VHC 10-K
VirnetX Holding Corp (VHC)
10-K
2026-03-24
For: 2025-12-31
View Original
Added on
April 06, 2026
UNITED STATES SECURITIES AND EXCHANGE COMMISSION
Washington, D.C. 20549
FORM 10-K
(Mark One)
| ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934 |
For the fiscal year ended December 31 , 2025
or
| TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934 |
Commission File Number: 001-33852
(Exact name of registrant as specified in its charter)
| | | |
| (State or other jurisdiction of incorporation or organization) | (I.R.S. Employer Identification No.) | |
| | | |
| (Address of principal executive offices) | (Zip Code) |
Registrant’s telephone number, including area code: (775 ) 548-1785
Former name, former address and former fiscal year, if changed since last report: N/A
Securities registered pursuant to Section 12(b) of the Act:
| Title of each class | Trading Symbol(s) | Name of each exchange on which registered |
| | | |
Securities registered pursuant to Section 12(g) of the Act:
None
Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☐ No ☒
Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ☐ No ☒
Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐
Indicate by check mark whether the registrant has submitted electronically, every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§ 232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes ☒ No ☐
Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, smaller reporting company, or an emerging growth company. See the definitions of “large
accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.
| Large accelerated filer ☐ | Accelerated filer ☐ | |
| Emerging growth company | Smaller reporting company |
If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards
provided pursuant to Section 13(a) of the Exchange Act. ☐
Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☐
If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐
Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the
relevant recovery period pursuant to §240.10D-1(b). ☐
Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes ☐ No ☒
The aggregate market value of the voting and non-voting common equity held by non-affiliates of the registrant as of June 30, 2025, was $39,108,260 based upon the closing price of the common shares of the registrant on June 30, 2025. This calculation does not reflect a determination that certain persons are affiliates of the registrant for any other purpose.
DOCUMENTS INCORPORATED BY REFERENCE
The information required by Part III of this Annual Report on Form 10-K, to the extent not set forth herein, is incorporated by reference from the registrant’s definitive proxy
statement to be filed with the Securities and Exchange Commission not later than 120 days after December 31, 2025 relating to the registrant’s 2026 Annual Meeting of Stockholders.
|
Page
|
||
|
PART I
|
||
|
Item 1.
|
2
|
|
|
Item 1A.
|
4
|
|
|
Item 1B.
|
15
|
|
|
Item 1C.
|
15
|
|
|
Item 2.
|
17
|
|
|
Item 3.
|
17
|
|
|
Item 4.
|
17
|
|
|
PART II
|
||
|
Item 5.
|
17
|
|
|
Item 6.
|
18
|
|
|
Item 7.
|
18
|
|
|
Item 7A.
|
23
|
|
|
Item 8.
|
24
|
|
|
Item 9.
|
43
|
|
|
Item 9A.
|
43
|
|
|
Item 9B.
|
44
|
|
|
Item 9C.
|
44
|
|
|
PART III
|
||
|
Item 10.
|
44
|
|
|
Item 11.
|
44
|
|
|
Item 12.
|
44
|
|
|
Item 13.
|
45
|
|
|
Item 14.
|
45
|
|
|
PART IV
|
||
|
Item 15.
|
45
|
SPECIAL NOTE REGARDING FORWARD LOOKING STATEMENTS
We have included or incorporated by reference in this Annual Report on Form 10-K (this Report), and from time to time we may make statements that may constitute “forward-looking statements” within
the meaning of Section 27A of the Securities Act of 1933, as amended (the Securities Act), and Section 21E of the Securities Exchange Act of 1934, as amended (the Exchange Act). These forward-looking statements are based upon our current
expectations, estimates, assumptions, and beliefs concerning future events and conditions and may discuss, among other things, anticipated future performance (including sales and earnings), products and services, expected growth, future business
plans and costs (including investments, partnerships and collaborations, marketing and business development, staffing strategies and entering into another sector), the impact of potential litigation, our beliefs and statements regarding general
industry and market conditions and growth rates, as well as general domestic and international economic conditions. Any statement that is not historical in nature is a forward-looking statement and may be identified by the use of words and phrases
such as “anticipates,” “believes,” “estimates,” “expects,” “intends,” “plans,” “predicts,” “projects,” “will be,” “will continue,” “will likely result in,” and similar expressions. Readers are cautioned not to place undue reliance on forward-looking
statements. Forward-looking statements are necessarily subject to risks, uncertainties, and other factors, many of which are outside our control, which could cause actual results to differ materially from such statements and from our historical
results and experience. These risks, uncertainties and other factors include, but are not limited to those described in Item 1A – Risk Factors of this Report and elsewhere in this Report and those described from time to time in our reports filed with
the Securities and Exchange Commission (SEC). Readers are cautioned that it is not possible to predict or identify all the risks, uncertainties and other factors that may affect future results and that the risks described herein should not be
considered a complete list. Any forward-looking statement speaks only as of the date on which such statement is made, and we undertake no obligation to update or revise any forward-looking statement, whether as a result of new information, future
events or otherwise.
Among others, the forward-looking statements appearing in this Report that may not occur include statements that pertain to the activities we have undertaken to commercialize our service offerings,
products and patent portfolio in and outside of the United States including VirnetX One™, War Room™, VirnetX Matrix™, and our Secured Domain Name Registry and Technology. These statements may imply that the worldwide market for our commercialized
products is large and will result in significant future revenue for us. However, commercialization of products such as ours is subject to significant obstacles and risks that may delay or prevent future revenues for us. Our 2025 revenue-generating
subcontractor activity under a U.S. Department of Defense contract, which may imply that such activities will lead to material future revenue. However, future revenue is subject to significant uncertainties and may not occur. Our 2025 activities were
limited in scope to a specific subcontract engagement, and we have no assurance of receiving follow-on work. Future opportunities, if any, are subject to factors beyond our control, including government funding, procurement processes, and the needs
and priorities of prime contractors and U.S. government agencies.
EXCEPT AS REQUIRED BY LAW, WE UNDERTAKE NO OBLIGATION TO UPDATE OR REVISE ANY FORWARD-LOOKING STATEMENT AS A RESULT OF NEW INFORMATION, FUTURE EVENTS OR OTHERWISE.
PART I
| Item 1. |
Business
|
The Company
VirnetX Holding Corporation (“Company”, “we”, “us”, or “our”) is an Internet security software and technology company with patented cybersecurity solutions that are designed to
ensure resilient, secure communications across any network or device.
Our flagship platform, VirnetX One™, is built on Zero Trust Network Access (ZTNA) principles and extends our patented Secure Domain Name System (SDNS) technology to establish end-to-end encrypted communications on
demand, regardless of user location or endpoint. VirnetX One™ operates as a security-as-a-service platform and may be deployed in cloud, on-premise, or hybrid enterprise environments. The platform is designed to protect applications, services, and
infrastructure by providing an additional security layer that integrates with existing systems to reduce exposure to evolving cyber threats affecting data, operating systems, infrastructure components, and gateway security controllers.
VirnetX Matrix™ leverages the VirnetX One™ platform to secure communications using encrypted, identity-based access controls, including in contested or high-risk environments. It is designed to
protect internet-enabled enterprise applications, connected devices, and control systems, such as file servers, data backup systems, and VPN or firewall environments. VirnetX Matrix™ is intended to be deployed without requiring material changes to an
enterprise’s existing infrastructure and provides centralized visibility and policy enforcement to address unauthorized access and evolving attack techniques.
VirnetX War Room™ also built on the VirnetX One™ platform, provides secure collaboration and visualization capabilities designed to support sensitive, unclassified but secure communications. The platform enables
controlled access to virtual meeting environments by validating user and device permissions prior to granting access. VirnetX War Room™ is intended for use cases where confidentiality and access control are critical, including government, law
enforcement, legal, financial, and healthcare environments.
Our products, including VirnetX One™, VirnetX Matrix™, and VirnetX War Room™, are designed to support U.S. Department of Defense (DoD), federal government, and commercial customers requiring real-time encrypted
communications and network security. We believe our solutions are applicable across a range of public and private sector markets, including critical infrastructure, law enforcement, healthcare, financial services, legal services, energy, and related
industries. We pursue sales opportunities nationwide and engage with universities and academic institutions to support research collaboration, workforce development, and technology transition initiatives.
We also support international sales of our commercial products in compliance with applicable U.S. export control laws and regulations, including the International Traffic in Arms Regulations (ITAR)
and the Export Administration Regulations (EAR). Our compliance processes are designed to ensure that international transactions adhere to export control requirements while supporting authorized global customers.
Our technology roadmap addresses the continued growth of Internet of Things (IoT) and edge computing environments. We are extending secure networking capabilities to resource-constrained devices
through obfuscated and lightweight security mechanisms designed to protect communications without exposing underlying security processes. These efforts support secure identity, trust enforcement, and encrypted communications for distributed and
edge-based systems.
We are developing a federated, hybrid mesh network architecture designed with security as a foundational element. This approach incorporates dynamic trust evaluation, autonomous recovery, and
distributed decision-making to enhance network resilience and adaptability. We believe this architecture aligns with broader industry trends toward decentralized and resilient network models.
To support system design and evaluation, we employ Model-Based Systems Engineering (MBSE) and agent-based modeling methodologies. These approaches enable simulation and analysis of complex systems,
including cyber-physical environments and adaptive networks, and support assessment of system behavior under evolving threat conditions.
We have undertaken efforts to align certain services with the Department of Defense's Digital Engineering (DE) strategy. These services are intended to support cybersecurity integration across
system design, command and control, battle management, and sensor orchestration, and to enhance our MBSE and cyber threat assessment capabilities. Our Dynamic Trust Evaluation (DTE) methods are designed to enforce trust policies throughout system
lifecycles, and our cyber threat intelligence and assessment services provide structured analysis of cyber risks and vulnerabilities.
We intend to make available digital engineering, cyber MBSE, and cyber threat intelligence services to federal, state, and local government agencies, subject to applicable contracting requirements.
These services include cybersecurity-focused system design support, advanced modeling of communication flows and threat boundaries, and structured cyber risk assessment methodologies.
We are developing a Center for Advanced Software and Hardware Integration at our Farmington, Utah facility, that incorporates artificial
intelligence (AI) and digital twin technologies alongside our Software-Defined Networks (SDN) capabilities. This facility is intended to support development and integration of secure, adaptive software solutions. We have entered into strategic
relationships, including an investment in L2 Holdings, LLC (OmniTeq), an AI/Machine Learning (ML) solutions provider, and cooperative agreements, including a Cooperative Research and Development Agreement
(CRADA) with the Air Force Research Laboratory, Intelligence Systems Directorate (AFRL/RI). The CRADA focuses on cybersecurity and Zero Trust Network Access (ZTNA)-related technologies, extends through 2030, and supports collaboration in areas
relevant to defense and intelligence operations.
We hold a Multiple Award Schedule (MAS), enabling streamlined procurement of our products and services by federal, state, and local government customers. We have also obtained Department of
Defense's Joint Certification Program (DD Form 2345) certifications for our facilities in Zephyr Cove, Nevada, and Farmington, Utah, which permit access to certain unclassified technical data subject to export controls. These certifications support
our ability to engage with government and defense customers while maintaining compliance with applicable handling and security requirements.
Our intellectual property portfolio is a core component of our business. We own U.S. and foreign patents, as well as pending patent applications, that are primarily directed to securing real-time communications over
the Internet and related services. These patents underpin our technology and products. Certain portions of this portfolio were acquired by our principal operating subsidiary, VirnetX, Inc., from Leidos, Inc. in 2006.
Our employees include the core development team behind our inventions, technology, and software. Some members of this team have worked together for over twenty years and were on the same team that invented and
developed this technology while working at Leidos, Inc. The team has continued its research and development work to refine our unique network security technology and make it more secure and easy to deploy.
Employees and Human Capital
As of December 31, 2025, we had 21 full and part time employees, most of whom work remotely. We have had a work-from-home workforce since our inception. The emphasis of our employees is on our
technology research and product development with 13 employees focused on this effort. Our team has been working on enhancing our products and adding new functionality.
In addition to our regular employees, we also engage with consultants on a regular basis. These consultants can be involved in our product development, customer relations, legal, and/or regulatory
compliance and reporting. We have experienced low employee turnover rates over the years with both employees and consultants participating in our equity incentive plan.
Available Information
We file or furnish various reports, such as registration statements, periodic and current reports, proxy statements, and other materials with the SEC. Our website address is http://www.virnetx.com.
You may obtain, free of charge on our website, copies of our annual reports on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the
Exchange Act, as soon as reasonably practicable after we electronically file such material with, or furnish it to, the SEC. The information we post is intended for reference purposes only; none of the information posted on our website is part of this
report or incorporated by reference herein.
The SEC also maintains website at http://www.sec.gov that contains reports, proxy and other information statements, and other information regarding issuers, including us, that file electronically
with the SEC.
| Item 1A. |
Risk Factors
|
Our operations and financial results are subject to various risks and uncertainties, including those described below, which could adversely affect our business, financial condition, results of
operations, cash flows, and the trading price of our common and capital stock. You should carefully consider the risks and uncertainties described below in addition to the other information set forth in this Report, including in “Management’s
Discussion and Analysis of Financial Condition and Results of Operations” and our consolidated financial statements and related notes, before making any investment in our common stock. The risks and uncertainties described below are not the only ones
we face. Additional risks and uncertainties not presently known to us or that we currently believe to be immaterial may also adversely affect our business. If any of these risk factors occur, you could lose substantial value or your entire investment
in our shares.
Risks Related to Our Business and Our Financial Reporting
Our operating results may not be consistent and may be difficult to predict, and we may not be able to achieve or sustain profitability in the future.
We had a net loss of $18.2 million for the year ended December 31, 2025 and a net loss of $18.2 million for the year ended December 31, 2024. As of December 31, 2025, we had an accumulated deficit
of $222.9 million.
Our operating results have fluctuated in the past due to several factors and may fluctuate in the future due to the same or similar factors, which include but are not limited to the following:
| • |
Time and resources required to accelerate transition to new product development and sales strategies targeting large enterprises, government customers, service provider partnerships;
|
| • |
Customer acceptance of our DE, DTE methods, MBSE and Cyber Threat Assessment services;
|
| • |
Establishing and maintaining relationships with third parties to integrate our family of cybersecurity products and services into their operations and develop solutions key to the defense
market, critical infrastructure, and threat intelligence service;
|
| • |
Customer adoption of our VirnetX One™ platform and software products and services;
|
| • |
The number of product license sales of VirnetX War Room™, VirnetX Matrix™ and associated services;
|
| • |
Adoption of VirnetX OneTM platform by third party application providers of secure communications;
|
| • |
Intensely competitive market with established companies that have larger customer bases, and greater resources than we do;
|
| • |
Prolonged economic uncertainties or downturns, globally or in certain regions or industries, could materially adversely affect our business; and
|
| • |
Government export and import control regulations on selling products with encryption technology in certain international markets.
|
These fluctuations may make our business particularly difficult to manage, adversely affect our business and operating results, make our operating results difficult for investors to predict and,
further, cause our results to fall below investor’s expectations and adversely affect the market price of our common stock. If we fail to increase our revenue, we may not achieve or sustain profitability in the future.
Our success depends in part on establishing and maintaining relationships with third parties to incorporate our products and services into their operations.
Our business strategy is to enter into partnerships, strategic investments, and other cooperative arrangements with other companies and government agencies.
We have invested in and we continue to seek to invest in or acquire businesses, technologies, or other assets that we believe could complement or expand our business. In addition, we are regularly involved in cooperative efforts with respect to the
incorporation of our products into products of others and vice versa, collaborative research and development efforts with government and university laboratories, distributor and reseller arrangements and service provider partnerships. These
relationships are generally non-exclusive, and some of our partners also have cooperative relationships with certain of our competitors or offer some products and services that are competitive with ours. If we lose third-party relationships, if these
relationships are not commercially successful, or if we are unable to enter into third-party relationships on commercially reasonable terms in the future, our business could be negatively impacted.
We expect that we will experience long and unpredictable sales cycles, which may impact our operating results.
