE OF
RESTRICTED STOCK UNIT GRANT 
 Participant Name: 

Address: 

Participant has been granted the right to receive an Award of Restricted Stock Units, subject to the terms and conditions of the Plan and
this Award Agreement, as follows: 
  

			
	 Grant Number
	  	  

		
	 Date of Grant
	  	  

		
	 Vesting Commencement Date
	  	  

		
	 Number of Restricted Stock Units
	  	  

 Vesting Schedule: 
 Subject to any acceleration provisions contained in the Plan or set forth below, the Restricted Stock Units will vest in accordance with the following schedule: 

[Twenty-five percent (25%) of the Restricted Stock Units will vest on the one (1) year anniversary of the Vesting Commencement
Date, and twenty-five percent (25%) of the Restricted Stock Units will vest each year thereafter on the same day as the Vesting Commencement Date, subject to Participant continuing to be a Service Provider through each such date.] 

In the event Participant ceases to be a Service Provider for any or no reason before Participant vests in the Restricted Stock Units, the
Restricted Stock Units and Participant’s right to acquire any Shares hereunder will immediately terminate. 
 By
Participant’s signature and the signature of the representative of Qualys, Inc. (the “Company”) below, Participant and the Company agree that this Award of Restricted Stock Units is granted under and governed by the terms and
conditions of the Plan and this Award Agreement, which are made a part of this document. Participant has reviewed the Plan and this Award Agreement in their entirety, has had an opportunity to obtain the advice of counsel prior to executing this
Award Agreement and fully understands all provisions of the Plan and Award 

 
Agreement. Participant hereby agrees to accept as binding, conclusive and final all decisions or interpretations of the Administrator upon any questions relating to the Plan and Award Agreement.
Participant further agrees to notify the Company upon any change in the residence address indicated below. 
  

					
	PARTICIPANT:	 		  	QUALYS, INC.
			
	  
	 		  	  

	Signature	 		  	By
			
	  
	 		  	  

	Print Name	 		  	Title
			
	Residence Address:	 		  	
			
	  
	 		  	
			
	  
	 		  	

  
 -2-

 EXHIBIT A 

TERMS AND CONDITIONS OF RESTRICTED STOCK UNIT GRANT 
 1. Grant. The Company hereby grants to the individual named in the Notice of Grant (the “Participant”) under the Plan an Award of Restricted Stock Units, subject to all of the terms and
conditions in this Award Agreement and the Plan, which is incorporated herein by reference. Subject to Section 18(c) of the Plan, in the event of a conflict between the terms and conditions of the Plan and the terms and conditions of this Award
Agreement, the terms and conditions of the Plan will prevail. 
 2. Company’s Obligation to Pay. Each Restricted
Stock Unit represents the right to receive a Share on the date it vests. Unless and until the Restricted Stock Units will have vested in the manner set forth in Sections 3 or 4, Participant will have no right to payment of any such Restricted
Stock Units. Prior to actual payment of any vested Restricted Stock Units, such Restricted Stock Units will represent an unsecured obligation of the Company, payable (if at all) only from the general assets of the Company. Any Restricted Stock Units
that vest in accordance with Sections 3 or 4 will be paid to Participant (or in the event of Participant’s death, to his or her estate) in whole Shares, subject to Participant satisfying any obligations for Tax-Related Items (as defined in
Section 7). Subject to the provisions of Section 4, such vested Restricted Stock Units shall be paid in whole Shares as soon as practicable after vesting, but in each such case within the period sixty (60) days following the vesting
date. In no event will Participant be permitted, directly or indirectly, to specify the taxable year of the payment of any Restricted Stock Units payable under this Award Agreement. 

3. Vesting Schedule. Except as provided in Section 4, and subject to Section 5, the Restricted Stock Units awarded by
this Award Agreement will vest in accordance with the vesting provisions set forth in the Notice of Grant. Restricted Stock Units scheduled to vest on a certain date or upon the occurrence of a certain condition will not vest in Participant in
accordance with any of the provisions of this Award Agreement, unless Participant will have been continuously a Service Provider from the Date of Grant until the date such vesting occurs. 

4. Administrator Discretion. The Administrator, in its discretion, may accelerate the vesting of the balance, or some lesser
portion of the balance, of the unvested Restricted Stock Units at any time, subject to the terms of the Plan. If so accelerated, such Restricted Stock Units will be considered as having vested as of the date specified by the Administrator. The
payment of Shares vesting pursuant to this Section 4 shall in all cases be paid at a time or in a manner that is exempt from, or complies with, Section 409A. 
 Notwithstanding anything in the Plan or this Award Agreement to the contrary, if the vesting of the balance, or some lesser portion of the balance, of the Restricted Stock Units is accelerated in
connection with Participant’s termination as a Service Provider (provided that such termination is a “separation from service” within the meaning of Section 409A, as determined by the Company), other than due to death, and
if (x) Participant is a “specified employee” within the meaning of Section 409A at the time of such termination as a Service Provider and (y) the payment of such accelerated Restricted Stock Units will result in the
imposition of additional tax under Section 409A if paid to Participant on or within the six (6)

  
 -3-

 
month period following Participant’s termination as a Service Provider, then the payment of such accelerated Restricted Stock Units will not be made until the date six (6) months and
one (1) day following the date of Participant’s termination as a Service Provider, unless Participant dies following his or her termination as a Service Provider, in which case, the Restricted Stock Units will be paid in Shares to
Participant’s estate as soon as practicable following his or her death. It is the intent of this Award Agreement that it and all payments and benefits hereunder be exempt from, or comply with, the requirements of Section 409A so that none
of the Restricted Stock Units provided under this Award Agreement or Shares issuable thereunder will be subject to the additional tax imposed under Section 409A, and any ambiguities herein will be interpreted to be so exempt or so comply. Each
payment payable under this Award Agreement is intended to constitute a separate payment for purposes of Treasury Regulation Section 1.409A-2(b)(2). For purposes of this Award Agreement, “Section 409A” means Section 409A of the
Code, and any final Treasury Regulations and Internal Revenue Service guidance thereunder, as each may be amended from time to time. 
 5. Forfeiture upon Termination of Status as a Service Provider. Notwithstanding any contrary provision of this Award Agreement, the balance of the Restricted Stock Units that have not vested as of
the time of Participant’s termination as a Service Provider for any or no reason and Participant’s right to acquire any Shares hereunder will immediately terminate. The date of Participant’s termination as a Service Provider is
detailed in Section 10(h). 
 6. Death of Participant. Any distribution or delivery to be made to Participant under
this Award Agreement will, if Participant is then deceased, be made to Participant’s designated beneficiary, or if no beneficiary survives Participant, the administrator or executor of Participant’s estate. Any such transferee must furnish
the Company with (a) written notice of his or her status as transferee, and (b) evidence satisfactory to the Company to establish the validity of the transfer and compliance with any laws or regulations pertaining to said transfer.

 7. Withholding of Taxes. Notwithstanding any contrary provision of this Award Agreement, no certificate representing
the Shares will be issued to Participant, unless and until satisfactory arrangements (as determined by the Administrator) will have been made by Participant with respect to the payment of income, employment, social insurance, payroll tax, fringe
benefit tax, payment on account or other tax-related items related to Participant’s participation in the Plan and legally applicable to Participant (“Tax-Related Items”) which the Company determines must be withheld with respect to
such Shares. Prior to vesting and/or settlement of the Restricted Stock Units, Participant will pay or make adequate arrangements satisfactory to the Company and/or Participant’s employer (the “Employer”) to satisfy all withholding
and payment obligations of Tax-Related Items of the Company and/or the Employer. In this regard, Participant authorizes the Company and/or the Employer to withhold any Tax-Related Items legally payable by Participant from his or her wages or other
cash compensation paid to Participant by the Company and/or the Employer or from proceeds of the sale of Shares. Alternatively, or in addition, if permissible under applicable local law, the Administrator, in its sole discretion and pursuant to such
procedures as it may specify from time to time, may permit or require Participant to satisfy such tax withholding obligation, in whole or in part (without limitation) by (a) paying cash, (b) electing to have the Company withhold otherwise
deliverable Shares having a Fair Market Value equal to the minimum amount required to be withheld, (c) selling a sufficient number of such Shares otherwise deliverable to Participant 

  
 -4-

 
through such means as the Company may determine in its sole discretion (whether through a broker or otherwise) equal to the amount required to be withheld, or (d) if Participant is a U.S.
employee, delivering to the Company already vested and owned Shares having a Fair Market Value equal to the amount required to be withheld. To the extent determined appropriate by the Company in its discretion, it will have the right (but not the
obligation) to satisfy any obligations for Tax-Related Items by reducing the number of Shares otherwise deliverable to Participant [and, until determined otherwise by the Company, this will be the method by which such tax withholding obligations are
satisfied]. Further, if Participant is subject to tax in more than one jurisdiction between the Date of Grant and a date of any relevant taxable or tax withholding event, as applicable, Participant acknowledges and agrees that the Company and/or the
Employer (or former employer, as applicable) may be required to withhold or account for tax in more than one jurisdiction. If Participant fails to make satisfactory arrangements for the payment of any Tax-Related Items hereunder at the time any
applicable Restricted Stock Units otherwise are scheduled to vest pursuant to Sections 3 or 4 or Tax-Related Items related to Restricted Stock Units otherwise are due, Participant will permanently forfeit such Restricted Stock Units and any right to
receive Shares thereunder and the Restricted Stock Units will be returned to the Company at no cost to the Company. 
 8.
Rights as Stockholder. Neither Participant nor any person claiming under or through Participant will have any of the rights or privileges of a stockholder of the Company in respect of any Shares deliverable hereunder unless and until
certificates representing such Shares will have been issued, recorded on the records of the Company or its transfer agents or registrars, and delivered to Participant. After such issuance, recordation and delivery, Participant will have all the
rights of a stockholder of the Company with respect to voting such Shares and receipt of dividends and distributions on such Shares. 
 9. No Guarantee of Continued Service. PARTICIPANT ACKNOWLEDGES AND AGREES THAT THE VESTING OF THE RESTRICTED STOCK UNITS PURSUANT TO THE VESTING SCHEDULE HEREOF IS EARNED ONLY BY CONTINUING AS A
SERVICE PROVIDER AT THE WILL OF THE COMPANY (OR THE PARENT OR SUBSIDIARY EMPLOYING OR RETAINING PARTICIPANT) AND NOT THROUGH THE ACT OF BEING HIRED, BEING GRANTED THIS AWARD OF RESTRICTED STOCK UNITS OR ACQUIRING SHARES HEREUNDER. PARTICIPANT
FURTHER ACKNOWLEDGES AND AGREES THAT THIS AWARD AGREEMENT, THE TRANSACTIONS CONTEMPLATED HEREUNDER AND THE VESTING SCHEDULE SET FORTH HEREIN DO NOT CONSTITUTE AN EXPRESS OR IMPLIED PROMISE OF CONTINUED ENGAGEMENT AS A SERVICE PROVIDER FOR THE
VESTING PERIOD, FOR ANY PERIOD, OR AT ALL, AND WILL NOT INTERFERE IN ANY WAY WITH PARTICIPANT’S RIGHT OR THE RIGHT OF THE COMPANY (OR THE PARENT OR SUBSIDIARY EMPLOYING OR RETAINING PARTICIPANT) TO TERMINATE PARTICIPANT’S RELATIONSHIP AS A
SERVICE PROVIDER AT ANY TIME, WITH OR WITHOUT CAUSE. 
 10. Nature of Grant. In accepting the grant, Participant
acknowledges, understands and agrees that: 

  
 -5-

	 	(a)	the Plan is established voluntarily by the Company, it is discretionary in nature and it may be modified, amended, suspended or terminated by the Company at any time,
to the extent permitted by the Plan; 

  

