Grade: F — Major Red Flags
Framework: Schilit *Financial Shenanigans* + Beneish M-Score + forensic accounting principles
Data: SEC EDGAR 10-K (Filed February 5, 2026, FY ended December 31, 2025) + Yahoo Finance
Auditor: KPMG LLP — Unqualified opinion (auditor since 1995)
One-line verdict: VeriSign's F grade is a mechanical consequence of aggressive capital returns, not an earnings quality problem. Cash of $581M covers only 32% of $1.8B in debt, triggering the critical C4 flag. But the underlying business is among the highest-quality in the S&P 500: an 88.2% gross margin near-monopoly operating the .com and .net domain registries under a Cooperative Agreement with the U.S. Department of Commerce, CFFO/NI of 1.32, M-Score of -3.14 deeply clean, an accruals ratio of -20.0% (the most conservative possible), and a 49.8% net margin. The company has returned so much capital via buybacks that stockholders' equity is deeply negative (-$2.15B), creating a distressed Z-Score that contradicts the actual business reality. VeriSign's F grade is a balance sheet construction artifact from a company that has bought back more stock than its entire equity base.
| Metric | Result |
|---|---|
| Red Flags | **1** (Cash covers only 32% of debt — critical flag) |
| Watch Items | **1** (AR growth 37.5% vs revenue 6.4%) |
| Checks Completed | **17/18** (1 N/A: impairment data) |
| Beneish M-Score | **-3.14** (deeply clean; threshold is -2.22) |
| Auditor | KPMG LLP — Unqualified opinion |
The Internet's Toll Booth
VeriSign operates what may be the most defensible business model in technology. Per the filing: "We help enable the security, stability, and resiliency of the Domain Name System (DNS) and the internet by providing Root Zone Maintainer services, operating two of the thirteen global internet root servers, and providing registration services and authoritative resolution for the .com and .net top-level domains (TLDs), which support the majority of global e-commerce."
This is not a competitive market. VeriSign operates .com and .net under agreements with ICANN and a Cooperative Agreement with the U.S. Department of Commerce. The .com registry is effectively a regulated monopoly with contractually permitted price increases: "registrations may be increased by 10% each year."
The filing reveals the business model's simplicity:
Profitability: Near-Perfect Margins
| Metric | FY2022 | FY2023 | FY2024 | FY2025 | Trend |
|---|---|---|---|---|---|
| Revenue | $1,425M | $1,493M | $1,557M | $1,657M | +16% over 3 years |
| Gross Profit | $1,224M | $1,296M | $1,366M | $1,460M | Expanding |
| Gross Margin | 85.9% | 86.8% | 87.7% | 88.2% | +2.3pp over 3 years |
| Operating Income | — | — | $1,057M | $1,121M | +6% |
| Operating Margin | — | — | 67.9% | 67.7% | Stable at ~68% |
| Net Income | $674M | $818M | $786M | $826M | +23% over 3 years |
| Net Margin | 47.3% | 54.8% | 50.4% | 49.8% | Stable ~50% |
| EPS (diluted) | — | $7.90 | $8.00 | $8.81 | Expanding |
Revenue grew 6.4% in 2025, driven by .com and .net price increases and domain base growth. The filing notes "revenues increased in all regions during 2025 compared to 2024, the majority of our revenue growth was generated from registrars based in the U.S. and EMEA."
Gross margin expanded for the fourth consecutive year to 88.2% — reflecting the near-zero marginal cost of processing additional domain registrations on existing infrastructure. Operating margin of 67.7% is among the highest of any public company. SG&A/Gross Profit of just 16.1% is exceptional.
Net income declined from $818M (FY2023) to $786M (FY2024) before recovering to $826M (FY2025). FY2023's net margin of 54.8% was elevated by a lower effective tax rate (10.6% vs. 14.7% in 2025).
Cash Flow: The Deferred Revenue Machine
| Metric | FY2022 | FY2023 | FY2024 | FY2025 |
|---|---|---|---|---|
| Operating Cash Flow | $831M | $854M | $903M | $1,091M |
| Net Income | $674M | $818M | $786M | $826M |
| **CFFO / Net Income** | **1.23** | **1.04** | **1.15** | **1.32** |
| Free Cash Flow | $804M | $808M | $875M | $1,068M |
Operating cash flow surged 21% to $1,091M, with CFFO/NI expanding to 1.32. The filing explains the source: "cash provided by operating activities of $1,091.1 million in 2025, which represents an increase of 21% as compared to 2024." The domain registration model naturally generates cash before revenue recognition — registrants pay upfront for multi-year terms.
