VirnetX Holding Corp
For the period ended Mar 31, 2026. Filed May 15, 2026.
View on SEC.govAbout this filing
A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.
Mar 31, 2026 · Filed May 15, 2026
What changed in Management’s Discussion and Analysis?
Read the current filingPrevious report: 10-Q
Period ended 2025-09-30; filed 2025-11-14.
0001140361-25-042294
Item 2. — Management’s Discussion and Analysis of Financial Condition and Results of OperationsCurrent report: 10-Q
Period ended 2026-03-31; filed 2026-05-15.
0001140361-26-021650
Item 2. — Management’s Discussion and Analysis of Financial Condition and Results of OperationsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 36 previous paragraphs and 36 current paragraphs.
12 unchanged; 6 reworded; 18 added; 18 removed; 0 previous and 0 current paragraphs rearranged.
Tables are not compared: 3 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (18)
Current report
VirnetX Holding Corporation (“Company”, “we”, “us”, or “our”) is an Internet security software and technology company with patented cybersecurity solutions that are designed to ensure resilient, secure communications across any network or device.
Current report
Our flagship platform, VirnetX One™, is built on Zero Trust Network Access (ZTNA) principles and extends our patented Secure Domain Name System (SDNS) technology to establish end-to-end encrypted communications on demand, regardless of user location or endpoint. VirnetX One™ operates as a security-as-a-service platform and may be deployed in cloud, on-premises, or hybrid enterprise environments. The platform is designed to protect applications, services, and infrastructure by providing an additional security layer that integrates with existing systems to reduce exposure to evolving cyber threats affecting data, operating systems, infrastructure components, and gateway security controllers.
Current report
VirnetX Matrix™ leverages the VirnetX One™ platform to secure communications using encrypted, identity-based access controls, including in contested or high-risk environments. It is designed to protect internet-enabled enterprise applications, connected devices, and control systems, such as file servers, data backup systems, and VPN or firewall environments. VirnetX Matrix™ is intended to be deployed without requiring material changes to an enterprise’s existing infrastructure and provides centralized visibility and policy enforcement to address unauthorized access and evolving attack techniques.
Current report
VirnetX War Room™ also built on the VirnetX One™ platform, provides secure collaboration and visualization capabilities designed to support sensitive, unclassified but secure communications. The platform enables controlled access to virtual meeting environments by validating user and device permissions prior to granting access. VirnetX War Room™ is intended for use cases where confidentiality and access control are critical, including government, law enforcement, legal, financial, and healthcare environments.
Current report
Our products, including VirnetX One™, VirnetX Matrix™, and VirnetX War Room™, are designed to support U.S. Department of Defense (DoD), federal government, and commercial customers requiring real-time encrypted communications and network security. Our solutions are designed to be applicable across a range of public and private sector markets, including critical infrastructure, law enforcement, healthcare, financial services, legal services, energy, and related industries. We pursue sales opportunities nationwide and engage with universities and academic institutions to support research collaboration, workforce development, and technology transition initiatives.
Current report
We also support international sales of our commercial products in compliance with applicable U.S. export control laws and regulations, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). Our compliance processes are designed to ensure that international transactions adhere to export control requirements while supporting authorized global customers.
Current report
Our technology focuses on system design and evaluation to address the continued growth of Internet of Things (IoT) and edge computing environments. We are developing a federated, hybrid mesh network architecture designed with security as a foundational element, extending secure networking capabilities to resource-constrained devices through obfuscated and lightweight security mechanisms designed to protect communications without exposing underlying security processes. These efforts support secure identity, trust enforcement, and encrypted communications for distributed and edge-based systems, aligning our architecture with the industry’s shift toward decentralized and resilient network models. This approach incorporates dynamic trust evaluation, autonomous recovery, and distributed decision-making to enhance network resilience and adaptability.
Current report
To support system design and evaluation, we employ Model-Based Systems Engineering (MBSE) and agent-based modeling methodologies. These approaches enable simulation and analysis of complex systems, including cyber-physical environments and adaptive networks, and support assessment of system behavior under evolving threat conditions.