	 	(b)	the grant of the Restricted Stock Units is voluntary and occasional and does not create any contractual or other right to receive future grants of Restricted Stock
Units, or benefits in lieu of Restricted Stock Units, even if Restricted Stock Units have been granted in the past; 

  

	 	(c)	all decisions with respect to future Restricted Stock Units or other grants, if any, will be at the sole discretion of the Company; 

 

	 	(d)	Participant is voluntarily participating in the Plan; 

  

	 	(e)	the Restricted Stock Units and the Shares subject to the Restricted Stock Units are not intended to replace any pension rights or compensation;

  

	 	(f)	the Restricted Stock Units and the Shares subject to the Restricted Stock Units, and the income and value of same, are not part of normal or expected compensation for
purposes of calculating any severance, resignation, termination, redundancy, dismissal, end-of-service payments, bonuses, long-service awards, pension or retirement or welfare benefits or similar payments; 

 

	 	(g)	the future value of the underlying Shares is unknown, indeterminable and cannot be predicted with certainty; 

 

	 	(h)	for purposes of the Restricted Stock Units, Participant’s status as a Service Provider will be considered terminated as of the date Participant is no longer
actively providing services to the Company or any Parent or Subsidiary (regardless of the reason for such termination and whether or not later to be found invalid or in breach of employment laws in the jurisdiction where Participant is a Service
Provider or the terms of Participant’s service agreement, if any), and unless otherwise expressly provided in this Award Agreement or determined by the Administrator, Participant’s right to vest in the Restricted Stock Units under the
Plan, if any, will terminate as of such date and will not be extended by any notice period (e.g., Participant’s period of service would not include any contractual notice period or any period of “garden leave” or similar period
mandated under employment laws in the jurisdiction where Participant is a Service Provider or the terms of Participant’s service agreement, if any, unless Participant is providing bona fide services during such time); the Administrator shall
have the exclusive discretion to determine when Participant is no longer actively providing services for purposes of the Restricted Stock Units grant (including whether Participant may still be considered to be providing services while on a leave of
absence); 

  

	 	(i)	 unless otherwise provided in the Plan or by the Company in its discretion, the Restricted Stock Units and the benefits evidenced by this Award
Agreement do not create any entitlement to have the Restricted Stock Units or any such benefits 

  
 -6-

	 	
transferred to, or assumed by, another company nor be exchanged, cashed out or substituted for, in connection with any corporate transaction affecting the Shares; and 

 

	 	(j)	the following provisions apply only if Participant is providing services outside the United States: 

 

	 	i.	the Restricted Stock Units and the Shares subject to the Restricted Stock Units are not part of normal or expected compensation or salary for any purpose;

  

	 	ii.	Participant acknowledges and agrees that none of the Company, the Employer, or any Parent or Subsidiary shall be liable for any foreign exchange rate fluctuation
between Participant’s local currency and the United States Dollar that may affect the value of the Restricted Stock Units or of any amounts due to Participant pursuant to the settlement of the Restricted Stock Units or the subsequent sale of
any Shares acquired upon settlement; and 

  

	 	iii.	no claim or entitlement to compensation or damages shall arise from forfeiture of the Restricted Stock Units resulting from the termination of Participant’s status
as a Service Provider (for any reason whatsoever whether or not later found to be invalid or in breach of employment laws in the jurisdiction where Participant is a Service Provider or the terms of Participant’s service agreement, if any), and
in consideration of the grant of the Restricted Stock Units to which Participant is otherwise not entitled, Participant irrevocably agrees never to institute any claim against the Company, any Subsidiary or the Employer, waives his or her
ability, if any, to bring any such claim, and releases the Company, any Parent, any Subsidiary and the Employer from any such claim; if, notwithstanding the foregoing, any such claim is allowed by a court of competent jurisdiction, then, by
participating in the Plan, Participant shall be deemed irrevocably to have agreed not to pursue such claim and agrees to execute any and all documents necessary to request dismissal or withdrawal of such claim. 

11. No Advice Regarding Grant. The Company is not providing any tax, legal or financial advice, nor is the Company making any
recommendations regarding Participant’s participation in the Plan, or Participant’s acquisition or sale of the underlying Shares. Participant is hereby advised to consult with his or her own personal tax, legal and financial advisors
regarding his or her participation in the Plan before taking any action related to the Plan. 
 12.
Data Privacy. Participant hereby explicitly and unambiguously consents to the collection, use and transfer, in electronic or other form, of Participant’s personal data as described in this Award
Agreement and any other Restricted Stock Unit grant materials by and among, as applicable, the Employer, the Company and any Parent or Subsidiary for the exclusive purpose of implementing, administering and managing Participant’s participation
in the Plan. 

  
 -7-

 Participant understands that the Company and the Employer may hold certain personal
information about Participant, including, but not limited to, Participant’s name, home address and telephone number, date of birth, social insurance number or other identification number, salary, nationality, job title, any shares of stock or
directorships held in the Company, details of all Restricted Stock Units or any other entitlement to shares of stock awarded, canceled, exercised, vested, unvested or outstanding in Participant’s favor (“Data”), for the exclusive
purpose of implementing, administering and managing the Plan. 
 Participant understands that Data will be
transferred to a stock plan service provider as may be selected by the Company in the future, which is assisting the Company with the implementation, administration and management of the Plan. Participant understands that the recipients of the Data
may be located in the United States or elsewhere, and that the recipients’ country (e.g., the United States) may have different data privacy laws and protections than Participant’s country. Participant understands that if he or she resides
outside the United States, he or she may request a list with the names and addresses of any potential recipients of the Data by contacting his or her local human resources representative. Participant authorizes the Company, any stock plan service
provider selected by the Company and any other possible recipients which may assist the Company (presently or in the future) with implementing, administering and managing the Plan to receive, possess, use, retain and transfer the Data, in electronic
or other form, for the sole purpose of implementing, administering and managing his or her participation in the Plan. Participant understands that Data will be held only as long as is necessary to implement, administer and manage Participant’s
participation in the Plan. Participant understands if he or she resides outside the United States, he or she may, at any time, view Data, request additional information about the storage and processing of Data, require any necessary amendments to
Data or refuse or withdraw the consents herein, in any case without cost, by contacting in writing his or her local human resources representative. Further, Participant understands that he or she is providing the consents herein on a purely
voluntary basis. If Participant does not consent, or if Participant later seeks to revoke his or her consent, his or her status as a Service Provider and career with the Employer will not be adversely affected; the only adverse consequence of
refusing or withdrawing Participant’s consent is that the Company would not be able to grant Participant Restricted Stock Units or other equity awards or administer or maintain such awards. Therefore, Participant understands that refusing or
withdrawing his or her consent may affect Participant’s ability to participate in the Plan. For more information on the consequences of Participant’s refusal to consent or withdrawal of consent, Participant understands that he or she may
contact his or her local human resources representative. 
 13. Address for Notices. Any notice to be given to
the Company under the terms of this Award Agreement will be addressed to the Company at Qualys, Inc., 1600 Bridge Parkway, Redwood Shores, California 94065, or at such other address as the Company may hereafter designate in writing. 

14. Grant is Not Transferable. Except to the limited extent provided in Section 6, this grant and the rights and privileges
conferred hereby will not be transferred, assigned, pledged or hypothecated in any way (whether by operation of law or otherwise) and will not be subject to sale under execution, attachment or similar process. Upon any attempt to transfer, assign,
pledge, hypothecate or otherwise dispose of this grant, or any right or privilege conferred hereby, 

  
 -8-

 
or upon any attempted sale under any execution, attachment or similar process, this grant and the rights and privileges conferred hereby immediately will become null and void. 

15. Binding Agreement. Subject to the limitation on the transferability of this grant contained herein, this Award Agreement will
be binding upon and inure to the benefit of the heirs, legatees, legal representatives, successors and assigns of the parties hereto. 
 16. Additional Conditions to Issuance of Stock. If at any time the Company will determine, in its discretion, that the listing, registration, qualification or rule compliance of the Shares upon any
securities exchange or under any state, federal or foreign law, the tax code and related regulations or the consent or approval of any governmental regulatory authority is necessary or desirable as a condition to the issuance of Shares to
Participant (or his or her estate) hereunder, such issuance will not occur unless and until such listing, registration, qualification, rule compliance, consent or approval will have been completed, effected or obtained free of any conditions not
acceptable to the Company. Where the Company determines that the delivery of the payment of any Shares will violate federal securities laws or other applicable laws, the Company will defer delivery until the earliest date at which the Company
reasonably anticipates that the delivery of Shares will no longer cause such violation. The Company will make all reasonable efforts to meet the requirements of any such state, federal or foreign law or securities exchange and to obtain any such
consent or approval of any such governmental authority or securities exchange. 
 17. Plan Governs. This Award Agreement
is subject to all terms and provisions of the Plan. In the event of a conflict between one or more provisions of this Award Agreement and one or more provisions of the Plan, the provisions of the Plan will govern. Capitalized terms used and not
defined in this Award Agreement will have the meaning set forth in the Plan. 
 18. Administrator Authority. The
Administrator will have the power to interpret the Plan and this Award Agreement and to adopt such rules for the administration, interpretation and application of the Plan as are consistent therewith and to interpret or revoke any such rules
(including, but not limited to, the determination of whether or not any Restricted Stock Units have vested). All actions taken and all interpretations and determinations made by the Administrator in good faith will be final and binding upon
Participant, the Company and all other interested persons. No member of the Administrator will be personally liable for any action, determination or interpretation made in good faith with respect to the Plan or this Award Agreement. 

19. Electronic Delivery and Acceptance. The Company may, in its sole discretion, decide to deliver any documents related to
Restricted Stock Units awarded under the Plan or future Restricted Stock Units that may be awarded under the Plan by electronic means or request Participant’s consent to participate in the Plan by electronic means. Participant hereby consents
to receive such documents by electronic delivery and agrees to participate in the Plan through any on-line or electronic system established and maintained by the Company or a third party designated by the Company. 

20. Language. If Participant has received this Award Agreement or any other document related to the Plan translated into a
language other than English and if the meaning of 

  
 -9-

 
the translated version is different than the English version, the English version will control. 
 21. Captions. Captions provided herein are for convenience only and are not to serve as a basis for interpretation or construction of this Award Agreement. 

22. Agreement Severable. In the event that any provision in this Award Agreement will be held invalid or unenforceable, such
provision will be severable from, and such invalidity or unenforceability will not be construed to have any effect on, the remaining provisions of this Award Agreement. 
 23. Amendment, Suspension or Termination of the Plan. By accepting this Award, Participant expressly warrants that he or she has received an Award of Restricted Stock Units under the Plan, and has
received, read and understood a description of the Plan. Participant understands that the Plan is discretionary in nature and may be amended, suspended or terminated by the Company at any time. 

24. Governing Law and Venue. This Award Agreement will be governed by the laws of California without giving effect to the conflict
of law principles thereof. For purposes of litigating any dispute that arises under this Award of Restricted Stock Units or this Award Agreement, the parties hereby submit to and consent to the jurisdiction of the State of California, and agree that
such litigation will be conducted in the courts of San Mateo County, California, or the federal courts for the United States for the Northern District of California, and no other courts, where this Award of Restricted Stock Units is made and/or to
be performed. 
 25. [Appendix. Notwithstanding any provisions in this Award Agreement, the Restricted Stock Unit grant
shall be subject to any special terms and conditions set forth in any appendix to this Award Agreement for Participant’s country (the “Appendix”). Moreover, if Participant relocates to one of the countries included in the Appendix,
the special terms and conditions for such country will apply to Participant, to the extent the Company determines that the application of such terms and conditions is necessary or advisable for legal or administrative reasons. The Appendix
constitutes part of this Award Agreement.] 
 26. Modifications to the Award Agreement. This Award Agreement constitutes
the entire understanding of the parties on the subjects covered. Participant expressly warrants that he or she is not accepting this Award Agreement in reliance on any promises, representations, or inducements other than those contained herein.
Modifications to this Award Agreement or the Plan can be made only in an express written contract executed by a duly authorized officer of the Company. Notwithstanding anything to the contrary in the Plan or this Award Agreement, the Company
reserves the right to revise the Award Agreement as it deems necessary or advisable, in its sole discretion and without the consent of Participant, to comply with Section 409A or to otherwise avoid imposition of any additional tax or income
recognition under Section 409A in connection to this Award of Restricted Stock. 
 27. Waiver. Participant
acknowledges that a waiver by the Company of breach of any provision of this Award Agreement shall not operate or be construed as a waiver of any other provision of this Award Agreement, or of any subsequent breach by Participant or any other
Participant. 

