Intrusion Inc: Form 10-K for the period ended Dec 31, 2025

Our Corporate Information

We were organized in Texas in September 1983 and reincorporated in Delaware in October 1995. Our principal executive offices are located at 101 East Park Boulevard, Suite 1200, Plano, Texas 75074, and our telephone number is (888) 637-7770. Our website URL is www.intrusion.com (http://www.intrusion.com). We post the following filings in the “Investors” section of our website as soon as reasonably practicable after they are electronically filed with or furnished to the Securities and Exchange Commission (the “SEC”): our Annual Reports on Form 10-K; our Quarterly Reports on Form 10-Q; our Current Reports on Form 8-K; and any amendments to those reports or statements filed or furnished pursuant to Section 13(a) or 15(d) of the Exchange Act. All such filings on our website are available free of charge. Additionally, filings are available on the SEC’s website (www.sec.gov (http://www.sec.gov)). In this report, references to the “Company,” “we,” “us,” “our,” or “Intrusion” refer to Intrusion Inc. and its subsidiary. TraceCop and Savant are registered trademarks of the Company. We have also applied for trademark protection for INTRUSION Shield.

Our Business

Intrusion is a cybersecurity company based in Plano, Texas. The Company offers its customers access to its exclusive threat intelligence database containing the historical data, known associations, and reputational behavior of over 8.5 billion Internet Protocol (“IP”) addresses. After years of gathering global internet intelligence and working exclusively with government entities, the company released its first commercial product in 2021. Our platform combines threat intelligence, malicious traffic identification, and automated threat response, and is designed to help organizations proactively identify and stop malicious activity in their networks.

For the fiscal years ended December 31, 2025 and 2024, we generated revenues of approximately $7.1 million and $5.8 million, respectively, and reported net loss of approximately $9.1 million and $7.8 million, respectively, and cash flow used in operating activities of approximately $6.8 million and $6.3 million, respectively. As a result of our historically recurring losses from operations, negative cash flows from operations, as well as our dependence on equity and debt financings, there is substantial doubt regarding our ability to continue as a going concern.

Our Solutions

INTRUSION Shield™

INTRUSION Shield, is a Zero Trust reputation-based Software as a Service (“SaaS”) solution that inspects and kills dangerous network (in and outbound) connections. What makes our approach unique is that INTRUSION Shield evaluates every packet and analyzes the IP addresses (source and destination), as well as domain information and the ports utilized and, when combined with other threat intelligence data reports, blocks malicious connections. Many breaches today are caused by Zero-Day and malware free compromises that may not trigger alarms in a traditional firewall or endpoint solution. INTRUSION ***Shield’***s capabilities are designed to continuously evolve as the threats and landscape change over time. Unlike traditional industry approaches that rely heavily on signatures, complex rules, and human factors mitigation, which malicious actors and nation states have learned to bypass, INTRUSION ***Shield’***s proprietary architecture isolates and neutralizes malicious traffic and network flows that existing solutions are ill equipped to handle.

In September 2022, we expanded the INTRUSION Shield product line to include the Shield Cloud and Shield End-Point solutions. The initial INTRUSION Shield offering was released in early 2021. The Shield On-Premise solution utilizes hardware and is placed behind a firewall in a data center. Shield Cloud extends the effectiveness of the Shield On-Premise solution to Infrastructure as a Service (IaaS), Platform as a Service (PaaS), SaaS and serverless resources in the public cloud. This product serves as a protective gateway to the cloud, providing both Zero Trust access to, and protecting outbound connections from, virtual hosts and serverless functions within the cloud. Shield Endpoint helps protect the network outside of the corporate enclave and data center to include protection for remote workers, mobile, and cloud devices. This product brings the network protection of the Shield On-Premise to these remote user devices establishing a Zero Trust network, both for intra-organization connectivity and external internet connectivity.

INTRUSION TraceCop®

INTRUSION TraceCop is a big data tool with extensive IP intelligence canvassing the entire internet. It contains what we believe to be the largest existing repository of reputation information on known good and known bad active IP addresses (both IPv4 and IPv6). TraceCop contains an inventory of network selectors and enrichments useful to support forensic investigations. The data contains a history of IPv4 and IPv6 block allocations and transfers, historical mappings of IP addresses to Autonomous Systems (ASNs) as observed through BGP, and approximately one billion historically registered domain names and registration context. TraceCop contains tens of billions of historic DNS resolutions of Fully Qualified Domain Names (FQDNs or hostnames) on each of these domains. Together, the resulting data shows relationships, hosting, and attribution for internet resources. TraceCop also contains web server surveys of content, such as natural language and topic of the content on hundreds of millions of websites and servers and OS fingerprints of services showing applications running on a given IP address. TraceCop also contains a history of threat and reputation for each hostname and IP address over time. All these features combine to create a very effective network forensics and cybersecurity analysis tool.

INTRUSION Savant®

INTRUSION Savant is a network monitoring solution that leverages the rich data available in TraceCop to identify suspicious traffic in real-time. Savant uses several original patents to uniquely characterize and record all network flows. Savant is a network reconnaissance and attack analysis tool used by forensic analysts in United States (“U.S.”) government agencies and corporations with in-house threat research teams. For example, Savant users can create various automated rules to inspect packets matching (or not) certain criteria such as creating a rule to ensure the Source MAC address field in the Ethernet header and Source IP address from the IP header are always the same, failing which could indicate MAC or IP Spoofing in progress. Similarly, threat investigators can create rules using regular expressions to analyze multiple fields in the packet headers.

Our Intellectual Property and Licenses

Our success and our ability to compete are primarily dependent upon our proprietary technology. We principally rely on a combination of contractual rights, trade secrets, and copyright laws to establish and protect our proprietary rights in our solutions. In addition, we have received two patents, and we have applied for patents for our INTRUSION Shield family of solutions. We have also entered into non-disclosure agreements with our suppliers, resellers, and certain customers to limit access to and disclosure of our proprietary information. There can be no assurance that the steps taken by us to protect our intellectual property will be adequate to prevent misappropriation of our technology or that our competitors will not independently develop technologies that are substantially equivalent or superior to our technology, although it would be extremely difficult to replicate the proprietary and comprehensive internet databases we have developed over the past 25+ years.

We have entered into software and solution license agreements with various suppliers. These license agreements provide us with additional software and hardware components that add value to our cybersecurity solutions. These license agreements do not provide proprietary rights that are unique or exclusive to us and are generally available to other parties on the same or similar terms and conditions, subject to payment of applicable license fees and royalties. We do not consider any of the solution license, software, or supplier agreements to be material to our business, instead, they are complementary to our business and offerings.

Our Competition

The market for network and data protection security solutions is intensely competitive and subject to frequent introductions of new technologies, and potentially improved price and performance characteristics. Industry suppliers compete in areas such as conformity to existing and emerging industry standards, interoperability with networking and other cybersecurity solutions, management and security capabilities, performance, price, ease of use, scalability, reliability, flexibility, features, and technical support. Our principal competitors in the data mining and advanced persistent threat markets include Darktrace, Trellix, and Recorded Future.

