Twenty-Nine Years of One Hundred PercentNarrow moat

VeriSign (VRSN) — moat facet

Not five nines — one hundred percent, since 1997, which is the real reason no regulator has been willing to put .com out to tender.

In July 2026 VeriSign passed twenty-nine consecutive years of 100% availability for .com and .net domain name resolution.¹

Hundreds of billions of lookups a day, without a single year below 100% availability since 1997.

Read that again, because the industry habit of rounding uptime to "five nines" makes it easy to skim. Not 99.999%. One hundred percent, for twenty-nine years, for the resolution service that answers where to find roughly 179 million names — the addresses of most of global e-commerce.² Over that period the company has absorbed every distributed denial-of-service technique invented, the growth of the internet from tens of millions of users to billions, and a query load that now runs past 600 billion a day.

It is worth being precise about why this is a moat rather than an operational statistic. It is not that customers choose VeriSign for reliability — they cannot choose at all; there is no second .com. It is that the record is the reason nobody has seriously proposed taking .com away.

Every few years someone makes the case that .com should be competitively tendered, and the case is not stupid: an advocacy group has argued the market price would be $0.87 to $4.37 rather than $10.26.³ The counter-argument is not about price. It is that migrating the authoritative records for 163 million names, most of the world's commerce among them, away from an operator that has never dropped a query is a risk no regulator has been willing to take for a saving that accrues to nobody in particular. Twenty-nine years of perfect operation is, in effect, regulatory capital.

The obligation runs deeper than .com. VeriSign performs the Root Zone Maintainer function for ICANN and operates two of the thirteen root servers that hold the authoritative data at the top of the DNS hierarchy. These generate essentially no revenue. What they generate is a status that is awkward to disturb: it is difficult to argue a company should be removed from critical infrastructure while it is also the custodian of the file that makes the rest of the system work.

There is a cost to all this that the margin conceals. The system is engineered for a load that never arrives — capacity sized for attack peaks rather than normal traffic, which means most of the infrastructure is idle most of the time. And the reliability record is asymmetric in the worst way. Twenty-nine years of perfection is worth a great deal on the day before the first failure and considerably less on the day after. There is no reserve to draw down, because the whole asset is the absence of an exception.

The honest rating is narrow rather than wide. Reliability here is a hygiene factor of extraordinary quality: it buys renewal, it does not buy price, and it is the one part of the moat that a single bad night could damage.

Moat trajectory: Widening

Every additional year of 100% availability adds to the only asset here that cannot be bought — and 2026 added the twenty-ninth. The argument against re-tendering .com gets one year stronger annually, at no cost, provided nothing breaks.

The number that tests this moat

Reported

Consecutive years of 100% resolution availability

Not 99.99% — one hundred percent, extended in July 2026, for the .com and .net domain name resolution system that answers for most of global e-commerce. No customer chooses VeriSign for this, because no customer can choose at all. The audience is ICANN and the Department of Commerce, and it is the single strongest argument against putting .com out to tender. There is no partial state: the metric survives or it does not.

Source: VeriSign Q2 2026 results, 23 July 2026 ↗

Aspects of the moat

DIG DEEPER 01

The Root Zone Maintainer

VeriSign edits the file that tells the internet where every top-level domain lives, for free, and would be extremely awkward to remove from it.

DIG DEEPER 02

Building for the Load That Never Comes

The cost structure is set by the attack that has never come, not by the queries that arrive every second.

DIG DEEPER 03

Reliability Is a Regulatory Asset

No registrant chooses VeriSign for uptime — they cannot choose at all. The audience for the record is in Washington.

DIG DEEPER 04

The Standard Nobody Else Has to Meet

The rules that protect .com also stop VeriSign doing almost everything a dominant supplier would ordinarily do, and it says so in its own filing.

⚠ Threats to the moat

⚠ THREAT 01

The First Failure Costs More Than the Record Earned

An unbroken record has no partial state and no reserve to draw down — there is only the absence of an exception.

⚠ THREAT 02

Nothing Tells You Whether the Security Spending Is Enough

The only evidence that VeriSign spends enough on defending the system is that nothing has broken, and every dollar not spent lands in a 67.7% margin.

