UNITED STATES SECURITIES AND EXCHANGE COMMISSION
Washington, D.C. 20549

FORM 10-K

(Mark One)

☒

ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the fiscal year ended December 31, 2022

☐

TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the transition period from to

Commission File Number: 001-33852

VirnetX Holding Corporation
(Exact name of registrant as specified in its charter)

Delaware		77-0390628
(State or other jurisdiction of incorporation or organization)		(I.R.S. Employer Identification No.)

308 Dorla Court, Suite 206 Zephyr Cove, Nevada		89448
(Address of principal executive offices)		(Zip Code)

Registrant’s telephone number, including area code: 775-548-1785
Securities registered pursuant to Section 12(b) of the Act:

Title of each class		Trading Symbol(s)		Name of each exchange on which registered
Common Stock, par value $0.0001 per share		VHC		NYSE

Securities registered pursuant to section 12(g) of the Act:
None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☐ No ☒

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ☐ No ☒

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐

Indicate by check mark whether the registrant has submitted electronically, every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§ 232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes ☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

Large accelerated filer ☐	Accelerated filer ☐	Non-accelerated filer ☒
Emerging growth company ☐	Smaller reporting company ☒

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☐

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes ☐ No ☒

The aggregate market value of the voting and non-voting common equity held by non-affiliates of the registrant as of June 30, 2022, was $73,662,208 based upon the closing price of the common shares of the registrant on June 30, 2022. This calculation does not reflect a determination that certain persons are affiliates of the registrant for any other purpose.

71,424,650 shares of the registrant’s Common Stock were outstanding as of March 27, 2023.

DOCUMENTS INCORPORATED BY REFERENCE

The information required by Part III of this Annual Report on Form 10-K, to the extent not set forth herein, is incorporated by reference from the registrant’s definitive proxy statement to be filed with the Securities and Exchange Commission not later than 120 days after December 31, 2022 relating to the registrant’s 2023 Annual Meeting of Stockholders.

INDEX

		Page
	PART I

Item 1.	Business	4
Item 1A.	Risk Factors	9
Item 1B.	Unresolved Staff Comments	24
Item 2.	Properties	24
Item 3.	Legal Proceedings	24
Item 4.	Mine Safety Disclosure	24

	PART II

Item 5.	Market for the Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities	24
Item 6.	[Reserved]	25
Item 7.	Management’s Discussion and Analysis of Financial Condition and Results of Operations	25
Item 7A.	Quantitative and Qualitative Disclosures about Market Risk	30
Item 8.	Financial Statements and Supplementary Data	31
Item 9.	Changes in and Disagreements with Accountants on Accounting and Financial Disclosure	52
Item 9A.	Controls and Procedures	52
Item 9B.	Other Information	53
Item 9C.	Disclosure Regarding Foreign Jurisdictions that Prevent Inspections	53

	PART III

Item 10.	Directors, Executive Officers and Corporate Governance	53
Item 11.	Executive Compensation	53
Item 12.	Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters	53
Item 13.	Certain Relationships and Related Transactions, and Director Independence	54
Item 14.	Principal Accountant Fees and Services	54

	PART IV

Item 15.	Exhibits and Financial Statement Schedules	54

Index

SPECIAL NOTE REGARDING FORWARD LOOKING STATEMENTS

We have included or incorporated by reference in this Annual Report on Form 10-K (this “Report”), and from time to time we may make statements that may constitute “forward-looking statements” within the meaning of Section 27A of the Securities Act of 1933, as amended (the “Securities Act”), and Section 21E of the Securities Exchange Act of 1934, as amended (the “Exchange Act”). These forward-looking statements are based upon our current expectations, estimates, assumptions, and beliefs concerning future events and conditions and may discuss, among other things, anticipated future performance (including sales and earnings), products, expected growth, future business plans and costs and the impact of potential, ongoing litigation and the expectation of future stockholder distributions. Any statement that is not historical in nature is a forward- looking statement and may be identified by the use of words and phrases such as “anticipates,” “believes,” “estimates,” “expects,” “intends,” “plans,” “predicts,” “projects,” “will be,” “will continue,” “will likely result in,” and similar expressions. These statements include our beliefs and statements regarding general industry and market conditions and growth rates, as well as general domestic and international economic conditions. Readers are cautioned not to place undue reliance on forward-looking statements. Forward-looking statements are necessarily subject to risks, uncertainties, and other factors, many of which are outside our control, which could cause actual results to differ materially from such statements and from our historical results and experience. These risks, uncertainties and other factors include, but are not limited to those described in Item 1A - Risk Factors of this Report and elsewhere in this Report and those described from time to time in our future reports filed with the Securities and Exchange Commission (the “SEC”). Readers are cautioned that it is not possible to predict or identify all the risks, uncertainties and other factors that may affect future results and that the risks described herein should not be considered a complete list. Any forward-looking statement speaks only as of the date on which such statement is made, and we undertake no obligation to update or revise any forward-looking statement, whether as a result of new information, future events or otherwise.