There are numerous companies competing in various segments of the data security market. At this time, we have little or no competitors for TraceCop; however, we believe competitors could emerge in the future. These competitors currently perform only a portion of the functions that we can perform with TraceCop. We have been continuously collecting the TraceCop data for more than 20 years, and we believe that none of our current or future competitors will have the ability to provide and reference this historical data. In our newest market segment, data mining, and advanced persistent threat detection, we compete directly and indirectly with companies and open-source technologies in the firewall, intrusion detection and prevention, anti-virus, network analysis, endpoint protection, and insider threat prevention areas of cybersecurity technology.

We believe the INTRUSION Shield product line is novel and unique in our industry because of our proprietary threat-enriched big data. We believe that our INTRUSION Shield family of solutions complement our customers’ existing cybersecurity processes and third-party solutions. If the INTRUSION Shield receives widespread acceptance in the market, we anticipate that other businesses will seek to compete with INTRUSION Shield; however, we believe our existing, mature, and proprietary database which is integral to the operation of INTRUSION Shield will be difficult, if not impossible, for other companies in our industry to replicate and will be a significant barrier to entry of competitors in the near- and long-term future of cyber security solutions.

Our Customers: Government Sales

Sales to U.S. government customers accounted for 94.6% of our revenues for the year ended December 31, 2025, compared to 83.8% of our revenues in 2024. We expect to continue to derive a substantial portion of our revenues from sales to governmental entities in the future as we continue to market our products and data mining products to the government, and we intend to market INTRUSION Shield not only to our long-standing governmental customer base but to expand our efforts to include more traditionally administrative and civilian governmental entities. Sales to government clients present risks in addition to those involved in sales to commercial customers that could adversely affect our revenues, including potential disruption due to irregularities in or interruptions to appropriation and spending patterns, delays in approving a federal budget and the government’s reservation of the right to cancel contracts and purchase orders for its convenience.

We make our sales under purchase orders and contracts. Our customers, including government customers, may cancel their orders or contracts with little or no prior notice and without penalty. Although we transact business with various government entities, we believe that the cancellation of any order in itself could have a material adverse effect on our financial results. Because we derive and expect to continue to derive a substantial portion of our revenue from sales to government entities, a large number of cancelled or renegotiated government orders or contracts could have a material adverse effect on our financial results.

Third-Party Products

We currently utilize commercially available computers and servers from various vendors which we integrate with our software products for implementation into our customer networks. We do not consider any of these third-party relationships to be material to the Company’s business or results of operations.

Customer Services

Our solutions may include installation, operation of our technology and threat data interpretation and reporting.

Sales, Marketing and Customers

Field Sales Force. Our sales organization focuses on major account sales, channel partners including distributors, value added resellers (“VARs”) and integrators; promotes our solutions to current and potential customers; and monitors evolving customer requirements. The field sales and technical support force provides training and technical support to our resellers and end users and assists our customers in designing cyber secure data networking solutions. We currently conduct sales and marketing efforts from our principal office in Plano, Texas.

Resellers. Resellers such as domestic and international system integrators and VARs sell our solutions as stand-alone solutions to end users and integrate our solutions with products sold by other vendors into network security systems that are sold to end users. Our field sales force and technical support organization provide support to these resellers. Our agreements with resellers are non-exclusive, and our resellers generally sell other products and solutions that may compete with our solutions. Resellers may place higher priority on products or solutions of other suppliers who are larger and have more name recognition, and there can be no assurance that resellers will continue to sell and support our solutions.

Foreign Sales. Export sales accounted for 2.9% and 4.7% of revenue in 2025 and 2024, respectively.

Marketing. We have implemented several methods to market our solutions, including participation in trade shows and seminars, distribution of sales literature and solution specifications and ongoing communication with our resellers and installed base of end-user customers.

Customers. Our end-user customers include U.S. federal government, state and local government entities, large and diversified conglomerates, and manufacturing entities. Sales to certain customers and groups of customers can be impacted by seasonal capital expenditure approval cycles, and sales to customers within certain geographic regions can be subject to seasonal fluctuations in demand.

In 2025, 94.6% of our revenue was derived from a variety of U.S. government entities through direct sales and indirectly through system integrators and resellers. These sales are attributable to four U.S. government customers through direct and indirect channels; three U.S. government customers individually exceeded 10% of total revenue in 2025. A reduction in our sales to U.S. government entities could have a material adverse effect on our business and operating results if not replaced.

Backlog. We believe that only a small portion of our order backlog is non-cancellable, and that the dollar amount associated with the non-cancellable portion is immaterial. Commercial orders are generally fulfilled within two days to two weeks following receipt of an order. Certain orders may be scheduled over several months, generally not exceeding one year.

Customer Support, Service and Warranty. We service, repair, and provide technical support for our solutions. Our field sales and technical support force works closely with resellers and end-user customers on-site and by telephone to assist with pre- and post- sales support services such as network security design, system installation, and technical consulting. By collaborating closely with our customers, our employees increase their understanding of end-user requirements and are then able to provide specific input in our solution development process.

We warrant all our solutions against defects during the service period. Before and after expiration of the solution warranty period, we offer both on-site and factory-based support, parts replacement, and repair services. Extended warranty services are separately invoiced on a time and materials basis or under an annual maintenance contract.

Employees

As of December 31, 2025, we employed a total of 52 people, four of which were part-time. None of our employees are represented by a labor organization, and we are not a party to any collective bargaining agreement. Competition in the recruiting of personnel in the networking and data security industry is intense. We believe that our future success will depend in part on our continued ability to hire, motivate and retain qualified management, sales, marketing, and technical personnel.

Our Code of Conduct

The Company’s directors and employees, including executive officers, are required to abide by the Company’s Code of Business Conduct and Ethics (the “Code”) to ensure that the Company’s business is conducted in a consistently legal and ethical manner and to avoid instances of insider trading. The Code covers areas of professional conduct that include conflicts of interest, fair dealing and the strict adherence to all laws and regulations applicable to the conduct of the Company’s business.

The Code is published on the Company’s website under the investor relations tab at www.intrusion.com (http://www.intrusion.com). The Company intends to disclose future amendments to, or waivers from, certain provisions of the Codes of Ethics on the Company’s website within four business days following the date of such amendment or waiver. Upon the written request of any stockholder, the Company will furnish, without charge, a copy of the Code. This request should be directed to the Company’s Secretary at Intrusion Inc., 101 East Park Blvd., Suite 1200, Plano, TX 75074.

Reverse Stock Split

On March 22, 2024, we effected a 1-for-20 reverse stock split of our common stock. All share and per share amounts set forth in this Annual Report on Form 10-K, including the consolidated financial statements and the notes thereto, have been retroactively restated to reflect the reverse stock split as if it had occurred as of the earliest period presented and unless otherwise stated, all other share and per share amounts for all periods presented.

