VirnetX Holding Corp
For the period ended Sep 30, 2025. Filed Nov 14, 2025.
View on SEC.govAbout this filing
A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.
Sep 30, 2025 · Filed Nov 14, 2025
VHC$9.71+2.9%Stored close · as of Nov 6, 2026
What changed in Risk Factors?
Read the current filingPrevious report: 10-Q
Period ended 2025-06-30; filed 2025-08-12.
0001140361-25-030577
Item 1A. — Risk FactorsCurrent report: 10-Q
Period ended 2025-09-30; filed 2025-11-14.
0001140361-25-042294
Item 1A. — Risk FactorsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 82 previous paragraphs and 83 current paragraphs.
66 unchanged; 8 reworded; 9 added; 5 removed; 3 previous and 0 current paragraphs rearranged.
Tables are not compared: 35 previous and 35 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (9)
Current report
We plan to offer our products to government entities, which are subject to a number of challenges and risks.
Current report
Government entities have announced reductions in, or experienced increased pressure to reduce, government spending. Continued U.S. debt, income tax and budget issues, government shutdowns and delays in approving U.S. spending or reductions in such may adversely impact existing or future U.S. public sector transactions and affect future sales of our products and services to such entities. Additionally, any future government demand and payment for our products may be more volatile as they are affected by public sector budgetary cycles, funding authorizations, and the potential for funding reductions or delays, making the time to close such transactions more difficult to predict.
Current report
In addition, sales to government entities are subject to a number of risks. Government entities may continue use of legacy products and services indefinitely and be slow to transition to more modern products and services, including ours, or impose challenging regulatory requirements on such adoptions, any of which may inhibit the growth of our public sector business. Selling to government entities can be highly competitive, expensive and time consuming, often requiring significant upfront time and expense without any assurance that we will successfully sell our products to such governmental entity. Government entities may require contract terms that differ from our standard arrangements or require the maintenance of certain facility and employee security clearance, which may be difficult to obtain or maintain.
Current report
Our business could be adversely affected if our employees cannot obtain and maintain required personnel security clearances or we cannot establish and maintain a required facility security clearance.
Current report
Certain government contracts may require our employees to maintain various levels of security clearances and may require us to maintain a facility security clearance to comply with U.S. and international government agency requirements. Many governments have strict security clearance requirements for personnel who perform work in support of classified programs. Obtaining and maintaining security clearances for employees typically involves a lengthy process, and it can be difficult to identify, recruit, and retain employees who already hold security clearances. If our employees are unable to obtain security clearances in a timely manner, or at all, or if our employees who hold security clearances are unable to maintain their clearances or terminate employment with us, then we may be unable to bid on or win new classified contracts. To the extent we are not able to obtain or maintain a facility security clearance, we may not be able to bid on or win classified contracts, which would have an adverse impact on our business, financial condition, and results of operations.
Current report
The market for ZTNA security solutions is rapidly evolving and highly competitive as new entrants and traditional network solutions companies offer cloud-based cybersecurity solutions. Competition in our business is highly diverse, and while our competitors offer different products and services, there is often competition for contracts that are part of government budgets. We also may face competition from companies that provide products and services to the U.S. Government, including defense contractors.
Removed paragraphs (5)
Previous report
Failure to meet the NYSE’s continued listing requirements could result in the suspension of trading of our common stock and a subsequent delisting of our common stock.
Previous report
On August 28, 2024, we received a written notification from the NYSE that as of August 27, 2024, we were not in compliance with the continued listing standards set forth in Section 802.01B of the NYSE Listed Company Manual because the average global market capitalization over a consecutive 30 trading-day period and stockholders’ equity were both less than $50 million. In accordance with applicable NYSE procedures, we submitted a plan to the NYSE on October 11, 2024, and provide quarterly updates advising it of the definitive actions we have taken, are taking and plan to take that would bring us into conformity with the standard set forth in Section 802.01B within 18 months of receipt of the written notification. The written notification has no immediate impact on our ongoing business operations, reporting requirements with the SEC or the listing of our common stock on the NYSE at this time, subject to the Company’s continued compliance with the plan and NYSE’s other continued listing standards. We are considering all of our available options, including efforts to regain compliance with NYSE’s continued listing standards, but can provide no assurances that we will be able to satisfy the requirements of the NYSE.