Among others, the forward-looking statements appearing in this Report that may not occur include statements that:

•

In the VirnetX Inc. v. Apple, Inc. (Case Nos. 6:11-cv-00563-RWS, 6:12-cv-00855-RWS) (“Apple II”) litigation, the United States Court of Appeals for the Federal Circuit (the “Federal Circuit”) in November 2019, affirmed-in-part, and reversed-in-part the judgment issued by the United States District Court for the Eastern District of Texas (the “district court”) in the case awarding VirnetX damages of $595.9 million. On October 30, 2020, after a trial in the district court, a jury returned a verdict in favor of VirnetX, awarding VirnetX over $502 million in damages. On January 15, 2021, the district court denied Apple’s motion for judgment as a matter of law and affirmed the jury findings. This may imply that VirnetX may soon receive over $500 million in cash; however, Apple has appealed to the Federal Circuit with regards to the judgement from the district court. Oral arguments for this appeal were heard on September 8, 2022. On March 31, 2023, the Federal Circuit issued its decision vacating the district court’s judgement in this matter and remanding it back to the district court with instructions to dismiss the case as moot. We are evaluating all of our available options in this matter, including potentially seeking rehearing or certiorari review. In addition, the patents in this case are being challenged in the United States Patent and Trademark Office. If those challenges are successful, the award in the case may be reduced, eliminated and/or delayed for a lengthy period. The continuation of this litigation is distracting to our management, expensive, and these distractions and expenses may continue.

•

We have undertaken activities to commercialize our products and patent portfolio in and outside the United States including VirnetX One™, War Room™, VirnetX Matrix™, GABRIEL Connection Technology™ and our Secured Domain Names. These statements may imply that the worldwide market for our commercialized products is large and will result in significant future licensing or software revenue for us. However, commercialization of products such as ours is subject to significant obstacles and risks, including but not limited to a perception by some potential partners and customers that they should await the outcome of the Apple II litigation before entering or considering entering any agreement with us, and that or other factors may prevent significant future revenues for us.

EXCEPT AS REQUIRED BY LAW, WE UNDERTAKE NO OBLIGATION TO UPDATE OR REVISE ANY FORWARD- LOOKING STATEMENT AS A RESULT OF NEW INFORMATION, FUTURE EVENTS OR OTHERWISE.

Index

PART I

Item 1.

Business

The Company

We are an Internet security software and technology company with industry-leading, patented technology for Zero Trust Network Access (“ZTNA”) based secure network communications. VirnetX’s software and technology solutions, including its Secure Domain Name Registry and Technology, VirnetX One™, War Room™, VirnetX Matrix™, and Gabriel Connection Technology™, are designed to be device- and location-independent, and enable a secure real-time communication environment for all types of enterprise applications, services, and critical infrastructures. Our technology generates secure connections on a “single-click” basis, significantly simplifying the deployment of secure real-time communication solutions by eliminating the need for end-users to enter any encryption information. Our portfolio of intellectual property is the foundation of our business model. We currently own approximately 205 total patents and pending applications, including 72 U.S. patents/patent applications and 133 foreign patents/validations/pending applications. Our patent portfolio is primarily focused on securing real-time communications over the Internet, and related services, and is used in all our technology and products, some of which were acquired by our principal operating subsidiary; VirnetX, Inc., from Leidos, Inc., or Leidos, (f/k/a Science Applications International Corporation, or SAIC) in 2006.

Our product portfolio includes sophisticated technologies, products and services that are available for sale worldwide. Our next-generation, VirnetX One™ platform builds upon our patented Secure Domain Names and GABRIEL Connection Technology™ to further enhance the security and efficiency of our patented secure communication links. VirnetX One™ is a security-as-a-service platform that protects enterprise applications, services, and infrastructure from cyber-attacks. Our platform allows businesses and other enterprises of all sizes to add a “security umbrella” as an added layer on top of their existing infrastructure to further reduce risk and bolster security against ever-growing cyberthreats to data, operating systems, other infrastructure products and gateway security controllers.

Our War Room™ software product provides an industry leading, safe, and secure video conferencing meeting environment where sensitive communications and data is invisible to those not authorized to view it. War Room™ validates permissions of all the users, and devices requesting access to any secure meeting room prior to granting access. We believe our War Room™ will be an attractive solution for government and law enforcement agencies as well as all professional sectors such as legal, financial, and medical where limiting access to confidential data is a critical requirement.

Our VirnetX Matrix™ product provides superior security for internet-enabled enterprise applications and their connected devices, and for control systems currently deployed by those enterprises (e.g., file servers, data back-up systems, VPN/firewalls). VirnetX Matrix^TM provides a true “zero-trust” access protection, “single-click” ease of use, and is a highly-effective added layer of protection that is deployed simply, without the need for changes to an enterprise’s existing, in-place infrastructure. We believe VirnetX Matrix™ is an attractive solution for all businesses, cloud and on-premise application service providers, and OEMs, looking to improve visibility and management of their networks to mitigate morphing attacks on their networks and for real time access and control of their users.

Our GABRIEL Collaboration Suite™ is a set of communication applications and tools that use our GABRIEL Secure Communication Platform™. It enables seamless and secure cross platform communications between devices that are enrolled in our “VIRNETX SECURED” network and have our software installed. Our GABRIEL Collaboration Suite™ is available for download and free trial, for Android, iOS, Windows, Linux, and Mac OS X platforms, at https://virnetx.com.

During the fourth quarter of 2022 and the first quarter of 2023, the Company engaged in discussions with certain third-parties to pitch the capabilities of VirnetX One™. The Company believes that these parties have interest to secure devices and systems in areas such as healthcare, finance, legal, oil and gas, medical, law enforcement, national defense and related support industries. Although there can be no assurance in this regard, the Company believes that there are opportunities for Company products sales directly to, resale arrangements with and/or adoption as vendor standards by, one or more of these third parties.