The following are the significant factors that could materially adversely affect our business, financial condition, or operating results, as well as adversely affect the value of an investment in our common stock. The risks described below are not the only risks facing our Company. Risks and uncertainties not currently known to us or that we currently deem to be immaterial also may materially adversely affect our business, financial condition, and operating results.

Risks Related to our Financial Position and Liquidity

The Company’s ability to implement its current business plan is dependent on our ability to raise additional funds through additional public or private financings, which raises substantial doubt that the Company may not be able to continue as a going concern.

As of December 31, 2025, we had cash and cash equivalents of $3.6 million. Our primary source of cash for funding operations in 2025 has come from net proceeds received from a registered direct offering of $7.0 million and $1.5 million in proceeds from the sale of common stock pursuant to a standby equity purchase agreement (“SEPA”), recorded as a receivable at December 31, 2024. Our independent registered public accounting firm’s report on our audited financial statements for fiscal year ended December 31, 2025, includes an explanatory paragraph stating that our historically recurring losses from operations, negative cash flows from operations, and dependence on equity and debt financing raise substantial doubt about our ability to continue as a going concern. Our ability to continue as a going concern is dependent upon our ability to raise additional funds through public or private financing, including the utilization of our ATM program. We can provide no assurances that we will be able to raise additional funds through any future equity or debt financings, and the terms of those financings, if available at all, may be on terms, which are not favorable to us and, in the case of equity financings, will result in dilution to our stockholders. The inclusion of a going concern explanatory paragraph may also make it more difficult for us to secure additional financing or enter into strategic partnerships, as it signals a high degree of financial risk to potential investors and creditors. Our financial statements do not include any adjustments that might result from the outcome of this uncertainty.

We are subject to certain regulatory limitations that may affect our ability to consummate future financings.

Unless our public float as measured pursuant to General Instruction I.B.6 to Form S-3 exceeds $75 million, we will be subject to the restrictions set forth in General Instruction I.B.6 to Form S-3 that limit our ability to conduct primary offerings under a Form S-3 registration statement. Under such limitations, we may not sell, during any 12-month period, securities on Form S-3 having an aggregate market value of more than one-third of our public float. As of March 24, 2026, our public float calculated in accordance with General Instruction I.B.6 of Form S-3 was $20.1 million.

We must increase revenue levels in order to finance our current operations and to implement our business strategies.

For the year ended December 31, 2025, we had a net loss of $9.1 million and had an accumulated deficit of approximately $127.1 million as of December 31, 2025. We need to increase current revenue levels from the sales of our solutions if we are to regain profitability, and our INTRUSION Shield suite of products may take time to achieve market penetration, which could negatively impact future revenues and results of operations. If we are unable to increase revenue levels, losses could continue for the near term and possibly longer, and we may not regain profitability or be able to implement our business plan, fund our liquidity needs, or continue our operations.

Business and Operational Risks

Most of our current revenues are generated from one family of solutions with a limited number of customers, and the decrease of revenue from sales of this family of solutions could materially harm our business and prospects.

Approximately 43.2% of our existing revenues result from sales of TraceCop, a cybersecurity solution. TraceCop revenues were $3.1 million for the year ended December 31, 2025, compared to $2.9 million for the year ended December 31, 2024. We can offer no assurances that our INTRUSION Shield solution will reduce our dependence on this single solution and in the absence of a shift in solution mix, we may continue to face risks if sales of this key solution to these limited customers were to decrease.

We may not be successful in our efforts to broaden the marketing and sale of the INTRUSION Shield.

We believe that we must expand our sales and marketing efforts for INTRUSION Shield to achieve marketplace acceptance and to generate revenue for the Company. However, these efforts depend, in large part, on the success of our channel partners as they market and sell INTRUSION Shield, which may not be successful. If we are unsuccessful in our efforts to leverage channel and strategic partners, we may not be able to generate sufficient revenue from INTRUSION Shield to improve the Company’s financial position, results of operations, and cash flow position.

The current geo-political climate may add uncertainty in the dealings of our customers and could cause them to delay indefinitely certain cybersecurity initiatives or to determine not to introduce or implement any new or innovative cyber-solution products into their information networks.

Continuing events in many regions around the world have introduced a significant level of uncertainty in the dealings of our current and potential customers that could cause them to be hesitant to implement new cybersecurity initiatives regardless of the efficacy of our INTRUSION Shield product. Further, these entities may also determine not to deploy their cash reserves in the face of such uncertainty. These uncertainties could depress the interest or the ability of companies and governmental entities to test, evaluate, and deploy our INTRUSION Shield in their network environments.

A large percentage of our current revenues are received from U.S. government entities, and the loss of these customers or our failure to widen the scope of our customer base to include general commercial enterprises could negatively affect our revenues.

A substantial percentage of our current revenues result from sales to U.S. government entities. If we were to lose one or more of these customers, our revenues could decline, and our business and prospects may be materially harmed. Further, sales to the government present risks in addition to those involved in sales to commercial customers, including potential disruption due to appropriation and spending patterns, delays in approving a federal budget and the government’s right to cancel contracts and purchase orders for its convenience. The factors that could cause us to lose these U.S. government customers or otherwise materially harm our business, prospects, financial condition, or results of operations include:

• budget constraints affecting government spending generally, or specific departments or agencies, and changes in fiscal policies or a reduction of available funding;
• re-allocation of government resources;
• disruptions in our customers’ ability to access funding from capital markets;
• curtailment of governments’ use of outsourced service providers and governments’ in-sourcing of certain services;
• the adoption of new laws or regulations pertaining to government procurement;
• government appropriations delays or blanket reductions in departmental budgets;
• suspension or prohibition from contracting with the government or any significant agency with which we conduct business;
• increased use of shorter duration awards, which increases the frequency we may need to recompete for work;
• impairment of our reputation or relationships with any significant government agency with which we conduct business;
• decreased use of small business set asides or changes to the definition of small business by government agencies;
• increased use of lowest-priced, technically acceptable contract award criteria by government agencies;
• increased aggressiveness by the government in seeking rights in technical data, computer software, and computer software documentation that we deliver under a contract, which may result in “leveling the playing field” for competitors on follow-on procurements;
• delays in the payment of our invoices by government payment offices; and
• national or international health emergencies, such as the COVID-19 public health pandemic.

While we expect that developing relationships with non-governmental customers will mitigate or eliminate this dependence on, and risk from, serving governmental entities, we can offer no assurances that we will be able to sufficiently diversify our customer portfolio in a time and manner to adequately mitigate this risk.

A decline in federal, state, or local government spending would likely negatively affect our product revenues and earnings.

The success of the cybersecurity solutions we sell depends substantially on the amount of funds budgeted by federal, state, and local government agencies that make up our current and potential customers. Global credit and financial markets have experienced extreme disruptions in the recent past, including severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates and uncertainty about economic stability. There can be no assurance that similar disruptions will not occur in the future. Deterioration in general economic conditions may result in lower tax revenues that could lead to reductions in government spending. Poor economic conditions could in turn lead to substantial decreases in our net sales or have a material adverse effect on our operating results, financial position, and cash flows.