Previous report
Our common stock could also be delisted if our average global market capitalization over a consecutive 30 trading-day period is less than $15 million. Our average global market capitalization over a consecutive 30 trading-day period may fall below $15 million based on continued volatility and fluctuations in the market price of our common stock. In the event that our stock price does not meet the global market capitalization requirement, the NYSE will promptly suspend our common stock from trading on the NYSE and will simultaneously begin the process to delist our common stock, subject to our right to appeal under NYSE rules. While we may appeal this decision, there is no assurance that any appeal we undertake will be successful.
Previous report
If shares of our common stock are delisted from the NYSE, there may be no public market for our common stock. Any over-the-counter or other market that does develop would likely be characterized by decreased liquidity and greater volatility, which may materially and adversely affect the value of our common stock. A delisting of our common stock could negatively impact the Company and holders of our common stock, including by reducing the willingness of investors to hold our common stock because of the resulting decreased price, liquidity and trading of our common stock, limited availability of price quotations, and reduced news and analyst coverage. These developments may also require brokers trading in our common stock to adhere to more stringent rules and may limit our ability to raise capital by issuing additional shares of common stock in the future. Delisting may adversely impact the perception of our financial condition, cause reputational harm with investors, our employees and parties conducting business with us, and limit our access to debt and equity financing. The perceived decrease in value of employee equity incentive awards may reduce their effectiveness in encouraging performance and retention.
Reworded paragraphs (8)
Previous wording
We had a net loss of $7.3 million for the six months ended June 30, 2025 and a net loss of $18.2 million for the year ended December 31, 2024. As of June 30, 2025, we had an accumulated deficit of $212.0 million. Our operating results have fluctuated in the past due to several factors and may fluctuate in the future due to the same or similar factors, which include but are not limited to the following:
Current wording
We had a net loss of $11.6 million for the nine months ended September 30, 2025 and a net loss of $18.2 million for the year ended December 31, 2024. As of September 30, 2025, we had an accumulated deficit of $216.3 million. Our operating results have fluctuated in the past due to several factors and may fluctuate in the future due to the same or similar factors, which include but are not limited to the following:
Previous wording
Part of our business strategy is to enter into partnerships, strategic investments, and other cooperative arrangements with other companies and government agencies. We have invested in and we continue to seek to invest in or acquire businesses, technologies, or other assets that we believe could complement or expand our business. In addition, we are regularly involved in cooperative efforts with respect to the incorporation of our products into products of others and vice versa, collaborative research and development efforts with government and university laboratories, distributor and reseller arrangements and service provider partnerships. These relationships are generally non-exclusive, and some of our partners also have cooperative relationships with certain of our competitors or offer some products and services that are competitive with ours. If we lose third-party relationships, if these relationships are not commercially successful, or if we are unable to enter into third-party relationships on commercially reasonable terms in the future, our business could be negatively impacted.
Current wording
Our business strategy is to enter into partnerships, strategic investments, and other cooperative arrangements with other companies and government agencies. We have invested in and we continue to seek to invest in or acquire businesses, technologies, or other assets that we believe could complement or expand our business. In addition, we are regularly involved in cooperative efforts with respect to the incorporation of our products into products of others and vice versa, collaborative research and development efforts with government and university laboratories, distributor and reseller arrangements and service provider partnerships. These relationships are generally non-exclusive, and some of our partners also have cooperative relationships with certain of our competitors or offer some products and services that are competitive with ours. If we lose third-party relationships, if these relationships are not commercially successful, or if we are unable to enter into third-party relationships on commercially reasonable terms in the future, our business could be negatively impacted.