We have an ongoing licensing program under which we offer licenses to a portion of our patent portfolio, technology, and software, including our secure domain name registry service, to domain infrastructure providers, communication service providers as well as to system integrators. Our GABRIEL Connection Technology™ License is offered to original equipment manufacturer (“OEM”) customers who want to adopt the GABRIEL Connection Technology™ as their solution for establishing secure connections using secure domain names within their products. We have developed GABRIEL Connection Technology™ Software Development Kit (“SDK”) to assist with rapid integration of these techniques into existing software implementations. Customers who want to develop their own implementation of the VirnetX patented techniques for supporting secure domain names, or other techniques that are covered by our patent portfolio for establishing secure communication links, can purchase a patent license. The number of patents licensed, and therefore the cost of the patent license to the customer, will depend upon which of the patents are used in a particular product or service. These licenses will typically include an initial license fee, as well as an ongoing royalty.

We expect to continue to launch new and enhanced security platforms, software products, and services based on our GABRIEL Connection Technology™. We will provide updates to new and existing customers as they are released to the public. Many small and medium businesses have installed our software products in their corporate networks. We intend to continue to expand our customer base with targeted promotions and direct sales initiatives.

Our employees include the core development team behind our patent portfolio, technology, and software. Some members of this team have worked together for over twenty years and were on same team that invented and developed this technology while working at Leidos. The team has continued its research and development work and expanded the set of patents we acquired in 2006 from Leidos, into a larger patent portfolio. This portfolio now serves as the foundation of our products, services, and our licensing business. It is expected to generate most of our future revenue in license fees and royalties. We intend to continue our efforts to develop new products and technologies and further strengthen and expand our patent portfolio. We intend to continue using an outsourced and leveraged model to maintain efficiency and manage costs as we grow our licensing business by, for example, offering incentives to early licensing targets or asserting our rights for use of our patents.

Index

Industry Overview & Trends

We believe that the rapid growth in remote work has accelerated digital business transformation initiatives that would have taken years, into a matter of months. The demand to work remotely, explosive growth of video conferencing tools and rapid growth in the cloud has created an opportunity to secure communications regardless of a user’s location, network, or BYOD (bring your own device).

The shift to remote work and expansion of the enterprise network perimeter has driven the growth of ZTNA solutions. The Zero Trust concept treats all networks like the Internet, where all users and devices are untrusted by default. Their location within the network is not a factor for deciding trust. Each user and device on the network requires authentication and authorization, based on policy, prior to accessing any applications or resources on the network. ZTNA facilitates security around remote work, because Zero Trust policies enable granular access control, end-to-end encryption of network communications and remove application visibility from the public Internet which reduces the potential attack surface. Based on our estimates, using publicly available market data, we believe that the Zero Trust security market size is projected to grow from $24.8 billion in 2022 to over $60 billion by 2027, at a Compound Annual Growth Rate (CAGR) of 19.4% during the forecast period. We believe Zero Trust represents a growing market and an ideal fit for our technology and products.

The global coronavirus COVID-19 pandemic forced many organizations to shift their business processes – and their employees are having to embrace a work-from-home or “hybrid” culture on a scale never before attempted. Remote work has accelerated the adoption of video conferencing and meeting applications across all industries making them essential tools for connection with remote customers, workforces, and employees to limit person-to-person direct contact. Based on our estimates, using publicly available market data, we believe that the worldwide video conferencing market size is projected to grow from $7.69 billion in 2022 to $18.1 billion by 2027, at a CAGR of 18.7% during the forecast period. This rapid adoption, learning curve and demand to continue working remotely has created significant security concerns and breaches for enterprises. Our market research has focused on security conscious verticals such as healthcare, banking, legal and government where security breaches can significantly impact outcomes. In many cases, these enterprises adopted industry standard video conferencing tools and are now looking at more secure alternative solutions. Enterprises want video conferencing solutions that protect their information and allow them greater security control and visibility, while continuing to be reliable, easy to use and cost effective. Enterprises in these verticals are also looking for video conferencing solutions that integrate into their existing workflows and better align with specific use cases instead of forcing them to adapt to more one size fits all solutions on the market. We believe our War Room™ represents a starting point to offer secure video conferencing tools built on a Zero Trust architecture.

Cloud computing growth has rapidly expanded as enterprises continue to move applications and services to the cloud. The cloud offers scalability, operations and development efficiency and remote access benefits for their workforce. The cloud technology adoption is expected to continue to increase quite significantly in industries where the work-from-home initiative is helped to sustain enterprise business functions. However, shifting critical data to the cloud has resulted in security concerns and the need for enterprises to control access and gain visibility into how information is being used, who is accessing it and where it is going. Based on our estimates, using publicly available market data, we believe that the global cloud computing security market size is expected to grow from approximately $43.6 billion in 2022 to over $92.7 billion by 2028, at a CAGR of 13.4% during the forecast period. We believe our scalable technology allows enterprises to secure applications and services regardless of whether hosting is on-premise or in the cloud.