The sales cycle between initial customer contact and the execution of a contract or license agreement with a customer or purchaser of our products can vary widely. We expect that our sales cycles
will be long and unpredictable due to several factors, including but not limited to:
| • |
The need to educate potential customers about our product and service capabilities;
|
| • |
Our customers’ budgetary constraints and timing of their budget cycles;
|
| • |
Delays caused by time-consuming internal review processes customary with potential customers including large government agencies and institutions in the space and defense industries; and
|
| • |
Long sales cycles may increase the risk that our financial resources are exhausted before we are able to generate significant revenue.
|
In addition, potential customers of our products include local, state, federal and foreign government agencies, as well as institutions in the space and defense industries. Sales processes to government authorities
can be extensive and unpredictable. Government authorities generally have complex budgeting, purchasing, and regulatory processes that govern their capital spending, and their spending is likely to be adversely impacted by economic conditions. In
addition, in many instances, sales to government authorities may require field trials and may be delayed by the time it takes for government officials to evaluate multiple competing bids, negotiate terms, and award contracts.
For these reasons, the sales cycle associated with our products is subject to a number of significant risks that are beyond our control. Consequently, if customer orders are delayed or not
realized, our revenues and results of operations could be materially and adversely affected.
We plan to offer our products to government entities, which are subject to a number of challenges and risks.
Government entities have announced reductions in, or experienced increased pressure to reduce, government spending. Continued U.S. debt, income tax and budget issues, government shutdowns and
delays in approving U.S. spending or reductions in such may adversely impact existing or future U.S. public sector transactions and affect future sales of our products and services to such entities. Additionally, any future government demand and
payment for our products may be more volatile as they are affected by public sector budgetary cycles, funding authorizations, and the potential for funding reductions or delays, making the time to close such transactions more difficult to predict.
In addition, sales to government entities are subject to a number of risks. Government entities may continue use of legacy products and services indefinitely and be slow to transition to more
modern products and services, including ours, or impose challenging regulatory requirements on such adoptions, any of which may inhibit the growth of our public sector business. Selling to government entities can be highly competitive, expensive and
time consuming, often requiring significant upfront time and expense without any assurance that we will successfully sell our products to such governmental entity. Government entities may require contract terms that differ from our standard
arrangements or require the maintenance of certain facility and employee security clearance, which may be difficult to obtain or maintain.
Our business could be adversely affected if our employees cannot obtain and maintain required personnel security clearances or we cannot establish and
maintain a required facility security clearance.
Certain government contracts may require our employees to maintain various levels of security clearances and may require us to maintain a facility security clearance to comply with U.S. and
international government agency requirements. Many governments have strict security clearance requirements for personnel who perform work in support of classified programs. Obtaining and maintaining security clearances for employees typically
involves a lengthy process, and it can be difficult to identify, recruit, and retain employees who already hold security clearances. If our employees are unable to obtain security clearances in a timely manner, or at all, or if our employees who hold
security clearances are unable to maintain their clearances or terminate employment with us, then we may be unable to bid on or win new classified contracts. To the extent we are not able to obtain or maintain a facility security clearance, we may
not be able to bid on or win classified contracts, which would have an adverse impact on our business, financial condition, and results of operations.
We have limited technical resources and are at an early stage in commercialization of our VirnetX One™ platform and software products, as well as our DE, DTE
methods, MBSE, and cyber threat assessment services.
Part of our business includes the internal development of commercial products we seek to monetize. This aspect of our business may require significant capital, time and resources and we cannot
guarantee that it will be successful or meet our expectations. Based on the scale of our technical resources, our limited historical financial data upon which to base our projected revenue or planned operating expenses related to our software
products and services, we may not be able to effectively:
| • |
Implement an effective marketing strategy to promote awareness of our products and services;
|
| • |
Attract and retain customers for our products and services;
|
| • |
Generate revenues or profit from product sales;
|
| • |
Provide appropriate levels of customer training and technical support for our products;
|
| • |
Rapidly anticipate and adapt to changes in the market and evolving customer requirements; and
|
| • |
Protect our products from any system failures or other breaches.
|
In addition, a high percentage of our expenses are and will continue to be fixed. Accordingly, if we do not generate revenue as and when anticipated, our losses may be greater than expected and our
operating results will suffer.
The market in which we participate is intensely competitive, and if we do not compete effectively, our operating results could be harmed.
The market for ZTNA security solutions is rapidly evolving and highly competitive as new entrants and traditional network solutions companies offer cloud-based cybersecurity solutions. Competition
in our business is highly diverse, and while our competitors offer different products and services, there is often competition for contracts that are part of government budgets. We also may face competition from companies that provide products and
services to the U.S. Government, including defense contractors.
Many of our competitors and potential competitors have established brand recognition, larger customer bases, and greater resources than we do. Our primary competitors in the ZTNA market include
Appgate, Cloudflare, and Illumio. In the enterprise market, our primary competitors include Zscaler (ZPA), Palo Alto Networks (Prisma Access), Cisco (Umbrella), Citrix (Secure Private Access), Netskope (Private Access for ZTNA) and Cato Networks. As
we expand our product offerings and use cases, we will begin to compete with companies that offer bundled security-as-a-service solutions that include Secure Access Service Edge (SASE) and Security Service Edge (SSE). With the introduction of new
technologies and market entrants, we expect competition to intensify in the future. For example, disruptive technologies such as generative AI has and may continue to fundamentally alter the market for our services in unpredictable ways and reduce
customer demand. If we fail to compete effectively, our business will be harmed. Some of our competitors offer their products or services at lower prices or for free as part of a broader bundled product sale or enterprise license arrangement, which
has placed pricing pressure on our business. If we are unable to achieve our target pricing levels, our operating results will be negatively impacted. For us to compete effectively, we need to introduce new products and services in a timely and
cost-effective manner, meet customer expectations and needs at prices that customers are willing to pay, and continue to enhance the features and functionalities of our cloud content management platform. In addition, pricing pressures and increased
competition could result in reduced sales, lower margins, losses, or the failure of our services to achieve or maintain widespread market acceptance, any of which could harm our business.
Many of our competitors are able to devote greater resources to the development, promotion and sale of their products or services. In addition, many of our competitors have established marketing
relationships and major distribution agreements with government agencies, channel partners, consultants, system integrators, and resellers. Competitors may offer products or services at lower prices or with greater depth than our services. Our
competitors may be able to respond more quickly and effectively to new or changing opportunities, technologies, standards, or customer requirements. Furthermore, some potential customers, particularly large enterprises, may elect to develop their own
internal solutions. In addition, the U.S. government and foreign governments may develop, construct, launch and operate their own ZTNA security solutions with capabilities comparable or similar to ours, which could reduce their need to rely on us and
other commercial suppliers. For any of these reasons, we may not be able to compete successfully against our competitors.
Our products are highly technical and may contain undetected errors, which could cause harm to our reputation and adversely affect our business.
Our products are highly technical and complex and, when deployed, may contain errors or defects. Despite testing, some errors in our products may only be
discovered after a product has been installed and used by customers. Any errors or defects discovered in our products after commercial release could result in failure to achieve market acceptance, loss of revenue or delay in revenue recognition, loss
of customers and increased service and warranty cost, any of which could adversely affect our business, operating results, and financial condition. In addition, we could face claims for product liability, tort, or breach of warranty, including claims
relating to changes to our products made by our channel partners. The performance of our products could have unforeseen or unknown adverse effects on the networks over which they are delivered as well as on third-party applications and services that
utilize our services, which could result in legal claims against us harming our business. Furthermore, we expect to provide implementation, consulting, and other technical services in connection with the implementation and ongoing maintenance of our
products, which typically involves working with sophisticated software, computing, and communications systems. We expect that our contracts with customers will contain provisions relating to warranty disclaimers and liability limitations, which may
not be upheld. Defending a lawsuit, regardless of its merit, is costly and may divert management’s attention and adversely affect the market’s perception of us and our products. In addition, if our business liability insurance coverage proves
inadequate or future coverage is unavailable on acceptable terms or at all, our business, operating results, and financial condition could be adversely impacted.
Malfunctions of third-party communications infrastructure, hardware and software expose us to a variety of risks that we cannot control.
Our business will depend upon, among other things, the capacity, reliability, security, and unimpeded access of the infrastructure owned by third parties that we will use to deploy our offerings.
We have no control over the operation, quality, or maintenance of a significant portion of that infrastructure or whether those third parties will upgrade or improve their equipment. We depend on these companies to maintain the operational integrity
of our connections. If one or more of these companies is unable or unwilling to supply or expand their levels of service to us in the future, our operations could be severely interrupted.
System failure or interruption or our failure to meet increasing demands on our systems could harm our business.
The success of our license and service offerings will depend on the uninterrupted operation of various systems, secure data centers and other computer and communication networks that we establish.
To the extent, the number of users of networks utilizing our future products suddenly increases, the technology platform and hosting services which will be required to accommodate a higher volume of traffic may result in slower response times,
service interruptions or delays or system failures. Our systems and operations will also be vulnerable to damage or interruption from, among other things:
| • |
Power loss, transmission cable cuts, and other telecommunications failures;
|
| • |
Damage or interruption caused by fire, earthquake, and other natural disasters;
|
| • |
Computer viruses, electronic break-ins, sabotage, vandalism, or software defects; and
|
| • |
Physical or electronic break-ins, sabotage, intentional acts of vandalism, terrorist attacks, and other events beyond our control.
|
System interruptions or failures and increases or delays in response time could result in a loss of potential or existing users and, if sustained or repeated, could reduce the appeal of the
networks to users. These types of occurrences could cause users to perceive that our solution does not function properly and could therefore adversely affect our ability to attract and retain licensees, strategic partners, and customers, and result
in lost revenue, customer dissatisfaction, or lawsuits against us.
If we are not able to adequately protect our patent rights and trade secrets, our business would be negatively impacted.
We believe our patents are valid, enforceable, and valuable. Notwithstanding this belief, third parties may make claims of infringement with respect to our
products or services or invalidity claims with respect to our patents or become aware of our trade secrets by way of leaks from bad actors within or outside of our employee base or otherwise, and such claims could give rise to material cost for
defense or settlement or both, and such claims or leaks could jeopardize or substantially delay a successful outcome of litigation we are or may become involved in, divert resources away from our other activities, limit or cease our related revenues,
or otherwise materially and adversely affect our business. Even if we are successful in protecting our intellectual property rights, they may not ultimately provide us with any competitive advantages and may be less valuable than we currently expect.
These risks may be heightened in countries other than the United States where laws regarding patent protection are less developed and may be negatively affected by the fact that legal standards in the United States and elsewhere for protection of
intellectual property rights in Internet-related businesses are uncertain and still evolving. In addition, there are a significant number of United States and foreign patents and patent applications in our areas of interest, and we expect that
significant litigation in these areas will continue and will add uncertainty to the value of certain patents and other intellectual property rights in our areas of interest. If we are unable to protect our intellectual property rights or otherwise
realize value from them, our business would be negatively affected.
If we experience security breaches or incidents, we could be exposed to liability and our reputation and business could suffer.
We face security threats from malicious third parties that could obtain unauthorized access to our systems, network, and data. We expect to retain certain confidential and proprietary customer information in our secure
data centers and secure domain name registry, as well as personal data and other confidential and proprietary information relating to our business. It will be critical to our business strategy that our facilities and infrastructure, including our
secure domain name servers, remain secure and are perceived by the marketplace to be secure. Our secure domain name registry operations will also depend on our ability to maintain our computer and telecommunications equipment in effective working
order and to reasonably protect our systems against interruption, and potentially depend on protection by other registrars in the shared registration system. Additionally, we maintain confidential and proprietary business information, including trade
secrets. We expect to continue to have to expend significant time and money to maintain or increase the security of our products, facilities, and infrastructure. Security technologies are constantly being tested by computer professionals, academics
and “hackers.” Advances in computer capabilities and the techniques for attacking security solutions, new discoveries in the field of cryptography or other events or developments could result in compromises or breaches of our security measures and
could make some or all our products obsolete or unmarketable. Likewise, we may need to dedicate engineering and other resources to mitigate or eliminate security vulnerabilities and may find it necessary or appropriate to repair or replace products
already sold or licensed to our customers. Despite the security measures that we and our service providers utilize, our infrastructure and that of our service providers may be vulnerable to physical break-ins, ransomware, computer viruses, other
malicious code attacks by hackers, phishing attacks, social engineering, or similar disruptive problems. There can be no assurances our security measures or those of our service providers will prevent security breaches or incidents. Any disruption or
security breach or incident that we or our service providers suffer or are perceived to suffer, including any such disruption, breach or incident resulting in a loss of, or damage to, data or systems, or inappropriate disclosure, access, loss, or
other processing of confidential, financial, proprietary or personal information, including data related to our personnel, could result in loss, disclosure or other unauthorized processing of such data, could delay our research and development or
commercialization efforts, could compel us to comply with breach notification laws and regulations, subject us to mandatory corrective action, and otherwise subject us to liability under laws and regulations that protect the privacy and security of
personal information. It is possible that we may have to expend additional financial and other resources to address such problems. Remote work by our personnel and those of third parties has resulted in increased vulnerability to cyber-attacks.
Additionally, during times of war and other geopolitical tensions and conflicts may create increased risks of cyber-attacks. As a provider of Internet security software and technology, we may be the target of dedicated
efforts by hackers and other third parties to overcome or defeat our security measures. Any physical or electronic break-in or other security breach or incident or compromise impacting our products, or any information stored at our secure data
centers and domain name registration systems, including any compromise due to human error or employee or contractor malfeasance, may jeopardize the security of information stored on our premises or in the computer systems and networks of our
customers. Additionally, any such data security incident, or the perception that one has occurred could also result in adverse publicity, harm to our reputation and competitive position, and therefore adversely affect the market’s perception of the
security of electronic commerce and communications over IP networks as well as the security or reliability of our services, which could have a material adverse impact on our business, financial condition, and results of operations.
A security breach or other security incident, or the perception any such event has occurred, could require a substantial level of financial resources to address and otherwise respond to, may be
difficult to identify or address in a timely manner, and could result in claims, investigations, inquiries, and other proceedings or actions by private parties or governmental entities that may divert management’s attention and require the
expenditure of significant time and resources, and which may cause us to incur substantial fines, penalties, or other liability and related legal and other costs. Cybersecurity risks pose a particularly significant risk to our business given our
focus on providing internet security software and secure communications technology. Any actual or perceived security breach or other security incident may also harm our reputation, result in a loss of customers, and make it more difficult or
impossible for us to successfully market to others. Any of the foregoing matters could harm our business, operating results, and financial condition.
Our products are subject to governmental export and import controls that could subject us to liability or impair our ability to compete in
international markets.
Because we incorporate encryption technology into our products, certain of our products are subject to U.S. export controls and may be exported outside the U.S. only with the required export
license or through an export license exception. If we were to fail to comply with U.S. export licensing requirements, U.S. customs regulations, U.S. economic sanctions, or other laws, we could be subject to substantial civil and criminal penalties,
including fines, incarceration for responsible employees and managers, and the possible loss of export or import privileges. Obtaining the necessary export license for a particular sale may be time-consuming and may result in the delay or loss of
sales opportunities. Furthermore, U.S. export control laws and economic sanctions prohibit the shipment of certain products to U.S. embargoed or sanctioned countries, governments, and persons. Even though we take precautions to ensure that we
comply with all relevant regulations, any failure by us or any partners to comply with such regulations could have negative consequences for us, including reputational harm, government investigations, and penalties.
In addition, various countries regulate the import of certain encryption technology, including through import permit and license requirements, and have enacted laws that could limit our ability to
distribute our products or could limit our end-customers’ ability to implement our products in those countries. Changes in our products or changes in export and import regulations may create delays in the introduction of our products into
international markets, prevent our end-customers with international operations from deploying our products globally or, in some cases, prevent or delay the export or import of our products to certain countries, governments, or persons altogether. Any
change in export or import regulations, economic sanctions, or related legislation, shift in the enforcement, or scope of existing regulations, or change in the countries, governments, persons, or technologies targeted by such regulations, could
result in decreased use of our products by, or in our decreased ability to export or sell our products to, existing or potential end-customers with international operations. Any decreased use of our products or limitation on our ability to export to
or sell our products in international markets would likely adversely affect our business, financial condition, and results of operations.
Privacy and data security concerns, data collection, and transfer restrictions and related domestic or foreign regulations may limit the use and adoption of
our solutions and adversely affect our business.
Personal privacy, information security, and data protection are significant issues in the United States, Europe, and many other jurisdictions where we have operations or offer our products. The
regulatory framework governing the collection, processing, storage and use of confidential and proprietary business information and personal data is rapidly evolving. The United States federal, various state and foreign governments have adopted or
proposed requirements regarding the collection, distribution, use, security, storage, and other processing of personal information and other data relating to individuals, and federal and state consumer protection laws are being applied to enforce
regulations related to the online collection, use and dissemination of data.