Current report
Certain of our services are designed to align with the Department of Defense’s Digital Engineering Strategy (DE) by supporting cybersecurity integration across system design, command and control, battle management, and sensor orchestration, and by enhancing our MBSE and cyber threat assessment capabilities. Our Dynamic Trust Evaluation (DTE) methods are designed to enforce trust policies throughout system lifecycles, and our cyber threat intelligence and assessment services provide structured analysis of cyber risks and vulnerabilities.
Current report
We intend to make available our digital engineering, cyber MBSE, and cyber threat intelligence services to federal, state, and local government agencies, subject to applicable contracting requirements. We hold a Multiple Award Schedule (MAS) and obtained DoD Joint Certification Program (DD Form 2345) certifications for our facilities in Zephyr Cove, Nevada, and Farmington, Utah, which permit access to certain unclassified technical data subject to export controls. These certifications streamline procurement of our products and services by federal, state, and local government agencies and support our ability to engage with government and defense customers while maintaining compliance with applicable handling and security requirements.
Current report
Additionally, we are developing a Center for Advanced Software and Hardware Integration at our Farmington, Utah facility, that incorporates artificial intelligence (AI) and digital twin technologies alongside our Software-Defined Networks (SDN) capabilities. This facility is intended to support development and integration of secure, adaptive software solutions. We have entered into strategic relationships, including an investment in L2 Holdings, LLC (OmniTeq), an AI/Machine Learning (ML) solutions provider, and cooperative agreements, including a Cooperative Research and Development Agreement (CRADA) with the Air Force Research Laboratory, Intelligence Systems Directorate (AFRL/RI). The CRADA focuses on cybersecurity and Zero Trust Network Access (ZTNA)-related technologies, extends through 2030, and supports collaboration in areas relevant to defense and intelligence operations.
Current report
In addition to federal, state, and local government agencies and defense customers, we pursue sales opportunities nationwide and engage with universities and academic institutions to support research collaboration, workforce development, and technology transition initiatives. We also support international sales of our commercial products in compliance with applicable U.S. export control laws and regulations, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). Our compliance processes are designed to ensure that international transactions adhere to export control requirements while supporting authorized global customers.
Current report
Results of Operations
Current report
Three Months Ended March 31, 2026
Current report
We recognized no revenue in the three months ended March 31, 2026 and 2025.
Current report
Our selling, general and administrative expenses increased from $2,788 to $3,346 for the three months ended March 31, 2026, primarily related to compensation expense and corporate travel.
Current report
As of March 31, 2026, the Company held approximately $17.2 million in cash, cash equivalents and short-term investments.
Current report
Based on the Company’s current rate of operating expenditures and without giving effect to any future financing or additional revenue, existing liquid resources are projected to be insufficient to sustain the current level of operations through May 2027, a period of less than twelve months from the date of issuance of these financial statements. This condition triggers the going concern disclosure requirements under U.S. GAAP and as required, is described in notes to our condensed consolidated financial statements. Management intends to continue pursuit of cash generation via revenue sources and financing.
Removed paragraphs (18)
Previous report
We develop patented cybersecurity solutions that ensure resilient, secure communications across any network or device. Built on Zero Trust Network Access (ZTNA) principles, our flagship platform, VirnetX One™, virtualizes on-demand private networks using patented Secure Domain Names and automatically establishes secure links regardless of location or endpoint.
Previous report
Our products, including War Room™ and VirnetX Matrix™, are designed to support the U.S. Department of War (DoW) with real-time, encrypted collaboration. War Room TMoffers advanced visualization for situational awareness, while VirnetX Matrix TM secures communications through robust encryption, even in contested environments.
Previous report
Our War Room™ software product provides safe and secure video conferencing meeting environment where sensitive communications and data is invisible to those not authorized to view it. War Room™ validates permissions of all the users, and devices requesting access to any secure meeting room prior to granting access. We believe our War Room™ will be an attractive solution for government and law enforcement agencies as well as all professional sectors such as legal, financial, and medical where limiting access to confidential data is a critical requirement.