  
 -10-

 EXHIBIT B 

[ANY APPLICABLE APPENDIX TO BE ADDED] 

  
 -11-

 QUALYS, INC. 
 2012 EQUITY INCENTIVE PLAN 
 RESTRICTED STOCK AGREEMENT 

Unless otherwise defined herein, the terms defined in the Qualys, Inc. 2012 Equity Incentive Plan (the “Plan”) will have
the same defined meanings in this Restricted Stock Agreement, including the Notice of Restricted Stock Grant (the “Notice of Grant”), the Terms and Conditions of Restricted Stock Grant, attached hereto as Exhibit A, and any
Appendix, attached hereto as Exhibit B (all together, the “Agreement”). 
 NOTICE OF RESTRICTED STOCK GRANT

  

					
	 Participant Name:
	 	  
	 	
			
	 Address:
	 	  
	 	
			
		 	  
	 	

 Participant has been granted the right to receive an Award of Restricted Stock, subject to the terms and
conditions of the Plan and this Agreement, as follows: 
  

					
	 Grant Number
	 	  
	 	
			
	 Date of Grant
	 	  
	 	
			
	 Vesting Commencement Date
	 	  
	 	
			
	 Total Number of Shares Granted
	 	  
	 	

 Vesting Schedule: 
 Subject to any acceleration provisions contained in the Plan or set forth below, the Restricted Stock will vest and the Company’s right to reacquire the Restricted Stock will lapse in accordance with
the following schedule: 
 [Twenty-five percent (25%) of the Shares of Restricted Stock will vest on the one (1) year
anniversary of the Vesting Commencement Date, and twenty-five percent (25%) of the Shares of Restricted Stock will vest each year thereafter on the same day as the Vesting Commencement Date, subject to Participant continuing to be a Service
Provider through each such date.] 

  
 -1-

 By Participant’s signature and the signature of the representative of Qualys, Inc. (the
“Company”) below, Participant and the Company agree that this Award of Restricted Stock is granted under and governed by the terms and conditions of the Plan and this Agreement, including exhibits hereto, all of which are made a part
of this document. Participant has reviewed the Plan and this Agreement in their entirety, has had an opportunity to obtain the advice of counsel prior to executing this Agreement and fully understands all provisions of the Plan and Agreement.
Participant hereby agrees to accept as binding, conclusive and final all decisions or interpretations of the Administrator upon any questions relating to the Plan and Agreement. Participant further agrees to notify the Company upon any change in the
residence address indicated below. 
  

					
	 PARTICIPANT
	  	QUALYS, INC.	  	
			
	      
	  	  
	  	
	 Signature
	  	By	  	
			
	      
	  	  
	  	
	 Print Name
	  	Title	  	
			
	 Address:
	  		  	
			
	      
	  		  	
			
	      
	  		  	

  
 -2-

 EXHIBIT A 

TERMS AND CONDITIONS OF RESTRICTED STOCK GRANT 
 1. Grant of Restricted Stock. The Company hereby grants to the Participant named in the Notice of Grant (the “Participant”) under the Plan for past services and as a separate
incentive in connection with his or her services and not in lieu of any salary or other compensation for his or her services, an Award of Shares of Restricted Stock, subject to all of the terms and conditions in this Agreement and the Plan, which is
incorporated herein by reference. Subject to Section 18(c) of the Plan, in the event of a conflict between the terms and conditions of the Plan and the terms and conditions of this Agreement, the terms and conditions of the Plan will
prevail. 
 2. Escrow of Shares. 
 (a) All Shares of Restricted Stock will, upon execution of this Agreement, be delivered and deposited with an escrow holder designated by the Company (the “Escrow Holder”). The Shares of
Restricted Stock will be held by the Escrow Holder until such time as the Shares of Restricted Stock vest or the date Participant ceases to be a Service Provider. 
 (b) The Escrow Holder will not be liable for any act it may do or omit to do with respect to holding the Shares of Restricted Stock in escrow while acting in good faith and in the exercise of its
judgment. 
 (c) Upon Participant’s termination as a Service Provider for any reason, the Escrow Holder, upon receipt of
written notice of such termination, will take all steps necessary to accomplish the transfer of the unvested Shares of Restricted Stock to the Company. Participant hereby appoints the Escrow Holder with full power of substitution, as
Participant’s true and lawful attorney-in-fact with irrevocable power and authority in the name and on behalf of Participant to take any action and execute all documents and instruments, including, without limitation, stock powers which may be
necessary to transfer the certificate or certificates evidencing such unvested Shares of Restricted Stock to the Company upon such termination. 
 (d) The Escrow Holder will take all steps necessary to accomplish the transfer of Shares of Restricted Stock to Participant after they vest following Participant’s request that the Escrow Holder do
so. 
 (e) Subject to the terms hereof, Participant will have all the rights of a stockholder with respect to the Shares while
they are held in escrow, including without limitation, the right to vote the Shares and to receive any cash dividends declared thereon. 
 (f) In the event of any dividend or other distribution (whether in the form of cash, Shares, other securities, or other property), recapitalization, stock split, reverse stock split, reorganization,
merger, consolidation, split-up, spin-off, combination, repurchase, or exchange of Shares or other securities of the Company, or other change in the corporate structure of the Company affecting the Shares, the Shares of Restricted Stock will be
increased, reduced or otherwise changed, and by virtue of any such change Participant will in his or her capacity as owner of unvested Shares of Restricted Stock be entitled to new or additional or different shares

  
 -3-

 
of stock, cash or securities (other than rights or warrants to purchase securities); such new or additional or different shares, cash or securities will thereupon be considered to be unvested
Shares of Restricted Stock and will be subject to all of the conditions and restrictions which were applicable to the unvested Shares of Restricted Stock pursuant to this Agreement. If Participant receives rights or warrants with respect to any
unvested Shares of Restricted Stock, such rights or warrants may be held or exercised by Participant, provided that until such exercise any such rights or warrants and after such exercise any shares or other securities acquired by the exercise of
such rights or warrants will be considered to be unvested Shares of Restricted Stock and will be subject to all of the conditions and restrictions which were applicable to the unvested Shares of Restricted Stock pursuant to this Agreement. The
Administrator in its absolute discretion at any time may accelerate the vesting of all or any portion of such new or additional shares of stock, cash or securities, rights or warrants to purchase securities or shares or other securities acquired by
the exercise of such rights or warrants. 
 (g) The Company may instruct the transfer agent for its Common Stock to place a
legend on the certificates representing the Restricted Stock or otherwise note its records as to the restrictions on transfer set forth in this Agreement. 
 3. Vesting Schedule. Except as provided in Section 4, and subject to Section 5, the Shares of Restricted Stock awarded by this Agreement will vest in accordance with the vesting
provisions set forth in the Notice of Grant. Shares of Restricted Stock scheduled to vest on a certain date or upon the occurrence of a certain condition will not vest in Participant in accordance with any of the provisions of this Agreement, unless
Participant will have been continuously a Service Provider from the Date of Grant until the date such vesting occurs. 
 4.
Administrator Discretion. The Administrator, in its discretion, may accelerate the vesting of the balance, or some lesser portion of the balance, of the unvested Restricted Stock at any time, subject to the terms of the Plan. If so
accelerated, such Restricted Stock will be considered as having vested as of the date specified by the Administrator. 
 5.
Forfeiture upon Termination of Status as a Service Provider. Notwithstanding any contrary provision of this Agreement, the balance of the Shares of Restricted Stock that have not vested as of the time of Participant’s termination as a
Service Provider for any or no reason will be forfeited and automatically transferred to and reacquired by the Company at no cost to the Company upon the date of such termination and Participant will have no further rights thereunder. The date of
Participant’s termination as a Service Provider is detailed in Section 10(h). Participant will not be entitled to a refund of the price paid for the Shares of Restricted Stock, if any, returned to the Company pursuant to this
Section 5. Participant hereby appoints the Escrow Agent with full power of substitution, as Participant’s true and lawful attorney-in-fact with irrevocable power and authority in the name and on behalf of Participant to take any action and
execute all documents and instruments, including, without limitation, stock powers which may be necessary to transfer the certificate or certificates evidencing such unvested Shares to the Company upon such termination of service. 

6. Death of Participant. Any distribution or delivery to be made to Participant under this Agreement will, if Participant is then
deceased, be made to Participant’s designated beneficiary, or if no beneficiary survives Participant, the administrator or executor of 

  
 -4-

 
Participant’s estate. Any such transferee must furnish the Company with (a) written notice of his or her status as transferee, and (b) evidence satisfactory to the Company to
establish the validity of the transfer and compliance with any laws or regulations pertaining to said transfer. 
 7.
Withholding of Taxes. Notwithstanding any contrary provision of this Agreement, no certificate representing the Shares of Restricted Stock may be released from the escrow established pursuant to Section 2, unless and until satisfactory
arrangements (as determined by the Administrator) will have been made by Participant with respect to the payment of income, employment, social insurance, payroll tax, fringe benefit tax, payment on account or other tax-related items related to
Participant’s participation in the Plan and legally applicable to Participant (“Tax-Related Items”) which the Company determines must be withheld with respect to such Shares. Prior to vesting of the Restricted Stock, Participant
will pay or make adequate arrangements satisfactory to the Company and/or the Participant’s employer (the “Employer”) to satisfy all withholding and payment obligations of Tax-Related Items of the Company and/or the Employer. In
this regard, Participant authorizes the Company and/or the Employer to withhold any Tax-Related Items legally payable by Participant from his or her wages or other cash compensation paid to Participant by the Company and/or the Employer or from
proceeds of the sale of Shares. Alternatively, or in addition, if permissible under applicable local law, the Administrator, in its sole discretion and pursuant to such procedures as it may specify from time to time, may permit or require
Participant to satisfy such tax withholding obligation, in whole or in part (without limitation) by (a) paying cash, (b) electing to have the Company withhold otherwise deliverable Shares having a Fair Market Value equal to the
minimum amount required to be withheld, (c) selling a sufficient number of such Shares otherwise deliverable to Participant through such means as the Company may determine in its sole discretion (whether through a broker or
otherwise) equal to the amount required to be withheld, or (d) if Participant is a U.S. employee, delivering to the Company already vested and owned Shares having a Fair Market Value equal to the amount required to be withheld. To the
extent determined appropriate by the Company in its discretion, it will have the right (but not the obligation) to satisfy any obligations for Tax-Related Items by reducing the number of Shares otherwise deliverable to Participant [and, until
determined otherwise by the Company, this will be the method by which such tax withholding obligations are satisfied]. Further, if Participant is subject to tax in more than one jurisdiction between the Date of Grant and a date of relevant taxable
or tax withholding event, as applicable, Participant acknowledges and agrees that the Company and/or the Employer (or former employer, as applicable) may be required to withhold or account for tax in more than one jurisdiction. If Participant
fails to make satisfactory arrangements for the payment of any Tax-Related Items hereunder at the time any applicable Shares otherwise are scheduled to vest pursuant to Sections 3 or 4 or Tax-Related Items related to the applicable Shares otherwise
are due, Participant will permanently forfeit such Shares and the Shares will be returned to the Company at no cost to the Company. 
 8. Rights as Stockholder. Neither Participant nor any person claiming under or through Participant will have any of the rights or privileges of a stockholder of the Company in respect of any Shares
deliverable hereunder unless and until certificates representing such Shares will have been issued, recorded on the records of the Company or its transfer agents or registrars, and delivered to Participant or the Escrow Agent. Except as provided in
Section 2(f), after such issuance, recordation and delivery, Participant will have all the rights of a stockholder of the 