Further, many foreign countries and governmental bodies, including the European Union (EU), where we conduct business, have laws and regulations concerning
the collection and use of personal data obtained from their residents or by businesses operating within their jurisdiction. These laws and regulations often are more restrictive than those in the United States. Laws and regulations in these
jurisdictions apply broadly to the collection, use, storage, disclosure, and security of data that identifies or may be used to identify or locate an individual.
We also expect that there will continue to be new proposed laws, regulations and industry standards concerning privacy, data protection and information security in the United States, the EU, and
other jurisdictions. For example, the European Commission maintains a General Data Protection Regulation (the GDPR) that imposes stringent data protection requirements and provides for substantial penalties for noncompliance. The United Kingdom has
enacted a Data Protection Act and legislation referred to as the UK GDPR that substantially implements the GDPR and provides for a penalty regime similar to the GDPR. The United Kingdom made targeted amendments to the Data Protection Act and the UK
GDPR in the UK Data (Use and Access) Act, effective June 19, 2025. We may be required to incur substantial expense in order to make significant changes to our products and operations to address compliance with the GDPR and similar legislation, such
as the UK GDPR and UK Data Protection Act, all of which may adversely affect our revenue and product sales. California has enacted legislation, the California Consumer Privacy Act (CCPA) that, among other things, requires covered companies to provide
disclosures to California consumers, and afford such consumers abilities to opt-out of certain sales of personal information. The CCPA was modified and expanded by the California Privacy Rights Act (CPRA), which was approved by California voters in
the November 2020 election. Additionally, other U.S. states continue to propose, and in certain cases adopt, privacy-focused legislation. For example, Connecticut, Virginia, Utah, and Colorado enacted legislation similar to the CCPA and CPRA that
took effect in 2023; Florida, Montana, Oregon, and Texas have enacted similar legislation that has become effective in 2024; Delaware, Nebraska, Maryland, New Hampshire, New Jersey, Minnesota, Tennessee, and Iowa have enacted similar legislation, and
Indiana, Kentucky, and Rhode Island have enacted similar legislation that has become effective in 2026.
The U.S. Department of Justice has also issued regulations regarding certain bulk sensitive personal data transfers. We cannot yet fully determine the impact these or future laws, regulations and
standards may have on our business, but they may require us to modify our data processing practices and policies and to incur substantial costs and expenses in efforts to comply. Privacy, data protection and information security laws and regulations
are often subject to differing interpretations, may be inconsistent among jurisdictions, and may be alleged to be inconsistent with our current or future practices. Additionally, we may be bound by contractual requirements applicable to our
collection, use, processing, and disclosure of various types of data, including personal data, and may be bound by, or voluntarily comply with, self-regulatory or other industry standards relating to these matters. These and other requirements could
reduce demand for our products, increase our costs, impair our ability to grow our business, or restrict our ability to store and process data or, in some cases, impact our ability to offer our service in some locations and may subject us to
liability. Any failure or perceived failure to comply with applicable laws, regulations, industry standards, and contractual obligations may adversely affect our business. Further, in view of new or modified federal, state, or foreign laws and
regulations, industry standards, contractual obligations and other legal obligations, or any changes in their interpretation, we may find it necessary or desirable to fundamentally change our business activities and practices or to expend significant
resources to modify our product and otherwise adapt to these changes. We may be unable to make such changes and modifications in a commercially reasonable manner or at all, and our ability to develop new products and features could be limited.
The costs of compliance with and other burdens imposed by laws, regulations and standards may limit the use and adoption of our service and reduce overall demand for it, or lead to significant
fines, penalties, or liabilities for any noncompliance. Privacy, information security, and data protection concerns, whether valid or not valid, may inhibit market adoption of our platform, particularly in certain industries and foreign countries.
Risks Related to Ownership of Our Common Stock
We do not regularly pay dividends on our common stock and thus stockholders must look to appreciation of our common stock to realize a gain on their
investments.
Our dividend policy is within the discretion of our Board of Directors and will depend upon various factors, including our business, financial condition, results of operations, capital
requirements, and investment opportunities. We therefore cannot make assurances that our Board of Directors will determine to pay regular or special dividends in the future. Accordingly, unless our Board of Directors determines to pay dividends,
stockholders will be required to look to appreciation of our common stock to realize a gain on their investment, which may not occur.
The exercise of our outstanding stock options and the issuance of RSUs and restricted stock would result in a dilution of our current stockholders’ voting
power and an increase in the number of shares eligible for future resale in the public market which may negatively impact the market price of our stock.
The exercise of our outstanding vested stock options and the vesting of RSUs and restricted stock dilutes the ownership interests of our existing stockholders. As of December 31, 2025, we had
727,884 outstanding options and RSUs to purchase shares of common stock representing approximately 18% of our total shares outstanding of which 234,842 were vested. To the extent restricted stock is awarded, outstanding stock options or warrants are
exercised, and RSUs vest, existing stockholders’ percentage voting interests will decline. Also, the number of shares eligible for resale in the public market will increase and such increase may have a negative effect on the value or market trading
price of our common stock.
Investors may have limited influence because ownership of our common stock is limited.
As of December 31, 2025, our executive officers and directors beneficially owned approximately 16% of our outstanding common stock. Because of their beneficial ownership interest, our officers and
directors could significantly influence stockholder actions. This ability to exercise significant influence could prevent or significantly delay another company from acquiring or merging with us.
Our protective provisions in our amended and restated certificate of incorporation and amended and restated bylaws could make it difficult for a third party
to successfully acquire us even if you would like to sell your stock to them.
We have protective provisions in our amended and restated certificate of incorporation (Restated Charter) and amended and restated bylaws (Restated Bylaws) that could delay, discourage, or prevent
a third party from acquiring control of us without the approval of our Board of Directors. These protective provisions include:
| • |
A staggered Board of Directors: Only one or two of five directors will be up for election at any given annual meeting, delaying the ability of stockholders to affect a change in control
of us because it would take two annual meetings to effectively replace a majority of the Board of Directors.
|
| • |
Blank check preferred stock: Our Board of Directors has the authority to establish the rights, preferences, and privileges of our 10,000,000 authorized, but unissued, shares of preferred
stock. Therefore, this stock may be issued at the discretion of our Board of Directors with preferences over your shares of our common stock in a manner that is materially dilutive to you. In addition, blank check preferred stock can be
used to create a “poison pill” which is designed to deter a hostile bidder from buying a controlling interest in our stock without the approval of our Board of Directors. We have not adopted such a “poison pill;” but our Board of Directors
can do so in the future, very rapidly and without stockholder approval.
|
| • |
Advance notice requirements for director nominations and for business to be brought before stockholder meetings: Stockholders wishing to submit director nominations or raise matters to a
vote of the stockholders must provide notice to us within very specific date windows and in very specific form to have the matter voted on at a stockholder meeting. This gives our Board of Directors and management more time to react to
stockholder proposals generally and could also permit us to disregard a stockholder proposal to the extent such proposal is not submitted in accordance with the Restated Bylaws.
|
| • |
No stockholder actions by written consent: No stockholder or group of stockholders may take action by written consent. Along with the advance notice requirements described above, this
provision also gives our Board of Directors and management more time to react to proposed stockholder actions.
|
| • |
Super majority requirement for stockholder amendments to the Restated Bylaws: Stockholder proposals to alter or amend our Restated Bylaws or to adopt new bylaws can only be approved by
the affirmative vote of at least 66 2/3% of the outstanding shares of our common stock.
|
| • |
No ability of stockholders to call a special meeting of the stockholders: A special meeting of the stockholders, other than as required by statute, may be called at any time by the Board
of Directors, the chairman of the Board of Directors, or the president, and any power of stockholders to call a special meeting of stockholders is specifically denied. Accordingly, stockholders, even those who represent a significant
percentage of our shares of common stock, may need to wait for the annual meeting before nominating directors or raising other business proposals to be voted on by the stockholders.
|
In addition, the provisions of Section 203 of the Delaware General Corporation Law govern us. These provisions may prohibit large stockholders, particularly those owning 15% or more of our
outstanding voting stock, from merging or combining with us for a certain period of time. These and other provisions in our Restated Charter, our Restated Bylaws and under Delaware law could discourage potential takeover attempts, reduce the price
that investors might be willing to pay for shares of our common stock in the future and result in the market price being lower than it would be without these provisions.
Our Restated Bylaws designate a state or federal court located within the State of Delaware as the exclusive forum for substantially all disputes between us
and our stockholders, which could limit our stockholders’ ability to choose the judicial forum for disputes with us or our directors, officers, or employees.
Our Restated Bylaws provide that, unless we consent in writing to the selection of an alternative forum, the sole and exclusive forum for (1) any derivative action or proceeding brought on our
behalf, (2) any action asserting a claim of breach of a fiduciary duty owed by any of our directors, stockholders, officers, or other employees to us or our stockholders, (3) any action arising pursuant to any provision of the Delaware General
Corporation Law, or our Restated Charter or Restated Bylaws or (4) any other action asserting a claim that is governed by the internal affairs doctrine shall be the Court of Chancery of the State of Delaware (or, if the Court of Chancery does not
have jurisdiction, another State court in Delaware or the federal district court for the District of Delaware), in all cases subject to the court having jurisdiction over indispensable parties named as defendants.
However, notwithstanding the exclusive forum provisions, our Restated Bylaws explicitly state that they would not preclude the filing of claims brought to enforce any liability or duty created
under federal securities laws, including the Securities Act or the Exchange Act.
Any person or entity purchasing or otherwise acquiring any interest in any of our securities shall be deemed to have notice of and consented to this provision. This exclusive-forum provision may
limit a stockholder’s ability to bring a claim in a judicial forum of its choosing for disputes with us or our directors, officers, or other employees, which may discourage lawsuits against us and our directors, officers, and other employees. If a
court were to find this exclusive-forum provision in our Restated Bylaws to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving the dispute in other jurisdictions, which could harm our results of
operations.
General Risk Factors
We may need to raise additional capital to support our business growth, and this capital may be dilutive, may cause our stock price to drop or may not be
available on acceptable terms, if at all.
We may need to raise additional capital, which may not be available to us when needed or may not be available on terms acceptable to us, to support our business growth or to respond to business
opportunities, challenges, or unforeseen circumstances, including sales under our past and any future shelf registration statements. Our ability to obtain additional capital, if and when required, will depend on our business plans, investor demand,
our operating performance, the condition of the capital markets, the terms of our current contractual obligations and other factors.
If we raise additional funds through the issuance of equity, equity-linked or debt securities, including those under our past and any future shelf registration statements, those securities may have
rights, preferences, or privileges senior to the rights of our common stock, and our existing stockholders may experience dilution. Additionally, we are unable to predict the future success of any future offerings. Sales of a substantial number of
shares of our common stock in the public market, or the perception that these sales or other financings might occur, could depress the market price of our common stock, and could also impair our ability to raise capital through the sale of additional
equity securities. If we issue debt securities or incur indebtedness, we could experience increased future payment obligations and a need to comply with restrictive covenants, such as limitations on our ability to incur additional debt, limitations
on our ability to acquire, sell or license intellectual property rights and other operating restrictions that could adversely impact our ability to conduct our business. If we are unable to obtain additional capital or are unable to obtain additional
capital on satisfactory terms, our ability to continue to support our business growth or to respond to business opportunities, challenges, or other circumstances could be adversely affected, and our business may be harmed.
The departure of Kendall Larsen, our Chief Executive Officer and President, and/or other key personnel could compromise our ability to execute our strategic
plan and materially harm our business.
Our success depends on the skills, experience, and performance of our key personnel. Due to the specialized nature of our business and limited staff, we are
particularly dependent on Kendall Larsen, our Chief Executive Officer and President. We have no employment agreements with any of our key executives that prevent them from leaving us at any time. In addition, we do not maintain key person life
insurance for any of our officers or key employees. The loss of Mr. Larsen, or our failure to retain other key personnel or plan for the succession of key personnel, would jeopardize our ability to execute our strategic plan and materially harm our
business.
We will need to recruit and retain additional qualified personnel to successfully grow our business.
Our future success will depend, in part, on our ability to attract and retain qualified engineering, operations, marketing, sales and executive personnel. Inability to attract and retain such
personnel could adversely affect our business. Competition for engineering, operations, marketing, sales, and executive personnel is intense, particularly in the technology and Internet sectors and in the regions where we conduct our business. We may
need to invest significant amounts of cash and equity to attract and retain employees and expend significant time and resources to identify, recruit, train and integrate such employees, and we may never realize returns on these investments.
Additionally, we can provide no assurance that we will attract or retain such personnel.
War, terrorism, other acts of violence, or natural or manmade disasters as well as macroeconomic conditions may affect the markets in which we operate, our
clients and our service delivery.
Our business may be adversely affected by instability, disruption, or destruction in a geographic region in which we operate, regardless of cause, including war, terrorism, riot, civil
insurrection, or social unrest, and natural or manmade disasters, including famine, flood, fire, earthquake, storm, or pandemic events and spread of disease. Our business may also be adversely affected by further downturn in macroeconomic conditions,
including inflation and rising interest rates, tariffs, trade wars, global political and economic uncertainty and tensions, such as the ongoing Russia-Ukraine and Middle Easts conflicts, as well as any related political or economic response, counter
responses or otherwise, financial services sector instability, a reduction in business confidence and activity, financial market volatility, unexpected changes in tax law or policy, and other factors. Such events can adversely affect our operations
or the economy as a whole and may cause our customers to delay their decisions on spending for the services we provide and perpetuate significant changes in regional and global economic conditions and cycles. These events may also pose risks to our
personnel and to physical facilities and operations, which could adversely affect our financial results.
Changes in tax law could materially impact our business, results of operations and financial condition.
Changes to U.S. federal, state, and local, and foreign tax laws that may be enacted in the future could impact the tax treatment of our business operations. Our effective tax rate could be
adversely affected by several factors, many of which are outside of our control, including changes in the mix of earnings and losses in countries with differing statutory tax rates, changes in the valuation of deferred tax assets and liabilities,
changes in tax laws, rates, treaties and regulations or the interpretation of the same, changes to the financial accounting rules for income taxes, the outcome of current and future tax audits, examinations or administrative appeals and certain
non-deductible expenses. In addition, many jurisdictions, including the United States, are actively considering changes to existing tax laws or have proposed or enacted new laws, such as the recently enacted U.S. federal tax legislation commonly
referred to as the One Big Beautiful Bill Act (OBBB Act), that could increase our tax obligations in countries where we do business or cause us to change the way we operate our business. We are currently evaluating the full impact of the OBBB Act on
us. As of December 31, 2025, the OBBB Act has had no material income tax impact on our financial statements.
In addition, the Organization for Economic Cooperation and Development has proposed imposing a 15% global minimum tax under the Pillar Two Model Rules (Pillar Two), and this proposal has been
adopted or is being considered by a number of countries, which could impact our business if we expand internationally. However, on June 28, 2025, the G7 released a joint statement that it had reached an understanding with the United States for a
side-by-side system based on certain accepted principles, including that U.S.-parented groups, such as ours, would be exempt from certain provisions of Pillar Two. Any of these developments or changes in U.S. federal, state or international tax laws
or tax rulings could adversely affect our effective tax rate and our operating results. As of December 31, 2025, we are not yet subject to Pillar Two due to the level of gross receipts.
Trading in our common stock is limited and the price of our common shares may be subject to volatility.
Our common stock is currently listed on the Nasdaq Stock Market LLC (Nasdaq) and was previously listed on NYSE and NYSE American LLC (formerly the NYSE MKT LLC). Over the past year, the market
price of our common stock has experienced significant fluctuations. Between January 1, 2025, and December 31, 2025, the adjusted closing price for our common stock ranged between $6.80 and $24.84. The price of our common stock may continue to be
volatile as a result of several factors, some of which are beyond our control. These factors include, but are not limited to, the following:
| • |
annual variations, actual or anticipated, in our operating results;
|
| • |
significant changes in our management;
|
| • |
large purchases or sales of common stock or derivative transactions related to our stock;
|
| • |
actual or anticipated announcements of new products or services by us or competitors;
|
| • |
general conditions in the markets in which we compete; and
|
| • |
general social, political, economic, and financial conditions, including significant volatility in the global financial markets.
|
In addition, we believe there has been and may continue to be substantial trading in derivatives of our stock, including short selling activity or related similar activities, which are beyond our
control, and which may be beyond the full control of the SEC and Financial Institutions Regulatory Authority (FINRA). While the SEC and FINRA rules prohibit some forms of short selling and other activities that may result in stock price manipulation,
such activity may nonetheless occur without detection or enforcement. We have held conversations with regulators concerning trading activity in our stock; however, there can be no assurance that should there be any illegal manipulation in the trading
of our stock, it will be detected, prosecuted, or successfully eradicated. Significant short-selling market manipulation could cause our stock trading price to decline, to become more volatile, or both. For more information regarding trading in our
common stock and listing on the Nasdaq, see additional risk factors included elsewhere in this Annual Report on Form 10-K.