As billions of connected Internet of Things (“IoT”) devices come online in support of enterprise operations, products, and industrial controls they will need to be secured and integrated into the enterprise. Facilitated by advancements in 4G/Advanced LTE and high-speed 5G networks, IoT devices will be able to operate from any network, transmit higher volumes of data including video streaming and sensor data collection and require real-time decisions based on that data. Without next generation security, these IoT devices represent a large attack surface that manages and controls critical enterprise infrastructure. These IoT devices can operate from anywhere, and will need to be secured with the same level of network security and ZTNA solutions enterprises are already deploying for their remote workforce. We believe that the market opportunity for our software and technology solutions is large and expanding as secure domain names are now an integral part of securing the next generation 5G and 4G/LTE Advanced wireless networks and IoT communications. Based on our estimates, using publicly available market data, we believe that the size of the global Industrial IoT security market is projected to grow from $4.76 billion in 2022 to approximately $23.17 billion by 2028 at a CAGR of 30.2% during the forecasted period with a growing investment in securing the infrastructure around these devices.

Our Approach & Strategy

We believe that VirnetX One™ software products are positioned to help enterprises adapt to the rapidly evolving threat landscape in work environments and the growing need to secure communications regardless of a user’s location, network, or device using our GABRIEL Connection Technology™.

VirnetX One™ products deliver ZTNA, allowing enterprises to secure their information, control access and gain visibility into how information is being used, who is accessing it and where it is going. Our patented technology allows enterprises to license our technology for integration into their products and services, easily deploy our technology through our VirnetX One™ family of products for endpoint security or securing their communications with our mobile and desktop applications.

Index

Our strategy is to become the market leader in securing real-time communications over the Internet and to establish our VirnetX One™ and GABRIEL Connection Technology™ as the industry standard security platforms. Key elements of our strategy are to:

•

Actively recruit partners in various vertical markets, including healthcare, finance, legal, government to help us expand our enterprise customer base.

•

Promote our next-generation VirnetX One™ platform as a solution for delivering ZTNA, and securing enterprise applications, services, and infrastructure.

•

Continue to grow our technology licensing program to commercialize our intellectual property, including our GABRIEL Connection Technology™.

•

Grow registration of VirnetX Secure Domain Names as the network segmentation component of our ZTNA solution. Establish VirnetX as the exclusive, universal registry of secure domain names and enable our customers to act as registrars for their users and broker secure communication between devices.

•

Promote War Room^TMvideo conferencing product in the general market for sale to end-user enterprises, directly and with partners, with targeted promotions and other marketing programs to assist remote workers and offer an industry leading secure meeting solution.

•

Promote VirnetX Matrix™ enterprise applications, services, and infrastructure.

Our patent portfolio serves as the foundation of our GABRIEL Connection Technology™, software products, services, and our licensing business. We currently own approximately 205 total patents and pending applications, including 72 U.S. patents/patent applications and 133 foreign patents/validations/pending applications. It is expected to generate the majority of our future revenue in license fees and royalties.

Competitive Strengths

We believe the following competitive strengths will enable our success in the marketplace:

•

Unique patented technology. We are focused on developing innovative technology for securing real-time communications over the Internet and establishing the exclusive secure domain name registry in the United States and other key markets around the world. Our unique solutions combine industry standard encryption methods and communication protocols with our patented techniques for automated DNS lookup mechanisms. Our technology and patented approach enable users to create a secure communication link by generating secure domain names. We currently own approximately 205 total patents and pending applications, including 72 U.S. patents/patent applications and 133 foreign patents/validations/pending applications. Our portfolio includes patents and pending patent applications in the United States and other key markets that support our secure domain name registry service for the Internet.

•

Scalable licensing business model. We are actively engaged in pursuing additional licensing agreements with industry participants OEMs, service providers and system integrators within the IP-telephony, mobility, mobile-to-mobile communications, fixed-mobile convergence, and unified communications end-markets.

•

Highly experienced research and development team. Our research and development team is comprised of nationally recognized network security and encryption technology scientists and experts that have worked together as a team for over ten years. During their careers, this team has developed several cutting-edge technologies for U.S. national defense, intelligence, and civilian agencies, many of which remain critical to our national security today. Prior to joining VirnetX, our team worked for Leidos, during which time they invented the core technology that is the foundation of our current technology and software. Based on the collective knowledge and experience of our development team, we believe that we have one of the most experienced and sophisticated groups of security experts researching vulnerability and threats to real-time communication over the Internet and developing solutions to mitigate these problems.

License and Service Offerings

We offer a diversified portfolio of licenses, software and service offerings focused on securing real-time communications over the Internet. We believe software products will allow enterprises to seamlessly integrate ZTNA protection into their networks to secure their applications, services, virtualized resources, and data as it moves into the cloud. Enterprises can quickly deploy VirnetX One software products to protect legacy applications, secure new cloud-based services and remove application visibility from the public Internet. Enterprises can move towards more granular network access control to protect their network at the edge and away from legacy VPN technologies. VirnetX One family of software products enables remote employees to securely interact with on-premise and cloud-based applications, regardless of their location. Enterprises can use VirnetX One platform to secure open-source applications powering communications, data and analytics, infrastructure, and business services with a focus on making those applications easier to secure, access and manage.