  
 -5-

 
Company with respect to voting such Shares and receipt of dividends and distributions on such Shares. 
 9. No Guarantee of Continued Service. PARTICIPANT ACKNOWLEDGES AND AGREES THAT THE VESTING OF THE SHARES OF RESTRICTED STOCK PURSUANT TO THE VESTING SCHEDULE HEREOF IS EARNED ONLY BY CONTINUING AS
A SERVICE PROVIDER AT THE WILL OF THE COMPANY (OR THE PARENT OR SUBSIDIARY EMPLOYING OR RETAINING PARTICIPANT) AND NOT THROUGH THE ACT OF BEING HIRED, BEING GRANTED THIS RESTRICTED STOCK OR ACQUIRING SHARES HEREUNDER. PARTICIPANT FURTHER
ACKNOWLEDGES AND AGREES THAT THIS AGREEMENT, THE TRANSACTIONS CONTEMPLATED HEREUNDER AND THE VESTING SCHEDULE SET FORTH HEREIN DO NOT CONSTITUTE AN EXPRESS OR IMPLIED PROMISE OF CONTINUED ENGAGEMENT AS A SERVICE PROVIDER FOR THE VESTING PERIOD, FOR
ANY PERIOD, OR AT ALL, AND WILL NOT INTERFERE IN ANY WAY WITH PARTICIPANT’S RIGHT OR THE RIGHT OF THE COMPANY (OR THE PARENT OR SUBSIDIARY EMPLOYING OR RETAINING PARTICIPANT) TO TERMINATE PARTICIPANT’S RELATIONSHIP AS A SERVICE
PROVIDER AT ANY TIME, WITH OR WITHOUT CAUSE. 
 10. Nature of Grant. In accepting the grant, Participant acknowledges,
understands and agrees that: 
  

	 	(a)	the Plan is established voluntarily by the Company, it is discretionary in nature and it may be modified, amended, suspended or terminated by the Company at any time,
to the extent permitted by the Plan; 

  

	 	(b)	the grant of the Restricted Stock is voluntary and occasional and does not create any contractual or other right to receive future grants of Restricted Stock, or
benefits in lieu of Restricted Stock, even if Restricted Stock have been granted in the past; 

  

	 	(c)	all decisions with respect to future Restricted Stock or other grants, if any, will be at the sole discretion of the Company; 

 

	 	(d)	Participant is voluntarily participating in the Plan; 

  

	 	(e)	the Restricted Stock and the Shares subject to the Restricted Stock are not intended to replace any pension rights or compensation; 

 

	 	(f)	the Restricted Stock and the Shares subject to the Restricted Stock, and the income and value of same, are not part of normal or expected compensation for purposes of
calculating any severance, resignation, termination, redundancy, dismissal, end-of-service payments, bonuses, long-service awards, pension or retirement or welfare benefits or similar payments; 

 

	 	(g)	the future value of the underlying Shares is unknown, indeterminable and cannot be predicted with certainty; 

  
 -6-

	 	(h)	for purposes of the Restricted Stock, Participant’s status as a Service Provider will be considered terminated as of the date Participant is no longer actively
providing services to the Company or any Parent or Subsidiary (regardless of the reason for such termination and whether or not later to be found invalid or in breach of employment laws in the jurisdiction where Participant is a Service Provider or
the terms of Participant’s service agreement, if any), and unless otherwise expressly provided in this Agreement or determined by the Administrator, Participant’s right to vest in Restricted Stock under the Plan, if any, will terminate as
of such date and will not be extended by any notice period (e.g., Participant’s period of service would not include any contractual notice period or any period of “garden leave” or similar period mandated under employment laws
in the jurisdiction where Participant is a Service Provider or the terms of Participant’s service agreement, if any, unless Participant is providing bona fide services during such time); the Administrator shall have the exclusive discretion to
determine when Participant is no longer actively providing services for purposes of the Restricted Stock grant (including whether Participant may still be considered to be providing services while on a leave of absence); 

 

	 	(i)	unless otherwise provided in the Plan or by the Company in its discretion, the Restricted Stock and the benefits evidenced by this Agreement do not create any
entitlement to have the Restricted Stock or any such benefits transferred to, or assumed by, another company nor be exchanged, cashed out or substituted for, in connection with any corporate transaction affecting the Shares; and

  

	 	(j)	the following provisions apply only if Participant is providing services outside the United States: 

 

	 	i.	the Restricted Stock and the Shares subject to the Restricted Stock are not part of normal or expected compensation or salary for any purpose; 

 

	 	ii.	Participant acknowledges and agrees that none of the Company, the Employer, or any Parent or Subsidiary shall be liable for any foreign exchange rate fluctuation
between Participant’s local currency and the United States Dollar that may affect the value of the Restricted Stock or of any amounts due to Participant pursuant to the settlement of the Restricted Stock or the subsequent sale of any Shares;
and 

  

	 	iii.	 no claim or entitlement to compensation or damages shall arise from forfeiture of the Restricted Stock resulting from the termination of
Participant’s status as a Service Provider (for any reason whatsoever whether or not later found to be invalid or in breach of employment laws in the jurisdiction where Participant is a Service Provider or the terms of Participant’s
service agreement, if any), and in consideration of the grant of the Restricted Stock to which Participant is otherwise not entitled, Participant irrevocably agrees never to institute any claim against the Company, any Subsidiary or the
Employer, waives his or her ability, if any, to bring any such claim, and releases the Company, any Parent, any 

  
 -7-

	 	
Subsidiary and the Employer from any such claim; if, notwithstanding the foregoing, any such claim is allowed by a court of competent jurisdiction, then, by participating in the Plan, Participant
shall be deemed irrevocably to have agreed not to pursue such claim and agrees to execute any and all documents necessary to request dismissal or withdrawal of such claim. 

11. No Advice Regarding Grant. The Company is not providing any tax, legal or financial advice, nor is the Company making any
recommendations regarding Participant’s participation in the Plan, or Participant’s acquisition or sale of the underlying Shares. Participant is hereby advised to consult with his or her own personal tax, legal and financial advisors
regarding his or her participation in the Plan before taking any action related to the Plan. 
 12. Data Privacy.
Participant hereby explicitly and unambiguously consents to the collection, use and transfer, in electronic or other form, of Participant’s personal data as described in this Agreement and any other Restricted Stock grant materials by and
among, as applicable, the Employer, the Company and any Parent or Subsidiary for the exclusive purpose of implementing, administering and managing Participant’s participation in the Plan. 

Participant understands that the Company and the Employer may hold certain personal information about Participant, including, but
not limited to, Participant’s name, home address and telephone number, date of birth, social insurance number or other identification number, salary, nationality, job title, any shares of stock or directorships held in the Company, details of
all Restricted Stock or any other entitlement to shares of stock awarded, canceled, exercised, vested, unvested or outstanding in Participant’s favor (“Data”), for the exclusive purpose of implementing, administering and managing the
Plan. 
 Participant understands that Data will be transferred to a stock plan service provider as may be selected
by the Company in the future, which is assisting the Company with the implementation, administration and management of the Plan. Participant understands that the recipients of the Data may be located in the United States or elsewhere, and that the
recipients’ country (e.g., the United States) may have different data privacy laws and protections than Participant’s country. Participant understands that if he or she resides outside the United States, he or she may request a list
with the names and addresses of any potential recipients of the Data by contacting his or her local human resources representative. Participant authorizes the Company, any stock plan service provider selected by the Company and any other possible
recipients which may assist the Company (presently or in the future) with implementing, administering and managing the Plan to receive, possess, use, retain and transfer the Data, in electronic or other form, for the sole purpose of
implementing, administering and managing his or her participation in the Plan. Participant understands that Data will be held only as long as is necessary to implement, administer and manage Participant’s participation in the Plan. Participant
understands if he or she resides outside the United States, he or she may, at any time, view Data, request additional information about the storage and processing of Data, require any necessary amendments to Data or refuse or withdraw the consents
herein, in any case without cost, by contacting in writing his or her local human resources representative. Further, Participant understands that he or she is providing the consents herein on a purely voluntary basis. If Participant does not
consent, or if Participant later seeks to revoke his or her consent, his or her status as a Service Provider 

  
 -8-

 
and career with the Employer will not be adversely affected; the only adverse consequence of refusing or withdrawing Participant’s consent is that the Company would not be able to grant
Participant Restricted Stock or other equity awards or administer or maintain such awards. Therefore, Participant understands that refusing or withdrawing his or her consent may affect Participant’s ability to participate in the Plan. For more
information on the consequences of Participant’s refusal to consent or withdrawal of consent, Participant understands that he or she may contact his or her local human resources representative. 

13. Address for Notices. Any notice to be given to the Company under the terms of this Agreement will be addressed to the Company
at Qualys, Inc., 1600 Bridge Parkway, Redwood Shores, California 94065, or at such other address as the Company may hereafter designate in writing. 
 14. Grant is Not Transferable. Except to the limited extent provided in Section 6, the unvested Shares subject to this grant and the rights and privileges conferred hereby will not be
transferred, assigned, pledged or hypothecated in any way (whether by operation of law or otherwise) and will not be subject to sale under execution, attachment or similar process. Upon any attempt to transfer, assign, pledge, hypothecate or
otherwise dispose of any unvested Shares of Restricted Stock subject to this grant, or any right or privilege conferred hereby, or upon any attempted sale under any execution, attachment or similar process, this grant and the rights and privileges
conferred hereby immediately will become null and void. 
 15. Binding Agreement. Subject to the limitation on the
transferability of this grant contained herein, this Agreement will be binding upon and inure to the benefit of the heirs, legatees, legal representatives, successors and assigns of the parties hereto. 

