What changed in this filing

/stocks — the workspaceLOADING

Item 9A. Controls and Procedures

2026-03-24 compared with 2025-03-17 · 54 added, 69 removed, 113 unchanged (52% of the section changed)

1 unchanged sentence

Evaluation of Disclosure Controls and Procedures

Under the supervision and with the participation of our management, including our Chief Executive Officer and Chief Financial Officer, we conducted an evaluation of the effectiveness of the

design and operation of our disclosure controls and procedures, as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended, December 31, 2024.

The purpose of this evaluation was to determine whether as of December 31, 2024 our disclosure controls and procedures were effective to provide reasonable assurance that the information we

are required to disclose in our filings with the SEC, (i) is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms and (ii) accumulated and communicated to our management, including our

Chief Executive Officer and Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure.

Under the supervision and with the participation of our management, including our Chief Executive Officer and Chief Financial Officer, we conducted an evaluation of the effectiveness of the design

and operation of our disclosure controls and procedures, as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended, December 31, 2025.

The purpose of this evaluation was to determine whether as of December 31, 2025 our disclosure controls and procedures were effective to provide reasonable assurance that the information we are

required to disclose in our filings with the SEC, (i) is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms and (ii) accumulated and communicated to our management, including our Chief

Executive Officer and Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure.

Based on their evaluation, our Chief Executive Officer and Chief Financial Officer have concluded that as of December 31, 2025, our disclosure controls and procedures were effective.

Changes in Internal Control Over Financial Reporting

There were no changes in our internal controls over financial reporting (as such term is defined in rules 13a-15(f) under the Securities Exchange Act of 1934, as amended) during the fiscal

year ended December 31, 2024, that have materially affected, or are reasonably likely to materially affect, our internal controls over financial reporting.

There were no changes in our internal controls over financial reporting (as such term is defined in rules 13a-15(f) under the Securities Exchange Act of 1934, as amended) during the fiscal year

ended December 31, 2025, that have materially affected, or are reasonably likely to materially affect, our internal controls over financial reporting.

Management’s Report on Internal Control Over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over financial reporting for the Company.

Internal control over financial reporting is a process to

provide reasonable assurance regarding the reliability of our financial reporting for external purposes in accordance with accounting principles generally accepted in the United States of America.

Internal control over financial reporting

includes maintaining records that in reasonable detail accurately and fairly reflect our transactions;

Internal control over financial reporting is a process to provide

reasonable assurance regarding the reliability of our financial reporting for external purposes in accordance with accounting principles generally accepted in the United States of America.

Internal control over financial reporting includes

maintaining records that in reasonable detail accurately and fairly reflect our transactions;

providing reasonable assurance that transactions are recorded as necessary for preparation of our financial statements;

reasonable assurance that receipts and expenditures of Company assets are made in accordance with management authorization;

and providing reasonable assurance that unauthorized acquisition, use or disposition of Company assets that could have

a material effect on our financial statements would be prevented or detected on a timely basis.

Because of its inherent limitations, internal control over financial reporting is not intended to provide absolute assurance that a misstatement

of our financial statements would be prevented or detected.

Management conducted an evaluation of the effectiveness of our internal control over financial reporting based on the framework in Internal Control –

Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission.

Based on this evaluation, management concluded that the Company’s internal control over financial reporting was effective as

of December 31, 2024.

There were no changes in our internal control over financial reporting during the period ended December 31, 2024, that have materially affected, or are reasonably likely to materially affect, our internal control over

financial reporting.

providing reasonable assurance that

receipts and expenditures of Company assets are made in accordance with management authorization;

and providing reasonable assurance that unauthorized acquisition, use or disposition of Company assets that could have a material effect on our

financial statements would be prevented or detected on a timely basis.

Because of its inherent limitations, internal control over financial reporting is not intended to provide absolute assurance that a misstatement of our financial statements would

be prevented or detected.

Management conducted an evaluation of the effectiveness of our internal control over financial reporting based on the framework in Internal Control – Integrated

Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission.

Based on this evaluation, management concluded that the Company’s internal control over financial reporting was effective as of December 31,

There were no changes in our internal control over financial reporting during the period ended December 31, 2025, that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Other Information

Securities Trading Plans of Directors and Executive Officers.