Index

We believe our software products and technologies provide the foundation for securing real-time communications and collaboration applications for the enterprise remote workforce. We are exploring creating a marketplace of applications secured by our VirnetX One platform. This approach will allow us to offer a portfolio of certified applications that can be deployed by the enterprise customers in their business networks with confidence in keeping their confidential data and communications secure. This marketplace strategy will allow us to offer more flexible licensing options to solve specific customer use-cases, align with partner product offerings and create upsell opportunities for our products.

Customers

Our software products are available for download and free trial, for Android, iOS, Windows, Linux, and Mac OS X platforms, at http://www.virnetx.com/. We continue to enhance our products and add new functionality to our products. Small and medium businesses have installed our software products in their corporate networks. We continue to expand our customer base with targeted promotions and direct sales initiatives.

We have signed Patent License Agreements with Aastra USA, Inc. Avaya, Inc., Microsoft Corporation, Mitel Networks Corporation, NEC Corporation and NEC Corporation of America, Siemens Enterprise Communications GmbH & Co. KG, and Siemens Enterprise Communications Inc. to license certain of our patents, for a one-time payment and an ongoing royalty for all future sales through the expiration of the licensed patents with respect to certain current and future IP-encrypted products.

We are seeking further licensing of our technology, to developers and original equipment manufacturers, or OEMs, of chips, servers, Desktop, mobile devices such as smart phones, tablets, laptops, net books, and other devices, within the IP-telephony, mobility, fixed- mobile convergence, and unified communications markets including 5G and 4G/LTE. We have published our royalty rates and guidelines on our website. All forward moving licenses have adhered to these guidelines and have met or exceeded these rates and we will use these rates and guidelines in all future license negotiations.

Marketing and Sales

We employ a leveraged, partner-oriented, marketing strategy for our technology licenses and software product offerings. We have successfully signed a number of Resellers & Managed Service Provider Agreements in various market segments, including, healthcare, finance, legal, government, etc., to assist us in selling our software products to their customers. A list of our partners can be found on our website at https://virnetx.com/partners. We plan to continue working on a number of sales and marketing promotions, in the U.S. and Japan, to recruit more resellers and partners along with direct sales programs as we seek to extend out our customer base internationally.

We plan to directly market our software products, domain name registry services to our service provider and system integrator customers. We market our software products directly to small and medium businesses using online marketing programs and tools.

We expect to leverage our relationship with Leidos, to extend our offering to departments and agencies within the federal government. Leidos is a FORTUNE 500® scientific, engineering and technology applications company that uses its deep domain knowledge to solve problems of vital importance to the nation and the world, in national security, energy and the environment, critical infrastructure, and health. We intend to leverage our sales team for managing current accounts and pursuing sales opportunities with new customers. We continue to rapidly expand our customer base with targeted promotions and direct sales initiatives.

We added a Chief Operating Officer to our Japanese team to further our technology licensing efforts in Japan. We have signed a non-exclusive Distribution and Service Agreement with IP Dream, a Japanese based strategic technology developer and service provider, to sell our software products as well as VirnetX’s Secure Domain Name technology to its clients in Japan and greater Asia. Jointly with IP Dream, we are currently pursuing several OEM opportunities with some of the largest services providers in Japan. Along with our efforts with IP Dream, we continue to explore alternative strategies to pursue opportunities to work with other third parties in Japan, and elsewhere, using an approach that will seek to capitalize on these opportunities in part by placing more emphasis on the use of our own employees.

We intend to continue to license our patent portfolio, technology, and software, including our secure domain name registry service, to domain infrastructure providers, communication service providers as well as to system integrators. We intend to seek further license of our technology and software products, to enterprise customers, developers and original equipment manufacturers, or OEMs, of chips, servers, Desktop, mobile devices such as smart phones, tablets, laptops, net books, and other devices, within the IP-telephony, mobility, fixed- mobile convergence, and unified communications markets including 5G and 4G/LTE. We have published our royalty rates and guidelines on our website at https://virnetx.com/licensing. All forward moving licenses have adhered to these guidelines and have met or exceeded these rates and we will use these rates and guidelines in all future license negotiations.

Intellectual Property and Patent Rights

Our intellectual property is primarily comprised of trade secrets, patented know-how, issued and pending patents, copyrights and technological innovation.

Index

We currently own approximately 205 total patents and pending applications, including 72 U.S. patents/patent applications and 133 foreign patents/validations/pending applications. Our portfolio includes many patents that describe unique systems and methods for securing real- time communications over the Internet, as well as related services such as the establishment and maintenance of a secure domain name registry. Our software and technology solutions also may have additional applications relating to operating systems and network security. A complete list of our U.S. patents is available on our website located at http://www.virnetx.com. Each patent is publicly accessible on U.S. Patent and Trademark Office website at http://www.uspto.gov. Some of our issued U.S. and foreign patents expire at various times during the period from 2023 to 2034.

Notwithstanding anything to the contrary set forth in any of our filings under the Securities Act or the Exchange Act that might incorporate future filings, the information set forth on the United States Patent and Trademark Office (the “USPTO”) website, shall not be deemed to be a part of or incorporated by reference into any such filings. We do not warrant the accuracy, or completeness or adequacy of the USPTO website, and expressly disclaim liability for errors or omissions on such website.

Assignment of Patents

Some of our issued patents and pending patent applications were acquired by our principal operating subsidiary, VirnetX, Inc., from Leidos, pursuant to an Assignment Agreement dated December 21, 2006, and a Patent License and Assignment Agreement dated August 12, 2005, as amended on November 2, 2006, including documents prepared pursuant to the November amendment, and as further amended on March 12, 2008. We recorded the assignment from Leidos, with the U.S. Patent Office on December 21, 2006.