We have broad discretion in how we apply our funds, and we may not use these funds effectively, which could affect our results of operations and cause our
stock price to decline.
Our management has broad discretion in the application of our existing cash, cash equivalents and investments and could spend these funds in ways that do not improve our results of operations or
enhance the value of our common stock. Pending their use, we may invest our available funds in a manner that does not produce income or that loses value. The failure by our management to apply our available funds effectively could result in financial
losses that could cause the price of our common stock to decline and delay the development of our products.
In addition, an entity that, among other things, is or holds itself out as being engaged primarily, or proposes to engage primarily, in the business of investing, reinvesting, owning, trading, or
holding certain types of securities would be deemed an Investment Company under the Investment Company Act of 1940 (1940 Act). If we do not manage our investments and business in a manner that meets the requirements for an exemption under the 1940
Act, we may be deemed to be an investment company under the 1940 Act and subject to additional limitations on operating our business including limitations on the issuance of securities, which may make it difficult for us to raise capital.
| Item 1B. |
Unresolved Staff Comments
|
None.
| Item 1C. |
Cybersecurity
|
Cybercriminals, hackers, and threat-actors are becoming more sophisticated and effective every day. To mitigate threats to our business, we take a comprehensive approach to cybersecurity risk management and make securing the data that our customers and other stakeholders entrust to us a top priority. We are committed to safeguarding the confidentiality, integrity, and availability of all physical and electronic information assets to ensure that regulatory, operational, and contractual requirements are fulfilled. Our Board of Directors and our management are actively involved in the oversight of our risk management program, of which cybersecurity represents an important component. As described in more detail below, we have established policies, processes, and practices for assessing, identifying, and managing material risks from cybersecurity threats. We have devoted significant resources to implement and maintain security measures to meet regulatory requirements and customer expectations, and we intend to continue to make significant investments to maintain the security of our data and cybersecurity infrastructure. Notwithstanding the extensive approach we take to cybersecurity, we may not be successful in preventing or mitigating a cybersecurity incident that could have a material adverse effect on us. While we have technology and processes in place to detect and respond to cybersecurity threats, we are continually at risk from the evolving cybersecurity threat landscape. We have not previously experienced a cybersecurity event that was determined to be material, and our business strategy, results of operations and financial condition have not been materially affected by risks from cybersecurity threats. For additional information regarding risks from cybersecurity threats, please refer to Item 1A, “Risk Factors,” in this Annual Report on Form 10-K.
Risk Management and Strategy
We have developed detailed policies, processes, and practices for assessing, identifying, and managing material risks from cybersecurity threats as a part of our overall risk management program and
are based on frameworks established by the National Institute of Standards and Technology (“NIST”), and other applicable industry standards. This does not imply that we meet any particular technical standards, specifications, or requirements,
however, we do use these frameworks as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business. Our cybersecurity program in particular focuses on the following key areas:
Collaboration
Our cybersecurity risks are identified and addressed through a comprehensive, cross-functional approach. Key security, risk, and compliance stakeholders meet regularly to develop strategies for
preserving the confidentiality, integrity, and availability of our own and our customer’s information, identifying, preventing, and mitigating cybersecurity threats, and effectively responding to cybersecurity incidents. We maintain controls and
procedures that are designed to ensure prompt escalation of certain cybersecurity incidents so that decisions regarding such incidents can be made by management, the Board of Directors, and legal counsel in a timely manner.
Risk Assessment
We conduct cybersecurity risk assessments annually, quarterly and upon certain triggering events. Such risk assessments take into account information from internal stakeholders, known information
security vulnerabilities, and information from external sources (e.g., security incidents that have impacted other companies, industry trends, and recommendations from our IT vendors). The results of the assessment are used to drive alignment on, and
prioritization of, initiatives to enhance our security controls, make recommendations to improve processes, and inform a broader enterprise-level risk assessment that is presented to our Board of Directors and members of senior management.
Technical Safeguards
We regularly assess and deploy technical safeguards designed to protect our information systems and infrastructure from cybersecurity threats. Such safeguards are regularly evaluated and improved
based on vulnerability assessments, cybersecurity threat intelligence, and incident response experience.
Incident Response and Recovery Planning
We have established comprehensive incident response and management plans and continue to regularly test and evaluate the effectiveness of those plans. Our incident response and management plans
address — and guide our employees, management, and Board of Directors on — our response to a cybersecurity incident. In the event of an incident, we intend to follow our incident response playbook, which outlines the steps to be followed from
incident detection to mitigation, recovery, and notification, including notifying functional areas (e.g., legal), as well as the Board of Directors and senior management, as appropriate.
Third-Party Risk Management
Education and Awareness
Our policies require each of our employees to contribute to our cybersecurity efforts. We regularly remind employees of the importance of handling and protecting customer and employee data,
including through privacy and security trainings to enhance employee awareness of how to detect and report cybersecurity threats and cybersecurity incidents.
Governance
Board Oversight
Our Board of Directors has technical and industry expertise in risk management, computer security, and information technology matters. Specifically, the chairperson of the Committee has 40 years of
experience in the cybersecurity field, was a former sub-chairman of the NIST Board of Assessment for Programs/National Research Council and holds CISSP, CRISC and CDPSE certifications.
Management’s Role
| Item 2. |
Properties
|
Our principal executive offices are located at 308 Dorla Court, Suite 206, Zephyr Cove, Nevada, 89448. We lease this property, which comprises approximately 2,090 square feet of office space, from
a third party for a term that ends in October 2027. Additionally, we lease a facility in Farmington, Utah. The space includes 28,970 square feet to be used for technical integration and training. The lease continues through April 2029. We believe
that our office and facility leases are suitable and appropriately support our current business needs.
| Item 3. |
Legal Proceedings
|
See Note 12 in the notes to our consolidated financial statements.
| Item 4. |
Mine Safety Disclosure
|
Not applicable.
PART II
| Item 5. |
Market for the Registrant’s Common Equity, Related Stockholder Matters, and Issuer Purchases of Equity Securities
|
Market Information
Our common stock currently trades under the symbol “VHC” on Nasdaq.
Holders of Record
As of December 31, 2025, we had 54 stockholders of record. Because many of our shares of common stock are held of record by brokers and other institutions on behalf of stockholders, we are unable
to estimate the total number of beneficial stockholders represented by such record holders.
Dividend Policy
See our risk factor titled “We do not regularly pay dividends on our common stock and thus stockholders must look to appreciation of our common stock to realize a
gain on their investments.”
Since our founding as a public company in 2007, each time we have been successful in generating cash relating to the successful outcome of litigation, we have made a special distribution to common
shareholders. In 2010, a distribution of $10 per common share closely followed a litigation outcome that resulted in our receipt of $200 million. In 2020, a distribution of $20 per share closely followed a litigation outcome that resulted in our
receipt of $454 million. In 2023, we paid a one-time capital dividend of $20 per share of common stock, to shareholders. Over the course of VirnetX’s history as a public company, VirnetX has distributed over $165.9 million in cash to shareholders.
Securities Authorized for Issuance under Equity Compensation Plan
See Part III, Item 12, Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters for information regarding securities authorized for issuance.
Recent Sales of Unregistered Securities
None.
| Item 6. |
[Reserved]
|
| Item 7. |
Management’s Discussion and Analysis of Financial Condition and Results of Operations
(Dollar amounts in this section are in thousands)
|
The Company
VirnetX Holding Corporation (“Company”, “we”, “us”, or “our”) is an Internet security software and technology company with patented cybersecurity solutions that are designed to
ensure resilient, secure communications across any network or device.
Our flagship platform, VirnetX One™, is built on Zero Trust Network Access (ZTNA) principles and extends our patented Secure Domain Name System (SDNS) technology to establish end-to-end encrypted communications on
demand, regardless of user location or endpoint. VirnetX One™ operates as a security-as-a-service platform and may be deployed in cloud, on-premise, or hybrid enterprise environments. The platform is designed to protect applications, services, and
infrastructure by providing an additional security layer that integrates with existing systems to reduce exposure to evolving cyber threats affecting data, operating systems, infrastructure components, and gateway security controllers.
VirnetX Matrix™ leverages the VirnetX One™ platform to secure communications using encrypted, identity-based access controls, including in contested or high-risk environments. It is designed to
protect internet-enabled enterprise applications, connected devices, and control systems, such as file servers, data backup systems, and VPN or firewall environments. VirnetX Matrix™ is intended to be deployed without requiring material changes to an
enterprise’s existing infrastructure and provides centralized visibility and policy enforcement to address unauthorized access and evolving attack techniques.
VirnetX War Room™, also built on the VirnetX One™ PLATFORM, provides secure collaboration and visualization capabilities
designed to support sensitive, unclassified but secure communications. The platform enables controlled access to virtual meeting environments by validating user and device permissions prior to granting access. VirnetX War Room™ is intended for use
cases where confidentiality and access control are critical, including government, law enforcement, legal, financial, and healthcare environments.
Our products, including VirnetX One™, VirnetX Matrix™, and VirnetX War Room™, are designed to support U.S. Department of Defense (DoD), federal government, and commercial customers requiring real-time encrypted
communications and network security. We believe our solutions are applicable across a range of public and private sector markets, including critical infrastructure, law enforcement, healthcare, financial services, legal services, energy, and related
industries. We pursue sales opportunities nationwide and engage with universities and academic institutions to support research collaboration, workforce development, and technology transition initiatives.
We also support international sales of our commercial products in compliance with applicable U.S. export control laws and regulations, including the International Traffic in Arms Regulations (ITAR)
and the Export Administration Regulations (EAR). Our compliance processes are designed to ensure that international transactions adhere to export control requirements while supporting authorized global customers.
Our technology roadmap addresses the continued growth of Internet of Things (IoT) and edge computing environments. We are extending secure networking capabilities to resource-constrained devices
through obfuscated and lightweight security mechanisms designed to protect communications without exposing underlying security processes. These efforts support secure identity, trust enforcement, and encrypted communications for distributed and
edge-based systems.
We are developing a federated, hybrid mesh network architecture designed with security as a foundational element. This approach incorporates dynamic trust evaluation, autonomous recovery, and
distributed decision-making to enhance network resilience and adaptability. We believe this architecture aligns with broader industry trends toward decentralized and resilient network models.
To support system design and evaluation, we employ Model-Based Systems Engineering (MBSE) and agent-based modeling methodologies. These approaches enable simulation and analysis of complex systems,
including cyber-physical environments and adaptive networks, and support assessment of system behavior under evolving threat conditions.
We have undertaken efforts to align certain services with the Department of Defense Digital Engineering (DE) strategy. These services are intended to support cybersecurity integration across system
design, command and control, battle management, and sensor orchestration, and to enhance our MBSE and cyber threat assessment capabilities. Our Dynamic Trust Evaluation (DTE) methods are designed to enforce trust policies throughout system
lifecycles, and our cyber threat intelligence and assessment services provide structured analysis of cyber risks and vulnerabilities.
We intend to make available digital engineering, cyber MBSE, and cyber threat intelligence services to federal, state, and local government agencies, subject to applicable contracting requirements.
These services include cybersecurity-focused system design support, advanced modeling of communication flows and threat boundaries, and structured cyber risk assessment methodologies.
We are developing a Center for Advanced Software and Hardware Integration at our Farmington, Utah facility, that incorporates artificial
intelligence (AI) and digital twin technologies alongside our Software-Defined Networks (SDN) capabilities. This facility is intended to support development and integration of secure, adaptive software solutions. We have entered into strategic
relationships, including an investment in L2 Holdings, LLC (OmniTeq), an AI/Machine Learning (ML) solutions provider and cooperative agreements, including a Cooperative Research and Development Agreement
(CRADA) with the Air Force Research Laboratory, Intelligence Systems Directorate (AFRL/RI). The CRADA focuses on cybersecurity and Zero Trust Network Access (ZTNA)-related technologies, extends through 2030, and supports collaboration in areas
relevant to defense and intelligence operations.
We hold a Multiple Award Schedule (MAS), enabling streamlined procurement of our products and services by federal, state, and local government customers. We have also obtained Department of Defense
Joint Certification Program (DD Form 2345) certifications for our facilities in Zephyr Cove, Nevada, and Farmington, Utah, which permit access to certain unclassified technical data subject to export controls. These certifications support our ability
to engage with government and defense customers while maintaining compliance with applicable handling and security requirements.
Durning 2025, we provided subject matter and technical expertise as a subcontractor under a U.S. Department of Defense contract in support of activities directed by the Air Force Research Laboratory (“AFRL”). While
there can be no assurance, we believe this engagement may represent a meaningful foothold in the national security sector and may provide pathways to follow-on activities and/or expansion into broader strategic programs.
Our intellectual property portfolio is a core component of our business. We own U.S. and foreign patents, as well as pending patent applications, that are primarily directed to securing real-time communications over the
Internet and related services. These patents underpin our technology and products. Certain portions of this portfolio were acquired by our principal operating subsidiary, VirnetX, Inc., from Leidos, Inc. in 2006.
Our employees include the core development team behind our inventions, technology, and software. Some members of this team have worked together for over twenty years and were on the same team that invented and
developed this technology while working at Leidos, Inc. The team has continued its research and development work to refine our unique network security technology and make it more secure and easy to deploy.
Litigation
We are subject to various legal proceedings, the outcomes of which are inherently uncertain. We record any potential gains related to legal proceedings only after cash is collected. We record a
liability when it is probable that a loss has been incurred and the amount is reasonably estimable, the determination of which requires significant judgment. Resolution of legal matters in a manner inconsistent with management’s expectations could
have a material impact on our financial condition and operating results. See Note 12 in the notes to our consolidated financial statements for more information.
Commitments and Related Party Transactions
We lease our offices in Nevada under an operating lease with a third party expiring in October 2027. We recognize rent expense on a straight-line basis over the term of the lease.
We have a facility lease in Utah to be used for technical integration and as a training facility. This lease requires monthly payments and expires in April 2029.
We have a non-exclusive service agreement for the use of an aircraft from K2 Investment Fund LLC (“LLC”) for business travel for our employees. Our Chief Executive Officer and Chief Administrative
Officer are the managing partners of the LLC and control the equity interests of the LLC. We pay for the Company’s business usage of the aircraft at a rate of $9.8 per flight hour.
We have a facility lease in California, used for corporate, promotional, and marketing purposes. The lease expires in 2035.
Critical Accounting Policies and Estimates
The preparation of financial statements in conformity with U.S. GAAP requires us to make estimates and assumptions that affect the reported amounts of assets and liabilities and disclosure of
contingent assets and liabilities at the date of the financial statements and the reported amounts of revenues and expenses during the reported period. The critical accounting policies we employ in the preparation of our consolidated financial
statements are those which involve income taxes, fair value of financial instruments and stock-based compensation.
Use of Estimates
We prepare our consolidated financial statements in accordance with U.S. GAAP. In doing so, we have to make estimates and assumptions that affect our reported amounts of assets, liabilities,
revenues, and expenses, as well as related disclosure of contingent assets and liabilities. In some cases, we could reasonably have used different accounting policies and estimates. In some cases, changes in the accounting estimates are reasonably
likely to occur from period to period. Accordingly, actual results could differ materially from our estimates. To the extent that there are material differences between these estimates and actual results, our financial condition or results of
operations will be affected. We base our estimates on past experience and other assumptions that we believe are reasonable under the circumstances, and we evaluate these estimates on an ongoing basis. We refer to accounting estimates of this type as
critical accounting policies and estimates, which we discuss further below. We have reviewed our critical accounting policies and estimates with the Audit Committee of our Board of Directors.