16. Additional Conditions to Release from Escrow. The Company will not be required to issue any certificate or certificates for
Shares hereunder or release such Shares from the escrow established pursuant to Section 2 prior to fulfillment of all the following conditions: (a) the admission of such Shares to listing on all stock exchanges on which such class of stock
is then listed; (b) the completion of any registration or other qualification of such Shares under any state or federal law or under the rulings or regulations of the Securities and Exchange Commission or any other governmental regulatory body
or the securities exchange on which the Shares are then registered, which the Administrator will, in its absolute discretion, deem necessary or advisable; (c) the obtaining of any approval or other clearance from any state or federal
governmental agency, which the Administrator will, in its absolute discretion, determine to be necessary or advisable; and (d) the lapse of such reasonable period of time following the Date of Grant of the Restricted Stock as the Administrator
may establish from time to time for reasons of administrative convenience. 
 17. Plan Governs. This Agreement is subject
to all terms and provisions of the Plan. In the event of a conflict between one or more provisions of this Agreement and one or more provisions of the Plan, the provisions of the Plan will govern. Capitalized terms used and not defined in this
Agreement will have the meaning set forth in the Plan. 
 18. Administrator Authority. The Administrator will have the
power to interpret the Plan and this Agreement and to adopt such rules for the administration, interpretation and 

  
 -9-

 
application of the Plan as are consistent therewith and to interpret or revoke any such rules (including, but not limited to, the determination of whether or not any Shares of Restricted Stock
have vested). All actions taken and all interpretations and determinations made by the Administrator in good faith will be final and binding upon Participant, the Company and all other interested persons. No member of the Administrator will be
personally liable for any action, determination or interpretation made in good faith with respect to the Plan or this Agreement. 
 19. Electronic Delivery and Acceptance. The Company may, in its sole discretion, decide to deliver any documents related to the Shares of Restricted Stock awarded under the Plan or future
Restricted Stock that may be awarded under the Plan by electronic means or request Participant’s consent to participate in the Plan by electronic means. Participant hereby consents to receive such documents by electronic delivery and agrees to
participate in the Plan through any on-line or electronic system established and maintained by the Company or another third party designated by the Company. 
 20. Language. If Participant has received this Agreement or any other document related to the Plan translated into a language other than English and if the meaning of the translated version is
different than the English version, the English version will control. 
 21. Captions. Captions provided herein are for
convenience only and are not to serve as a basis for interpretation or construction of this Agreement. 
 22. Agreement
Severable. In the event that any provision in this Agreement will be held invalid or unenforceable, such provision will be severable from, and such invalidity or unenforceability will not be construed to have any effect on, the remaining
provisions of this Agreement. 
 23. Amendment, Suspension or Termination of the Plan. By accepting this Award,
Participant expressly warrants that he or she has received an Award of Restricted Stock under the Plan, and has received, read and understood a description of the Plan. Participant understands that the Plan is discretionary in nature and may be
amended, suspended or terminated by the Company at any time. 
 24. Governing Law and Venue. This Agreement will be
governed by the laws of California, without giving effect to the conflict of law principles thereof. For purposes of litigating any dispute that arises under this Award of Restricted Stock or this Agreement, the parties hereby submit to and consent
to the jurisdiction of the State of California, and agree that such litigation will be conducted in the courts of San Mateo County, California, or the federal courts for the United States for the Northern District of California, and no other
courts, where this Award of Restricted Stock is made and/or to be performed. 
 25. [Appendix. Notwithstanding any
provisions in this Agreement, the Restricted Stock grant shall be subject to any special terms and conditions set forth in any appendix to this Agreement for Participant’s country (the “Appendix”). Moreover, if Participant relocates
to one of the countries included in the Appendix, the special terms and conditions for such country will apply to Participant, to the extent the Company determines that the application of such terms and

  
 -10-

 
conditions is necessary or advisable for legal or administrative reasons. The Appendix constitutes part of this Agreement.] 

26. Modifications to the Agreement. This Agreement constitutes the entire understanding of the parties on the subjects covered.
Participant expressly warrants that he or she is not accepting this Agreement in reliance on any promises, representations, or inducements other than those contained herein. Modifications to this Agreement or the Plan can be made only in an express
written contract executed by a duly authorized officer of the Company. Notwithstanding anything to the contrary in the Plan or this Agreement, the Company reserves the right to revise this Agreement as it deems necessary or advisable, in its sole
discretion and without the consent of Participant, to comply with Section 409A of the Internal Revenue Code of 1986, as amended (the “Code”) or to otherwise avoid imposition of any additional tax or income recognition under
Section 409A of the Code in connection to this Award of Restricted Stock. 
 27. Waiver. Participant acknowledges
that a waiver by the Company of breach of any provision of this Agreement shall not operate or be construed as a waiver of any other provision of this Agreement, or of any subsequent breach by Participant or any other Participant. 

  
 -11-

 EXHIBIT B 

[ANY APPLICABLE APPENDIX TO BE ADDED] 

  
 -12-

 QUALYS, INC. 
 2012 EQUITY INCENTIVE PLAN 
 STOCK OPTION AGREEMENT 

Unless otherwise defined herein, the terms defined in the Qualys, Inc. 2012 Equity Incentive Plan (the “Plan”) will have the
same defined meanings in this Stock Option Agreement, including the Notice of Stock Option Grant (the “Notice of Grant”), the Terms and Conditions of Stock Option Grant, attached hereto as Exhibit A, and the Appendix, attached
hereto as Exhibit B (all together, the “Agreement”). 
 NOTICE OF STOCK OPTION GRANT 

 

					
	Participant:	 		  	  

			
	Address:	 		  	  

			
		 		  	  

 Participant has been granted an Option to purchase Common Stock of Qualys, Inc. (the
“Company”), subject to the terms and conditions of the Plan and this Agreement, as follows: 
  

					
	Grant Number	  	  

		
	Date of Grant	  	  

		
	Vesting Commencement Date	  	  

		
	Number of Shares Granted	  	      

			
	Exercise Price per Share	  	$	  	  

			
	Total Exercise Price	  	$	  	  

		
	Type of Option	  	        Incentive Stock Option
		
		  	[X] Nonstatutory Stock Option
		
	Term/Expiration Date	  	  

 Vesting Schedule: 
 Subject to accelerated vesting as set forth below or in the Plan, this Option will be exercisable, in whole or in part, in accordance with the following schedule: 

[Twenty-five percent (25%) of the Shares subject to the Option shall vest on the one (1) year anniversary
of the Vesting Commencement Date, and one forty-eighth (1/48th) of the Shares subject 

  
 - 1 -

 
to the Option shall vest each month thereafter on the same day of the month as the Vesting Commencement Date (and if there is no corresponding day, on the last day of the month), subject to
Participant continuing to be a Service Provider through each such date.] 
 Termination Period: 

This Option will be exercisable for [three (3) months] after Participant ceases to be a Service Provider, unless such termination is
due to Participant’s death or Disability, in which case this Option will be exercisable for [twelve (12) months] after Participant ceases to be a Service Provider. Notwithstanding the foregoing sentence, in no event may this Option be
exercised after the Term/Expiration Date as provided above and may be subject to earlier termination as provided in Section 13(c) of the Plan. 
 By Participant’s signature and the signature of the Company’s representative below, Participant and the Company agree that this Option is granted under and governed by the terms and conditions
of the Plan and this Agreement, all of which are made a part of this document. Participant has reviewed the Plan and this Agreement in their entirety, has had an opportunity to obtain the advice of counsel prior to executing this Agreement and fully
understands all provisions of the Plan and Agreement. Participant hereby agrees to accept as binding, conclusive and final all decisions or interpretations of the Administrator upon any questions relating to the Plan and Agreement. Participant
further agrees to notify the Company upon any change in the residence address indicated below. 
  

					
	PARTICIPANT	 		  	QUALYS, INC.
			
	  
	 		  	  

	Signature	 		  	By
			
	  
	 		  	  

	Print Name	 		  	Title
			
	Address:	 		  	
			
	      
	 		  	
			
	  
	 		  	

  
 - 2 -

 EXHIBIT A 

TERMS AND CONDITIONS OF STOCK OPTION GRANT 
 1. Grant of Option. The Company hereby grants to the Participant named in the Notice of Grant (the “Participant”) an option (the “Option”) to purchase the number of Shares, as
set forth in the Notice of Grant, at the exercise price per Share set forth in the Notice of Grant (the “Exercise Price”), subject to all of the terms and conditions in this Agreement and the Plan, which is incorporated herein by
reference. Subject to Section 18(c) of the Plan, in the event of a conflict between the terms and conditions of the Plan and the terms and conditions of this Agreement, the terms and conditions of the Plan will prevail. 

(a) For U.S. taxpayers, the Option will be designated as either an Incentive Stock Option (“ISO”) or a Nonstatutory Stock
Option (“NSO”). If designated in the Notice of Grant as an ISO, this Option is intended to qualify as an ISO under Section 422 of the Internal Revenue Code of 1986, as amended (the “Code”). However, if this Option is
intended to be an Incentive Stock Option, to the extent that it exceeds the $100,000 rule of Code Section 422(d) it will be treated as an NSO. Further, if for any reason this Option (or portion thereof) will not qualify as an ISO, then, to the
extent of such nonqualification, such Option (or portion thereof) shall be regarded as a NSO granted under the Plan. In no event will the Administrator, the Company or any Parent or Subsidiary or any of their respective employees or directors have
any liability to Participant (or any other person) due to the failure of the Option to qualify for any reason as an ISO. 
 (b)
For non-U.S. taxpayers, the Option will be designated as an NSO. 
 2. Vesting Schedule. Except as provided in
Section 3, the Option awarded by this Agreement will vest in accordance with the vesting provisions set forth in the Notice of Grant. Shares scheduled to vest on a certain date or upon the occurrence of a certain condition will not vest in
Participant in accordance with any of the provisions of this Agreement, unless Participant will have been continuously a Service Provider from the Date of Grant until the date such vesting occurs. 

3. Administrator Discretion. The Administrator, in its discretion, may accelerate the vesting of the balance, or some lesser
portion of the balance, of the unvested Option at any time, subject to the terms of the Plan. If so accelerated, such Option will be considered as having vested as of the date specified by the Administrator. 

4. Exercise of Option. 
 (a) Right to Exercise. This Option may be exercised only within the term set out in the Notice of Grant, and may be exercised during such term only in accordance with the Plan and the terms of this
Agreement. 
 (b) Method of Exercise. This Option is exercisable by delivery of an exercise notice, in the form attached
as Exhibit C (the “Exercise Notice”) or in a manner and pursuant to such procedures as the Administrator may determine, which will state the election to exercise the Option, the number of Shares in respect of which the Option is
being exercised (the “Exercised Shares”), and such other representations and agreements as may be required by the Company pursuant to the 

  
 - 3 -

 
provisions of the Plan. The Exercise Notice will be completed by Participant and delivered to the Company. The Exercise Notice will be accompanied by payment of the aggregate Exercise Price as to
all Exercised Shares together and of any Tax-Related Items (as defined in Section 6(a)). This Option will be deemed to be exercised upon receipt by the Company of such fully executed Exercise Notice accompanied by the aggregate Exercise Price.

 5. Method of Payment. Payment of the aggregate Exercise Price will be by any of the following, or a combination
thereof, at the election of Participant: 
 (a) cash; 
 (b) check; 
 (c) consideration received by the Company under a formal cashless
exercise program adopted by the Company in connection with the Plan; or 
 (d) if Participant is a U.S. employee, surrender of
other Shares which have a Fair Market Value on the date of surrender equal to the aggregate Exercise Price of the Exercised Shares, provided that accepting such Shares, in the sole discretion of the Administrator, will not result in any adverse
accounting consequences to the Company. 
 6. Tax Obligations. 

(a) Withholding of Taxes. Notwithstanding any contrary provision of this Agreement, no certificate representing the Shares will be
issued to Participant, unless and until satisfactory arrangements (as determined by the Administrator) will have been made by Participant with respect to the payment of income, employment, social insurance, payroll tax, fringe benefit tax, payment
on account or other tax-related items related to Participant’s participation in the Plan and legally applicable to Participant (“Tax-Related Items”) which the Company determines must be withheld with respect to such Shares. If
Participant is a non-U.S. employee, payment of Tax-Related Items may not be effectuated by surrender of other Shares with a Fair Market Value equal to the amount of any Tax-Related Items. To the extent determined appropriate by the Company in its
discretion, it will have the right (but not the obligation) to satisfy any Tax-Related Items by reducing the number of Shares otherwise deliverable to Participant. If Participant fails to make satisfactory arrangements for the payment of any
required Tax-Related Items hereunder at the time of the Option exercise, Participant acknowledges and agrees that the Company may refuse to honor the exercise and refuse to deliver the Shares if such amounts are not delivered at the time of
exercise. Further, if Participant is subject to tax in more than one jurisdiction between the Date of Grant and the date of any relevant taxable or tax withholding event, as applicable, Participant acknowledges and agrees that the Company and/or
Participant’s employer (the “Employer”), or former employer, as applicable, may be required to withhold or account for tax in more than one jurisdiction. 
 (b) Notice of Disqualifying Disposition of ISO Shares. If the Option granted to Participant herein is an ISO, and if Participant sells or otherwise disposes of any of the Shares acquired pursuant
to the ISO on or before the later of (i) the date two (2) years after the Date of Grant, or (ii) the date one (1) year after the date of exercise, Participant will immediately notify the

  
 - 4 -

 
Company in writing of such disposition. Participant agrees that Participant may be subject to income tax withholding by the Company on the compensation income recognized by Participant.