We are highly dependent on sales of our current solutions through indirect channels, the loss of which would materially adversely affect our operations.

For the years ended December 31, 2025 and 2024, we derived 55.0% and 35.4% of our revenues from sales through indirect sales channels, such as distributors, value-added resellers, system integrators, original equipment manufacturers, and managed service providers. We must expand sales of our current solutions as well as any new solutions through these indirect channels in order to increase our revenues. We cannot assure you that our current solutions or future solutions will gain market acceptance in these indirect sales channels or that sales through these indirect sales channels will increase our revenues. Further, many of our competitors are also trying to sell their products and solutions through these indirect sales channels, which could result in lower prices and reduced profit margins for the sales of our solutions.

Our business depends on the continued service of our key management and technical personnel.

Our success depends upon the continued contributions of our key management, sales, marketing, research and development and operational personnel, including Anthony Scott, our President, and Chief Executive Officer (“CEO”); T. Joe Head, our Chief Technology Officer; Kimberly Pinson, our Chief Financial Officer (“CFO”); and other key technical personnel. The loss of the services of one or more of our key employees in the future could have a material adverse effect on our operating results. We also believe our future success will depend upon our ability to attract and retain additional highly skilled management, technical, marketing, research and development, and operational personnel with experience in managing large and rapidly changing companies, as well as training, motivating and supervising employees. The market for hiring and retaining certain technical personnel, including software engineers, has become more competitive and intense in recent years. Failure to attract and retain a sufficient number of qualified technical personnel, including software engineers, or retain our key personnel could have a material adverse effect on our operating results.

We could experience damage to our reputation in the cybersecurity industry in the event that our INTRUSION Shield solution fails to meet our customers’ needs or to achieve market acceptance.

Our reputation in the industry may be harmed if we experience delivery delays, or if our customers do not perceive the benefits of purchasing and using INTRUSION Shield as part of their comprehensive cybersecurity solution, our position as a leader in this technology space may be damaged and could affect the willingness of our customers, as well as potential customers, to purchase our other solutions that function separately from INTRUSION Shield. Any reputational damage could result in a decrease in orders for all our solutions, the loss of current customers, and a decrease in our overall revenues which could in turn have a material adverse effect on our results of operations.

If we fail to respond to rapid technological changes in the network security industry, we may lose customers, or our solutions may become obsolete.

The network security industry is characterized by frequent product and service introductions, rapidly changing technology, and continued evolution of new industry standards. We have and must continue to introduce upgrades to our current solutions rapidly in response to changing circumstances and customer needs such as the creation and introduction of new computer viruses or other novel external attacks on computer networks. Further, our INTRUSION Shield solution represents our efforts to continue to provide state-of-the art first-in-time innovation for our customers’ cybersecurity solutions. As a result, our success depends upon our ability to develop and introduce timely upgrades, enhancements, and new solutions to meet evolving customer requirements and industry standards. The development of technologically advanced network security products and solutions is a complex and uncertain process requiring high levels of innovation, rapid response, and accurate anticipation of technological and market trends. We cannot assure you that we will be able to identify, develop, manufacture, market or support new or enhanced solutions successfully in a timely manner. Further, we or our competitors may introduce new solutions or enhancements that shorten the life cycle of our existing solutions or cause our existing solutions to become obsolete.

We must expend time and resources addressing potential cybersecurity risks, and any breach of our information security safeguards could have a material adverse effect on the Company.

The threat of cyber-attacks requires additional time and money to be expended in efforts to prevent any breaches of our information security protocols. However, we can provide no assurances that we can prevent all such attempts from being successful, which could result in expenses to address and remediate such breaches as well as potentially losing the confidence of our customers who depend upon our services to prevent and mitigate such attacks on their respective business. Should a material breach of our information security systems occur, it would likely have a material adverse impact on our business operations, our customer relations, and our current and future sales prospects, resulting in a significant loss of revenue.

A breach of network security could harm public perception of our cybersecurity solutions, which could cause us to lose revenues.

If an actual or perceived breach of network security occurs in the network of a customer of our cybersecurity solutions, regardless of whether the breach is attributable to our solutions, the market perception of the effectiveness of our solutions could be harmed. This could cause us to lose current and potential end customers or cause us to lose current and potential value-added resellers and distributors. Because the techniques used by computer hackers to access or sabotage networks change frequently and generally are not recognized until launched against a target, we may be unable to anticipate these techniques.

If our solutions do not interoperate with our customers’ networks, installations will be delayed or cancelled and could harm our business.

Our solutions are designed to interface with our customers’ existing networks, each of which has different specifications and utilize multiple protocol standards and products or solutions from other vendors. Many of our customers’ networks contain multiple generations of products that have been added over time as these networks have grown and evolved. Our solutions will be required to interoperate with many products and solutions within these networks as well as future products or solutions to meet our customers’ requirements. If we find errors in the existing software or defects in the hardware used in our customers’ networks, we may have to modify our software or hardware to fix or overcome these errors so that our solutions will interoperate and scale with the existing software and hardware, which could be costly and negatively impact our operating results. In addition, if our solutions do not interoperate with those of our customers’ networks, demand for our solutions could be adversely affected, orders for our solutions could be cancelled, or our solutions could be returned. This could hurt our operating results, damage our reputation, and seriously harm our business and prospects.

We face intense competition from both start-up and established companies that may have significant advantages over us and our solutions.

The market for our solutions is intensely competitive. There are numerous companies competing with us in various segments of the data security markets, and their products or solutions may have advantages over our solutions in areas such as conformity to existing and emerging industry standards, interoperability with networking and other cybersecurity products, management and security capabilities, performance, price, ease of use, scalability, reliability, flexibility, features, and technical support.

Our principal competitors in the data mining and advanced persistent threat markets include Darktrace, Trellix, and Recorded Future. Our current and potential competitors may have one or more of the following significant advantages over us:

• greater financial, technical, and marketing resources;
• better name recognition;
• more comprehensive security solutions;
• better or more extensive cooperative relationships; and
• larger customer base.

We cannot assure you that we will be able to compete successfully with our existing or new competitors. Some of our competitors may have, in relation to us, one or more of the following:

• longer operating histories;
• longer-standing relationships with OEM and end-user customers; and
• greater customer service, public relations, and other resources.

As a result, these competitors may be able to more quickly develop or adapt to new or emerging technologies and changes in customer requirements, or devote greater resources to the development, promotion and sale of their products or solutions. Additionally, it is likely that new competitors or alliances among existing competitors could emerge and rapidly acquire significant market share.

If we are unable to implement and maintain effective internal control over financial reporting in the future, investors may lose confidence in the accuracy and completeness of our financial reports, and the market price of our common stock may decline.

As a public company, we are required to maintain internal control over financial reporting and to report any material weaknesses in such internal control. Further, we are required to report any changes in internal controls on a quarterly basis. In addition, we are required to furnish a report by management on the effectiveness of internal control over financial reporting pursuant to Section 404 of the Sarbanes-Oxley Act of 2002, as amended (the “Sarbanes-Oxley Act”).

