VeriSign operates as a global provider of critical internet infrastructure and domain name registry services, underpinning the security, stability, and resiliency of the Domain Name System (DNS). The company enables internet navigation by managing authoritative directories for some of the world’s most recognized top-level domains (TLDs), including .com, .net, and .name, while also performing Root Zone Maintainer functions and operating two of the thirteen global internet…
VeriSign operates as a global provider of critical internet infrastructure and domain name registry services, underpinning the security, stability, and resiliency of the Domain Name System (DNS). The company enables internet navigation by managing authoritative directories for some of the world’s most recognized top-level domains (TLDs), including .com, .net, and .name, while also performing Root Zone Maintainer functions and operating two of the thirteen global internet root servers. VeriSign’s services ensure secure, always-on access to online identities, facilitating reliable communication and e-commerce for businesses and individuals worldwide.
VeriSign generates revenue primarily through domain name registration services for the TLDs it operates, including .com, .net, .name, and .cc. The company charges registrars annual fees for domain registrations, renewals, and related services, with pricing subject to regulatory restrictions for certain TLDs, such as .com and .net. Additional revenue streams include back-end technical services for other TLDs, such as .edu, and fees associated with maintaining the DNS root zone. The company’s Shared Registration System allows registrars to submit domain registrations, modifications, and deletions, further supporting its revenue model.
The company operates through the following segments:
• Domain Name Registry Services: This segment encompasses the operation of authoritative directories for .com, .net, .name, and .cc TLDs, as well as internationalized versions of .com and .net. VeriSign processes domain registrations, renewals, and DNS resolution queries, ensuring the secure and reliable functioning of these critical internet assets. The segment also includes Root Zone Maintainer services and the operation of two global root servers, which are foundational to the DNS hierarchy.
• Back-End and Technical Services: This segment provides technical and back-end registry services for third-party TLDs, such as .edu. VeriSign’s infrastructure supports the registration, resolution, and management of domain names under these TLDs, leveraging its proprietary systems and global network of servers to deliver high availability and security.
VeriSign holds a dominant position in the domain name registry industry, particularly as the exclusive operator of the .com TLD, which supports the majority of global e-commerce. The company’s competitive advantages include its long-standing agreements with the Internet Corporation for Assigned Names and Numbers (ICANN) and the U. S. Department of Commerce, as well as its robust infrastructure, which processes hundreds of billions of DNS queries daily. Key competitors include CentralNic, GoDaddy, Google, Identity Digital, and Radix, which operate alternative TLDs or provide competing registry services. However, VeriSign’s scale, technical expertise, and regulatory agreements create significant barriers to entry, reinforcing its leadership in the industry.
VeriSign’s customer base primarily consists of ICANN-accredited domain name registrars, which act as intermediaries between the company and end-users seeking to register domain names. These registrars include global providers such as GoDaddy, Namecheap, and Alibaba Cloud, as well as smaller regional players. The company’s services also indirectly support millions of businesses, organizations, and individuals who rely on .com, .net, and other TLDs for their online presence and operations.
Sector:TechnologySector rationaleVerisign's primary revenue comes from operating domain name registries (.com, .net) and providing critical internet infrastructure, which falls under Data Infrastructure and IT Services within the Technology sector. The company designs and operates the proprietary systems and global server networks used to process DNS queries and manage domain registrations for ICANN-accredited registrars.Industry:Web Hosting and DomainsTechnologyPrimaryVeriSign operates as a domain name registry for TLDs such as .com and .net, charging annual fees for registrations and renewals. The company also performs Root Zone Maintainer functions and operates global internet root servers, which are core components of the naming and hosting layer of the internet.Classified using BQ-MICSCIK: 0001014473
Investment Thesis
▲ Bull case
VeriSign’s record-high .com and .net domain name base of 176.1 million at quarter end, growing by 2.54 million sequentially and driven by 11.5 million new registrations—the strongest since 2021—demonstrates accelerating underlying demand that management attributes to AI-driven tools lowering barriers to website creation, a structural tailwind likely to persist and expand as generative AI adoption grows across consumer and enterprise segments, potentially sustaining new registration momentum beyond historical cyclical patterns.
The company’s increased and narrowed 2026 domain base growth guidance to 3.1%-4.3%, coupled with a 76.3% expected renewal rate (up from 75.5% prior year) and improving first-time renewal rates in the mid-40% range, signals that VeriSign’s evolving registrar marketing programs—designed to be responsive to diverse channel needs—are successfully enhancing customer retention and engagement, transforming what could be a headwind from a higher proportion of first-time renewers into a sustainable driver of long-term base stability and predictable cash flow visibility.