Investments
Investments classified as available-for-sale are recorded at fair market value. Unrealized gains and losses are reported as other comprehensive income. Realized gains and losses are recorded in
income in the period they are realized using specific identification of each security’s cost basis. We invest our excess cash primarily in highly liquid debt instruments including corporate, government and federal agency securities, with contractual
maturities less than two years.
We have elected the investment measurement alternative for other investments without readily determinable fair values. During 2023, we invested $2,000 OmniTeq and $500 in OP Media Inc. These
investments are carried at our initial cost less any impairment because we do not have the ability to exercise significant influence over operating and financial matters. For these investments, we adjust the carrying value for any purchases or sales
of our ownership interests. Periodically, we evaluate these investments for impairment. If we identify an impairment, we reduce the carrying value for the impairment loss with a charge to operating expenses. Effective September 30, 2025 we identified
an impairment in our investment in OP Media Inc., and as a result, we recognized an impairment loss totaling $500.
Income Taxes
We account for income taxes using the asset and liability method. The asset and liability method require the recognition of deferred tax assets and liabilities for expected future tax consequences
of temporary differences that currently exist between the tax basis and financial reporting basis of our assets and liabilities. We calculate current and deferred tax provisions based on estimates and assumptions that could differ from actual results
reflected on the income tax returns filed during the following years. Adjustments based on filed returns are recorded when identified in the subsequent years. The effect on deferred taxes for a change in tax rates is recognized in income in the
period that the tax rate change is enacted. In assessing our deferred tax assets, we consider whether it is more likely than not that all or some portion of the deferred tax assets will not be realized.
A valuation allowance is provided for deferred income tax assets when, in our judgment, based upon currently available information and other factors, it is more likely than not that all or a
portion of such deferred income tax assets will not be realized. The determination of the need for a valuation allowance is based on an on-going evaluation of current information including, among other things, historical operating results, estimates
of future earnings in different taxing jurisdictions and the expected timing of the reversals of temporary differences. We believe the determination to record a valuation allowance to reduce a deferred income tax asset is a significant accounting
estimate because it is based, among other things, on an estimate of future taxable income in the United States and certain other jurisdictions, which is susceptible to change and may or may not occur, and because the impact of adjusting a valuation
allowance may be material. In determining when to release the valuation allowance established against our net deferred income tax assets, we consider all available evidence, both positive and negative. We continually assess our ability to generate
sufficient taxable income during future periods in which our deferred tax assets may be realized. If and when we believe it is more likely than not that we will recover our deferred tax assets, we will reverse the valuation allowance if any, as an
income tax benefit in our statements of operations.
We account for our uncertain tax positions in accordance with U.S. GAAP. The U.S. GAAP method of accounting for uncertain tax positions utilizes a two-step approach to evaluate tax positions. Step
one, recognition, requires evaluation of the tax position to determine if based solely on technical merits it is more likely than not to be sustained upon examination. Step two, measurement, is addressed only if a position is more likely than not to
be sustained. In step two, the tax benefit is measured as the largest amount of benefit, determined on a cumulative probability basis, which is more likely than not to be realized upon ultimate settlement with tax authorities. If a position does not
meet the more likely than not threshold for recognition in step one, no benefit is recorded until the first subsequent period in which the more likely than not standard is met, the issue is resolved with the taxing authority, or the statute of
limitations expires. Positions previously recognized are derecognized when we subsequently determine the position no longer is more likely than not to be sustained. Evaluation of tax positions, their technical merits, and measurements using
cumulative probability are highly subjective management estimates. Actual results could differ materially from these estimates.
Fair Value
Fair value is the price that would result from an orderly transaction between market participants at the measurement date. A fair value hierarchy prioritizes the inputs used to measure fair value.
The hierarchy gives the highest priority to unadjusted quoted prices in active markets for identical assets or liabilities (Level 1 measurement) and the lowest priority to unobservable inputs (Level 3 measurement). Level 2 measurements utilize either
directly or indirectly observable inputs in markets other than quoted prices in active markets.
Our financial instruments are stated at amounts that equal, or approximate, fair value. When we estimate fair value, we utilize market data or assumptions that we believe market participants would
use in pricing the financial instrument, including assumptions about risk and inputs to the valuation technique. We use valuation techniques, primarily the income and market approach, which maximizes the use of observable inputs and minimize the use
of unobservable inputs for recurring fair value measurements.
Stock-based Compensation
We account for stock-based compensation using the fair value recognition method in accordance with U.S. GAAP. We recognize these compensation costs on a straight-line basis over the requisite
service period of the award, which is generally a vesting term of 4 years. We recognize forfeitures, if any, when they occur. In addition, we record stock-based compensation expense for awards granted to non-employees at fair value of the
consideration received or the fair value of the equity instruments issued, as they vest, over the performance period. See Note 6 in the notes to our consolidated financial statements for more information.
Results of Operations
Revenue
|
2025
|
2024
|
|||||||
|
Revenue
|
$
|
162
|
$
|
5
|
||||
Revenue generated in 2025 was $162, compared to $5 in 2024. During 2025, we provided subject matter and technical expertise as a subcontractor under a U.S. Department of Defense contract is support
of activities directed by AFRL.
Research and Development Expenses
|
2025
|
2024
|
|||||||
|
Research and Development
|
$
|
5,654
|
$
|
6,038
|
||||
Research and development costs include expenses paid to outside development consultants and compensation-related expenses for our engineering staff. Research and development costs are expensed as
incurred. Our research and development expenses in 2025 were $5,654 compared to $6,038 in 2024. The decrease in 2025 was primarily due to a reduction in engineering compensation costs.
Selling, General and Administrative Expenses
|
2025
|
2024
|
|||||||
|
Selling, General and Administrative
|
$
|
13,448
|
$
|
14,364
|
||||
Selling, general and administrative expenses include compensation costs for management and administrative personnel, as well as expenses for outside legal, accounting, and consulting services. Our
selling, general and administrative expenses in 2025 were $13,448 compared to $14,364 in 2024. The decrease in 2025 was primarily due to a reduction in legal and outside services as well as reduced compensation costs.
Interest and Other Income, net
|
2025
|
2024
|
|||||||
|
Interest and Other Income
|
$
|
1,213
|
$
|
2,225
|
||||
Interest and other income in 2025 was $1,213 compared to $2,225 in 2024, due to a decrease in investments.
Effective Income Tax Rate
A reconciliation of the United States federal statutory income tax rate to our effective income tax rate is as follows:
|
2025
|
2024
|
|||||||
|
United States federal statutory rate
|
21.00
|
%
|
21.00
|
%
|
||||
|
State taxes, net of federal benefit
|
(0.01
|
)%
|
(0.01
|
)%
|
||||
|
Valuation allowance
|
(21.87
|
)%
|
(20.50
|
)%
|
||||
|
Stock based compensation
|
(0.33
|
)%
|
(0.62
|
)%
|
||||
|
Research and development credit
|
1.99
|
%
|
1.55
|
%
|
||||
|
Other
|
(1.46
|
)%
|
(1.41
|
)%
|
||||
|
Effective income tax rate
|
0.01
|
%
|
0.01
|
%
|
||||
The Company’s effective tax rate for 2025 and 2024 was substantially lower than the statutory Federal income tax rate primarily due to our valuation allowance.
Liquidity and Capital Resources
As of December 31, 2025, our cash and cash equivalents totaled $15,548 and our short-term investments totaled $5,979 compared to $23,296 and $14,786, respectively, as of December 31, 2024.
We expect that our cash and cash equivalents and short-term investments as of December 31, 2025, will be sufficient to fund our current level of selling, general and administration costs and
provide related working capital for the foreseeable future. Over the longer term, we expect to derive our future revenue from collaborating with others to integrate our family of cybersecurity products and services into their solutions and to resell
them to their current and future customers as well as from license fees and royalties associated with our patent portfolio, technology, software and secure domain name registry.
| Item 7A. |
Quantitative and Qualitative Disclosures about Market Risk
|
Consistent with the rules applicable to “smaller reporting companies,” we have omitted the information required by Item 7A.
| Item 8. |
Financial Statements and Supplementary Data
|
Set forth below, are the audited consolidated financial statements for our company accompanied by all reports thereon of Farber Hass Hurley LLP (PCAOB No. 223 ).
FINANCIAL STATEMENTS
Financial Statements Index
|
Page
|
|
|
25
|
|
|
27
|
|
|
28
|
|
|
29
|
|
|
30
|
|
|
31
|
|
|
32
|
REPORT OF INDEPENDENT REGISTERED PUBLIC ACCOUNTING FIRM
To the Board of Directors and
Stockholders of VirnetX Holding Corporation
Opinion on the Financial Statements
We have audited the accompanying consolidated balance sheets of VirnetX Holding Corporation (the “Company”) as of December 31, 2025 and 2024, and the related consolidated statements of operations, comprehensive loss,
stockholders’ equity, and cash flows for each of the years in the two-year period ended December 31, 2025, and the related notes (collectively referred to as the “financial statements”). In our opinion, the financial statements present fairly, in all
material respects, the financial position of the Company as of December 31, 2025 and 2024, and the results of its operations and its cash flows for each of the years in the two-year period ended December 31, 2025, in conformity with accounting
principles generally accepted in the United States of America.
Basis for Opinion
These financial statements are the responsibility of the Company’s management. Our responsibility is to express an opinion on the Company’s financial statements based on our audits. We are a public accounting firm
registered with the Public Company Accounting Oversight Board (United States) (“PCAOB”) and are required to be independent with respect to the Company in accordance with the U.S. federal securities laws and the applicable rules and regulations of the
Securities and Exchange Commission and the PCAOB.
We conducted our audits in accordance with the standards of the PCAOB. Those standards require that we plan and perform the audit to obtain reasonable assurance about whether the financial statements are free of
material misstatement, whether due to error or fraud. The Company is not required to have, nor were we engaged to perform, an audit of its internal control over financial reporting. As part of our audits, we are required to obtain an understanding of
internal control over financial reporting, but not for the purpose of expressing an opinion on the effectiveness of the Company’s internal control over financial reporting. Accordingly, we express no such opinion.
Our audits included performing procedures to assess the risks of material misstatement of the financial statements, whether due to error or fraud, and performing procedures that respond to those risks. Such procedures
included examining, on a test basis, evidence regarding the amounts and disclosures in the financial statements. Our audits also included evaluating the accounting principles used and significant estimates made by management, as well as evaluating
the overall presentation of the financial statements. We believe that our audits provide a reasonable basis for our opinion.
Critical Audit Matter
The critical audit matter communicated below is a matter arising from the current period audit of the financial statements that was communicated or required to be communicated to the audit committee and that: (1)
relate to accounts or disclosures that are material to the financial statements and (2) involved our especially challenging, subjective, or complex judgments. The communication of the critical audit matter does not alter in any way our opinion on the
financial statements, taken as a whole, and we are not, by communicating the critical audit matter below, providing a separate opinion on the critical audit matter or on the accounts or disclosures to which it relates.
|
Description of the Matter
|
Other Investments
As discussed in Note 2 to the financial statements, in 2023 the Company purchased equity interests in two private entities. Given that the entities do not have a readily determinable fair market value, the
investments in the entities are measured at cost, plus or minus adjustments resulting from observable price changes in orderly transactions for the identical or a similar investment of the same issuer and minus impairment, in accordance with
Financial Accounting Standards Board Accounting Standards Codification Topic 321: Investments - Equity Securities. Management must consider various factors, including the Company’s ability to apply significant influence to the overall
operations of the entities and evaluate the investments as of each reporting period to determine if there are any factors that would impact the recorded value of Other Investments reflected on the consolidated balance sheet.
Our determination that the classification and the valuation of Other Investments is a critical audit matter results from the significant judgment by management when assessing the recognition method, the limited
availability of public information related to the entities, and the subjectivity of the qualitative factors involved in the assessment. This in turn led to a high degree of auditor judgment, subjectivity, and effort in performing procedures
relating to management’s assessment of the recognition method and valuation of Other Investments.
|
|
Audit Procedures
|
Our principal audit procedures related to the Company’s Other Investments included the following:
- We evaluated management’s analysis regarding their ability to apply significant influence in the operations of the entities by obtaining
information of the ownership percentage of the entities, composition of the respective boards, and any other relevant factors in determining their recognition method being recognized as cost in accordance with Accounting Standards
Codification 321.
- We also evaluated management’s assessment of impairment factors or any observable transactions of the entities through the year to determine
whether an adjustment in the recognized value was necessary. This includes testing management’s internal analysis as well as reviewing for any publicly available data regarding any factors or events that could impact the entities’ values.
|
/s/ Farber Hass Hurley LLP
We have served as the Company’s auditor since 2008.
March 24, 2026
VIRNETX HOLDING CORPORATION
(in thousands, except share amounts)
|
As of
December 31, 2025
|
As of
December 31, 2024
|
|||||||
|
ASSETS
|
||||||||
|
Current assets:
|
||||||||
|
Cash and cash equivalents
|
$
|
|
$
|
|
||||
|
Investments available for sale
|
|
|
||||||
|
Accounts receivables
|
|
|
||||||
|
Prepaid expenses and other current assets
|
|
|
||||||
|
Total current assets
|
|
|
||||||
|
Prepaid expenses and other assets
|
|
|
||||||
|
Property and equipment, net
|
|
|
||||||
|
Other investments
|
|
|
||||||
|
Total assets
|
$
|
|
$
|
|
||||
|
LIABILITIES AND STOCKHOLDERS’ EQUITY
|
||||||||
|
Current liabilities:
|
||||||||
|
Accounts payable and accrued liabilities
|
$
|
|
$
|
|
||||
|
Accrued payroll and related expenses
|
|
|
||||||
|
Other liabilities, current
|
|
|
||||||
|
Total current liabilities
|
|
|
||||||
|
Other liabilities
|
|
|
||||||
|
Total liabilities
|
|
|
||||||
|
Commitments and contingencies (Note 4)
|
||||||||
|
Stockholders’ equity:
|
||||||||
| Preferred stock, par value $ |
|
|
||||||
| Common stock, par value $ |
||||||||
| Authorized: |
|
|
||||||
|
Additional paid-in capital
|
|
|
||||||
|
Accumulated deficit
|
( |
)
|
( |
)
|
||||
|
Accumulated other comprehensive loss
|
( |
)
|
|
|||||
|
Total stockholders’ equity
|
|
|
||||||
|
Total liabilities and stockholders’ equity
|
$
|
|
$
|
|
||||
See accompanying notes to consolidated financial statements.
VIRNETX HOLDING CORPORATION
(in thousands, except share and per share amounts)
|
Year Ended
December 31, 2025
|
Year Ended
December 31, 2024
|
|||||||
|
Revenue
|
$
|
|
$
|
|
||||
|
Operating expense:
|
||||||||
|
Research and development
|
|
|
||||||
|
Selling, general and administrative expenses
|
|
|
||||||
|
Impairment loss on investment
|
|
|
||||||
|
Total operating expense
|
|
|
||||||
|
(Loss) from operations
|
( |
)
|
( |
)
|
||||
|
Interest and other income, net
|
|
|
||||||
|
(Loss) before taxes
|
( |
)
|
( |
)
|
||||
|
Income tax (provision) benefit
|
|
( |
)
|
|||||
|
Net (loss)
|
$
|
( |
)
|
$
|
( |
)
|
||
|
Basic (loss) per share
|
$
|
( |
)
|
$
|
( |
)
|
||
|
Diluted (loss) per share
|
$
|
( |
)
|
$
|
( |
)
|
||
|
Weighted average shares outstanding basic
|
|
|
||||||
|
Weighted average shares outstanding diluted
|
|
|
||||||
See accompanying notes to consolidated financial statements.
VIRNETX HOLDING CORPORATION
(in thousands)
|
Year Ended
December 31, 2025
|
Year Ended
December 31, 2024
|
|||||||
|
Net (loss)
|
$
|
( |
)
|
$
|
( |
)
|
||
|
Other comprehensive (loss) income, net of tax:
|
||||||||
|
Change in unrealized gain on investments, net
|
( |
)
|
|
|||||
|
Change in foreign currency translation, net
|
( |
)
|
( |
)
|
||||
|
Total other comprehensive gain, net of tax
|
( |
)
|
|
|||||
|
Comprehensive (loss)
|
$
|
( |
)
|
$
|
( |
)
|
||
See accompanying notes to consolidated financial statements.