Key terms of these agreements are as follows:

•

Patent Assignment. Leidos, unconditionally and irrevocably conveyed, transferred, assigned, and quitclaimed all its right, title, and interest in and to the patents and patent applications, as specifically set forth in the assignment document recorded with the U.S. Patent Office, including, without limitation, the right to sue for past infringement.

•

License to Leidos, Outside the Field of Use. Effective March 12, 2008, we granted to Leidos, a non-exclusive, royalty free, fully paid, perpetual, worldwide, irrevocable, sub licensable and transferable right and license permitting Leidos, and its assignees to make, have made, import, use, offer for sale, and sell products and services covered by, and to make improvements to, the patents and patent applications we acquired from Leidos, solely outside our field of use.

•

Compensation Obligations. As consideration for the assignment of the patents and for the rights we obtained from Leidos, as amended, we are required to make payments to Leidos, based on cash or certain other values generated from those patents. The amount of such payments depends upon the type of value generated, and certain categories are subject to maximums and other limitations. In 2010, we met our maximum royalty payment requirement; however, Leidos is also entitled under certain circumstances to receive a portion of the proceeds paid to us for certain acquisitions of VirnetX and the settlement of certain patent infringement claims of ours.

Government Regulation

We are subject to various federal, state, local, and foreign laws and regulations, including those relating to privacy, data protection and security, intellectual property, employment and labor, workplace safety, consumer protection, anti-bribery, import and export controls, immigration, federal securities, and tax. Additional laws and regulations relating to these areas likely will be passed in the future, and these or existing laws and regulations may be interpreted or enforced in new or expanded manners, each of which could result in significant limitations on how we operate our business.

In particular, the laws governing online secure communications remain unsettled in various respects, even in areas where there has been legislative action. Uncertainty regarding the interpretation and enforcement of laws governing matters such as intellectual property, privacy, data protection and libel in the context of online communications and media is likely to remain. New and existing legislation, or changes in its interpretation and enforcement, may interfere with the growth in use of online secure communications and decrease the acceptance of online secure communications as a viable solution, which could adversely affect our business.

Due to the Internet’s increasing and evolving use, new laws regulating secure communications may be adopted. These laws and regulations may cover, among other things, issues relating to privacy, data protection, cybersecurity, pricing, taxation, telecommunications over the Internet, content, copyrights, distribution and quality of products and services. We intend to work to comply with all new applicable laws and regulations as they are adopted and put in force. New and evolving laws and regulations, and changes in their enforcement and interpretation, may have material impacts upon our development and commercialization plans or business practices, and may significantly increase our compliance costs and otherwise adversely affect our business, financial condition, and results of operations.

Index

The U.S. government has controlled the authoritative domain name system, or DNS, root server since the inception of the Internet. On July 1, 1997, the President of the United States directed the U.S. Secretary of Commerce to privatize the management of the domain name system in a manner that increases competition and facilitates international participation in its management.

On September 29, 2006, the U.S. Department of Commerce extended its delegation of authority by entering into a new agreement with the Internet Corporation for Assigned Names and Numbers, or ICANN, a California non-profit corporation headquartered in Marina Del Rey, California. ICANN is responsible for managing the accreditation of registry providers and registrars that manage the assignment of top- level domain names associated with the authoritative DNS root directory. Although it is possible to create and manage other DNS root directories privately without accreditation from ICANN, the possibility of conflicting name and number assignments makes it less likely that users would widely adopt a top-level domain name associated with an alternative DNS root directory provided by a non-ICANN- accredited registry service.

Employees and Human Capital

As of December 31, 2022, we had 25 full and part time employees, most of whom work remotely from our corporate offices. We have had a work-from-home workforce since our inception. The emphasis of our employees is on our technology research and product development with 14 employees focused on this effort. Our team has been working on enhancing our products and adding new functionality along with successfully filing several new patent applications in 2022. We also continue building our sales and marketing teams to expand our product-lines and customer base. In 2021, we added a Chief Operating Officer to our team in Japan who will be focused on growing our market and products in that region.

In addition to our regular employees, we also engage with consultants on a regular basis. These consultants can be involved in our product development, customer relations, legal, and/or regulatory compliance and reporting. We have experienced low employee turnover rates over the years with both employees and consultants participating in our equity incentive plan.

Available Information

We file or furnish various reports, such as registration statements, periodic and current reports, proxy statements and other materials with the SEC. Our website address is http://www.virnetx.com. You may obtain, free of charge on our website, copies of our annual reports on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the Exchange Act, as soon as reasonably practicable after we electronically file such material with, or furnish it to, the SEC. The information we post is intended for reference purposes only; none of the information posted on our website is part of this report or incorporated by reference herein.

The SEC also maintains website at http://www.sec.gov that contains reports, proxy and other information statements, and other information regarding issuers, including us, that file electronically with the SEC.

Item 1A.