 (c) Code Section 409A. Under Code Section 409A, an option that vests after December 31, 2004 (or that
vested on or prior to such date but which was materially modified after October 3, 2004) that was granted with a per share exercise price that is determined by the Internal Revenue Service (the “IRS”) to be less than the fair market
value of a share on the date of grant (a “Discount Option”) may be considered “deferred compensation.” A Discount Option may result in (i) income recognition by Participant prior to the exercise of the option, (ii) an
additional twenty percent (20%) federal income tax, and (iii) potential penalty and interest charges. The Discount Option may also result in additional state income, penalty and interest charges to Participant. Participant acknowledges
that the Company cannot and has not guaranteed that the IRS will agree that the per Share Exercise Price of this Option equals or exceeds the Fair Market Value of a Share on the Date of Grant in a later examination. Participant agrees that if the
IRS determines that the Option was granted with a per Share Exercise Price that was less than the Fair Market Value of a Share on the Date of Grant, Participant will be solely responsible for Participant’s costs related to such a determination.

 7. Rights as Stockholder. Neither Participant nor any person claiming under or through Participant will have any of
the rights or privileges of a stockholder of the Company in respect of any Shares deliverable hereunder unless and until certificates representing such Shares will have been issued, recorded on the records of the Company or its transfer agents or
registrars, and delivered to Participant. After such issuance, recordation and delivery, Participant will have all the rights of a stockholder of the Company with respect to voting such Shares and receipt of dividends and distributions on such
Shares. 
 8. No Guarantee of Continued Service. PARTICIPANT ACKNOWLEDGES AND AGREES THAT THE VESTING OF SHARES PURSUANT
TO THE VESTING SCHEDULE HEREOF IS EARNED ONLY BY CONTINUING AS A SERVICE PROVIDER AT THE WILL OF THE COMPANY (OR THE PARENT OR SUBSIDIARY EMPLOYING OR RETAINING PARTICIPANT) AND NOT THROUGH THE ACT OF BEING HIRED, BEING GRANTED THIS OPTION OR
ACQUIRING SHARES HEREUNDER. PARTICIPANT FURTHER ACKNOWLEDGES AND AGREES THAT THIS AGREEMENT, THE TRANSACTIONS CONTEMPLATED HEREUNDER AND THE VESTING SCHEDULE SET FORTH HEREIN DO NOT CONSTITUTE AN EXPRESS OR IMPLIED PROMISE OF CONTINUED ENGAGEMENT AS
A SERVICE PROVIDER FOR THE VESTING PERIOD, FOR ANY PERIOD, OR AT ALL, AND WILL NOT INTERFERE IN ANY WAY WITH PARTICIPANT’S RIGHT OR THE RIGHT OF THE COMPANY (OR THE PARENT OR SUBSIDIARY EMPLOYING OR RETAINING PARTICIPANT) TO TERMINATE
PARTICIPANT’S RELATIONSHIP AS A SERVICE PROVIDER AT ANY TIME, WITH OR WITHOUT CAUSE. 
 9. Nature of Grant. In
accepting the Option, Participant acknowledges, understands and agrees that: 

  
 - 5 -

 (a) the Plan is established voluntarily by the Company, it is discretionary in nature, and
may be amended, suspended or terminated by the Company at any time, to the extent permitted by the Plan; 
 (b) the grant of the
Option is voluntary and occasional and does not create any contractual or other right to receive future grants of options, or benefits in lieu of options, even if options have been granted in the past; 

(c) all decisions with respect to future option or other grants, if any, will be at the sole discretion of the Company; 

(d) Participant is voluntarily participating in the Plan; 
 (e) the Option and any Shares acquired under the Plan are not intended to replace any pension rights or compensation; 
 (f) the Option and Shares acquired under the Plan and the income and value of same, are not part of normal or expected compensation for purposes of calculating any severance, resignation, termination,
redundancy, dismissal, end-of-service payments, bonuses, long-service awards, pension or retirement or welfare benefits or similar payments; 
 (g) the future value of the Shares underlying the Option is unknown, indeterminable, and cannot be predicted with certainty; 
 (h) if the underlying Shares do not increase in value, the Option will have no value; 
 (i) if Participant exercises the Option and acquires Shares, the value of such Shares may increase or decrease in value, even below the Exercise Price; 

(j) for purposes of the Option, Participant’s engagement as a Service Provider will be considered terminated as of the date
Participant is no longer actively providing services to the Company or any Parent or Subsidiary (regardless of the reason for such termination and whether or not later found to be invalid or in breach of employment laws in the jurisdiction where
Participant is a Service Provider or the terms of Participant’s engagement agreement, if any), and unless otherwise expressly provided in this Agreement or determined by the Administrator, (i) Participant’s right to vest in the Option
under the Plan, if any, will terminate as of such date and will not be extended by any notice period (e.g., Participant’s period of service would not include any contractual notice period or any period of “garden leave” or
similar period mandated under employment laws in the jurisdiction where Participant is a Service Provider or Participant’s engagement agreement, if any, unless Participant is providing bona fide services during such time); and (ii) the
period (if any) during which Participant may exercise the Option after such termination of Participant’s engagement as a Service Provider will commence on the date Participant ceases to actively provide services and will not be extended by any
notice period mandated under employment laws in the jurisdiction where Participant is employed or terms of Participant’s engagement agreement, if any; the Administrator shall have the exclusive discretion to determine when Participant is no
longer actively providing services for purposes of his or her Option grant (including whether Participant may still be considered to be providing services while on a leave of absence); 

  
 - 6 -

 (k) unless otherwise provided in the Plan or by the Company in its discretion, the Option
and the benefits evidenced by this Agreement do not create any entitlement to have the Option or any such benefits transferred to, or assumed by, another company nor to be exchanged, cashed out or substituted for, in connection with any corporate
transaction affecting the Shares; and 
 (l) the following provisions apply only if Participant is providing services outside
the United States: 
  

	 	(i)	the Option and the Shares subject to the Option are not part of normal or expected compensation or salary for any purpose; 

 

	 	(ii)	Participant acknowledges and agrees that none of the Company, the Employer, or any Parent or Subsidiary shall be liable for any foreign exchange rate fluctuation
between Participant’s local currency and the United States Dollar that may affect the value of the Option or of any amounts due to Participant pursuant to the exercise of the Option or the subsequent sale of any Shares acquired upon exercise;
and 

  

	 	(iii)	no claim or entitlement to compensation or damages shall arise from forfeiture of the Option resulting from the termination of Participant’s engagement as a
Service Provider (for any reason whatsoever, whether or not later found to be invalid or in breach of employment laws in the jurisdiction where Participant is a Service Provider or the terms of Participant’s engagement agreement, if any), and
in consideration of the grant of the Option to which Participant is otherwise not entitled, Participant irrevocably agrees never to institute any claim against the Company, any Parent, any Subsidiary or the Employer, waives his or her ability, if
any, to bring any such claim, and releases the Company, any Subsidiary and the Employer from any such claim; if, notwithstanding the foregoing, any such claim is allowed by a court of competent jurisdiction, then, by participating in the Plan,
Participant shall be deemed irrevocably to have agreed not to pursue such claim and agrees to execute any and all documents necessary to request dismissal or withdrawal of such claim. 

10. No Advice Regarding Grant. The Company is not providing any tax, legal or financial advice, nor is the Company making any
recommendations regarding Participant’s participation in the Plan, or Participant’s acquisition or sale of the underlying Shares. Participant is hereby advised to consult with his or her own personal tax, legal and financial advisors
regarding his or her participation in the Plan before taking any action related to the Plan. 
 11. Data
Privacy. Participant hereby explicitly and unambiguously consents to the collection, use and transfer, in electronic or other form, of Participant’s personal data as described in this Agreement and any other Option grant materials
by and among, as applicable, the Employer, the Company and any Parent or Subsidiary for the exclusive purpose of implementing, administering and managing Participant’s participation in the Plan. 

  
 - 7 -

 Participant understands that the Company and the Employer may hold certain personal
information about Participant, including, but not limited to, Participant’s name, home address and telephone number, date of birth, social insurance number or other identification number, salary, nationality, job title, any shares of stock or
directorships held in the Company, details of all Options or any other entitlement to stock awarded, canceled, exercised, vested, unvested or outstanding in Participant’s favor (“Data”), for the exclusive purpose of implementing,
administering and managing the Plan. 
 Participant understands that Data will be transferred to a stock plan
service provider as may be selected by the Company in the future, which is assisting the Company with the implementation, administration and management of the Plan. Participant understands that the recipients of the Data may be located in the United
States or elsewhere, and that the recipient’s country (e.g., the United States) may have different data privacy laws and protections than Participant’s country. Participant understands that if he or she resides outside the United States,
he or she may request a list with the names and addresses of any potential recipients of the Data by contacting his or her local human resources representative. Participant authorizes the Company and any other possible recipients which may assist
the Company (presently or in the future) with implementing, administering and managing the Plan to receive, possess, use, retain and transfer the Data, in electronic or other form, for the sole purposes of implementing, administering and managing
Participant’s participation in the Plan. Participant understands that Data will be held only as long as is necessary to implement, administer and manage Participant’s participation in the Plan. Participant understands that if he or she
resides outside the United States, he or she may, at any time, view Data, request additional information about the storage and processing of Data, require any necessary amendments to Data or refuse or withdraw the consents herein, in any case
without cost, by contacting in writing his or her local human resources representative. Further, Participant understands that he or she is providing the consents herein on a purely voluntary basis. If Participant does not consent, or if Participant
later seeks to revoke his or her consent, his or her engagement as a Service Provider and career with the Employer will not be adversely affected; the only adverse consequence of refusing or withdrawing Participant’s consent is that the Company
would not be able to grant Participant Options or other equity awards or administer or maintain such awards. Therefore, Participant understands that refusing or withdrawing his or her consent may affect Participant’s ability to participate in
the Plan. For more information on the consequences of Participant’s refusal to consent or withdrawal of consent, Participant understands that he or she may contact his or her local human resources representative. 

12. Address for Notices. Any notice to be given to the Company under the terms of this Agreement will be addressed to the Company
at Qualys, Inc., 1600 Bridge Parkway, Redwood Shores, CA 94065, or at such other address as the Company may hereafter designate in writing. 
 13. Non-Transferability of Option. This Option may not be transferred in any manner otherwise than by will or by the laws of descent or distribution and may be exercised during the lifetime of
Participant only by Participant. 

  
 - 8 -

 14. Binding Agreement. Subject to the limitation on the transferability of this grant
contained herein, this Agreement will be binding upon and inure to the benefit of the heirs, legatees, legal representatives, successors and assigns of the parties hereto. 
 15. Additional Conditions to Issuance of Stock. If at any time the Company will determine, in its discretion, that the listing, registration, qualification or rule compliance of the Shares upon any
securities exchange or under any state, federal or foreign law, the tax code and related regulations or the consent or approval of any governmental regulatory authority is necessary or desirable as a condition to the purchase by, or issuance of
Shares to, Participant (or his or her estate) hereunder, such purchase or issuance will not occur unless and until such listing, registration, qualification, rule compliance, consent or approval will have been completed, effected or obtained free of
any conditions not acceptable to the Company. The Company will make all reasonable efforts to meet the requirements of any such state, federal or foreign law or securities exchange and to obtain any such consent or approval of any such governmental
authority or securities exchange. Assuming such compliance, for income tax purposes the Exercised Shares will be considered transferred to Participant on the date the Option is exercised with respect to such Exercised Shares. 