VIRNETX HOLDING CORPORATION
(in thousands, except share amounts)
|
Year Ended
|
||||||||
|
December 31,
|
||||||||
|
2025
|
2024
|
|||||||
|
Total shareholders’ equity, beginning balances
|
$
|
|
$
|
|
||||
|
Common stock and additional paid-in capital:
|
||||||||
|
Beginning balances
|
|
|
||||||
|
Common stock issued for options/RSUs/RS, net
|
( |
)
|
( |
)
|
||||
|
Stock-based compensation
|
|
|
||||||
|
Ending balances
|
|
|
||||||
|
Accumulated deficit
|
||||||||
|
Beginning balances
|
( |
)
|
( |
)
|
||||
|
Net (loss)
|
( |
)
|
( |
)
|
||||
|
Dividends
|
|
|
||||||
|
Ending balances
|
( |
)
|
( |
)
|
||||
|
Accumulated other comprehensive loss:
|
||||||||
|
Beginning balances
|
|
( |
)
|
|||||
|
Change in unrealized investment (loss) gain, net
|
( |
)
|
|
|||||
|
Change in foreign currency translation, net
|
( |
)
|
( |
)
|
||||
|
Ending balances
|
( |
)
|
|
|||||
|
Total shareholders’ equity, ending balances
|
$
|
|
$
|
|
||||
See accompanying notes to consolidated financial statements.
VIRNETX HOLDING CORPORATION
(in thousands)
|
Year Ended
December 31, 2025
|
Year Ended
December 31, 2024
|
|||||||
|
Cash flows from operating activities:
|
||||||||
|
Net (loss)
|
$
|
( |
)
|
$
|
( |
)
|
||
|
Adjustments to reconcile net (loss) to net cash from operating activities:
|
||||||||
|
Depreciation
|
|
|
||||||
|
Stock-based compensation
|
|
|
||||||
|
Impairment loss on investment
|
|
|
||||||
|
Bad debt
|
|
|
||||||
|
Changes in assets and liabilities:
|
||||||||
|
Prepaid expenses and other current assets
|
|
|
||||||
|
Accounts payable and accrued liabilities
|
|
( |
)
|
|||||
|
Other liabilities
|
( |
)
|
|
|||||
|
Accrued payroll and related expenses
|
( |
)
|
( |
)
|
||||
|
Accounts receivable
|
( |
)
|
|
|||||
|
Net cash used in operating activities
|
( |
)
|
( |
)
|
||||
|
Cash flows from investing activities:
|
||||||||
|
Purchase of property and equipment
|
( |
)
|
( |
)
|
||||
|
Purchase of investments
|
( |
)
|
( |
)
|
||||
|
Proceeds from sale or maturity of investments
|
|
|
||||||
|
Net cash provided by investing activities
|
|
|
||||||
|
Cash flows from financing activities:
|
||||||||
|
Proceeds from exercise of options
|
|
|
||||||
|
Withholding taxes paid on cashless exercise of restricted stock and restricted stock units
|
( |
)
|
( |
)
|
||||
|
Net cash used in financing activities
|
( |
)
|
( |
)
|
||||
|
Net (decrease) in cash and cash equivalents
|
( |
)
|
( |
)
|
||||
|
Cash and cash equivalents, beginning of period
|
|
|
||||||
|
Cash and cash equivalents, end of period
|
$
|
|
$
|
|
||||
|
Cash paid for income taxes
|
$
|
|
$
|
|
||||
|
Non-cash transaction
|
||||||||
|
ROU asset and lease liability
|
$
|
|
$
|
|
||||
See accompanying notes to consolidated financial statements.
VIRNETX HOLDING CORPORATION
(in thousands except share, per share and per device amounts)
Note 1 − Formation and Business of the Company
VirnetX Holding Corporation (Company, we, us, or our) is an Internet security software and technology company. We develop patented cybersecurity solutions that ensure resilient, secure communications across any network
or device. Built on Zero Trust Network Access (ZTNA) principles, our flagship platform, VirnetX One™, virtualizes on-demand private networks using patented Secure Domain Names and automatically establishes secure links regardless of location or
endpoint.
Our products, including War Room™ and VirnetX Matrix™, are designed to support the U.S. Department of Defense (DoD) with real-time, encrypted collaboration. War RoomTM offers advanced visualization for
situational awareness, while Matrix secures communications through robust encryption, even in contested environments.
Our Digital Engineering (DE) services are designed to strengthen our current and evolving Model-Based Systems Engineering (MBSE) processes while also providing comprehensive Cyber Threat Assessment services seamlessly
integrating into the US Defense (DoD's) Digital Engineering strategy. Additionally, our DE professional services include integration of our subject matter expertise in kinetic and non-kinetic secure, automated, command and control, battle management,
and all-domain collection sensor orchestration. With embedded secure communication from research and development (R&D) to operational deployment, our Dynamic Trust Evaluation (DTE) methods continuously enforce real-time trust policies, ensuring
resilient and adaptive network security. Our Cyber Threat Intelligence (CTE) and assessment services deliver context-aware insights, empowering defense leaders to anticipate and mitigate emerging cyber threats.
Our product portfolio includes sophisticated technologies, products and services that are available for sale worldwide. Our next-generation VirnetX One™ platform builds upon our patented Secure Domain Name Registry and
Technology to further enhance the security and efficiency of our patented secure communication links. VirnetX One™ is a security-as-a-service platform that protects enterprise applications, services, and infrastructure from cyber-attacks. Our
platform allows government organizations, businesses, and other enterprises of all sizes to add a “security umbrella” as an added layer on top of their existing infrastructure to further reduce risk and bolster security against evolving cyberthreat
landscape to data, operating systems, other infrastructure products and gateway security controllers.
Note 2 − Summary of Significant Accounting Policies
The preparation of financial statements in conformity with accounting principles generally accepted in the United States requires us to make estimates and assumptions that affect the reported
amounts of assets and liabilities and disclosure of contingent assets and liabilities at the date of the financial statements and the reported amounts of revenues and expenses during the reported period. The critical accounting policies we employ in
the preparation of our consolidated financial statements are those which involve impairment of long-lived assets, income taxes, fair value of financial instruments and stock-based compensation.
Use of Estimates
We prepare our consolidated financial statements in accordance with U.S. GAAP. In doing so, we have to make estimates and assumptions that affect our reported amounts of assets, liabilities,
revenues, and expenses, as well as related disclosure of contingent assets and liabilities. In some cases, we could reasonably have used different accounting policies and estimates. In some cases, changes in the accounting estimates are reasonably
likely to occur from period to period. Accordingly, actual results could differ materially from our estimates. To the extent that there are material differences between these estimates and actual results, our financial condition or results of
operations will be affected. We base our estimates on past experience and other assumptions that we believe are reasonable under the circumstances, and we evaluate these estimates on an ongoing basis. We refer to accounting estimates of this type as
critical accounting policies and estimates, which we discuss further below. We have reviewed our critical accounting policies and estimates with the Audit Committee of our Board of Directors.
Basis of Consolidation
The consolidated financial statements include the accounts of VirnetX Holding Corporation and our wholly owned subsidiaries. All intercompany balances and transactions have been eliminated.
Revenue Recognition
We derive revenue from professional service contracts and licensing and royalty fees, which can span several years.
We recognize revenue pursuant to Accounting Standards Codification (ASC) Topic 606, Revenue from Contracts with Customers. A performance obligation is a promise in a contract to transfer a distinct
good or service to the customer. A contract’s transaction price is allocated to each distinct performance obligation and recognized as revenue when, or as, the performance obligation is satisfied. Our revenue arrangements may consist of
multiple-element arrangements, with revenue for each unit of accounting recognized as the product or service is delivered to the customer. With our service contracts, performance obligations are generally satisfied as the service is delivered. With
the licensing of our patents, performance obligations are generally satisfied at a point in time as work is complete when our patent rights are transferred to our customers. We generally have no further obligation to our customers regarding our
technology. Certain contracts may require our customers to enter into a hosting arrangement with us and for these arrangements, revenue is recognized over time, generally over the life of the service contract. Payment for services and licensing is
collected within a short period following commencement of delivery of services or transfer of patent rights.
Licensing Costs
Licensing costs are included in operating expenses as incurred.
Contingent Gains
ASC Topic 450-30-25, Contingent Gains, prohibits recognition of contingent gains until realized. Accordingly, we do not record contingent gains ahead of such realization. Management generally
considers any such gains as realized only upon the collection of cash.
Cash and Cash Equivalents
We consider all highly liquid investments purchased with maturities of three months or less at the date of purchase to be cash equivalents. Our cash and cash equivalents are not subject to
significant interest rate risk due to the short maturities of these investments.
Investments
Investments classified as available-for-sale are recorded at fair market value. Unrealized gains and losses are reported as other comprehensive income. Realized gains and losses are recorded in income in the period they are realized using specific identification of each security’s cost basis. We invest our excess cash primarily in highly liquid debt instruments including corporate, government and federal agency securities, with contractual maturities less than two years .
We have elected the investment measurement alternative for other investments without readily determinable fair values. During 2023, we invested $2,000 in L2 Holdings LLC (dba OmniTeq) and $500 in OP Media Inc. These investments are carried at our initial cost less any impairment because we do not have the ability to exercise significant influence over operating and financial matters. For these investments, we adjust the carrying value for any purchases or sales of our ownership interests. Periodically, we evaluate these investments for impairment. If we identify an impairment, we reduce the carrying value for the impairment loss with a charge to operating expenses.
Effective September 30, 2025 we identified an impairment in our investment in OP Media Inc., and as a result, we recognized an impairment loss totaling $500 .
Concentration of Credit Risk and Other Risks and Uncertainties
Our cash and cash equivalents are primarily maintained at two major financial institutions in the United States. Deposits held with these financial institutions may exceed the amount of insurance provided on such deposits. A portion of those balances are insured by the Federal Deposit Insurance Corporation. At times, we had funds that were uninsured. We do not believe that we are subject to any unusual financial risk beyond the normal risk associated with commercial banking relationships. We have not experienced any losses on our deposits of cash and cash equivalents.
Fair Value
The carrying amounts of our financial instruments, including cash equivalents, accounts payable, and accrued liabilities, approximate fair value because of their generally short maturities.
Property and Equipment
Property and equipment are stated at historical cost, less accumulated depreciation, and amortization. Depreciation and amortization are computed using the accelerated and straight-line methods over the estimated useful lives of the assets, which range from five to seven years . Repair and maintenance costs are charged to expense as incurred.
Leases
We determine if an arrangement is a lease at inception in accordance ASC Topic 842. Operating lease right-of-use (ROU) assets are included in prepaid expenses and other assets and lease liabilities are included in other liabilities on the Consolidated Balance Sheets. ROU assets represent our right to use an underlying asset for the lease term and lease liabilities represent our obligation to make lease payments arising from the lease. ROU assets and lease liabilities are recognized at the commencement date based on the present value of lease payments over the lease term, using the incremental borrowing rate, U.S. prime rate of 7.5 % in 2025 and 8.5 % in 2024.
Intangible Assets
We record intangible assets at cost, less accumulated amortization. Amortization of intangible assets is provided over their estimated useful lives, which can range from 3 to 15 years, on either a straight-line basis or as revenue is generated by the assets.
Impairment of Long-Lived Assets
We identify and record impairment losses on long-lived assets used in operations when events and changes in circumstances indicate that the carrying amount of an asset might not be recoverable, but
not less than annually. Recoverability is measured by comparison of the anticipated future net undiscounted cash flows to the related assets’ carrying value. If such assets are deemed impaired, the impairment to be recognized is measured by the
amount by which the carrying amount of the assets exceeds the projected discounted future net cash flows arising from the asset.
Research and Development
Research and development costs include expenses paid to outside development consultants and compensation related expenses for our engineering staff. Research and development costs are expensed as
incurred.
Income Taxes
We account for income taxes using the asset and liability method. The asset and liability method requires the recognition of deferred tax assets and liabilities for expected future tax consequences
of temporary differences that currently exist between the tax basis and financial reporting basis of our assets and liabilities. We calculate current and deferred tax provisions based on estimates and assumptions that could differ from actual results
reflected on the income tax returns filed during the following years. Adjustments based on filed returns are recorded when identified in the subsequent years. The effect on deferred taxes for a change in tax rates is recognized in income in the
period that the tax rate change is enacted. In assessing our deferred tax assets, we consider whether it is more likely than not that all or some portion of the deferred tax assets will not be realized.
A valuation allowance is provided for deferred income tax assets when, in our judgment, based upon currently available information and other factors, it is more likely than not that all or a
portion of such deferred income tax assets will not be realized. The determination of the need for a valuation allowance is based on an on-going evaluation of current information including, among other things, historical operating results, estimates
of future earnings in different taxing jurisdictions and the expected timing of the reversals of temporary differences. We believe the determination to record a valuation allowance to reduce a deferred income tax asset is a significant accounting
estimate because it is based, among other things, on an estimate of future taxable income in the United States and certain other jurisdictions, which is susceptible to change and may or may not occur, and because the impact of adjusting a valuation
allowance may be material. In determining when to release the valuation allowance established against our net deferred income tax assets, we consider all available evidence, both positive and negative. We continually assess our ability to generate
sufficient taxable income during future periods in which our deferred tax assets may be realized. If and when we believe it is more likely than not that we will recover our deferred tax assets, we will reverse the valuation allowance as an income tax
benefit in our statements of operations.
We account for our uncertain tax positions in accordance with U.S. GAAP, which utilizes a two-step approach to evaluate tax positions. Step one, recognition, requires evaluation of the tax position
to determine if based solely on technical merits it is more likely than not to be sustained upon examination. Step two, measurement, is addressed only if a position is more likely than not to be sustained. In step two, the tax benefit is measured as
the largest amount of benefit, determined on a cumulative probability basis, which is more likely than not to be realized upon ultimate settlement with tax authorities. If a position does not meet the more likely than not threshold for recognition in
step one, no benefit is recorded until the first subsequent period in which the more likely than not standard is met, the issue is resolved with the taxing authority, or the statute of limitations expires. Positions previously recognized are reversed
if and when we subsequently determine, the position no longer is more likely than not to be sustained. Evaluation of tax positions, their technical merits, and measurements using cumulative probability are highly subjective management estimates.
Actual results could differ materially from these estimates.
Stock-Based Compensation
We account for stock-based compensation using the fair value recognition method in accordance with U.S. GAAP. We recognize these compensation costs on a straight-line basis over the requisite service period of the award, which is generally a vesting term of 4 years. We recognize forfeitures, if any, when they occur. In addition, we record stock-based compensation expense for awards granted to non-employees at fair value of the consideration received or the fair value of the equity instruments issued, as they vest, over the performance period (See Note 6 - Stock-Based Compensation).
Earnings per Share
Basic earnings per share are computed by dividing earnings available to common stockholders by the weighted average number of outstanding common shares during the period. Diluted earnings per share
is computed by dividing net income by the weighted average number of shares outstanding during the period increased to include the number of additional shares of common stock that would have been outstanding if the potentially dilutive securities had
been issued. Additionally, weighted average shares outstanding for both basic and diluted earnings per share include all vested restricted shares issued and outstanding.
New Accounting Pronouncements
In December 2023, the FASB issued Accounting Standards Updated (ASU) 2023-09, Income Taxes (Topic 740): Improvements to Income Tax Disclosures, which requires disaggregated information about an
entity’s effective tax rate reconciliation as well as information on income tax paid. The guidance in this ASU is effective for public companies with annual periods beginning after December 15, 2024. We adopted the guidance prospectively in 2025. The
adoption had no impact on our consolidated financial statements but required additional disclosures.
In March 2024, the FASB issued ASU 2024-01, Compensation—Stock Compensation (Topic 718): Scope Application of Profits Interest and Similar Awards. The guidance in this ASU is effective for public
companies with annual periods beginning after December 15, 2024. We adopted the guidance in 2025 and it had no impact on our consolidated financial statements.
In November 2024, the FASB issued ASU 2024-03, Income Statement—Reporting Comprehensive Income—Expense Disaggregation (Subtopic 220-40): Disaggregation of Income Statement Expenses, that requires
disclosure of the amounts of purchases of inventory, employee compensation, depreciation, and intangible asset amortization included in each relevant expense line item on the income statement. The standard also requires a qualitative description of
other amounts included in each relevant expense line item on the income statement that are not separately disclosed. In addition, entities are required to disclose the nature and amount of selling expenses. The new standard is effective for annual
reporting periods beginning after December 15, 2026, and interim reporting periods beginning after December 15, 2027. Early adoption is permitted. We do not expect the adoption of this accounting standard to have an impact on our consolidated
financial statements but will require certain additional disclosures.