Previous wording
The market for ZTNA security solutions is rapidly evolving and highly competitive as new entrants and traditional network solutions companies offer cloud-based cybersecurity solutions. Many of our competitors and potential competitors have established brand recognition, larger customer bases, and greater resources than we do. Our primary competitors in the ZTNA market include Appgate, Cloudflare, and Illumio. In the enterprise market, our primary competitors include Zscaler (ZPA), Palo Alto Networks (Prisma Access), Cisco (Umbrella), Citrix (Secure Private Access), Netskope (Private Access for ZTNA) and Cato Networks. As we expand our product offerings and use cases, we will begin to compete with companies that offer bundled security-as-a-service solutions that include Secure Access Service Edge (SASE) and Security Service Edge (SSE). With the introduction of new technologies and market entrants, we expect competition to intensify in the future. For example, disruptive technologies such as generative AI has and may continue to fundamentally alter the market for our services in unpredictable ways and reduce customer demand. If we fail to compete effectively, our business will be harmed. Some of our competitors offer their products or services at lower prices or for free as part of a broader bundled product sale or enterprise license arrangement, which has placed pricing pressure on our business. If we are unable to achieve our target pricing levels, our operating results will be negatively impacted. For us to compete effectively, we need to introduce new products and services in a timely and cost-effective manner, meet customer expectations and needs at prices that customers are willing to pay, and continue to enhance the features and functionalities of our cloud content management platform. In addition, pricing pressures and increased competition could result in reduced sales, lower margins, losses or the failure of our services to achieve or maintain widespread market acceptance, any of which could harm our business.
Current wording
Many of our competitors and potential competitors have established brand recognition, larger customer bases, and greater resources than we do. Our primary competitors in the ZTNA market include Appgate, Cloudflare, and Illumio. In the enterprise market, our primary competitors include Zscaler (ZPA), Palo Alto Networks (Prisma Access), Cisco (Umbrella), Citrix (Secure Private Access), Netskope (Private Access for ZTNA) and Cato Networks. As we expand our product offerings and use cases, we will begin to compete with companies that offer bundled security-as-a-service solutions that include Secure Access Service Edge (SASE) and Security Service Edge (SSE). With the introduction of new technologies and market entrants, we expect competition to intensify in the future. For example, disruptive technologies such as generative AI has and may continue to fundamentally alter the market for our services in unpredictable ways and reduce customer demand. If we fail to compete effectively, our business will be harmed. Some of our competitors offer their products or services at lower prices or for free as part of a broader bundled product sale or enterprise license arrangement, which has placed pricing pressure on our business. If we are unable to achieve our target pricing levels, our operating results will be negatively impacted. For us to compete effectively, we need to introduce new products and services in a timely and cost-effective manner, meet customer expectations and needs at prices that customers are willing to pay, and continue to enhance the features and functionalities of our cloud content management platform. In addition, pricing pressures and increased competition could result in reduced sales, lower margins, losses or the failure of our services to achieve or maintain widespread market acceptance, any of which could harm our business.
Previous wording
Many of our competitors are able to devote greater resources to the development, promotion and sale of their products or services. In addition, many of our competitors have established marketing relationships and major distribution agreements with government agencies, channel partners, consultants, system integrators and resellers. Competitors may offer products or services at lower prices or with greater depth than our services. Our competitors may be able to respond more quickly and effectively to new or changing opportunities, technologies, standards or customer requirements. Furthermore, some potential customers, particularly large enterprises, may elect to develop their own internal solutions. For any of these reasons, we may not be able to compete successfully against our competitors.
Current wording
Many of our competitors are able to devote greater resources to the development, promotion and sale of their products or services. In addition, many of our competitors have established marketing relationships and major distribution agreements with government agencies, channel partners, consultants, system integrators and resellers. Competitors may offer products or services at lower prices or with greater depth than our services. Our competitors may be able to respond more quickly and effectively to new or changing opportunities, technologies, standards or customer requirements. Furthermore, some potential customers, particularly large enterprises, may elect to develop their own internal solutions. In addition, the U.S. government and foreign governments may develop, construct, launch and operate their own ZTNA security solutions with capabilities comparable or similar to ours, which could reduce their need to rely on us and other commercial suppliers. For any of these reasons, we may not be able to compete successfully against our competitors.