Risk Factors

Our operations and financial results are subject to various risks and uncertainties, including those described below, which could adversely affect our business, financial condition, results of operations, cash flows, and the trading price of our common and capital stock. You should carefully consider the risks and uncertainties described below in addition to the other information set forth in this Report, including in “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our consolidated financial statements and related notes, before making any investment in our common stock. The risks and uncertainties described below are not the only ones we face. Additional risks and uncertainties not presently known to us or that we currently believe to be immaterial may also adversely affect our business. If any of these risk factors occur, you could lose substantial value or your entire investment in our shares.

Summary Risk Factors

An investment in our common stock involves a high degree of risk, and the following is a summary of key risk factors when considering an investment.

You should read this summary together with the more detailed description of each risk factor contained in the subheadings further below.

•	Our business has been, and may continue to be, negatively affected by shareholders intent upon alternate business strategies.

•	We may not generate significant sales revenues from our new software products and services.

•	We are involved and will continue to be involved in litigation defending our patent portfolio, which can be time-consuming and costly, and we cannot anticipate the results.

•	We may not be able to capitalize on market opportunities related to our product strategy, our licensing strategy or our patent portfolio.

Index

•	If we are not able to adequately protect our patent rights and trade secrets, our business would be negatively impacted.

•	Because our business is conducted or expected to be conducted in an environment that is subject to rapid change, we may be subject to various developments in regulation, law, and consumer preferences to which we may not be able to adapt successfully.

•	Our exposure to outside influences beyond our control, including new legislation, court rulings or actions by the USPTO could adversely affect our licensing and enforcement activities and results of operations.

•	New legislation, regulations or court rulings related to enforcing patents could harm our business and operating results.

•	Privacy and data security concerns, and data collection and transfer restrictions and related domestic or foreign regulations may limit the use and adoption of our solutions and adversely affect our business.

•	If we are unable to expand our revenue sources or establish, sustain, grow, or replace relationships with a diversified customer base, our revenues may be limited.

•	We have limited technical resources and are at an early stage in commercialization of our software products.

•	Our international expansion will subject us to additional costs and risks, and our plans may not be successful.

•	We have had to restate our previously issued financial statements and in connection with such process identified a material weakness in our internal control over financial reporting.

•	We may face litigation over the restatement of our previously issued financial statements.

Risks Related to Our Business and Our Financial Reporting

Our business has been, and may continue to be, negatively affected by shareholders intent upon alternate business strategies.

Responding to actions by activist shareholders is costly and time-consuming, has diverted some the attention of management, our board of directors and our employees, and may be disruptive to our operations. Additionally, perceived uncertainties as to our future direction as a result of shareholder activism or changes to the composition of our board of directors may lead to the perception of a change in the direction of our business or other instability, which may be exploited by our competitors, cause concern to our current or potential customers, and make it more difficult to attract and retain qualified personnel. The change in composition of our board of directors could jeopardize our ability to execute our strategic plan and materially harm our business. Due to the current status of our ongoing litigation proceedings, it is critical for us to retain our current board members for proper and timely execution of our strategy in this matter for maximizing shareholder equity value. Additionally, if customers choose to delay, defer or reduce transactions with us or do business with our competitors instead of us, then our business, financial condition and operating results would be adversely affected. In addition, our share price could experience periods of increased volatility as a result of shareholder activism.

We may not generate significant sales revenues from our new software products and services.

In March and April 2022, we launched War Room™ and VirnetX Matrix™ on our VirnetX One™ platform in the U.S. We currently expect to launch these products in Asia Pacific and Europe in fiscal year 2023. We also intend to continue to introduce new products on our VirnetX One™ platform in the future. The introduction and launch of new products is subject to significant costs, risks of slow market acceptance, and variable costs and timing of customer acquisition. While we believe our software products will be attractive to businesses, government agencies, cloud and on-premise application service providers, and OEMs, if we are unable to overcome these risks, we may never generate significant revenue from the sales of these products.

We are involved and will continue to be involved in litigation defending our patent portfolio, which can be time-consuming and costly, and we cannot anticipate the results.

We spend a significant amount of our financial and management resources to pursue our current litigation. We believe that this litigation and others that we may pursue in the future could continue for years and consume significant financial and management resources. The counterparties to our litigation include large, well-financed companies with substantially greater resources than us. Patent litigation is risky, and the outcome is uncertain, and we cannot assure you that any of our current or future litigation matters will result in a favorable outcome for us. In addition, even if we obtain favorable interim rulings or verdicts, they may be inconsistent with the ultimate resolution of the dispute. Furthermore, any awards we receive may be subject to obligations to Leidos and fee arrangements with outside counsel. Also, we cannot assure you that we will not be exposed to claims or sanctions against us which may be costly or impossible for us to defend. Unfavorable or adverse outcomes may result in losses, exhaustion of financial resources or other adverse effects, which could reduce our ability to return cash to our shareholders by way of distributions or otherwise to develop and commercialize our products.

Index

We may not be able to capitalize on market opportunities related to our product strategy, our licensing strategy or our patent portfolio.

A large part of our business strategy includes licensing our patents and technology to other companies in order to reach a larger end-user base than we could reach through direct sales and marketing efforts; as such, our business strategy and revenues may depend on intellectual property licensing fees and royalties for the majority of our revenues. We currently derive minimal revenue from licensing activities, and royalties, and we cannot assure you that we will successfully capitalize on our market opportunities or that this portion of our business strategy will succeed.