16. Plan Governs. This Agreement is subject to all terms and provisions of the Plan. In the event of a conflict between one or
more provisions of this Agreement and one or more provisions of the Plan, the provisions of the Plan will govern. Capitalized terms used and not defined in this Agreement will have the meaning set forth in the Plan. 

17. Administrator Authority. The Administrator will have the power to interpret the Plan and this Agreement and to adopt such
rules for the administration, interpretation and application of the Plan as are consistent therewith and to interpret or revoke any such rules (including, but not limited to, the determination of whether or not any Shares subject to the Option have
vested). All actions taken and all interpretations and determinations made by the Administrator in good faith will be final and binding upon Participant, the Company and all other interested persons. No member of the Administrator will be personally
liable for any action, determination or interpretation made in good faith with respect to the Plan or this Agreement. 
 18.
Electronic Delivery and Acceptance. The Company may, in its sole discretion, decide to deliver any documents related to Options awarded under the Plan or future options that may be awarded under the Plan by electronic means or request
Participant’s consent to participate in the Plan by electronic means. Participant hereby consents to receive such documents by electronic delivery and agrees to participate in the Plan through any on-line or electronic system established and
maintained by the Company or a third party designated by the Company. 
 19. Captions. Captions provided herein are for
convenience only and are not to serve as a basis for interpretation or construction of this Agreement. 
 20. Language.
If Participant has received this Agreement, or any other document related to the Option and/or the Plan translated into a language other than English and if the meaning of the translated version is different than the English version, the English
version will control. 

  
 - 9 -

 21. Agreement Severable. In the event that any provision in this Agreement will be
held invalid or unenforceable, such provision will be severable from, and such invalidity or unenforceability will not be construed to have any effect on, the remaining provisions of this Agreement. 

22. Amendment, Suspension or Termination of the Plan. By accepting this Award, Participant expressly warrants that he or she has
received an Option under the Plan, and has received, read and understood a description of the Plan. Participant understands that the Plan is discretionary in nature and may be amended, suspended or terminated by the Company at any time. 

23. Governing Law and Venue. This Agreement will be governed by the laws of California, without giving effect to the conflict of
law principles thereof. For purposes of litigating any dispute that arises under this Option or this Agreement, the parties hereby submit to and consent to the jurisdiction of the State of California, and agree that such litigation will be
conducted in the courts of San Mateo County, California, or the federal courts for the United States for the Northern District of California, and no other courts, where this Option is made and/or to be performed. 

24. Appendix. Notwithstanding any provisions in this Agreement, the Option grant shall be subject to any special terms and
conditions set forth in any appendix to this Agreement for Participant’s country (the “Appendix”). Moreover, if Participant relocates to one of the countries included in the Appendix, the special terms and conditions for such country
will apply to Participant, to the extent the Company determines that the application of such terms and conditions is necessary or advisable for legal or administrative reasons. The Appendix constitutes part of this Agreement. 

25. Modifications to the Agreement. This Agreement constitutes the entire understanding of the parties on the subjects covered.
Participant expressly warrants that he or she is not accepting this Agreement in reliance on any promises, representations, or inducements other than those contained herein. Modifications to this Agreement or the Plan can be made only in an express
written contract executed by a duly authorized officer of the Company. Notwithstanding anything to the contrary in the Plan or this Agreement, the Company reserves the right to revise this Agreement as it deems necessary or advisable, in its sole
discretion and without the consent of Participant, to comply with Code Section 409A or to otherwise avoid imposition of any additional tax or income recognition under Section 409A of the Code in connection with the Option. 

26. Waiver. Participant acknowledges that a waiver by the Company of breach of any provision of this Agreement shall not operate
or be construed as a waiver of any other provision of this Agreement, or of any subsequent breach by Participant or any other Participant. 

  
 - 10 -

 EXHIBIT B 

APPENDIX TO STOCK OPTION AGREEMENT 
 Terms and Conditions 
 This Appendix to Stock Option Agreement (the
“Appendix”) includes additional terms and conditions that govern the Option granted to Participant under the Plan if Participant resides in one of the countries listed below at the time of grant. Certain capitalized terms used but not
defined in this Appendix have the meanings set forth in the Plan and/or the Agreement. 
 Notifications 

This Appendix may also include information regarding exchange controls and certain other issues of which Participant should be aware with respect to
participation in the Plan. The information is based on the securities, exchange control, and other laws in effect in the respective countries as of August 2012. Such laws are often complex and change frequently. As a result, the Company strongly
recommends that Participant not rely on the information in this Appendix as the only source of information relating to the consequences of participation in the Plan because the information may be out of date at the time Participant exercises the
Option or sells Shares acquired under the Plan. 
 In addition, the information contained herein is general in nature and may not apply to
Participant’s particular situation, and the Company is not in a position to assure Participant of a particular result. Accordingly, Participant is advised to seek appropriate professional advice as to how the relevant laws in Participant’s
country may apply to Participant’s situation. 
 Finally, if Participant is a citizen or resident of a country other than the one in which
Participant is currently working, transfers employment after the Option is granted, or is considered a resident of another country for local law purposes, the notifications contained herein may not be applicable to Participant, and the Company
shall, in its discretion, determine to what extent the terms and conditions contained herein shall apply. 
 BRAZIL 

Terms and Conditions 

Compliance with Law. By accepting this Option, Participant agrees to comply with applicable Brazilian laws and to report and pay any
and all applicable Tax-Related Items associated with the exercise of the Option, the receipt of any dividends, and the sale of Shares acquired under the Plan. 
 Notifications 
 Exchange Control Information. If Participant is resident or
domiciled in Brazil, Participant will be 

  
 - 1 -

 
required to submit annually a declaration of assets and rights held outside of Brazil to the Central Bank of Brazil if the aggregate value of such assets and rights is equal to or greater than
US$100,000. Assets and rights that must be reported include Shares. 
 CANADA 
 Terms and Conditions 
 Method of Payment. Due to regulatory considerations in
Canada, Participant is prohibited from surrendering Shares that Participant already owns or attesting to the ownership of Shares to pay the Exercise Price or any Tax-Related Items in connection with the Option. 

Termination of Continuous Service. The following provision supplements Section 9(j) of the Agreement and the Termination Period set forth in
the Notice of Grant: 
 Participant’s active engagement as a Service Provider shall be considered terminated for vesting and other purposes
as of the earlier of (a) the date that Participant receives notice of termination of Participant’s engagement as a Service Provider from the Company or the Employer; or (b) the date that Participant is no longer actively providing
services to the Company or the Employer, regardless of any notice period or period of pay in lieu of such notice required under applicable employment law; the Administrator shall have the exclusive discretion to determine when Participant’s
active provision of services is terminated for purposes of the Option (including whether Participant may still be considered actively employed while on a leave of absence). 
 The following provisions apply if Participant is a resident of Quebec: 
 Language
Consent. The parties acknowledge that it is their express wish that the Agreement, as well as all documents, notices and legal proceedings entered into, given or instituted pursuant hereto or relating directly or indirectly hereto, be drawn up
in English. 
 Les parties reconnaissent avoir exigé la rédaction en anglais de la convention, ainsi que de tous documents,
avis et procédures judiciaires, exécutés, donnés ou intentés en vertu de, ou liés directement ou indirectement à, la présente convention. 

Data Privacy. Participant hereby authorizes the Company and the Company’s representatives to discuss with and obtain all relevant information
from all personnel, professional or not, involved in the administration and operation of the Plan. Participant further authorizes the Company and any Subsidiary and the Plan administrators to disclose and discuss the Plan with their advisors and to
record all relevant information and keep such information in Participant’s employee file. 

  
 - 2 -

 CZECH REPUBLIC 
 Notifications 
 Exchange Control Information. The Czech National Bank may
require Participant to fulfill certain notification duties in relation to the acquisition of Shares and the opening and maintenance of a foreign account. However, because exchange control regulations change frequently and without notice, Participant
should consult with his or her personal legal advisor prior to the exercise of the Option and the sale of Shares acquired at exercise to ensure compliance with current regulations. It is Participant’s responsibility to comply with any
applicable Czech exchange control laws. 
 GERMANY 
 Notifications 
 Exchange Control Information.
Cross-border payments in excess of €12,500 must be reported monthly to the German Federal Bank. Participant is solely responsible for obtaining the appropriate form from a German federal bank and complying with applicable reporting
requirements. 
 HONG KONG 
 Terms and Conditions 
 Restriction on Sale of Shares. Should any portion of
the Option vest within six months of the Date of Grant, Participant agrees that Participant will not dispose of the Shares acquired at exercise prior to the six-month anniversary of the Date of Grant. 

Notifications 

Securities Law Notice. WARNING: The Options offered and any Shares acquired under the Plan do not constitute a public offering of
securities under Hong Kong law and are available only to employees of the Company and any Subsidiary. The Plan, the Agreement, including this Appendix, and any other incidental communication materials distributed in connection with the Plan
(i) have not been prepared in accordance with and are not intended to constitute a “prospectus” for a public offering of securities under the applicable securities legislation in Hong Kong, (ii) have not been reviewed by any
regulatory authority in Hong Kong, and (iii) are intended only for the personal use of Employees of the Company and any Subsidiary and may not be distributed to any other person. If Participant has any questions about the contents of any
materials distributed in connection with participation in the Plan, Participant is advised to obtain independent professional advice. 

  
 - 3 -

 INDIA 
 Notifications 
 Exchange Control Notification. If Participant remits funds
outside of India to exercise the Option, it is Participant’s responsibility to comply with any applicable exchange control regulations in India. In particular, Participant will be responsible for determining whether approval from the Reserve
Bank of India is required prior to exercise or whether Participant has exhausted his or her investment limit for the relevant fiscal year. Participant further acknowledges that the purchase of Shares under the Agreement may be subject to, inter
alia, the Foreign Exchange Management Act, 1999 and the rules and regulations thereunder. Further, Participant must repatriate the proceeds from the sale of Shares acquired upon exercise of the Option to India within 90 days after receipt.
Participant must retain the foreign inward remittance certificate received from the bank where the foreign currency is deposited in the event that the Reserve Bank of India or the Employer requests proof of repatriation. It is Participant’s
responsibility to comply with these requirements. 
 JAPAN 
 Notifications 
 Exchange Control Information. If Participant pays more than
¥30,000,000 for the purchase of Shares in any one transaction, Participant must file an ex post facto Payment Report with the Ministry of Finance (through the Bank of Japan or the bank carrying out the transaction). The precise reporting
requirements vary depending on whether the relevant payment is made through a bank in Japan. If Participant intends to acquire Shares with a value in excess of ¥100,000,000 in a single transaction, Participant must also file an ex post facto
Report Concerning Acquisition of Shares with the Ministry of Finance through the Bank of Japan within 20 days of acquiring the Shares. The forms to make these reports may be acquired at the Bank of Japan. 

LITHUANIA 
 There are no country-specific
provisions. 
 LUXEMBOURG 

There are no country-specific provisions. 