Previous wording
We expect to retain certain confidential and proprietary customer information in our secure data centers and secure domain name registry, as well as personal data and other confidential and proprietary information relating to our business. It will be critical to our business strategy that our facilities and infrastructure, including our secure domain name servers, remain secure and are perceived by the marketplace to be secure. Our secure domain name registry operations will also depend on our ability to maintain our computer and telecommunications equipment in effective working order and to reasonably protect our systems against interruption, and potentially depend on protection by other registrars in the shared registration system. Additionally, we maintain confidential and proprietary business information, including trade secrets. We expect to continue to have to expend significant time and money to maintain or increase the security of our products, facilities, and infrastructure. Security technologies are constantly being tested by computer professionals, academics and “hackers.” Advances in computer capabilities and the techniques for attacking security solutions, new discoveries in the field of cryptography or other events or developments could result in compromises or breaches of our security measures and could make some or all our products obsolete or unmarketable. Likewise, we may need to dedicate engineering and other resources to mitigate or eliminate security vulnerabilities and may find it necessary or appropriate to repair or replace products already sold or licensed to our customers. Despite the security measures that we and our service providers utilize, our infrastructure and that of our service providers may be vulnerable to physical break-ins, ransomware, computer viruses, other malicious code attacks by hackers, phishing attacks, social engineering, or similar disruptive problems. There can be no assurances our security measures or those of our service providers will prevent security breaches or incidents. Any disruption or security breach or incident that we or our service providers suffer or are perceived to suffer, including any such disruption, breach or incident resulting in a loss of, or damage to, data or systems, or inappropriate disclosure, access, loss, or other processing of confidential, financial, proprietary or personal information, including data related to our personnel, could result in loss, disclosure or other unauthorized processing of such data, could delay our research and development or commercialization efforts, could compel us to comply with breach notification laws and regulations, subject us to mandatory corrective action, and otherwise subject us to liability under laws and regulations that protect the privacy and security of personal information. It is possible that we may have to expend additional financial and other resources to address such problems. Remote work by our personnel and those of thir…
Excerpt shortened here; the source contains the full paragraph.
Current wording
We expect to retain certain confidential and proprietary customer information in our secure data centers and secure domain name registry, as well as personal data and other confidential and proprietary information relating to our business. It will be critical to our business strategy that our facilities and infrastructure, including our secure domain name servers, remain secure and are perceived by the marketplace to be secure. Our secure domain name registry operations will also depend on our ability to maintain our computer and telecommunications equipment in effective working order and to reasonably protect our systems against interruption, and potentially depend on protection by other registrars in the shared registration system. Additionally, we maintain confidential and proprietary business information, including trade secrets. We expect to continue to have to expend significant time and money to maintain or increase the security of our products, facilities, and infrastructure. Security technologies are constantly being tested by computer professionals, academics and “hackers.” Advances in computer capabilities and the techniques for attacking security solutions, new discoveries in the field of cryptography or other events or developments could result in compromises or breaches of our security measures and could make some or all our products obsolete or unmarketable. Likewise, we may need to dedicate engineering and other resources to mitigate or eliminate security vulnerabilities and may find it necessary or appropriate to repair or replace products already sold or licensed to our customers. Despite the security measures that we and our service providers utilize, our infrastructure and that of our service providers may be vulnerable to physical break-ins, ransomware, computer viruses, other malicious code attacks by hackers, phishing attacks, social engineering, or similar disruptive problems. There can be no assurances our security measures or those of our service providers will prevent security breaches or incidents. Any disruption or security breach or incident that we or our service providers suffer or are perceived to suffer, including any such disruption, breach or incident resulting in a loss of, or damage to, data or systems, or inappropriate disclosure, access, loss, or other processing of confidential, financial, proprietary or personal information, including data related to our personnel, could result in loss, disclosure or other unauthorized processing of such data, could delay our research and development or commercialization efforts, could compel us to comply with breach notification laws and regulations, subject us to mandatory corrective action, and otherwise subject us to liability under laws and regulations that protect the privacy and security of personal information. It is possible that we may have to expend additional financial and other resources to address such problems. Remote work by our personnel and those of thir…
Excerpt shortened here; the source contains the full paragraph.
Previous wording
The exercise of our outstanding vested stock options and the vesting of RSUs and restricted stock dilutes the ownership interests of our existing stockholders. As of June 30, 2025, we had 248,488 outstanding options and RSUs to purchase shares of common stock representing approximately 6% of our total shares outstanding of which 238,785 were vested. To the extent outstanding stock options or warrants are exercised and RSUs vest, additional shares of common stock will be issued, existing stockholders’ percentage voting interests will decline and the number of shares eligible for resale in the public market will increase. Such increase may have a negative effect on the value or market trading price of our common stock.
Current wording
The exercise of our outstanding vested stock options and the vesting of RSUs and restricted stock dilutes the ownership interests of our existing stockholders. As of September 30, 2025, we had 242,300 outstanding options and RSUs to purchase shares of common stock representing approximately 6% of our total shares outstanding of which 228,615 were vested. To the extent restricted stock is awarded, outstanding stock options or warrants are exercised, and RSUs vest, existing stockholders’ percentage voting interests will decline. Also, the number of shares eligible for resale in the public market will increase and such increase may have a negative effect on the value or market trading price of our common stock.