The accruals ratio of -20.0% is the most deeply negative in the dataset, confirming that VeriSign's accounting is extremely conservative. Cash flow substantially exceeds reported earnings, the opposite pattern of an earnings manipulator.
Free cash flow of $1.07B represents 64% of revenue — an extraordinary conversion rate enabled by the asset-light registry model with minimal CapEx requirements (only $22.8M in 2025, just 1.4% of revenue).
Capital Returns: The Buyback-Compressed Balance Sheet
VeriSign has returned massive amounts of capital to shareholders:
The cumulative effect of these buybacks has pushed stockholders' equity deeply negative. The balance sheet shows "Stockholders' Deficit" — equity is approximately -$2.15B. This is not distress; it is the arithmetic result of a company with a near-monopoly generating $1B+ in annual cash flow and returning most of it to shareholders rather than retaining it on the balance sheet.
The 18-Point Screening
Revenue Quality
| # | Check | Result | Detail |
|---|---|---|---|
| A1 | DSO Change | PASS | DSO 2 days, flat YoY |
| A2 | AR vs Revenue Growth | WATCH | AR +37.5% vs revenue +6.4% |
| A3 | Revenue vs CFFO | PASS | Revenue +6.4%, CFFO +20.9% |
A2 — AR growth context. The 37.5% AR growth against 6.4% revenue growth triggers a watch flag. However, VeriSign's absolute DSO is just 2 days — virtually all revenue is collected at time of registration. On such a tiny base, percentage swings in AR are amplified. The deferred revenue balance confirms revenue quality: "$934.7 million of revenues recognized that were included in the deferred revenues balance at December 31, 2024." Revenue is collected before it is earned.
Expense Quality
| # | Check | Result | Detail |
|---|---|---|---|
| B1 | Inventory vs COGS | PASS | No inventory (registry services) |
| B2 | CapEx vs Revenue | PASS | CapEx -18.9% vs revenue +6.4% |
| B3 | SG&A Ratio | PASS | SG&A/Gross Profit = 16.1%, exceptional |
| B4 | Gross Margin | PASS | 88.2%, +0.4pp, expanding |
VeriSign's cost structure is extraordinarily lean. "Cost of revenues consists primarily of salaries and employee benefits expenses for our personnel who manage the operational systems, depreciation expenses, operational costs associated with the delivery of our services, fees paid to ICANN." The registry infrastructure scales with minimal incremental cost per domain.
Cash Flow Quality
| # | Check | Result | Detail |
|---|---|---|---|
| C1 | CFFO vs Net Income | PASS | CFFO/NI = 1.32, healthy |
| C2 | Free Cash Flow | PASS | FCF $1.07B, FCF/NI = 1.29 |
| C3 | Accruals Ratio | PASS | -20.0%, deeply conservative |
| C4 | Cash vs Debt | FAIL | Cash $581M covers only 32% of debt $1.8B |
C4 — The debt structure. Total debt consists of approximately $1.8B in senior unsecured notes across multiple maturities: notes due 2027 ($550M at 4.75%), notes due 2031, and newly issued 2032 Notes. The 2025 Notes ($500M) were repaid during the year. VeriSign also has a $200M revolving credit facility maturing 2028 with no outstanding borrowings.
With $1.07B in annual free cash flow against $1.8B in debt, VeriSign could retire its entire debt load in under two years — but chooses not to, preferring to use cash for buybacks. The filing states: "We believe existing cash, cash equivalents and marketable securities, and funds generated from operations, together with our ability to arrange for additional financing should be sufficient to meet our working capital, capital expenditure requirements, fund our quarterly dividend, and to service our debt for the next 12 months and beyond."
Balance Sheet
| # | Check | Result | Detail |
|---|---|---|---|
| D1 | Goodwill + Intangibles | PASS | $198M = -9% of equity (negative equity) |
| D2 | Leverage | PASS | Debt/EBITDA = 1.5x, very healthy |
| D3 | Soft Asset Growth | PASS | Other assets -51.2% vs revenue +6.4% |
| D4 | Asset Impairment | N/A | No write-off data |
Goodwill of just $52.5M and intangibles of $145M total $198M — negligible for a company generating $1.1B in operating cash flow. The negative equity denominator produces a mathematically meaningless ratio. Debt/EBITDA of 1.5x is comfortably healthy. Interest coverage at 14.6x provides wide servicing margin.