Note 3 − Property and Equipment
Our major classes of property and equipment were as follows:
|
December 31
|
||||||||
|
2025
|
2024
|
|||||||
|
Office furniture
|
$
|
|
$
|
|
||||
|
Computer equipment
|
|
|
||||||
|
Total
|
|
|
||||||
|
Less accumulated depreciation
|
( |
)
|
( |
)
|
||||
|
Total property and equipment, net
|
$
|
|
$
|
|
||||
Depreciation expense for 2025 and 2024 was $23 and $21 , respectively.
Note 4 − Commitments, Contingencies and Related Party Transactions
We have a non-exclusive service agreement for the use of an aircraft from K2 Investment Fund LLC (“LLC”) for business travel for our employees. Our Chief Executive Officer and Chief Administrative Officer are the managing partners and control the equity interests of the LLC. The agreement provided for the use of the plane at an initial rate of $8.1 per flight hour, which increased to $9.8 per flight hour in April 2024, includes no minimum usage requirement, contains other terms and conditions normal in such transactions and can be cancelled by either us or the LLC with 30 days’ notice. Neither party has exercised their termination rights. We incurred approximately $1,737 and $1,556 in rental fees and reimbursements to the LLC in 2025 and 2024, respectively. At December 31, 2025 we had an unpaid invoice from the LLC in the amount of $21 which is included in accounts payables and accrued liabilities on the Balance Sheet.
See Note 13 for further discussion of our lease commitments.
Note 5 − Stock Plan
Our stockholders approved the Amended and Restated Equity Incentive Plan (the “A&R Plan”) at our annual shareholders’ meeting in June 2024, which added 1,000,000 shares to the plan, and governs awards granted under the prior plan. The A&R Plan provides for the granting of stock options, restricted stock units (“RSUs”), and restricted stock. Options granted under the A&R Plan are granted with an exercise price equal to the fair value of the of our stock on the date of grant. RSUs and restricted stock are granted at the fair value of our stock on the date of grant because they have no exercise price. The fair value of options, RSUs and restricted stock are expensed over the vesting periods. All options, RSUs and restricted stock are subject to forfeiture if service terminates prior to the shares vesting. At December 31, 2025, there were 106,914 shares available for grant under the A&R Plan.
Note 6 − Stock-Based Compensation
The following tables summarize information and activity under the plan for the indicated periods.
| Options Outstanding | Options Vested and Exercisable | |||||||||||||||||||||||
| Range of Exercise Prices | Number Outstanding | Weighted Average Remaining Contractual Life (Years) | Weighted Average Exercise Price | Number Exercisable | Weighted Average Remaining Contractual Life (Years) | Weighted Average Exercise Price | ||||||||||||||||||
| $ | | | $ | | | | $ | | ||||||||||||||||
| $ | | | $ | | | | $ | | ||||||||||||||||
| | | $ | | | | $ | | |||||||||||||||||
| Options | ||||||||||||||||
| Number | Weighted Average Exercise Price | Weighted Average Remaining Contractual Life (Years) | Aggregate Intrinsic Value | |||||||||||||
| Outstanding, December 31, 2023 | | $ | | — | $ | — | ||||||||||
| Options granted | | | — | — | ||||||||||||
| Options exercised | | | — | — | ||||||||||||
| Options cancelled | ( | ) | | — | — | |||||||||||
| Outstanding, December 31, 2024 | | $ | | | $ | | ||||||||||
| Options granted | | | — | — | ||||||||||||
| Options exercised | ( | ) | — | — | ||||||||||||
| Options cancelled | ( | ) | | — | — | |||||||||||
| Outstanding, December 31, 2025 | | $ | | | $ | | ||||||||||
| Options exercisable, December 31, 2025 | | $ | | | $ | | ||||||||||
|
RSUs
|
||||||||||||
|
Number
|
Weighted
Average
Grant
Date
Fair Value
|
Aggregate
Intrinsic
Value
|
||||||||||
|
Outstanding, December 31, 2023
|
|
$
|
|
$
|
|
|||||||
|
RSUs granted
|
—
|
—
|
—
|
|||||||||
|
RSUs vested
|
( |
)
|
|
—
|
||||||||
|
RSUs cancelled
|
( |
)
|
|
—
|
||||||||
|
Outstanding, December 31, 2024
|
|
$
|
|
$
|
|
|||||||
|
RSUs granted
|
—
|
—
|
—
|
|||||||||
|
RSUs vested
|
( |
)
|
|
—
|
||||||||
|
RSUs cancelled
|
( |
)
|
|
—
|
||||||||
|
Outstanding, December 31, 2025
|
|
$
|
|
$
|
|
|||||||
|
Restricted Stock
|
||||||||||||
|
Number
|
Weighted
Average
Grant Date
Fair Value
|
Aggregate
Intrinsic
Value
|
||||||||||
|
Outstanding, December 31, 2023
|
|
$
|
|
$
|
|
|||||||
|
Restricted stock granted
|
|
|
—
|
|||||||||
|
Restricted stock vested
|
( |
)
|
|
—
|
||||||||
|
Restricted stock cancelled
|
( |
)
|
|
—
|
||||||||
|
Outstanding, December 31, 2024
|
|
$
|
|
$
|
|
|||||||
|
Restricted stock granted
|
|
|
—
|
|||||||||
|
Restricted stock vested
|
( |
)
|
|
—
|
||||||||
|
Restricted stock cancelled
|
( |
)
|
|
—
|
||||||||
|
Outstanding, December 31, 2025
|
|
$
|
|
$
|
||||||||
Intrinsic value is calculated as the difference between the per-share market price of our common stock on the last trading day of 2025, which was $16.69 and the grant price of the awards. For awards exercised, the intrinsic value is the difference between market price and the exercise price on the date of exercise.
Stock-based compensation expense is included in operating expense for each period as follows:
|
Stock-Based Compensation by Type of Award
|
Year Ended
December 31, 2025
|
Year Ended
December 31, 2024
|
||||||
|
Stock options
|
$
|
|
$
|
|
||||
|
RSUs
|
|
|
||||||
|
Restricted stock
|
|
|
||||||
|
Total stock-based compensation expense
|
$
|
|
$
|
|
||||
As of December 31, 2025, there was $9,836 of unrecognized stock-based compensation expense; $7,173 related to unvested stock options, $24 related to unvested RSUs, and $2,639 related to unvested restricted stock. These costs are expected to be recognized over a weighted-average period of 3.42 years for options, 0.43 years for RSUs, and 2.75 years for restricted stock.
The fair value of each option grant was estimated on the date of grant using the Black-Scholes option pricing model using the following weighted average assumptions:
| Year Ended December 31, 2025 | Year Ended December 31, 2024 | |||||||
| Expected stock price volatility | | % | | % | ||||
| Risk-free interest rate | | % | | % | ||||
| Expected life term | | — | ||||||
| Expected dividends | | % | | % | ||||
Based on the Black-Scholes option pricing model, the weighted average estimated fair value of employee stock options granted was $14.89 per share during 2025. The expected life was determined using the simplified method outlined in ASC 718, “Compensation - Stock Compensation”. Expected volatility of the stock options was based upon historical data and other relevant factors.
Note 7 − Earnings Per Share
Basic earnings per share are based on the weighted average number of shares outstanding for a period. Diluted earnings per share are based upon the weighted average number of shares and potentially
dilutive common shares outstanding. Potential common shares outstanding principally include stock options, RSUs and unvested restricted stock under our stock plan and warrants.
The table below sets forth the basic and diluted loss per share calculations:
|
Year Ended December 31,
|
||||||||
|
2025
|
2024
|
|||||||
|
Net (loss)
|
$
|
( |
)
|
$
|
( |
)
|
||
|
Basic weighted average number of shares outstanding
|
|
|
||||||
|
Effect of dilutive securities
|
|
|
||||||
|
Diluted weighted average number of shares outstanding
|
|
|
||||||
|
Basic (loss) per share
|
$
|
( |
)
|
$
|
( |
)
|
||
|
Diluted (loss) per share
|
$
|
( |
)
|
$
|
( |
)
|
||
We incurred net losses for the years ended December 31, 2025 and 2024; therefore, all potentially dilutive securities representing shares of common stock 234,842 at December 31, 2025 and 258,432 at December 31, 2024) were excluded from the computation of diluted earnings per share, because their effect would have been antidilutive.
Note 8 − Common Stock
Each share of common stock has the right to one vote. The holders of common stock are entitled to receive dividends whenever funds are legally available and when declared by our Board of Directors, subject to the prior rights of holders of all classes of stock outstanding having priority rights as to dividends. Our amended and restated certificate of incorporation authorize us to issue up to 100,000,000 shares of $0.0001 par value common stock.
Warrants
In 2020, we issued warrants for the purchase of 1,250 shares of common stock at an exercise price of $115 per share, exercisable on the date of grant, expiring in . These warrants expired unexercised on April 30, 2025.
Note 9 − Employee Benefit Plan
We sponsor a defined contribution 401(k) plan covering substantially all our employees. Our matching contribution to the plan was approximately $144 and $189 in 2025 and 2024, respectively.
Note 10 − Income Taxes
We adopted Topic 770 prospectively in 2025. Tax information shown for 2024 is prior to the adoption of Topic 770.
The income tax provision (benefit) is comprised of the following:
|
Year Ended
December 31, 2025
|
Year Ended
December 31, 2024
|
|||||||
|
Current:
|
||||||||
|
Federal
|
$
|
|
$
|
|
||||
|
State
|
( |
)
|
|
|||||
|
Foreign
|
|
|
||||||
| ( |
)
|
|
||||||
|
Deferred:
|
||||||||
|
Federal
|
|
|
||||||
|
State
|
|
|
||||||
| |
|
|||||||
|
Total income tax (benefit) provision
|
$
|
( |
)
|
$
|
|
|||
A reconciliation of the United States federal statutory income tax to our effective income tax rate in 2025, after the adoption of Topic 770 is as follows:
|
Year Ended December 31, 2025
|
||||||||
|
Tax at federal statutory rate
|
$
|
( |
)
|
|
%
|
|||
|
State and local income tax, net of federal income tax effect
|
( |
)
|
|
%
|
||||
|
Foreign tax effects
|
|
( |
)%
|
|||||
|
R&D credits
|
( |
)
|
|
%
|
||||
|
Valuation allowance
|
|
( |
)%
|
|||||
|
Nontaxable or nondeductible items:
|
||||||||
|
Stock compensation
|
( |
)
|
|
%
|
||||
|
Other non-deductible items
|
|
( |
)%
|
|||||
|
Other adjustments:
|
||||||||
|
Cancelled stock compensation
|
|
( |
)%
|
|||||
|
Other
|
|
( |
)%
|
|||||
|
|
$
|
( |
)
|
|
%
|
|||
For year ended December 31, 2025, the Company has paid income taxes (net of refund) in the following jurisdictions:
|
California
|
|
|||
|
Utah
|
|
|||
|
Georgia
|
|
|||
|
Arizona
|
|
|||
|
North Carolina
|
|
|||
|
Income taxes paid, net of refunds
|
|
A reconciliation of the United States federal statutory income tax to our effective income tax rate in 2024, prior to the adoption of Topic 770 is as follows:
|
Year Ended
December 31, 2024
|
||||
|
United States federal statutory rate
|
|
%
|
||
|
State taxes, net of federal benefit
|
( |
)%
|
||
|
Valuation allowance
|
( |
)%
|
||
|
Stock based compensation
|
( |
)%
|
||
|
Research and development credits
|
|
%
|
||
|
Other
|
( |
)%
|
||
|
Effective income tax rate
|
|
%
|
||
Deferred tax assets (liabilities) consist of the following:
|
As of
December 31, 2025
|
As of
December 31, 2024
|
|||||||
|
Deferred tax assets:
|
||||||||
|
Reserves and accruals
|
$
|
|
$
|
|
||||
|
Research and development credits and other credits
|
|
|
||||||
|
Net operating loss carry forward
|
|
|
||||||
|
Stock based compensation
|
|
|
||||||
|
Other
|
|
|
||||||
|
Total deferred tax assets
|
$
|
|
$
|
|
||||
|
Valuation allowance
|
( |
)
|
( |
)
|
||||
|
Deferred tax assets after valuation allowance
|
$
|
|
$
|
|
||||
|
Total deferred tax liability:
|
||||||||
|
ROU
|
$
|
( |
)
|
( |
)
|
|||
|
Gain or loss on investments
|
( |
) | |
|||||
|
Depreciation and amortization
|
|
|
( |
)
|
||||
|
Net deferred tax assets
|
$
|
|
$
|
|
||||
On July 4, 2025, the United States enacted tax legislation, often referred to as the “One Big Beautiful Bill” Act (OBBB). As of December 31, 2025, the OBBB includes several tax related provisions, including the ability to expense certain domestic research and development costs as incurred. Pursuant to IRC Section 174, we capitalized direct and indirect research and development costs for our tax return totaling $0 in 2025 and $5,251 in 2024, of which $3,798 will be amortized in our 2025 tax return and $3,273 was amortized in our 2024 tax return. Unamortized capitalized R&D expenditures as of December 31, 2025 total $9,517 .
At December 31, 2025, we had federal and state net operating loss carry forwards of approximately $107,136 and $114,532 , respectively. Federal net operating loss carryforwards do not expire. None of the state net operating loss carryforward is apportioned to a deferred tax asset, because currently we do not have operations in states where losses accumulated. The state net operating loss carryforward begins expiring in . We assess valuation allowances for our net deferred tax assets, including NOL carryforwards generated during the years, based on our evaluation of positive and negative evidence, including our history of operating losses and the uncertainty of generating future taxable income that would enable us to realize our deferred tax assets. Our tax years for 2021 and forward are subject to examination by the U.S. tax authority and various state tax authorities.
We are required to recognize the financial statement effects of a tax position when it is more likely than not, based on the technical merits, that the position will be sustained upon examination. At December 31 2025, we recorded an unrecognized tax benefit of $484 , none of which will result in change in the effective tax rate when recognized. We do not expect a significant change in uncertain tax positions in the next twelve months. Our policy is to recognize interest and penalties, if any, accrued on any unrecognized tax benefits, as a component of income tax expense. We had no interest or penalties accrued in 2025.
Unrecognized tax benefits consist of the following:
|
As of
December 31, 2025
|
||||
|
Balance, December 31, 2024
|
$
|
|
||
|
Increases related to prior year tax positions
|
|
|||
|
Increases related to current year tax positions
|
|
|||
|
Balance, December 31, 2025
|
$
|
|
||
Note 11 − Fair Value Measurement
Fair value is the price that would result from an orderly transaction between market participants at the measurement date. A fair value hierarchy prioritizes the inputs used to measure fair value.
The hierarchy gives the highest priority to unadjusted quoted prices in active markets for identical assets or liabilities (Level 1 measurement) and the lowest priority to unobservable inputs (Level 3 measurement). Level 2 measurements utilize either
directly or indirectly observable inputs in markets other than quoted prices in active markets.
Our financial instruments are stated at amounts that equal, or approximate, fair value. When we estimate fair value, we utilize market data or assumptions that we believe market participants
would use in pricing the financial instrument, including assumptions about risk and inputs to the valuation technique. We use valuation techniques, primarily the income and market approach, which maximizes the use of observable inputs and minimize
the use of unobservable inputs for recurring fair value measurements.
Mutual funds: Valued at the quoted net asset value (NAV) of shares held.