If we identify material weaknesses in our internal control over financial reporting, if we are unable to comply with the requirements of Section 404 in a timely manner, or if we assert that our internal control over financial reporting is ineffective, investors may lose confidence in the accuracy and completeness of our financial reports and the market price of the common stock could be negatively affected. We could also become subject to investigations by the stock exchange on which our securities are listed, the SEC, or other regulatory authorities, which could require additional financial and management resources, and could have a material adverse effect on the market price of our common stock.

Scarcity of products and materials in the supply chain could hinder or prevent the deployment of our INTRUSION Shield for our customers who elect to use the wired version of our solution.

Should any of the component parts required for the hardware interface our customers use to access and to utilize the INTRUSION Shield product become scarce, we may have to delay or cancel our fulfillment of orders that could defer potential revenues or even result in customer cancellations, which would have a negative effect on our financial position and results of operations.

We incur significantly increased costs because of operating as a public company, and our management is required to devote substantial time to compliance matters and initiatives.

As a public company with an obligation to file reports with the SEC under the Exchange Act, we incur significant legal, accounting, and other expenses that we would not incur as a private company. In addition, the Sarbanes-Oxley Act imposes various requirements on public companies, including requiring establishment and maintenance of effective disclosure and financial controls. Our management and other personnel devote a substantial amount of time to these compliance initiatives. We cannot predict or estimate the amount of additional costs we will incur to meet our additional disclosure obligations under the Exchange Act or the timing of such costs.

The Sarbanes-Oxley Act requires, among other things, that we maintain effective internal control over financial reporting and disclosure controls and procedures. We report on the effectiveness of our internal control over financial reporting, as required by Section 404 of the Sarbanes-Oxley Act. In addition, in the first Annual Report on Form 10-K following the date on which we no longer qualify as a smaller reporting company, we will be required to have our independent registered public accounting firm attest to the effectiveness of our internal control over financial reporting. Our compliance with Section 404 of the Sarbanes-Oxley Act could require that we incur substantial accounting expenses and expend significant management efforts including the potential of hiring additional accounting and financial staff with appropriate public company experience and technical accounting knowledge. If we are not able to comply with the requirements of Section 404 in a timely manner, or if we or our independent registered public accounting firm identify deficiencies in our internal control over financial reporting that are deemed to be material weaknesses, the market price of our stock could decline and we could be subject to sanctions or investigations by the SEC or other regulatory authorities, which would require additional financial and management resources.

Investment Risks

We experience volatility in the market for our common stock, particularly with respect to swings in the market price as well as volatility in the trading of our common stock.

We experience significant shifts in the market value of our common stock as it trades on the Nasdaq Capital Market (“Nasdaq”) as well as volatility in the trading volume of our shares on that market. For example, the market price of our common stock fluctuated between $5.20 and $0.71 during the year ended December 31, 2025. These fluctuations may result in a hesitancy for investors to purchase and hold shares of our common stock, continued depression of the market value of our stock, and ultimately negatively affect our ability to raise capital through the issuance and sale of our common stock, particularly through our At the Market (“ATM”) program or otherwise. Additionally, a requirement to issue shares at the then-current market prices to fund operations would result in significant dilution to existing shareholders.

Shares eligible for future sale may adversely affect the market.

Our equity incentive plans allow us to issue stock options and award shares of our common stock. We may in the future create additional equity incentive plans, which may at that time require us to file a registration statement under the Securities Act to cover the issuance of shares upon the exercise or vesting of awards granted or otherwise purchased under those plans. As a result, any shares issued or granted under the plans may be freely tradable in the public market. If equity securities are issued under the plans, if implemented, and it is perceived that they will be sold in the public market, then the price of our common stock could decline substantially.

You may experience dilution as a result of future equity offerings.

In the future, we may issue additional shares of common stock and/or securities convertible into, or exchangeable for, or that represent the right to receive, shares of common stock. We may sell shares or other securities at a price per share that is less than the prices per share paid by stockholders, and stockholders purchasing shares or other securities in the future could have rights superior to existing stockholders. The price per share at which we sell additional shares of common stock, or securities convertible into, exercisable for, or exchangeable for shares of common stock, in future transactions may be higher or lower than the prices per share paid by stockholders. Additional equity offerings may dilute the holdings of existing stockholders or reduce the market price of our common stock, or both. Any of these events may dilute the ownership interests of current stockholders, reduce earnings per share, or have an adverse effect on our stock price. Further, sales of substantial amounts of our common stock, or the perception that these sales could occur, could have a material adverse effect on the price of our common stock.

We have never paid dividends on our common stock and have no plans to do so in the future.

Holders of shares of our common stock are entitled to receive such dividends as may be declared by our Board of Directors (our “Board”). To date, we have paid no cash dividends on our shares of common stock, and we do not expect to pay cash dividends on our common stock in the foreseeable future. We intend to retain future earnings, if any, to provide funds for the operations of our business. Therefore, any return investors in our common stock may have will be in the form of appreciation, if any, in the market value of their shares of common stock.

We are a “smaller reporting company,” and reduced disclosure requirements may make our common stock less attractive.

We qualify, and may qualify for the foreseeable future, as a “smaller reporting company.” As a result, we may provide reduced public disclosure compared to larger reporting companies, including fewer years of audited financial statements and scaled executive compensation and other disclosures. Investors may view our securities as less attractive as a result, which could adversely affect the market price and liquidity of our common stock.

Risks Related to our Intellectual Property

We must adequately protect our intellectual property to prevent loss of valuable proprietary information.

We rely primarily on a combination of patent, copyright, trademark and trade secret laws, confidentiality procedures, and non-disclosure agreements to protect our proprietary technology. However, unauthorized parties may attempt to copy or reverse engineer aspects of our solutions or to obtain and use information that we regard as proprietary. Policing unauthorized use of our solutions is difficult, and we cannot be certain that the steps we have taken will prevent misappropriation of our intellectual property. This is particularly true in foreign countries whose laws may not protect proprietary rights to the same extent as the laws of the U.S. and may not provide us with an effective remedy against unauthorized use. If protection of our intellectual property proves to be inadequate or unenforceable, others may be able to use our proprietary developments without compensation to us, resulting in potential cost advantages to our competitors.

We may incur substantial expenses defending ourselves against claims of infringement.

There are numerous patents held by many companies relating to the design and manufacture of network security systems. Third parties may claim that our solutions infringe on their intellectual property rights. Any claim, with or without merit, could consume our management’s time, result in costly litigation, cause delays in sales or implementations of our solutions or require us to enter into royalty or licensing agreements. Royalty and licensing agreements, if required and available, may be on terms unacceptable to us or detrimental to our business. Moreover, a successful claim of product infringement against us or our failure or inability to license the infringed or similar technology on commercially reasonable terms could seriously harm our business.

Our solutions are highly technical and if they contain undetected errors, our business could be adversely affected, and we might have to defend lawsuits or pay damages in connection with any alleged or actual failure of our solutions and services.