The announced $0.71 wholesale price increase for .com domains to $10.97, effective November 1, 2026—the first allowable increase since February 2024—represents a near-term, high-confidence catalyst for revenue and EPS growth, with management noting the incremental cost to end users is only ~$0.03 per day, minimizing price elasticity concerns while leveraging VeriSign’s unique regulatory pricing power under its .com Registry Agreement, which remains uncontested and provides a predictable, annuity-like revenue stream with minimal incremental cost to serve.
VeriSign’s infrastructure, processing over 600 billion DNS queries daily with 100% service availability and multiple orders of magnitude excess capacity, is uniquely positioned to absorb accelerating internet traffic from AI agents and LLMs scraping the web at unprecedented scale, turning a potential vulnerability into a competitive moat where its high-assurance, cryptographically protected DNS resolution becomes increasingly critical for online trust and security, a narrative the company is poised to monetize through forthcoming enhanced security services detailed in its upcoming blog series.
With $556 million in cash and marketable securities, $863 million remaining in its share repurchase authorization (no expiration), and a commitment to return over 100% of free cash flow to investors—evidenced by $1.13 billion returned over the past 12 months—VeriSign combines a fortress-like balance sheet with aggressive capital return, enabling sustained EPS accretion even in modest growth scenarios, while its 22%-25% GAAP tax rate guidance and $55-$65 million CapEx range underscore operational efficiency and low reinvestment needs, freeing capital for shareholder rewards.
VeriSign’s record-high .com and .net domain name base of 176.1 million at quarter end, growing by 2.54 million sequentially and driven by 11.5 million new registrations—the strongest since 2021—demonstrates accelerating underlying demand that management attributes to AI-driven tools lowering barriers to website creation, a structural tailwind likely to persist and expand as generative AI adoption grows across consumer and enterprise segments, potentially sustaining new registration momentum beyond historical cyclical patterns.
The company’s increased and narrowed 2026 domain base growth guidance to 3.1%-4.3%, coupled with a 76.3% expected renewal rate (up from 75.5% prior year) and improving first-time renewal rates in the mid-40% range, signals that VeriSign’s evolving registrar marketing programs—designed to be responsive to diverse channel needs—are successfully enhancing customer retention and engagement, transforming what could be a headwind from a higher proportion of first-time renewers into a sustainable driver of long-term base stability and predictable cash flow visibility.
The announced $0.71 wholesale price increase for .com domains to $10.97, effective November 1, 2026—the first allowable increase since February 2024—represents a near-term, high-confidence catalyst for revenue and EPS growth, with management noting the incremental cost to end users is only ~$0.03 per day, minimizing price elasticity concerns while leveraging VeriSign’s unique regulatory pricing power under its .com Registry Agreement, which remains uncontested and provides a predictable, annuity-like revenue stream with minimal incremental cost to serve.
VeriSign’s infrastructure, processing over 600 billion DNS queries daily with 100% service availability and multiple orders of magnitude excess capacity, is uniquely positioned to absorb accelerating internet traffic from AI agents and LLMs scraping the web at unprecedented scale, turning a potential vulnerability into a competitive moat where its high-assurance, cryptographically protected DNS resolution becomes increasingly critical for online trust and security, a narrative the company is poised to monetize through forthcoming enhanced security services detailed in its upcoming blog series.
With $556 million in cash and marketable securities, $863 million remaining in its share repurchase authorization (no expiration), and a commitment to return over 100% of free cash flow to investors—evidenced by $1.13 billion returned over the past 12 months—VeriSign combines a fortress-like balance sheet with aggressive capital return, enabling sustained EPS accretion even in modest growth scenarios, while its 22%-25% GAAP tax rate guidance and $55-$65 million CapEx range underscore operational efficiency and low reinvestment needs, freeing capital for shareholder rewards.
Despite record domain base growth, VeriSign’s reliance on AI as a demand tailwind presents an unspoken risk: if AI-driven tools shift user behavior toward alternative naming systems (e.g., blockchain-based domains, AI-generated subdomains, or walled-garden app ecosystems) that bypass traditional DNS resolution, the long-term structural demand for .com and .net could erode, a threat management did not adequately address when attributing registration strength to AI, revealing a potential blind spot in their narrative about technology tailwinds.