U.S. agency and treasury securities: Fair value measured at the closing price reported on the active market on which the individual securities are traded.
|
December 31, 2025
|
||||||||||||||||||||||||
|
Adjusted
Cost
|
Unrealized
Gains
|
Unrealized
Losses
|
Fair
Value
|
Cash
and Cash
Equivalents
|
Investments
Available
for Sale
|
|||||||||||||||||||
|
Cash
|
$
|
|
$
|
|
$
|
|
$
|
|
$
|
|
$
|
|
||||||||||||
|
Level 1:
|
||||||||||||||||||||||||
|
Mutual funds
|
|
|
|
|
|
|
||||||||||||||||||
|
U.S. agency and treasury securities
|
|
|
|
|
|
|
||||||||||||||||||
| |
|
|
|
|
|
|||||||||||||||||||
|
Total
|
$
|
|
$
|
|
$
|
|
$
|
|
$
|
|
$
|
|
||||||||||||
|
December 31, 2024
|
||||||||||||||||||||||||
|
Adjusted
Cost
|
Unrealized
Gains
|
Unrealized
Losses
|
Fair
Value
|
Cash
and Cash
Equivalents
|
Investments
Available
for Sale
|
|||||||||||||||||||
|
Cash
|
$
|
|
$
|
|
$
|
|
$
|
|
$
|
|
$
|
|
||||||||||||
|
Level 1:
|
||||||||||||||||||||||||
|
Mutual funds
|
|
|
|
|
|
|
||||||||||||||||||
|
U.S. agency and treasury securities
|
|
|
( |
)
|
|
|
|
|||||||||||||||||
| |
|
( |
)
|
|
|
|
||||||||||||||||||
|
Total
|
$
|
|
$
|
|
$
|
( |
)
|
$
|
|
$
|
|
$
|
|
|||||||||||
The maturities of our investments generally range between one to two years . Actual maturities could differ from contractual maturities due to call or prepayment provisions.
Note 12 − Litigation
From time to time, we are subject to various legal proceedings, the outcomes of which are inherently uncertain. We record any potential gains related to legal proceedings only after cash is
collected. We record a liability when it is probable that a loss has been incurred and the amount is reasonably estimable, the determination of which requires significant judgment. As additional information becomes available, we reassess our
potential liability and may revise our estimates. Such resolutions could have a material impact on future quarterly or annual results of operations.
One or more potential intellectual property infringement claims may also be available to us against certain other companies who have the resources to defend against any such claims. Although we
believe these potential claims are likely valid, commencing a lawsuit can be expensive and time-consuming, and there is no assurance that we could prevail on such potential claims if we made them.
Note 13 − Leases
In October 2025, we renewed our lease for office space in Nevada with a third party recording an ROU asset and lease liability of $103 4.6 and expires in October 2027. At December 31, 2025 and 2024, our ROU asset and lease liability totaled $95 42 56
In October 2023, we executed a facility lease in Utah to be used for technical integration and as a training facility recording an ROU asset and a lease liability of $3,587 72 , includes periodic increases, provides six months of free rent, and expires in April 2029. At December 31, 2025, our ROU asset and lease liability totaled $2,385 and $2,791 , respectively. At December 31, 2024, our ROU asset and lease liability totaled $2,963 and $3,430 , respectively. Lease expense totaled $838
We also lease a facility for corporate promotional and marketing purposes in California which was prepaid at inception and expired in 2025. In March 2024, we renewed the lease recording an ROU asset and lease liability of $5,512 10 years through 2035, required either a single payment of $6,000 , or annual payments each March, beginning in 2025 starting at $600 and increasing annually for a total commitment of approximately $7,500 . In January 2025, the Company elected the 10 annual payments option which resulted in an adjustment to the carrying amount of the ROU asset and lease liability of just over $600 4,761 and lease liability totaled $5,058 . At December 31, 2024, our ROU asset totaled $5,739 and lease liability totaled $5,917 . Lease expense totaled $720 in 2025 and $527 in 2024.
The weighted average remaining life of the above leases is approximately 6
|
Due in 2026
|
$
|
|
||
|
Due in 2027
|
$
|
|
||
|
Due in 2028
|
$
|
|
||
|
Due in 2029
|
$
|
|
||
|
Due in 2030
|
$
|
|
||
|
Thereafter
|
$
|
|
||
|
Total undiscounted lease liability
|
$
|
|
||
|
Less: imputed interest
|
$
|
( |
)
|
|
|
Total lease liability
|
$
|
|
Lastly, we have a service agreement for the use of an aircraft from a related party discussed in more detail in Note 4. We incurred approximately $1,737 and $1,556 in rental fees and reimbursements to the LLC in 2025 and 2024, respectively.
Note 14 - Segment Reporting
We view our operations and make decisions regarding how to allocate resources and manage our business as one reportable segment and one reporting unit. Our Chief Executive Officer, who is the chief operating decision maker (CODM), is regularly provided with expense information at a level consistent with that disclosed in our consolidated financial statements, regularly assesses performance of the aggregated single operating and reporting segment and decides how to allocate resources based on net income calculated on the same basis as net income reported in our consolidated financial statements.
| Item 9. |
Changes in and Disagreements with Accountants on Accounting and Financial Disclosure
|
Not applicable.
| Item 9A. |
Controls and Procedures
|
Evaluation of Disclosure Controls and Procedures
Under the supervision and with the participation of our management, including our Chief Executive Officer and Chief Financial Officer, we conducted an evaluation of the effectiveness of the design
and operation of our disclosure controls and procedures, as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended, December 31, 2025.
The purpose of this evaluation was to determine whether as of December 31, 2025 our disclosure controls and procedures were effective to provide reasonable assurance that the information we are
required to disclose in our filings with the SEC, (i) is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms and (ii) accumulated and communicated to our management, including our Chief
Executive Officer and Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure.
Based on their evaluation, our Chief Executive Officer and Chief Financial Officer have concluded that as of December 31, 2025, our disclosure controls and procedures were effective.
Changes in Internal Control Over Financial Reporting
There were no changes in our internal controls over financial reporting (as such term is defined in rules 13a-15(f) under the Securities Exchange Act of 1934, as amended) during the fiscal year
ended December 31, 2025, that have materially affected, or are reasonably likely to materially affect, our internal controls over financial reporting.
Management’s Report on Internal Control Over Financial Reporting
Our management is responsible for establishing and maintaining adequate internal control over financial reporting for the Company. Internal control over financial reporting is a process to provide
reasonable assurance regarding the reliability of our financial reporting for external purposes in accordance with accounting principles generally accepted in the United States of America. Internal control over financial reporting includes
maintaining records that in reasonable detail accurately and fairly reflect our transactions; providing reasonable assurance that transactions are recorded as necessary for preparation of our financial statements; providing reasonable assurance that
receipts and expenditures of Company assets are made in accordance with management authorization; and providing reasonable assurance that unauthorized acquisition, use or disposition of Company assets that could have a material effect on our
financial statements would be prevented or detected on a timely basis. Because of its inherent limitations, internal control over financial reporting is not intended to provide absolute assurance that a misstatement of our financial statements would
be prevented or detected.
Management conducted an evaluation of the effectiveness of our internal control over financial reporting based on the framework in Internal Control – Integrated
Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission. Based on this evaluation, management concluded that the Company’s internal control over financial reporting was effective as of December 31,
2025. There were no changes in our internal control over financial reporting during the period ended December 31, 2025, that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.
| Item 9B. |
Other Information
|
Securities Trading Plans of Directors and Executive Officers.
During the three months ended December 31, 2025, the Company did not adopt terminated
| Item 9C. |
Disclosure Regarding Foreign Jurisdictions that Prevent Inspections
|
Not Applicable.
PART III
| Item 10. |
Directors, Executive Officers and Corporate Governance
|
The information required by this item will be contained in our definitive proxy statement to be filed with the SEC in connection with our 2026 Annual Meeting of Stockholders (the Proxy Statement),
which is expected to be filed not later than 120 days after the end of our fiscal year ended December 31, 2025 and is incorporated in this report by reference.
| Item 11. |
Executive Compensation
|
The information required by this item will be set forth in the Proxy Statement and is incorporated herein by reference.
| Item 12. |
Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters
|
The information required by this item will be set forth in the Proxy Statement and is incorporated herein by reference.
Securities Authorized for Issuance Under the Equity Compensation Plans
Our Amended and Restated Equity Incentive Plan (the A&R Plan) was approved by our shareholders in June 2023. The A&R Plan allows us to grant stock options, restricted stock units (“RSUs”),
and restricted stock. Options granted under the A&R Plan are granted with an exercise price equal to the fair value of the of our stock on the date of grant. RSUs and restricted stock are granted at the fair value of our stock on the date of
grant. The fair value of options, RSUs and restricted stock are expensed over the vesting periods. All awards are subject to forfeiture if service terminates prior to the shares vesting. At December 31, 2025, there were 106,914 shares available for
grant under the A&R Plan.
|
Plan Category
|
Number of
Securities to be
Issued Upon
Exercise of
Outstanding
Options and
RSUs
|
Weighted-Average
Exercise Price of
Outstanding
Options and RSUs
|
Number of
Securities
Remaining
Available for
Future Issuance
Under Equity
Compensation
Plans
|
|||||||||
|
Equity compensation plans approved by security holders
|
727,884 |
$
|
39.82
|
106,914
|
||||||||
|
Equity compensation plans not approved by security holders
|
—
|
—
|
||||||||||
|
Total
|
727,884
|
$
|
39.82
|
106,914 | ||||||||
During 2025, we granted restricted stock awards totaling 30,000 to non-employee members of our Board of Directors, 488,000 options to our employees.
| Item 13. |
Certain Relationships and Related Transactions, and Director Independence
|
The information required by this item will be set forth in the Proxy Statement and is incorporated herein by reference.
| Item 14. |
Principal Accounting Fees and Services
|
The information required by this item will be set forth in the Proxy Statement and is incorporated herein by reference.
PART IV
| Item 15. |
Exhibits and Financial Statement Schedules
|
| (a) |
The following documents are filed as part of this Annual Report on Form 10-K
|
| (1) |
Financial Statements: See the Index to Consolidated Financial Statements under Item 8 of this Annual Report on Form 10-K.
|
| (2) |
Financial Statement Schedule: Financial statement schedules are omitted because they are not applicable, or the required information is shown in the
financial statements or notes thereto. All other schedules are omitted because of the absence of conditions under which they are required or because the required information is given in the financial statements or the notes thereto.
|
| (3) |
Exhibits: The documents listed in the Exhibit Index of this Annual Report on Form 10-K are incorporated by reference or are filed with this Annual
Report on Form 10-K, in each case as indicated therein (numbered in accordance with Item 601 of Regulation S-K).
|
EXHIBIT INDEX
|
Exhibit
Number
|
Description
|
Incorporated by reference herein
|
||||
|
Form
|
Exhibit
No.
|
Filing Date
|
File No.
|
Filed
Herewith
|
||
|
3.1
|
8-K
|
3.1
|
11/01/2007
|
000-26895
|
||
|
3.2
|
8-K
|
3.1
|
10/25/2023
|
001-33852
|
||
|
3.3
|
8-K
|
3.1
|
01/27/2023
|
001-33852
|
||
|
4.1
|
S-3
|
4.1
|
07/30/2018
|
333-226413
|
||
|
4.2
|
S-3
|
4.2
|
07/30/2018
|
333-226413
|
||
|
4.3
|
S-3
|
4.4
|
07/30/2018
|
333-226413
|
||
|
4.4
|
X
|
|||||
|
10.1
|
10-K
|
10.1
|
03/18/2019
|
001-33852
|
||
|
10.2*
|
10-Q
|
10.2
|
05/10/2012
|
001-33852
|
||
|
10.3*
|
10-Q
|
4.5
|
05/10/2011
|
001-33852
|
||
|
10.4*
|
10-Q
|
10.3
|
05/10/2012
|
001-33852
|
||
|
10.5*
|
DEF 14A
|
Appendix A
|
04/13/2021
|
001-33852
|
||
|
10.6*
|
8-K
|
10.1
|
06/18/2024
|
001-33852
|
||
|
10.7*
|
10-K
|
10.6
|
03/02/2015
|
001-33852
|
||
|
10.8*
|
10-K
|
10.7
|
03/02/2015
|
001-33852
|
||
|
10.9*
|
10-Q
|
10.2
|
08/11/2023
|
001-33852
|
||
|
10.10
|
8-K
|
10.4
|
07/12/2007
|
000-26895
|
||
|
10.11**
|
8-K
|
10.6
|
07/12/2007
|
000-26895
|
||
|
10.12
|
8-K
|
10.1
|
03/18/2008
|
001-33852
|
||
|
10.13
|
8-K
|
10.5
|
07/12/2007
|
000-26895
|
||
|
10.14
|
8-K
|
10.7
|
07/12/2007
|
000-26895
|
||
|
10.15
|
8-K
|
10.8
|
07/12/2007
|
000-26895
|
||
|
10.16**
|
10-Q/A
|
10.1
|
01/31/2011
|
001-33852
|
| 10.17** |
10-K
|
10.23
|
03/02/2015
|
001-33852
|
|
|
|
10.18*
|
10-Q
|
10.1
|
11/08/2021
|
001-33852
|
|
| 10.19 |
10-Q
|
10.2
|
05/15/2023
|
001-33852
|
|
|
|
10.20*
|
10-K/A
|
10.22
|
04/18/2024
|
001-33852
|
|
|
|
19.1
|
|
|
|
|
X | |
|
21.1
|
10-K
|
21.1
|
03/16/2021
|
001-33852
|
|
|
|
23.1
|
|
|
|
|
X | |
|
24.1
|
|
|
|
|
X | |
|
31.1
|
|
|
|
|
X | |
|
31.2
|
|
|
|
|
X | |
|
32.1†
|
|
|
|
|
X | |
|
32.2†
|
|
|
|
|
X | |
|
97.1*
|
10-K/A
|
97.1
|
04/18/2024
|
001-33852
|
|
|
|
101.INS
|
XBRL Instance Document
|
|
|
|
|
X |
|
101.SCH
|
XBRL Taxonomy Extension Schema Document
|
|
|
|
|
X |
|
101.CAL
|
XBRL Taxonomy Extension Calculation Linkbase Document
|
|
|
|
|
X |
|
101.DEF
|
XBRL Taxonomy Extension Definition Linkbase Document
|
|
|
|
|
X |
|
101.LAB
|
XBRL Taxonomy Extension Label Linkbase Document
|
|
|
|
|
X |
|
101.PRE
|
XBRL Taxonomy Extension Presentation Linkbase Document
|
|
|
|
|
|
|
104
|
Cover Page Interactive Data File (formatted as inline XBRL and contained in Exhibit 101)
|
|
|
|
|
X |
| * |
Indicates management contract or compensatory plan.
|
| ** |
Confidential treatment has been granted by the SEC as to certain portions of this exhibit.
|
| † |
The certifications attached as Exhibit 32.1 and 32.2 that accompany this Report are not deemed filed with the Securities and Exchange Commission and are not to be incorporated by reference
into any filing of VirnetX Holding Corporation under the Securities Act or the Exchange Act, whether before or after the date of this Report, irrespective of any general incorporation language contained in such filing.
|
SIGNATURES
Pursuant to the requirements of Section 13 or 15(d) of the Securities Exchange Act of 1934, the registrant has duly caused this Annual Report on Form 10-K to be signed on its behalf by the
undersigned, thereunto duly authorized.
|
VirnetX Holding Corporation
|
||
|
By:
|
/s/ Kendall Larsen
|
|
|
Name: Kendall Larsen
|
||
|
Title: Chief Executive Officer and President
|
||
|
Dated: March 24, 2026
|
||
KNOW ALL PERSONS BY THESE PRESENTS, that each person whose signature appears below constitutes and appoints Kendall Larsen as his attorney-in-fact, with full power of substitution, for him in any
and all capacities, to sign any amendments to this Annual Report on Form 10-K, and to file the same, with exhibits thereto and other documents in connection therewith with the Securities and Exchange Commission, hereby ratifying and confirming all
that said attorney-in-fact, or his substitute or substitutes may do or cause to be done by virtue hereof.
Pursuant to the requirements of the Securities Exchange Act of 1934, this Annual Report on Form 10-K has been signed below by the following persons on behalf of the registrant and in the capacities
indicated.
|
Name
|
Capacity
|
Date
|
||
|
/s/Kendall Larsen
|
Director, Chief Executive Officer and President
|
March 24, 2026
|
||
|
Kendall Larsen
|
(Principal Executive Officer)
|
|||
|
/s/Katherine Allanson
|
Chief Financial Officer
|
March 24, 2026
|
||
|
Katherine Allanson
|
(Principal Financial Officer and
Principal Accounting Officer)
|
|||
|
/s/Heidy Chow
|
Director
|
March 24, 2026
|
||
|
Heidy Chow
|
||||
|
/s/Gary Feiner
|
Director
|
March 24, 2026
|
||
|
Gary Feiner
|
||||
|
/s/Michael F. Angelo
|
Director
|
March 24, 2026
|
||
|
Michael F. Angelo
|
||||
|
/s/Thomas M. O’Brien
|
Director
|
March 24, 2026
|
||
|
Thomas M. O’Brien
|
49