MEXICO 
 Terms and Conditions

 No Entitlement or Claims for Compensation/Policy Statement. In accepting the Option, Participant expressly recognizes that the
Company, with offices at 1600 Bridge Parkway, Redwood Shores, CA 94065, U.S.A., is solely responsible for the administration of the Plan and that 

  
 - 4 -

 
participation in the Plan and acquisition of Shares does not constitute an employment relationship between Participant and the Company since Participant is participating in the Plan on a wholly
commercial basis and Participant’s sole employer is Qualys Mexico (“Qualys-Mexico”), not the Company in the United States. Based on the foregoing, Participant expressly recognizes that the Plan and the benefits that Participant may
derive from participation in the Plan do not establish any rights between Participant and the Employer, Qualys-Mexico, and do not form part of the employment conditions and/or benefits provided by Qualys-Mexico and any modification of the Plan or
its termination shall not constitute a change or impairment of the terms and conditions of Participant’s employment. 
 Participant further
understand that participation in the Plan is as a result of a unilateral and discretionary decision of the Company; therefore, the Company reserves the absolute right to amend and/or discontinue participation at any time without any liability to
Participant. 
 Finally, Participant hereby declares that he or she does not reserve any action or right to bring any claim against the Company
for any compensation or damages regarding any provision of the Plan or the benefits derived under the Plan, and Participant therefore grants a full and broad release to the Company and any Subsidiary, its shareholders, officers, agents or legal
representatives with respect to any claim that may arise. 
 Aceptando este Opción de Compra de Acciones, el participante reconoce que
la Compañía y sus oficinas registradas en 1600 Bridge Parkway Redwood Shores, CA 94065, U.S.A., es el único responsable de la administración del Plan y que la participación del participante en el mismo y la
adquisicion de Acciones no constituye de ninguna manera una relación laboral entre el participante y la Compañía, toda vez que la participación del participante en el Plan deriva únicamente de una relación
comercial con la Compañía, reconociendo expresamente que el único empleador del participante lo es Qualys Mexico (“Qualys-Mexico”), no es la Compañía en los Estados Unidos. Derivado de lo anterior, el
participante expresamente reconoce que el Plan y los beneficios que pudieran derivar del mismo no establecen ningún derecho entre el participante y su empleador, Qualys-México, y no forman parte de las condiciones laborales y/o
prestaciones otorgadas por Qualys-México, y expresamente el participante reconoce que cualquier modificación el Plan o la terminación del mismo de manera alguna podrá ser interpretada como una modificación de los
condiciones de trabajo del participante. 
 Asimismo, el participante entiende que su participación en el Plan es resultado de la
decisión unilateral y discrecional de la Compañía, por lo tanto, la Compañía. Se reserva el derecho absoluto para modificar y/o terminar la participación del participante en cualquier momento, sin ninguna
responsabilidad para el participante. 
 Finalmente, el partícipant en este acto manifiesta que no se reserva ninguna
acción o derecho para interponer una demanda o reclamación en contra de la Compañía por cualquier compensación o daño o perjuicio en relación con cualquier disposición del Plan o los beneficios
derivados del Plan y, en consecuencia, otorga un amplio y total finiquito a la Compañía, sus Afiliadas, sucursales, oficinas de representación, accionistas, directores, funcionarios, agentes y representantes con respecto a
cualquier demanda o reclamación que pudiera surgir. 

  
 - 5 -

 NETHERLANDS 
 Notifications 
 Insider Trading Information. Participant should be aware of
Dutch insider trading rules that may impact the sale of Shares acquired under the Plan. In particular, Participant may be prohibited from effecting certain transactions if he or she has insider information regarding the Company.  

By accepting the grant of the Option and participating in the Plan, Participant acknowledges having read and understood this Insider Trading Information
and further acknowledges that it is Participant’s responsibility to comply with the following Dutch insider trading rules. 
 Under Article
5:56 of the Dutch Financial Supervision Act, anyone who has “insider information” related to an issuing company is prohibited from effectuating a transaction in securities in or from the Netherlands. “Inside information” is
defined as knowledge of details concerning the issuing company to which the securities relate that is not public and which, if published, would reasonably be expected to affect the stock price, regardless of the development of the price. The insider
could be any Participant in the Netherlands who has inside information as described herein. 
 Given the broad scope of the definition of inside
information, certain Participants working in the Netherlands (including a Participant in the Plan) may have inside information and, thus, would be prohibited from effectuating a transaction in securities in the Netherlands at a time when in
possession of such inside information. If Participant is uncertain whether the insider trading rules apply to Participant, he or she should consult with a legal advisor. 
 SINGAPORE 
 Notifications 

Securities Law Information. The grant of the Option under the Plan is being made pursuant to the “Qualifying Person” exemption”
under section 273(1)(f) of the Securities and Futures Act (Chapter 289, 2006 Ed.) (“SFA”). The Plan has not been lodged or registered as a prospectus with the Monetary Authority of Singapore. Participant should note that the Option is
subject to section 257 of the SFA and that Participant will not be able to make (i) any subsequent sale of the Shares in Singapore or (ii) any offer of such subsequent sale of the Shares subject to the Option in Singapore, unless such sale
or offer is made pursuant to the exemptions under Part XIII Division (1) Subdivision (4) (other than section 280) of the SFA (Chapter 289, 2006 Ed.). 
 Director Notification Obligation. If Participant is a director, associate director or shadow director of a Subsidiary in Singapore, he or she subject to certain notification requirements under the
Singapore Companies Act. Among these requirements is an obligation to notify the Singaporean corporation in writing when Participant receives an interest (e.g., an Option, Shares) in the Company or any related companies. In addition,
Participant must notify the Singapore employer when Participant sells Shares or shares of any related company (including when Participant sell Shares acquired under the Plan). These notifications must be made within two business days of acquiring or
disposing of any interest in the Company or any related company. In addition, a notification must be 

  
 - 6 -

 
made of Participant’s interests in the Company or any related company within two business days of becoming a director. 
 Insider Trading Information. Participant should be aware of the Singapore insider trading rules, which may impact the acquisition or disposal of Shares or Options under the Plan. Under the
Singapore insider trading rules, a Participant is prohibited from selling Shares when he or she is in possession of information which is not generally available and which a Participant knows or should knows will have a material effect on the price
of Shares once such information is generally available. 
 UNITED ARAB EMIRATES 
 Notifications 
 Securities Law Information. The Plan, the Agreement, including
this Appendix, and any other incidental communication materials are intended for distribution only to Participants for the purpose of an employee incentive scheme. Participant should conduct his or her own due diligence on the Option offered
pursuant to the Agreement. If Participant does not understand the contents of the Plan and/or the Agreement, Participant should consult an authorized financial adviser. The Emirates Securities and Commodities Authority and the Dubai Financial
Services Authority have no responsibility for reviewing or verifying any documents in connection with the Plan. Further, the Ministry of the Economy and the Dubai Department of Economic Development have not approved the Plan or the Agreement nor
taken steps to verify the information set out therein, and have no responsibility for such documents. 
 UNITED KINGDOM 

Terms and Conditions 
 Joint
Election for Transfer of Liability for Employer National Insurance Contributions. As a condition of participation in the Plan and the exercise of the Option, Participant agrees to accept any liability for secondary Class 1 National Insurance
contributions that may be payable by the Company, the Employer or any Subsidiary in connection with the Option and any event giving rise to Tax-Related Items (the “Employer NICs”). Without prejudice to the foregoing, Participant agrees to
execute a joint election with the Company, the form of such joint election (the “Joint Election”) having been approved formally by Her Majesty’s Revenue and Customs (“HMRC”), and any other required consent or election prior
to exercise of the Option. Participant further agrees to execute such other joint elections as may be required between Participant and any successor to the Company, the Employer or any Subsidiary. Participant further agrees that the Company, the
Employer or any Subsidiary may collect the Employer NICs from Participant by any of the means set forth in Section 6(a) of the Agreement. 

If Participant does not enter into a Joint Election prior to the exercise of the Option, he or she will not be entitled to exercise the Option unless and
until he or she enters into a Joint Election, and no Shares will be issued to Participant under the Plan, without any liability to the Company, the Employer or any Subsidiary. 

  
 - 7 -

 Withholding of Taxes. This provision supplements Section 6(a) of the Agreement: 

If payment or withholding of the income tax due is not made within 90 days of the event giving rise to the liability or such other period specified in
Section 222(1)(c) of the U.K. Income Tax (Earnings and Pensions) Act 2003 (the “Due Date”), the amount of any uncollected tax will constitute a loan owed by Participant to the Employer, effective on the Due Date. Participant agrees
that the loan will bear interest at the then-current HMRC Official Rate, it will be immediately due and repayable, and the Company or the Employer may recover it at any time thereafter by any of the means referred to in Section 6(a) of the
Agreement. Notwithstanding the foregoing, if Participant is a director or executive officer of the Company (within the meaning of Section 13(k) of the U.S. Securities Exchange Act of 1934, as amended), Participant will not be eligible for such
a loan to cover the tax liability. In the event that Participant is a director or executive officer and the income tax due is not collected from or paid by Participant by the Due Date, the amount of any uncollected income tax will constitute a
benefit to Participant on which additional income tax and national insurance contributions will be payable. Participant will be responsible for reporting and paying any income tax and national insurance contributions due on this additional benefit
directly to HMRC under the self-assessment regime. 

  
 - 8 -

 EXHIBIT C 

QUALYS, INC. 
 2012 EQUITY INCENTIVE PLAN 
 EXERCISE NOTICE 

Qualys, Inc. 
 1600 Bridge Parkway 

Redwood Shores, CA 94065 
 Attention: Stock
Administration 
 1. Exercise of Option. Effective as of today,
            ,             , the undersigned (“Purchaser”) hereby elects to purchase
            shares (the “Shares”) of the Common Stock of Qualys, Inc. (the “Company”) under and pursuant to the 2012 Equity Incentive Plan (the “Plan”) and the
Stock Option Agreement, dated             and including the Notice of Grant, the Terms and Conditions of Stock Option Grant and the Appendix (all together, the “Agreement”). The
purchase price for the Shares will be $            , as required by the Agreement. 
 2. Delivery of Payment. Purchaser herewith delivers to the Company the full purchase price of the Shares and any Tax-Related Items (as defined in Section 6(a) of the Agreement) to be paid in
connection with the exercise of the Option. 
 3. Representations of Purchaser. Purchaser acknowledges that Purchaser has
received, read and understood the Plan and the Agreement and agrees to abide by and be bound by their terms and conditions. 

4. Rights as Stockholder. Until the issuance (as evidenced by the appropriate entry on the books of the Company or of a duly
authorized transfer agent of the Company) of the Shares, no right to vote or receive dividends or any other rights as a stockholder will exist with respect to the Shares subject to the Option, notwithstanding the exercise of the Option. The Shares
so acquired will be issued to Purchaser as soon as practicable after exercise of the Option. No adjustment will be made for a dividend or other right for which the record date is prior to the date of issuance, except as provided in Section 13
of the Plan. 
 5. Tax Consultation. Purchaser understands that Purchaser may suffer adverse tax consequences as a result
of Purchaser’s purchase or disposition of the Shares. Purchaser represents that Purchaser has consulted with any tax consultants Purchaser deems advisable in connection with the purchase or disposition of the Shares and that Purchaser is not
relying on the Company for any tax advice. 
 6. Entire Agreement; Governing Law. The Plan and Agreement are incorporated
herein by reference. This Exercise Notice, the Plan and the Agreement constitute the entire agreement of 

  
 - 9 -

 
the parties with respect to the subject matter hereof and supersede in their entirety all prior undertakings and agreements of the Company and Purchaser with respect to the subject matter hereof,
and may not be modified adversely to the Purchaser’s interest except by means of a writing signed by the Company and Purchaser. This agreement is governed by the internal substantive laws, but not the choice of law rules, of California.

  

					
	Submitted by:	  	Accepted by:	  	
			
	PURCHASER	  	QUALYS, INC.	  	
			
	      
	  	  
	  	
	Signature	  	By	  	
			
	      
	  	  
	  	
	Print Name	  	Its	  	
			
	Address:	  		  	
			
	      
	  		  	
			
	      
	  		  	
			
		  	      
	  	
		  	Date Received	  	

  
 - 10 -

Source: [{"source": "alea-institute/alea-institute/kl3m-data-edgar-agreements/train-00208-of-00352.parquet"}, [{"source": "alea-institute/alea-institute/kl3m-data-edgar-agreements/train-00208-of-00352.parquet"}]]