Previous wording
Our common stock is currently listed on the NYSE and was previously listed on the NYSE American LLC (formerly the NYSE MKT LLC). Over the past years, the market price of our common stock has experienced significant fluctuations. Between July 1, 2024, and June 30, 2025, the adjusted closing price on the NYSE for our common stock ranged between $3.86 and $11.39. The price of our common stock may continue to be volatile as a result of several factors, some of which are beyond our control. These factors include, but are not limited to, the following:
Current wording
Our common stock is currently listed on Nasdaq and was previously listed on NYSE and NYSE American LLC (formerly the NYSE MKT LLC). Over the past year, the market price of our common stock has experienced significant fluctuations. Between October 1, 2024, and September 30, 2025, the adjusted closing price for our common stock ranged between $3.86 and $20.91. The price of our common stock may continue to be volatile as a result of several factors, some of which are beyond our control. These factors include, but are not limited to, the following:
Previous wording
In addition, we believe there has been and may continue to be substantial trading in derivatives of our stock, including short selling activity or related similar activities, which are beyond our control, and which may be beyond the full control of the SEC and Financial Institutions Regulatory Authority (FINRA). While the SEC and FINRA rules prohibit some forms of short selling and other activities that may result in stock price manipulation, such activity may nonetheless occur without detection or enforcement. We have held conversations with regulators concerning trading activity in our stock; however, there can be no assurance that should there be any illegal manipulation in the trading of our stock, it will be detected, prosecuted, or successfully eradicated. Significant short-selling market manipulation could cause our stock trading price to decline, to become more volatile, or both. For more information regarding trading in our common stock and listing on the NYSE, see additional risk factors included elsewhere in this Quarterly Report on Form 10-Q.
Current wording
In addition, we believe there has been and may continue to be substantial trading in derivatives of our stock, including short selling activity or related similar activities, which are beyond our control, and which may be beyond the full control of the SEC and Financial Institutions Regulatory Authority (FINRA). While the SEC and FINRA rules prohibit some forms of short selling and other activities that may result in stock price manipulation, such activity may nonetheless occur without detection or enforcement. We have held conversations with regulators concerning trading activity in our stock; however, there can be no assurance that should there be any illegal manipulation in the trading of our stock, it will be detected, prosecuted, or successfully eradicated. Significant short-selling market manipulation could cause our stock trading price to decline, to become more volatile, or both. For more information regarding trading in our common stock and listing on the Nasdaq, see additional risk factors included elsewhere in this Quarterly Report on Form 10-Q.
Rearranged previous paragraphs (3)
Previous report — wording carried elsewhere
Changes to domestic and foreign tax laws that may be enacted in the future could impact the tax treatment of our business operations. Our effective tax rate could be adversely affected by several factors, many of which are outside of our control, including changes in the mix of earnings and losses in countries with differing statutory tax rates, changes in the valuation of deferred tax assets and liabilities, changes in tax laws, rates, treaties and regulations or the interpretation of the same, changes to the financial accounting rules for income taxes, the outcome of current and future tax audits, examinations or administrative appeals and certain non-deductible expenses. In addition, many jurisdictions, including the United States, are actively considering changes to existing tax laws or have proposed or enacted new laws, such as the recently enacted legislation commonly referred to as the One Big Beautiful Bill Act (OBBB Act), that could increase our tax obligations in countries where we do business or cause us to change the way we operate our business. We are currently evaluating the full impact of the OBBB Act on us.
Previous report — wording carried elsewhere
In addition, the Organization for Economic Cooperation and Development has proposed imposing a 15% global minimum tax under the Pillar Two Model Rules (Pillar Two), and this proposal has been adopted or is being considered by a number of countries, which could impact our business if we expand internationally. However, on June 28, 2025, the G7 released a joint statement that it had reached an understanding with the United States for a side-by-side system based on certain accepted principles, including that U.S.-parented groups, such as ours, would be exempt from certain provisions of Pillar Two. Any of these developments or changes in domestic or international tax laws or tax rulings could adversely affect our effective tax rate and our operating results.
Previous report — wording carried elsewhere
Changes in tax law could materially impact our business, results of operations and financial condition.