Previous report
Our VirnetX Matrix™ product provides superior security for internet-enabled enterprise applications and their connected devices, and for control systems currently deployed by those enterprises (e.g., file servers, data back-up systems, VPN/firewalls). VirnetX Matrix™ provides a true “zero-trust” access protection, “single-click” ease of use, and is a highly effective added layer of protection that is deployed simply, without the need for changes to an enterprise’s existing, in-place infrastructure. We believe VirnetX Matrix™ is an attractive solution for all businesses, cloud and on-premise application service providers, and original equipment manufacturers (OEMs), looking to improve visibility and management of their networks to mitigate morphing attacks on their networks and for real time access and control of their users.
Previous report
Our Digital Engineering (DE) services are designed to strengthen our current and evolving Model-Based Systems Engineering (MBSE) processes while also providing comprehensive Cyber Threat Assessment services seamlessly integrating into the DoW Digital Engineering strategy. Additionally, our DE professional services include integration of our subject matter expertise in kinetic and non-kinetic secure, automated, command and control, battle management, and all-domain collection sensor orchestration. With embedded secure communication from R&D to operational deployment, our Dynamic Trust Evaluation (DTE) methods continuously enforce real-time trust policies, ensuring resilient and adaptive network security. Our Cyber Threat Intelligence (CTI) and assessment services deliver context-aware insights, empowering defense leaders to anticipate and mitigate emerging cyber threats.
Previous report
We have undertaken activities to align our products and services with DoW’s Digital Engineering Strategy, and as such, plan to make available the following services to Federal, state, and local government agencies.
Previous report
We are building our Center for Advanced Software/Hardware Integration, at our Farmington, Utah office, utilizing AI/ML and digital twin technology integrated with VirnetX’s SDNS technology. We intend to further augment our product strategy to provide secure, dynamic cyber-driven, AI to the marketplace. In addition to our investments with L2 Holdings, LLC (OmniTeq), AI/ML solutions provider and OP Media, Inc, a dynamic software platform provider, we participated in a Cooperative Research and Development Agreement (CRADA) with the Air Force (AF) Research Laboratory Intelligence Systems Directorate (AFRL/RI) to facilitate collaboration on cybersecurity and Zero Trust technologies to support integrated surveillance and reconnaissance operations as well as AF and joint targeting processes. This CRADA continues through 2030 and allows us to apply for security clearances for our employees. We are also beginning to integrate AI/ML capabilities into VirnetX Matrix™ to enhance its zero-trust security, threat detection, and network resilience by enabling autonomous threat response, adaptive access control, and self-healing network architectures.
Previous report
We intend to sell directly to U.S. defense, intelligence and government agencies. We obtained a Multiple Award Schedule (MAS) contract, so we can sell our products, services, and solutions at pre-negotiated prices to Federal, state, and local government buyers. To strengthen our ability to support these markets, we have obtained DD Form 2345 certifications for our facilities in Zephyr Cove, Nevada, and Farmington, Utah. This certification, formally known as the Militarily Critical Technical Data Agreement and administered by the DoW’s Joint Certification Program, enables us to access and share unclassified technical data with military or space applications subject to export controls under the Export Administration Regulations or the International Traffic in Arms Regulations. This certification is an essential step in ensuring that we can securely handle sensitive technical information while advancing opportunities with U.S. defense and government agencies.
Previous report
We intend to continue our activities to commercialize our products, services and intellectual property in and outside the United States including VirnetX One™, War Room™, VirnetX Matrix™ and our Secured Domain Name Registry and Technology. We believe our product portfolio to secure devices and systems are suitable in areas such as national defense, local, state, Federal and foreign governments, critical infrastructure, law enforcement, healthcare, finance, legal, oil and gas, medical, and related support industries. We continue to actively pursue new sales opportunities in and outside of the United States.
Previous report
Results of Operation
Previous report
Three and Nine Months Ended September 30, 2025
Previous report
We recognized revenue of $106 and $5 in the nine months ended September 30, 2025 and 2024.
Previous report
Our selling, general and administrative expenses decreased from $3,213 in 2024 to $3,059 for the three months ended September 30, 2025, and decreased from $10,066 in 2024 to $8,624 for the nine months ended September 30, 2025. The decrease was related to legal fees incurred in 2024 to protect our patents; no similar costs were incurred in 2025.