Acquisition Risk
| # | Check | Result | Detail |
|---|---|---|---|
| E1 | Serial Acquirer FCF | PASS | FCF after acquisitions positive |
| E2 | Goodwill Surge | PASS | Goodwill+Intangibles flat YoY |
VeriSign is not an acquirer. It has a single, focused business — running the .com and .net registries — and makes no acquisitions to speak of.
Manipulation Score
| # | Check | Result | Detail |
|---|---|---|---|
| F1 | Beneish M-Score | PASS | -3.14 (deeply clean; threshold: < -2.22) |
M-Score of -3.14 is one of the cleanest in the dataset. TATA (Total Accruals to Total Assets) of -0.200 is profoundly negative — VeriSign's cash flow exceeds its reported earnings by an enormous margin relative to its asset base. The DSRI of 1.293 is slightly elevated (matching the AR watch flag) but not concerning given the 2-day DSO base.
Altman Z-Score: -27.16 (mathematically distressed). This extreme negative Z-Score is entirely driven by deeply negative retained earnings and negative equity from cumulative buybacks. The Z-Score model was designed for manufacturing firms and does not account for asset-light monopolies that deliberately compress their equity through capital returns. This score is meaningless for assessing VeriSign's actual default risk.
Key Risks from the 10-K
1. Regulatory and ICANN Risk
VeriSign's entire business depends on its agreements with ICANN and the U.S. Department of Commerce. The Cooperative Agreement governs the .com registry; .net operates under a separate ICANN agreement. Any adverse change to these agreements — pricing restrictions, non-renewal, or forced competition — would directly threaten VeriSign's revenue model. The filing notes registrations "may be increased by 10% each year," but this pricing authority exists only by contract.
2. Domain Name Demand Uncertainty
The filing acknowledges: "the demand for .com and .net domain names may be limited by competitive pressure from other TLDs and alternatives for an online presence." Social media platforms, app-based businesses, and AI-driven interfaces could reduce demand for traditional domain names over time. However, the 2.6% growth in the domain base and improved renewal rates (75.4% vs 72.2%) suggest this risk remains distant.
3. Interest Rate and Refinancing Risk
With $1.8B in notes at various maturities and coupon rates (including 4.75% on the 2027 Notes), VeriSign faces refinancing risk. Interest income declined as the filing notes: "the decrease in interest income in 2025 primarily reflects" lower surplus balances. While interest expense of $76M is easily covered by operations, refinancing at higher rates would incrementally compress margins.
4. Concentration in a Single Business Line
VeriSign operates a single reportable segment. There is no diversification. If the domain registry business faces disruption, there is no fallback revenue stream. The filing explicitly notes: "We also derive revenues from operating domain name registries and technical systems for several other gTLDs and one ccTLD, all of which are not significant in relation to our consolidated revenues."
5. Cybersecurity as Existential Risk
Operating two of thirteen global root servers and the .com/.net registries makes VeriSign critical internet infrastructure. The filing devotes substantial attention to cybersecurity risks. A significant DNS outage or security breach could have cascading effects across the global internet and would threaten VeriSign's contractual standing.
Summary
Grade: F. The cleanest earnings profile in the dataset, masked by a buyback-compressed balance sheet.
VeriSign's earnings quality metrics are virtually flawless: 88.2% gross margin, 50% net margin, CFFO/NI of 1.32, -20.0% accruals ratio, M-Score of -3.14, DSO of 2 days, no inventory, no acquisitions, and negligible goodwill. KPMG, auditor since 1995, issued an unqualified opinion. The .com registry is a regulated near-monopoly with contractual price escalators and 75.4% renewal rates.
The F grade results from a single critical flag: cash at 32% of $1.8B debt. This is a capital allocation choice, not a solvency concern. VeriSign generates $1.07B in annual free cash flow — it could retire its debt in 20 months but instead returns cash to shareholders ($859M in buybacks plus $215M in dividends in 2025 alone). The deeply negative Z-Score of -27.16 is a mathematical artifact of negative equity, not an indicator of financial distress.
The forward risk is not financial but structural: VeriSign's moat depends entirely on its ICANN and DOC agreements. The business is otherwise as close to a perpetual cash-generating machine as public markets offer.
