The Standard Nobody Else Has to MeetNarrow moat

VeriSign (VRSN) — moat facet

The rules that protect .com also stop VeriSign doing almost everything a dominant supplier would ordinarily do, and it says so in its own filing.

The rules that protect VeriSign also bind it more tightly than anyone it competes with.

Obligations on .com that rivals do not carryMaximum price increase7%, in 4 of 6 yearsRegistrar accessNon-discriminatory, requiredNew registry servicesPrior ICANN reviewSelling direct to registrantsProhibitedVeriSign's own filing says these may create a competitive disadvantage.
The rules that protect .com also stop VeriSign doing what any dominant supplier would.

The company says so itself: under the .com Registry Agreement it is subject to obligations that do not apply to ccTLDs and other gTLDs, which it describes as potentially creating a competitive disadvantage.1 The list is not short. Price is capped. Registrars must receive non-discriminatory access to the registry systems. Marketing is limited, including restrictions on bundling and on how VeriSign may support registrars. New registry services, or material changes to existing ones, require ICANN review before launch. And the vertical-integration restrictions — the reason VeriSign cannot simply sell .com names directly to the public and keep the retail margin — apply solely to .com.

Read as a business constraint, this is severe. VeriSign operates the largest registry in the world and is prohibited from doing most of what a dominant supplier would ordinarily do with that position: it cannot price to value, cannot integrate forward, cannot bundle, and cannot ship a new service without permission.

Read as a moat, it is the price of the licence. A regulated monopoly that behaved like an unregulated one would not stay a monopoly. Every one of these constraints is a reason the arrangement has survived thirty years of scrutiny.

The asymmetry to keep in mind is that new gTLD operators face none of it. They can price freely, bundle freely and integrate freely — which is exactly what VeriSign is about to find out with .web.

Moat trajectory: Narrowing

Obligations accrete. Price caps, non-discriminatory registrar access, marketing limits, prior review of new services and vertical-integration restrictions were all added over time, none has ever been removed, and every new gTLD operator competes without any of them.

The number that tests this moat
Moat Explorer calc
.com and .net share of all registered domain names
44.6% in Q2 2026 (179.1M of 401.6M)

Rival top-level domains carry none of the price caps and access rules .com does, and they can grow faster. A falling share shows them gaining; a stable one, that the obligations have not held .com back.

How it's calculated: .com and .net domain name base (179.1M) ÷ total registrations across all TLDs (401.6M), Q2 2026.
Source: VeriSign Form 10-Q, Q2 2026; Domain Name Industry Brief, Q2 2026 ↗
⚠ Threats to the moat
References
  1. ReportedVeriSign states that it is subject to obligations that do not apply to ccTLDs and other gTLDs and that may create a competitive disadvantage: price is capped, ICANN-accredited registrars must receive non-discriminatory access, marketing and bundling are limited, new Registry Services require ICANN review before launch, and vertical-integration restrictions apply solely to .com.
    VeriSign, Inc., Form 10-K for the fiscal year ended 31 December 2025 (SEC, CIK 1014473) — Item 1, Business. VeriSign operates the .com and .net registries under registry agreements with ICANN, and .com additionally under a Cooperative Agreement with the U.S. Department of Commerce (most recently amended by Amendment 35 on 26 October 2018, automatically renewed on the same terms on 30 November 2024 for a successive six-year term, renewing again on 30 November 2030 unless the DOC gives notice). The .com Registry Agreement runs a six-year term that must be renewed or extended by 30 November 2030 and contains a presumptive right of renewal, with ICANN able to terminate or refuse in certain prescribed circumstances; it permits an increase to the Maximum Price of up to 7% over the previous year in each of the final four years of each six-year period, the current period having begun on 26 October 2024. The .net Registry Agreement was renewed on 29 June 2023, runs to 1 July 2029 and permits increases of up to 10% each year. VeriSign remits $0.2575 to ICANN quarterly for each annual .com registration and $0.25 for each .name registration. It also operates .cc under an agreement with the Cocos (Keeling) Islands, operates .name and internationalised gTLDs, provides back-end services for .edu, performs the Root Zone Maintainer function for ICANN and operates two of the thirteen global internet root servers. Retail pricing is established by registrars; VeriSign must provide ICANN-accredited registrars with non-discriminatory access, faces marketing and bundling limits, must submit new Registry Services for ICANN review, and is subject to vertical-integration restrictions that apply solely to .com — obligations it states do not apply to ccTLDs and other gTLDs and may create a competitive disadvantage. Named registry competitors include CentralNic, China Internet Network Information Center (CNNIC), DENIC eG, GoDaddy, Google, Identity Digital, Nominet, Public Interest Registry, Radix and .xyz. Employee headcount 928 (256 cost of revenues, 240 research and development, 432 selling, general and administrative). — FY2025 · publ. 2026-02-05 · source ↗
Sources
Generated September 23, 2026