Previous report
Loss on impairment of investment
Previous report
Effective September 30, 2025, we identified an impairment in our investment in OP Media Inc., and a result, we recognized an impairment loss totaling $500.
Previous report
As of September 30, 2025, our cash and cash equivalents totaled $17,129 and our short-term investments totaled $11,064, compared to cash and cash equivalents of $23,296 and short-term investments of $14,786 at December 31, 2024, respectively. Working capital was $26,363 at September 30, 2025, and $31,009 at December 31, 2024.
Previous report
We expect that our cash and cash equivalents and short-term investments as of September 30, 2025, will be sufficient to fund our current level of operating expenses and provide related working capital for the foreseeable future. Over the longer term, we expect to derive our future revenue from collaborating with others to integrate our family of cybersecurity products and services into their solutions and to resell them to their current and future customers as well as from license fees and royalties associated with our patent portfolio, technology, software and secure domain name registry.
Reworded paragraphs (6)
Previous wording
Our portfolio of intellectual property is the foundation of our business model. We currently own U.S. and foreign patents and pending applications. Our patent portfolio is primarily focused on securing real-time communications over the Internet, and related services, and is used in all our technology and products, some of which were acquired by our principal operating subsidiary, VirnetX, Inc., from Leidos in 2006.
Current wording
Our intellectual property portfolio is a core component of our business. We own U.S. and foreign patents, as well as pending patent applications, that are primarily directed to securing real-time communications over the Internet and related services. These patents underpin our technology and products. Certain portions of this portfolio were acquired by our principal operating subsidiary, VirnetX, Inc., from Leidos, Inc. in 2006.
Previous wording
Our employees include the core development team behind our inventions, technology, and software. Some members of this team have worked together for over twenty years and were on the same team that invented and developed this technology while working at Leidos, Inc., or Leidos. The team has continued its research and development work to refine our unique network security technology and make it more secure and easy to deploy.
Current wording
Our employees include the core development team behind our inventions, technology, and software. Some members of this team have worked together for over twenty years and were on the same team that invented and developed this technology while working at Leidos, Inc. The team has continued its research and development work to refine our unique network security technology and make it more secure and easy to deploy.
Previous wording
Compared with the Three and nine Months Ended September 30, 2024
Current wording
Compared with the Three Months Ended March 31, 2025
Previous wording
Our research and development expenses remained steady between 2025 and 2024 totaling $1,143 and $3,617 for the three and nine months ended September 30, 2025 compared to $1,176 and $3,667 for the three and nine months ended September 30, 2024.
Current wording
Our research and development expenses remained steady between 2026 and 2025 totaling $1,162 and $1,259 for the three months ended March 31, 2026 and 2025, respectively.
Previous wording
Our effective tax rate is 0% for income tax for the three and nine months ended September 30, 2025, and 2024, and we expect our effective tax rate for the full year will be 0%. Our effective tax rate is less than the 21% statutory tax rate primarily due to our valuation allowance. Based on the weight of available evidence, including net cumulative losses and expected future losses, we have determined it is more likely than not that our U.S. federal and state deferred tax assets will not be realized and therefore we have provided a full valuation allowance on the U.S. federal and state net deferred tax assets.
Current wording
Our effective tax rate is 0% for income tax for the three months ended March 31, 2026 and 2025, and we expect our effective tax rate for the full year will be 0%. Our effective tax rate is less than the 21% statutory tax rate primarily due to our valuation allowance. Based on the weight of available evidence, including net cumulative losses and expected future losses, we have determined it is more likely than not that our U.S. federal and state deferred tax assets will not be realized and therefore we have provided a full valuation allowance on the U.S. federal and state net deferred tax assets.
Previous wording
We have leases in Nevada, Utah and California, the last of which expires in 2035. See Note 8 – Leases in the accompanying consolidated financial statements for details.
Current wording
We have leases in Nevada, Utah and California, the last of which expires in 2035. See Note 8 – Leases in the accompanying condensed consolidated financial statements for details.