Although to date we have entered into a limited number of settlement and license agreements, we may not be successful in entering into further licensing relationships, or if we are successful in entering into such relationships, the acquisition of them may be expensive, and they, as well as our existing settlement and our existing and pending license agreements may not generate the financial results, we expect.

Factors that may affect our ability to execute our current business strategy include, but are not limited to, the following:

•	Third parties may challenge the validity of our patents;

•	The pendency of our various litigations may cause potential licensees not to do business with us;

•	Our patents may expire before we can make our business strategy successful;

•	We face, and we expect to continue to face, intense competition from new and established competitors who may have superior products and services or better marketing, financial or other capacities than we do; and

•	It is possible that one or more of our potential customers or licensees develops or otherwise sources products or technologies similar to, competitive with or superior to ours.

If we are not able to adequately protect our patent rights and trade secrets, our business would be negatively impacted.

We believe our patents are valid, enforceable, and valuable. Notwithstanding this belief, third parties may make claims of infringement or invalidity claims with respect to our patents or become aware of our trade secrets by way of leaks from bad actors within or outside of our employee base or otherwise, and such claims could give rise to material cost for defense or settlement or both, and such claims or leaks could jeopardize or substantially delay a successful outcome of litigation we are or may become involved in, divert resources away from our other activities, limit or cease our related revenues, or otherwise materially and adversely affect our business. Additionally, several of our patents are currently, and other patents may in the future be, subject to USPTO post-grant inter partes review proceedings (“IPR”) which may result in all, or part of these patents being invalidated, or the claims of our patents being limited. Unfavorable or adverse outcomes in our litigation or IPRs or material leaks of trade secrets may result in losses, exhaustion of financial resources, reduction in our ability to protect our intellectual property rights, or other adverse effects, which could encumber our ability to develop and commercialize our products. Even if we are successful in protecting our intellectual property rights, they may not ultimately provide us with any competitive advantages and may be less valuable than we currently expect. These risks may be heightened in countries other than the United States where laws regarding patent protection are less developed and may be negatively affected by the fact that legal standards in the United States and elsewhere for protection of intellectual property rights in Internet-related businesses are uncertain and still evolving. In addition, there are a significant number of United States and foreign patents and patent applications in our areas of interest, and we expect that significant litigation in these areas will continue and will add uncertainty to the value of certain patents and other intellectual property rights in our areas of interest. If we are unable to protect our intellectual property rights or otherwise realize value from them, our business would be negatively affected.

Index

We can provide no assurances that the licensing of our essential security patents under FRAND will be successful.

At the request of the European Telecommunications Standards Institute (“ETSI”), and the Alliance for Telecommunications Industry Solutions (“ATIS”), we agreed to update our licensing declaration to ETSI and ATIS under their respective Intellectual Property Rights policies. This was in response to our Statement of Patent Holder identifying a group of our patents and patent applications that we believe are or may become essential to certain developing specifications in the 3rd Generation Partnership Project Long Term Evolution (“LTE”), Systems Architecture Evolution project. We will make available a non-exclusive patent license under FRAND (fair, reasonable and non- discriminatory terms, and conditions, with compensation) for the patents identified by us that are or become essential to applicants desiring to implement the Technical Specifications identified by us, as set forth in the updated licensing declaration under the ATIS and ETSI Intellectual Property Rights policies. Our licensing declarations under the ATIS and ETSI Intellectual Property Rights policies may limit our flexibility in determining royalties and license terms for certain of our patents. Consequently, we cannot assure you that the licensing of the essential security patents will be successful or that third parties will be willing to enter into licenses with us on reasonable terms or at all, which could have an adverse effect on our business and harm our competitive position.

Because our business is conducted or expected to be conducted in an environment that is subject to rapid change, we may be subject to various developments in regulation, law, and consumer preferences to which we may not be able to adapt successfully.

The current regulatory environment for our products and services remains unclear. We can give no assurance that our planned product offerings will be in compliance with laws and regulations of local, state, United States federal or foreign authorities. Further, we can give no assurance that we will not unintentionally violate such laws or regulations or that such laws or regulations will not be modified, or that new laws or regulations will be enacted in the future which would cause us to be in violation of such laws or regulations. For example, Voice-Over-Internet Protocol (“VoIP”) services are not currently subject to all the same regulations that apply to traditional telephony, but it is possible that similar regulations may be applied to VoIP in the future and that these could result in substantial costs to us which could adversely affect the marketability of our products and planned products related to VoIP. For further example, the use of the Internet and private Internet Protocol (“IP”) networks for communication is largely unregulated within the United States, but may become regulated in the future; additionally, several foreign governments have enacted measures that could restrict or prohibit voice communications services over the Internet or private IP networks.

Our business depends on the growth of instant messaging, VoIP, mobile services, streaming video, file transfer and remote desktop and other next-generation Internet-based applications. A decline in the use of these applications due to complexity or cost relative to alternate traditional or newly developed communications channels, or development of alternative technologies, could cause a material decline in the number of users in these areas.

More aggressive domestic or international regulation of the Internet in general, and Internet telephony providers and services specifically may materially and adversely affect our business, financial condition, operating results, and future prospects.

Our exposure to outside influences beyond our control, including new legislation, court rulings or actions by the USPTO, could adversely affect our licensing and enforcement activities and results of operations.

Our licensing and enforcement activities are subject to numerous risks from outside influences, including the following:

SEC Form 10-K filed by VirnetX Holding Corp