⚠ Capacity Is Bought, Not OwnedModerate threat
VeriSign (VRSN) — threat to the moat
Cloudflare, Google and Amazon could all build this. None of them can buy twenty-nine years of never having failed.
VeriSign's operational advantage is bought with money, and other people have money.
The .com resolution system handles hundreds of billions of queries a day and is provisioned for many multiples of that, because the events it must survive are attacks rather than traffic.1 The capability is real. It is also, in every component, purchasable: global anycast footprint, bandwidth, hardware, and engineers who have built this kind of system before.
Several companies operate DNS infrastructure at comparable or larger scale — Cloudflare, Google and Amazon among them — and none of them would find the engineering beyond reach. What none of them has is the twenty-nine-year record, and a record cannot be bought at any price.2
That is the honest limit of this part of the moat. It is not technology; it is elapsed time under continuous scrutiny. Elapsed time accrues to whoever is holding the contract, which is a circular advantage: VeriSign is hard to replace because it has been there, and it has been there because it is hard to replace.
Circular advantages are strong and brittle in the same way. Nothing in the engineering would stop a successor. Only the risk of the transition would.3
- ReportedVeriSign processes in excess of 600 billion DNS queries a day across the domains it operates.Verisign — registry services. VeriSign processes in excess of 600 billion DNS queries a day across the domains it operates and has maintained 100% resolution availability for .com for more than 29 years without interruption. — 2026 · publ. 2026-01-01 · source ↗
- ReportedThe 100% .com and .net resolution availability record has run for 29 consecutive years.VeriSign, Inc., Reports Second Quarter 2026 Results — Form 8-K Exhibit 99.1, 23 July 2026. Revenue $435 million, up 6.0% year over year; operating income $296 million against $281 million; net income $217 million and diluted EPS $2.38 against $207 million and $2.21. Cash, cash equivalents and marketable securities $1.03 billion, up $454 million from year-end 2025; deferred revenues $1.45 billion at 30 June 2026, up $64 million from year-end. Cash flow from operations $232 million. On 26 June 2026 VeriSign issued $550 million of 5.10% Senior Notes due 2031 and on 20 July 2026 used the proceeds with cash on hand to redeem $550 million of 4.75% Senior Notes due 2027. 0.7 million shares repurchased for $197 million; an additional $884 million authorised effective 23 July 2026 bringing the total authorisation to $1.50 billion; a quarterly dividend of $0.81 per share declared on 20 July 2026. The domain name base ended at 179.1 million .com and .net registrations, a 5.1% increase year over year and a net increase of 3.05 million in the quarter; a record 12.7 million new registrations were processed against 10.4 million; the final first-quarter 2026 renewal rate was 76.3% against 75.5%. CEO Jim Bidzos: the record of 100% availability for the .com and .net domain name resolution system was extended to 29 years, and more than 100% of free cash flow was returned to the investing public through dividends and share repurchases. The .web top-level domain has been delegated into the DNS root zone with VeriSign as the designated registry operator. — Q2 2026 · publ. 2026-07-23 · source ↗
- ReportedVeriSign owns and maintains the shared registration system and the global constellation of DNS servers that provide authoritative resolution for .com and .net.VeriSign, Inc., Form 10-K for the fiscal year ended 31 December 2025 (SEC, CIK 1014473) — Item 1, Business. VeriSign operates the .com and .net registries under registry agreements with ICANN, and .com additionally under a Cooperative Agreement with the U.S. Department of Commerce (most recently amended by Amendment 35 on 26 October 2018, automatically renewed on the same terms on 30 November 2024 for a successive six-year term, renewing again on 30 November 2030 unless the DOC gives notice). The .com Registry Agreement runs a six-year term that must be renewed or extended by 30 November 2030 and contains a presumptive right of renewal, with ICANN able to terminate or refuse in certain prescribed circumstances; it permits an increase to the Maximum Price of up to 7% over the previous year in each of the final four years of each six-year period, the current period having begun on 26 October 2024. The .net Registry Agreement was renewed on 29 June 2023, runs to 1 July 2029 and permits increases of up to 10% each year. VeriSign remits $0.2575 to ICANN quarterly for each annual .com registration and $0.25 for each .name registration. It also operates .cc under an agreement with the Cocos (Keeling) Islands, operates .name and internationalised gTLDs, provides back-end services for .edu, performs the Root Zone Maintainer function for ICANN and operates two of the thirteen global internet root servers. Retail pricing is established by registrars; VeriSign must provide ICANN-accredited registrars with non-discriminatory access, faces marketing and bundling limits, must submit new Registry Services for ICANN review, and is subject to vertical-integration restrictions that apply solely to .com — obligations it states do not apply to ccTLDs and other gTLDs and may create a competitive disadvantage. Named registry competitors include CentralNic, China Internet Network Information Center (CNNIC), DENIC eG, GoDaddy, Google, Identity Digital, Nominet, Public Interest Registry, Radix and .xyz. Employee headcount 928 (256 cost of revenues, 240 research and development, 432 selling, general and administrative). — FY2025 · publ. 2026-02-05 · source ↗