Our solutions are highly technical and complex, are critical to the operation of many networks and, in the case of ours, provide and monitor network security and may protect valuable information. Our solutions have contained and may contain one or more undetected errors, defects, or security vulnerabilities. Some errors in our solutions may only be discovered after a solution has been installed and used by end customers. Any errors or security vulnerabilities discovered in our solutions after commercial release could result in loss of revenue or delay in revenue recognition, loss of customers and increased service and warranty cost, any of which could adversely affect our business and results of operations. In addition, we could face claims for product liability, tort, or breach of warranty. Defending a lawsuit, regardless of its merit, is costly and may divert management’s attention. In addition, if our business liability insurance coverage is inadequate or future coverage is unavailable on acceptable terms or at all, our financial condition could be harmed.

We recognize the importance of securing our data and information systems and have a process for assessing, mitigating, and managing cybersecurity and related risks.

Our Vice President (“VP”) of Engineering, who reports to the CEO, leads our cybersecurity function and is responsible for managing our cybersecurity risk and the protection of our networks, systems, and data. The VP of Engineering uses both internal and external resources to execute this process including our own INTRUSION Shield technology, to help prevent, identify, escalate, investigate, and resolve security incidents in a timely manner. The Company, with the oversight of the CEO, also requires all employees to complete an annual cybersecurity training course.

Our Board is responsible for overseeing our enterprise risk management activities. The CEO reports to the Board regarding cybersecurity risks, incidents, and mitigation strategies at least annually.

As of the date of this filing, we have not experienced any cybersecurity incidents that have materially affected or are reasonably likely to materially affect our company, including our financial condition and results of operations.

Our corporate headquarters is currently located in 10,705 square feet of space at 101 East Park Blvd, Suite 1200, Plano Texas. This facility houses our corporate administration, engineering, sales, and marketing operations. The lease for this facility expires in April 2035. We also have engineers and other employees working remotely in Texas as well as several other states.

We believe that the existing facility will be adequate to meet our operational requirements through the expiration of the lease. We believe that our property insurance provides adequate coverage for our leased facilities. See Note 5 – ROU Assets and Leasing Liabilities to our Consolidated Financial Statements for additional information regarding our obligations under leases.

We may be subject to various claims that arise in the ordinary course of business. We do not believe that any claims exist where the outcome of such matters would have a material adverse effect on our consolidated financial position, operating results, or cash flows. However, there can be no assurance such legal proceedings will not have a material impact on our future results.

General

The following discussion and analysis include information management believes is relevant to understanding and assessing our consolidated financial condition and results of operations. This section should be read in conjunction with our Consolidated Financial Statements, accompanying notes and the risk factors contained in this report.

Overview

Intrusion Inc. offers businesses of all sizes and industries products and services that leverage the Company’s exclusive threat intelligence database of over 8.5 billion IP addresses and domain names. After many years of gathering intelligence and providing our INTRUSION TraceCop and Savant solutions exclusively to government entities, we released our first commercial product in 2021, the INTRUSION Shield. INTRUSION Shield was designed to allow businesses to incorporate a Zero Trust, reputation-based security solution into their existing infrastructure to observe traffic flow and instantly block known malicious or unknown connections from both entering or exiting a network, making it an ideal solution for protecting from Zero-Day and ransomware attacks.

Results of Operations

Comparison of the Years ended December 31, 2025, and December 31, 2024

(in thousands)

15

Revenues

Revenue for the year ended December 31, 2025, totaled $7.1 million, representing an increase of $1.3 million or 22.9% from $5.8 million in 2024. Revenue growth in 2025 was primarily driven by work performed for the U.S. Department of Defense for the development and implementation of the Shield OT Defender in the Asia Pacific region which contributed to increases in both Shield and consulting revenues. Consulting revenues totaled $5.3 million in 2025 compared to $4.2 million in 2024. Shield revenues totaled $1.8 million, compared to $1.6 million in 2024.

We anticipate that the sale of our OT Defender solution to other departments of the U.S. government, as well as commercially, will continue to contribute to future growth. Additionally, during 2025, we partnered with Port Nexus to integrate our Shield technology into its My Flare Alert school safety solution. Although sales to Port Nexus did not materially impact 2025 revenues, the expanded pipeline for this offering is expected to support future Shield revenue growth.

Revenue in the fourth quarter of fiscal 2025 decreased 25% compared to the prior quarter and 12% compared to the prior year period, primarily reflecting the delayed timing of incremental funding under a major U.S. government contract. The timing of this funding was impacted by operational and administrative constraints associated with the U.S. government shutdown and continuing resolution, which limited agencies’ ability to initiate and process contract actions during the period. As a company that derives a significant portion of its revenue from U.S. government customers, our operating results are dependent on the timing of government funding authorizations, contract awards, and program execution. While we believe the impact of this delay is primarily timing-related, changes in federal budget priorities, including those related to defense and national security, may continue to influence the timing and allocation of future funding, which could affect our revenue and operating results in future periods.

Concentration of Revenues.

Revenues from sales to various U.S. government entities totaled $6.7 million, or 94.6% of revenues, for the year ended December 31, 2025, compared to $4.8 million, or 83.8% of revenues, for the same period in 2024. In both 2025 and 2024 three government entities each individually accounted for over 10% of our revenues.

Sales to commercial customers totaled $0.4 million or 5.4% of total revenue for the year ended December 31, 2025, compared to $0.9 million or 16.2% of total revenue for the same period in 2024.

During 2025, we expanded the number of Shield resellers and referral partners. We anticipate our concentration of revenues will vary among customers in future periods depending upon the timing of certain sales. We anticipate that sales to government customers, while comprising a significant portion of our revenues in future periods, will represent a lower percentage of our revenue base as we gain traction selling our Shield products into commercial markets.

The Company’s similar product and service offerings are not viewed as individual segments, as its management analyzes the business as a whole and expenses are not allocated to each product offering.

Gross Profit

Gross profit for the 12-months ended December 31, 2025 and 2024 totaled $5.4 million or 75.8% and $4.4 million or 76.8%, respectively. The gross profit margin remained relatively flat year-over-year as Shield revenues represented 25% and 26% of revenues in each of 2025 and 2024, respectively. To the extent Shield revenues become a larger percentage of revenues, we anticipate we will see favorable growth in gross profit margins.

Operating Expenses

Operating expenses for the year ended December 31, 2025, totaled $14.5 million, an increase of 13.0% when compared to $12.9 million for the year ended December 31, 2024. Factors contributing to the increase most notably related to one-time savings realized in 2024 from the negotiation or cancellation of existing contracts which contributed $0.5 million in savings in 2024, increased share-based compensation of $0.7 million from equity grants made in the first quarter of 2025 and cost of living and merit increases of $0.3 million.