During the three months ended December 31, 2024, the Company did not adopt ,

modify or terminated and no directors or officers, as defined in Rule 16a-1(f), adopted, modified or terminated a “Rule 10b5-1

trading arrangement” or a “non-Rule 10b5-1 trading arrangement,” each as defined in Regulation S-K Item 408.

During the three months ended December 31, 2025, the Company did not adopt , modify or terminated and no directors or officers, as defined in Rule 16a-1(f), adopted, modified or terminated a “Rule 10b5-1 trading arrangement” or a “non-Rule 10b5-1 trading arrangement,” each as defined in Regulation S-K Item 408.

Disclosure Regarding Foreign Jurisdictions that Prevent Inspections

Not Applicable.

Directors, Executive Officers and Corporate Governance

The information required by this item will be contained in our definitive proxy statement to be filed with the SEC in connection with our 2025 Annual Meeting of Stockholders (the “Proxy

Statement”), which is expected to be filed not later than 120 days after the end of our fiscal year ended December 31, 2024 and is incorporated in this report by reference.

The information required by this item will be contained in our definitive proxy statement to be filed with the SEC in connection with our 2026 Annual Meeting of Stockholders (the Proxy Statement),

which is expected to be filed not later than 120 days after the end of our fiscal year ended December 31, 2025 and is incorporated in this report by reference.

Executive Compensation

4 unchanged sentences

Our Amended and Restated Equity Incentive Plan (the A&R Plan) was approved by our shareholders in June 2023.

Our prior plan expired March 29, 2023;

no further awards will be made

under the prior plan, and the A&R Plan will govern awards granted under the prior plan.

The A&R Plan allows us to grant stock options, restricted stock units (“RSUs”) and restricted stock.

Options granted under the A&R Plan are

granted with an exercise price equal to the fair value of the of our stock on the date of grant.

RSUs and restricted stock are granted at the fair value of our stock on the date of grant.

The fair value of options, RSUs and restricted stock

are expensed over the vesting periods.

The A&R Plan allows us to grant stock options, restricted stock units (“RSUs”),

and restricted stock.

Options granted under the A&R Plan are granted with an exercise price equal to the fair value of the of our stock on the date of grant.

RSUs and restricted stock are granted at the fair value of our stock on the date of

The fair value of options, RSUs and restricted stock are expensed over the vesting periods.

All awards are subject to forfeiture if service terminates prior to the shares vesting.

At December 31, 2024, there were 575,055 shares available for grant under the A&R Plan.

At December 31, 2025, there were 106,914 shares available for

grant under the A&R Plan.

Plan Category

7 unchanged sentences

Equity compensation plans not approved by security holders

During 2024, we granted restricted stock awards totaling 45,000 to non-employee members of our Board of Directors, 65,000 to our advisory board members, and 539,000 restricted stock awards

to our employees.

During 2025, we granted restricted stock awards totaling 30,000 to non-employee members of our Board of Directors, 488,000 options to our employees.

Certain Relationships and Related Transactions, and Director Independence

7 unchanged sentences

Financial Statement Schedule:

Financial statement schedules are omitted because they are not applicable, or the required information is shown in the financial

statements or notes thereto.

Financial statement schedules are omitted because they are not applicable, or the required information is shown in the

financial statements or notes thereto.

All other schedules are omitted because of the absence of conditions under which they are required or because the required information is given in the financial statements or the notes thereto.

The documents listed in the Exhibit Index of this Annual Report on Form 10-K are incorporated by reference or are filed with this Annual Report on Form

10-K, in each case as indicated therein (numbered in accordance with Item 601 of Regulation S-K).

The documents listed in the Exhibit Index of this Annual Report on Form 10-K are incorporated by reference or are filed with this Annual

Report on Form 10-K, in each case as indicated therein (numbered in accordance with Item 601 of Regulation S-K).

EXHIBIT INDEX

17 unchanged sentences

Patent License and Assignment Agreement by and between the Company and Leidos, Inc.

(formerly Science Applications International Corporation)

dated as of August 12, 2005.

(formerly Science Applications International Corporation) dated as

of August 12, 2005.

Amendment No.

14 unchanged sentences

Hire Letter by and between Katherine Allanson and the Company, dated as of September 1, 2021.

Offer Letter by and between Darl C.