The improvement in renewal rates to 76.3% remains heavily skewed toward previously renewed names in the mid-80% range, while first-time renewal rates languish in the mid-40% range—a persistent weakness management acknowledged but did not explain how their evolving marketing programs will meaningfully lift, suggesting that new customer acquisition, while strong in volume, may be attracting lower-quality, less committed registrants prone to churn, undermining the quality and durability of the domain base growth despite headline increases.
The upcoming ICANN gTLD round, while framed as a long-term opportunity with launches likely not until 2028, poses a near-term distraction and capital allocation risk, as VeriSign’s technical preparation efforts—though uncommitted—divert focus from core .com/.net operations, and history shows that even unsuccessful gTLD applications consume significant resources; moreover, a successful round could dilute .com/.net’s market share by introducing hundreds of new TLDs, increasing competition for registrar shelf space and end-user attention in ways management downplayed by emphasizing the multi-year timeline without addressing interim competitive pressures.
VeriSign’s infrastructure, while touted for its excess capacity and 100% uptime, faces mounting pressure from the escalating scale and sophistication of DDoS attacks and AI-powered vulnerability scanning—threats explicitly cited in the company’s own risk factors—that could overwhelm even resiliency-driven designs if attack vectors evolve to exploit protocol-layer weaknesses rather than sheer volume, a scenario where its current architecture, optimized for legitimate query throughput, may lack the adaptive security features needed to mitigate sophisticated, low-and-slow or application-layer assaults without costly, unplanned upgrades.
The company’s heavy reliance on returning over 100% of free cash flow via share repurchases and dividends—$1.13 billion over the past year—while financially sound in the short term, raises concerns about long-term growth financing, as minimal reinvestment in innovation ($55-$65 million CapEx guidance) leaves VeriSign vulnerable to disruption if emerging technologies (e.g., decentralized identifiers, quantum-resistant DNS, or AI-native naming systems) require substantial R&D investment to counter, a strategic inflexibility hinted at when management described new security services as merely “under consideration” with no timeline or revenue commitment, suggesting a reactive rather than proactive stance in evolving the core business beyond its legacy registry model.
Despite record domain base growth, VeriSign’s reliance on AI as a demand tailwind presents an unspoken risk: if AI-driven tools shift user behavior toward alternative naming systems (e.g., blockchain-based domains, AI-generated subdomains, or walled-garden app ecosystems) that bypass traditional DNS resolution, the long-term structural demand for .com and .net could erode, a threat management did not adequately address when attributing registration strength to AI, revealing a potential blind spot in their narrative about technology tailwinds.
The improvement in renewal rates to 76.3% remains heavily skewed toward previously renewed names in the mid-80% range, while first-time renewal rates languish in the mid-40% range—a persistent weakness management acknowledged but did not explain how their evolving marketing programs will meaningfully lift, suggesting that new customer acquisition, while strong in volume, may be attracting lower-quality, less committed registrants prone to churn, undermining the quality and durability of the domain base growth despite headline increases.
The upcoming ICANN gTLD round, while framed as a long-term opportunity with launches likely not until 2028, poses a near-term distraction and capital allocation risk, as VeriSign’s technical preparation efforts—though uncommitted—divert focus from core .com/.net operations, and history shows that even unsuccessful gTLD applications consume significant resources; moreover, a successful round could dilute .com/.net’s market share by introducing hundreds of new TLDs, increasing competition for registrar shelf space and end-user attention in ways management downplayed by emphasizing the multi-year timeline without addressing interim competitive pressures.
VeriSign’s infrastructure, while touted for its excess capacity and 100% uptime, faces mounting pressure from the escalating scale and sophistication of DDoS attacks and AI-powered vulnerability scanning—threats explicitly cited in the company’s own risk factors—that could overwhelm even resiliency-driven designs if attack vectors evolve to exploit protocol-layer weaknesses rather than sheer volume, a scenario where its current architecture, optimized for legitimate query throughput, may lack the adaptive security features needed to mitigate sophisticated, low-and-slow or application-layer assaults without costly, unplanned upgrades.
The company’s heavy reliance on returning over 100% of free cash flow via share repurchases and dividends—$1.13 billion over the past year—while financially sound in the short term, raises concerns about long-term growth financing, as minimal reinvestment in innovation ($55-$65 million CapEx guidance) leaves VeriSign vulnerable to disruption if emerging technologies (e.g., decentralized identifiers, quantum-resistant DNS, or AI-native naming systems) require substantial R&D investment to counter, a strategic inflexibility hinted at when management described new security services as merely “under consideration” with no timeline or revenue commitment, suggesting a reactive rather than proactive stance in evolving the core business beyond its legacy registry model.