Sales and Marketing

Sales and marketing expenses totaled $5.3 million, an increase of $0.5 million from $4.7 million in 2024. The increased Sales and Marketing spend related primarily to increased participation in trade shows and increased spend to create more brand awareness and concise product messaging which was partially offset by increased allocations out of operating expenses to cost of sales for resources dedicated to increased consulting work in 2025 and one-time negotiated savings included in the 2024 period of approximately $0.2 million. Certain discretionary marketing spends inclusive of participation in trade shows, utilization of third-party contractors for content and product messaging and travel, are likely to vary over time based on savings initiatives that may be necessary.

Research and Development

Research and development expenses totaled $5.2 million for the year ended December 31, 2025, representing an increase of $0.7 million when compared to the prior year. The increase was primarily due to increased depreciation of $0.2 million on infrastructure hardware purchases and internally developed software and increases in compensation related to the addition of a Sales Engineer and Software Engineer, merit increases and equity awards made in the first quarter of 2025. Research and development costs may vary over time as we determine the frequency of new releases, improved functionality and enhancements needed to be competitive with our product offering.

General and Administrative

General and administrative expenses totaled $4.1 million in 2025 compared to $3.7 million in 2024. The $0.4 million increase in 2025 was primarily due to one-time negotiated savings of $0.2 million included in the 2024 period and increased share-based compensation related to equity grants made in the first quarter of 2025.

Interest Expense

Interest expense for the twelve months ended December 31, 2025, was $81 thousand which related primarily to imputed interest on finance leases. Interest expense for the 2024 period totaled $328 thousand consisting principally of interest on finance leases and the stated interest related to the Streeterville Capital, LLC (“Streeterville”) and Scott notes, both of which have been fully repaid. Interest expenses will vary in the future based on our cash flow and borrowing needs.

Interest Accretion and Amortization of Debt Issuance Costs, Net

During March 2024, the Company entered into exchange agreements to convert $9.5 million in Streeterville debt to $9.3 million of Series A preferred stock and $0.2 million to common stock and, as a result, the Company reversed the interest accretion associated with the ability to stock-settle principal redemptions and wrote-off the remaining deferred debt issue costs resulting in a net credit to interest expense of $1.0 million.

Other Income (Expense), Net

Other income included interest income on cash and short-term investments of $0.2 million in 2025. Other income (expense) was negligible in 2024.

Consolidated Statements of Cash Flows

Our cash flows for the years ended December 31, 2025 and 2024 (in thousands) were:

Operating Activities

Net cash used in operations for the year ended December 31, 2025, was ($6.8) million due to a net loss of ($9.1) million, offset by (i) adjustments for non-cash items of $3.2 million which are mostly comprised of depreciation and stock-based compensation, and (ii) ($0.9) million used for working capital.

Net cash used in operations for the year ended December 31, 2024, was ($6.3) million due to a net loss of ($7.8) million, offset by (i) adjustments for non-cash items of $1.7 million which are mostly comprised of depreciation, stock-based compensation, and interest related to Streeterville notes, and (ii) $(0.2) million used for working capital.

Investing Activities

For the year ended December 31, 2025, net cash used in investing activities was ($2.5) million, of which $1.8 million was the capitalization of internally developed software, and $0.8 million was the purchase of equipment.

For the year ended December 31, 2024, net cash used in investing activities was ($1.8) million, of which $1.2 million was the capitalization of internally developed software, $0.5 million was the purchase of equipment and $0.1 million was the deposit on financed equipment.

Financing Activities

For the year ended December 31, 2025, net cash provided by financing activities was $8.1 million, which consisted principally of net proceeds from a registered direct offering of $7.0 million and the receipt of $1.5 million in proceeds from the sale of common stock pursuant to the SEPA, which was recorded as a stock subscription receivable at December 31, 2024, offset partially by principal payments on equipment finance leases of $0.4 million.

For year ended December 31, 2024, net cash provided by financing activities was $12.8 million, which consisted principally of proceeds from sales of common stock using our ATM program of $9.8 million, a private placement in April 2024 of $2.6 million and proceeds from the sale of common stock and warrants pursuant to warrant inducement offerings of $0.8 million, offset partially by principal payments on equipment finance leases of $0.5 million.

Liquidity and Capital Resources

As of December 31, 2025, we had cash and cash equivalents of $3.6 million and $2.4 million in working capital. Our primary source of cash for funding operations in 2025 has come from net proceeds received from a registered direct offering of $7.0 million and $1.5 million in proceeds from the sale of common stock pursuant to a SEPA, recorded as a receivable at December 31, 2024. Our independent registered public accounting firm’s report on our audited financial statements for the fiscal year ended December 31, 2025 includes an explanatory paragraph stating that our historically recurring losses from operations, negative cash flows from operations, and dependence on equity and debt financings raise substantial doubt about our ability to continue as a going concern. Our ability to continue as a going concern is dependent upon our ability to raise additional funds through public or private financings, including the utilization of our ATM program. We can provide no assurances that we will be able to raise additional funds through any future equity or debt financings, and the terms of those financings, if available at all, may be on terms, which are not favorable to us and, in the case of equity financings, will result in dilution to our stockholders. The inclusion of a going concern explanatory paragraph may also make it more difficult for us to secure additional financing or enter into strategic partnerships, as it signals a high degree of financial risk to potential investors and creditors. Our financial statements do not include any adjustments that might result from the outcome of this uncertainty.

Our principal sources of cash for funding operations in 2024 were net proceeds received from sales of common stock using our ATM program of $9.8 million, a private placement offering completed in April 2024 of $2.6 million, and $0.8 million from the exercise of warrants.

ATM Program

In June 2025, we terminated our At Market Sales Agreement with B. Riley Securities, Inc (“B. Riley”) and entered into a new ATM Offering Agreement with H.C. Wainwright & Co., LLC (“Wainwright”) to potentially sell up to $50.0 million of our common stock using a shelf registration statement on Form S-3/A (File No. 333-281565) which was filed in January 2025 and became effective in February 2025. Under the Sales Agreement, Wainwright may sell shares of our common stock by any method permitted by law deemed to be an “ATM offering” as defined in Rule 415(a)(4). We pay Wainwright a commission of up to 3.0% of the gross sales price of any shares sold through Wainwright under the Sales Agreement.

We filed a replacement shelf registration on Form S-3 in January 2025, with an effective date of February 2025, pursuant to which we can sell up to $50.0 million of our common stock. As of February 25, 2025, our public float calculated in accordance with General Instruction I.B.1 of Form S-3, was $112.9 million based on 19,342,776 shares of common stock outstanding of which 17,861,513 shares are held by non-affiliates, and a per share price of $6.32 based on the average of the bid and asked prices of our common stock on the Nasdaq on December 30, 2024.

SEPA

In July 2024, we entered into a $10 million SEPA with Streeterville pursuant to which the Company has the right, during the 24-month term of the agreement and subject to certain limitations and conditions to direct Streeterville to purchase shares of our common stock.