McBride and the Company, dated as of December 22, 2023.

Warrant to Purchase Shares of Common Stock of the Company by and between the Company and Odeon Capital Group LLC, dated as of

April 29, 2020 .

Outside Director Compensation Policy, as adopted on

November 30, 2023.

Insider Trading and Disclosure Compliance Proagram, as adopted

on March 30, 2023.

Warrant to Purchase Shares of Common Stock of the Company by and between the Company and Odeon Capital Group LLC, dated as of April 29,

Outside Director Compensation Policy, as adopted on November 30, 2023.

Insider Trading and Disclosure Compliance Program, amended on August 11, 2025.

Subsidiaries of VirnetX Holding Corporation .

1 unchanged sentence

Power of Attorney (contained on signature page hereto)

Chief Executive Officer Certification pursuant to Rule 13a-14(a) of the Securities

Exchange Act.

Chief Financial Officer Certification pursuant to Rule 13a-14(a) of the Securities

Exchange Act.

Chief Executive Officer Certification pursuant to Rule 13a-14(a) of the Securities Exchange Act.

Chief Financial Officer Certification pursuant to Rule 13a-14(a) of the Securities Exchange Act.

Chief Executive Officer Certification pursuant to 18 U.S.C.

Section 1350 as adopted

pursuant to Section 906 of the Sarbanes-Oxley Act of 2002

Section 1350 as adopted pursuant to Section 906 of the

Sarbanes-Oxley Act of 2002

Chief Financial Officer Certification pursuant to 18 U.S.C.

Section 1350 as adopted

pursuant to Section 906 of the Sarbanes-Oxley Act of 2002.

Section 1350 as adopted pursuant to Section 906 of the

Sarbanes-Oxley Act of 2002.

Compensation Recovery Policy of the Company as adopted November 8, 2023.

8 unchanged sentences

Confidential treatment has been granted by the SEC as to certain portions of this exhibit.

Portions of this exhibit have been omitted pending a determination by the SEC as to whether these portions should be granted confidential treatment.

The certifications attached as Exhibit 32.1 and 32.2 that accompany this Report are not deemed filed with the Securities and Exchange Commission and are not to be incorporated by reference into any

filing of VirnetX Holding Corporation under the Securities Act or the Exchange Act, whether before or after the date of this Report, irrespective of any general incorporation language contained in such filing.

The certifications attached as Exhibit 32.1 and 32.2 that accompany this Report are not deemed filed with the Securities and Exchange Commission and are not to be incorporated by reference

into any filing of VirnetX Holding Corporation under the Securities Act or the Exchange Act, whether before or after the date of this Report, irrespective of any general incorporation language contained in such filing.

Pursuant to the requirements of Section 13 or 15(d) of the Securities Exchange Act of 1934, the registrant has duly caused this Annual Report on Form 10-K to be signed on its behalf by the

6 unchanged sentences

POWER OF ATTORNEY

KNOW ALL PERSONS BY THESE PRESENTS, that each person whose signature appears below constitutes and appoints Kendall Larsen as his attorney-in-fact, with full power of substitution, for him

in any and all capacities, to sign any amendments to this Annual Report on Form 10-K, and to file the same, with exhibits thereto and other documents in connection therewith with the Securities and Exchange Commission, hereby ratifying and

confirming all that said attorney-in-fact, or his substitute or substitutes may do or cause to be done by virtue hereof.

Pursuant to the requirements of the Securities Exchange Act of 1934, this Annual Report on Form 10-K has been signed below by the following persons on behalf of the registrant and in the

capacities indicated.

KNOW ALL PERSONS BY THESE PRESENTS, that each person whose signature appears below constitutes and appoints Kendall Larsen as his attorney-in-fact, with full power of substitution, for him in any

and all capacities, to sign any amendments to this Annual Report on Form 10-K, and to file the same, with exhibits thereto and other documents in connection therewith with the Securities and Exchange Commission, hereby ratifying and confirming all

that said attorney-in-fact, or his substitute or substitutes may do or cause to be done by virtue hereof.

Pursuant to the requirements of the Securities Exchange Act of 1934, this Annual Report on Form 10-K has been signed below by the following persons on behalf of the registrant and in the capacities

/s/Kendall Larsen

17 unchanged sentences

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 9A. Controls and Procedures