References

ReportedIn July 2026 VeriSign extended its record of 100% availability for the .com and .net domain name resolution system to 29 consecutive years.
VeriSign, Inc., Reports Second Quarter 2026 Results — Form 8-K Exhibit 99.1, 23 July 2026. Revenue $435 million, up 6.0% year over year; operating income $296 million against $281 million; net income $217 million and diluted EPS $2.38 against $207 million and $2.21. Cash, cash equivalents and marketable securities $1.03 billion, up $454 million from year-end 2025; deferred revenues $1.45 billion at 30 June 2026, up $64 million from year-end. Cash flow from operations $232 million. On 26 June 2026 VeriSign issued $550 million of 5.10% Senior Notes due 2031 and on 20 July 2026 used the proceeds with cash on hand to redeem $550 million of 4.75% Senior Notes due 2027. 0.7 million shares repurchased for $197 million; an additional $884 million authorised effective 23 July 2026 bringing the total authorisation to $1.50 billion; a quarterly dividend of $0.81 per share declared on 20 July 2026. The domain name base ended at 179.1 million .com and .net registrations, a 5.1% increase year over year and a net increase of 3.05 million in the quarter; a record 12.7 million new registrations were processed against 10.4 million; the final first-quarter 2026 renewal rate was 76.3% against 75.5%. CEO Jim Bidzos: the record of 100% availability for the .com and .net domain name resolution system was extended to 29 years, and more than 100% of free cash flow was returned to the investing public through dividends and share repurchases. The .web top-level domain has been delegated into the DNS root zone with VeriSign as the designated registry operator. — Q2 2026 · publ. 2026-07-23 · source ↗
ReportedVeriSign provides authoritative resolution for .com and .net, which support the majority of global e-commerce, performs the Root Zone Maintainer function for ICANN and operates two of the thirteen global internet root servers.
VeriSign, Inc., Form 10-K for the fiscal year ended 31 December 2025 (SEC, CIK 1014473) — Item 1, Business. VeriSign operates the .com and .net registries under registry agreements with ICANN, and .com additionally under a Cooperative Agreement with the U.S. Department of Commerce (most recently amended by Amendment 35 on 26 October 2018, automatically renewed on the same terms on 30 November 2024 for a successive six-year term, renewing again on 30 November 2030 unless the DOC gives notice). The .com Registry Agreement runs a six-year term that must be renewed or extended by 30 November 2030 and contains a presumptive right of renewal, with ICANN able to terminate or refuse in certain prescribed circumstances; it permits an increase to the Maximum Price of up to 7% over the previous year in each of the final four years of each six-year period, the current period having begun on 26 October 2024. The .net Registry Agreement was renewed on 29 June 2023, runs to 1 July 2029 and permits increases of up to 10% each year. VeriSign remits $0.2575 to ICANN quarterly for each annual .com registration and $0.25 for each .name registration. It also operates .cc under an agreement with the Cocos (Keeling) Islands, operates .name and internationalised gTLDs, provides back-end services for .edu, performs the Root Zone Maintainer function for ICANN and operates two of the thirteen global internet root servers. Retail pricing is established by registrars; VeriSign must provide ICANN-accredited registrars with non-discriminatory access, faces marketing and bundling limits, must submit new Registry Services for ICANN review, and is subject to vertical-integration restrictions that apply solely to .com — obligations it states do not apply to ccTLDs and other gTLDs and may create a competitive disadvantage. Named registry competitors include CentralNic, China Internet Network Information Center (CNNIC), DENIC eG, GoDaddy, Google, Identity Digital, Nominet, Public Interest Registry, Radix and .xyz. Employee headcount 928 (256 cost of revenues, 240 research and development, 432 selling, general and administrative). — FY2025 · publ. 2026-02-05 · source ↗
Third-party estimateAn advocacy group has argued that a competitively tendered .com wholesale price would be $0.87 to $4.37 rather than $10.26.
American Economic Liberties Project — statement on the NTIA decision to leave the .com Cooperative Agreement in place. Senator Elizabeth Warren and Representative Jerry Nadler wrote to NTIA and the Department of Justice in November 2024 urging action on VeriSign's control of .com pricing; the group's policy brief argues that a competitively tendered .com wholesale price would be between $0.87 and $4.37, against the $10.26 in effect from September 2024, and that the arrangement locks in increases at more than twice inflation while foreclosing competitive re-tendering. — 2024 · publ. 2024-11-27 · source ↗

Sources

Generated September 23, 2026