Shares of common stock issued pursuant to SEPA will be purchased at a price equal to 95% of the lowest daily volume-weighted average price of our common on the Nasdaq Stock Market during the three consecutive trading days during regular trading hours, as reported by Bloomberg L.P. beginning on the date we deliver an advance notice. We are required to use 10% of the proceeds from each advance to redeem outstanding shares of Series A Preferred Stock held by Streeterville.

During 2024, pursuant to the SEPA, Streeterville purchased 1.2 million shares of common stock resulting in aggregate net proceeds of $1.8 million of which $0.1 million was received in 2024 and the remaining proceeds of $1.7 million were received in January 2025. No draws on the SEPA were made in 2025.

Notes Payable

In March 2022 we entered into a securities purchase agreement (“SPA”) with Streeterville pursuant to which Streeterville purchased two $5.4 million promissory notes for $9.3 net proceeds. Principal payments totaled $1.9 million through 2023. In the fourth quarter of 2023 and the first quarter 2024, we exchanged $0.8 million of principal for 146 thousand shares of common stock. In March 2024, the remaining $9.3 million principal was exchanged for 9,275 shares of Services A Preferred Stock (See Note 8). Following these transactions, $0.5 million principal remained on the first note. During 2024, no principal payments were made on the Streeterville notes following the first quarter debt-for equity-exchanges. In March 2025, we fully retired the remaining $0.5 million Streeterville note through issuance of 553 thousand shares of common stock pursuant to Section 3(a)(9) of the Securities Act. This transaction eliminated all the Streeterville debt with no material cash outflow during 2024 or 2025.

In September 2024, we entered into a note purchase agreement with Streeterville where Streeterville purchased a note payable in the principal amount of $0.6 million in exchange for $0.5 million in cash after redemption of $0.1 million of Series A preferred stock. The note called for weekly payments of $25 thousand until the maturity in November 2024. In the event the note was not repaid on the maturity date, weekly payments would increase to $50 thousand. The note bore no interest. This note was repaid in full in November 2024.

During 2024, we entered into two separate note purchase agreements with Mr. Scott, our President, CEO and member of our Board. In January 2024, Mr. Scott purchased a note payable in the principal amount of $1.1 million in exchange for $1.0 million in cash. The note called for weekly payments of $40 thousand until maturity in June 2024. Interest accrued on the balance of the note at 7% per annum compounding daily. During the quarter ended March 31, 2024, we made $0.2 million in principal payments. In March 2024, Mr. Scott purchased a second note payable in the principal amount of $0.3 million in exchange for $0.3 million in cash. The note was non-interest bearing and matured in April 2024. In April 2024, we reduced the principal balance due under the note by $0.1 million, which reflected the amount due from Mr. Scott for the exercise of common stock purchase warrants. In April 2024, Mr. Scott entered into a private placement subscription agreement to convert the aggregate remaining outstanding balance of $1.1 million for both notes in exchange for common stock and common stock purchase warrants.

Critical Accounting Policies and Estimates

Management’s discussion and analysis of financial condition and results of operations are based upon our Consolidated Financial Statements, which have been prepared in accordance with accounting principles generally accepted in the U.S. (“GAAP”). The preparation of these financial statements requires us to make estimates and judgments that affect the reported amounts of assets, liabilities, revenues and expenses, and related disclosure of contingent assets and liabilities. On an on-going basis, we evaluate our estimates, including those related to credit losses, income taxes, warranty obligations, maintenance contracts, and contingencies. We base our estimates on historical experience and on various other assumptions that are believed to be reasonable under the circumstances, the results of which form the basis for making judgments about the carrying values of assets and liabilities that are not readily apparent from other sources. Actual results may differ from these estimates under different assumptions or conditions.

We believe the following critical accounting policies affect our more significant judgments and estimates used in the preparation of our Consolidated Financial Statements.

Capitalized Software Development

We capitalize internally developed software using the Agile software development methodology which allows us to accurately track, and record costs associated with new software development and enhancements.

Pursuant to the Financial Accounting Standards Board’s (“FASB”) Accounting Standards Codification (“ASC”) Topic 350-40 Internal Use Software Accounting Capitalization, certain development costs related to our products during the application development stage are capitalized as part of property and equipment. Costs incurred in the preliminary stages of development are expensed as incurred. The preliminary stage includes activities such as conceptual formulation of alternatives, evaluation of alternatives, determination of existence of needed technology, and the final selection of alternatives. Once the application development stage is reached, internal and external costs are capitalized until the software is complete and ready for its intended use. Capitalized internal use software is amortized on a straight-line basis over its estimated useful life, which is generally three years.

Revenue Recognition

We recognize product revenue upon shipment or after meeting certain performance obligations. These products can include hardware, software subscriptions, and consulting services. Most of our sales are from consulting services. We also offer software on a subscription basis subject to SaaS. Warranty costs have not been material.

We recognize sales of its consulting services in accordance with the ASC Topic 606 whereby revenue from contracts with customers are recognized once the criteria under the five steps below are met:

i) identification of the contract with a customer;

ii) identification of the performance obligations in the contract;

iii) determination of the transaction price;

iv) allocation of the transaction price to the separate performance obligations; and

v) recognition of revenue upon satisfaction of a performance obligation.

Consulting services, including reporting are typically performed on a monthly basis, and the related revenue is recognized as the services are rendered to the customer. Product sales may include maintenance and customer support elements, with consideration allocated to each performance obligation based on the estimated selling prices of the delivered goods and services based on a selling price hierarchy using the relative selling price method. All product offering and service offering market values are readily determined based on current and prior stand-alone sales. The Company defers and recognizes maintenance, updates, and support revenue over the term of the contract period, which is generally one year.

Normal payment terms offered to customers, distributors and resellers are net 30 days domestically. We do not offer payment terms that extend beyond one year and rarely extend payment terms beyond our normal terms. If certain customers do not meet our credit standards, we require payment in advance to limit our credit exposure.

With our newest product, INTRUSION Shield, we began offering software on a subscription basis. INTRUSION Shield is a hosted arrangement subject to SaaS guidance under ASC Topic 606. SaaS arrangements are accounted for as subscription services not arrangements that transfer a license of intellectual property.

We utilize the five-step process mentioned above, to recognize sales and will follow that directive, also, to define revenue items as individual and distinct. INTRUSION Shield services provided to our customers for a fixed monthly subscription fee include:

• access to Intrusion’s proprietary software and database to detect and prevent unauthorized access to our clients’ information networks;
• use of all software, associated media, printed materials, data, files, online documentation, and any equipment that Intrusion provides for customers to access the INTRUSION Shield; and
• tech support, post contract customer support (“PCS”) includes daily program releases or corrections provided by Intrusion without additional charge.

Our contract provides for no other services, and our customers have no rebates or return rights, nor are any such rights anticipated to be offered as part of this service.

We satisfy our performance obligation when our INTRUSION Shield solution is available to detect and prevent unauthorized access to a client’s information networks. Revenue is recognized monthly over the term of the contract. The Company’s standard initial contract terms are automatically renewed unless notice is given 30 days before renewal. Upfront payment of fees is deferred and amortized into income over the period covered by the contract.

Allowances for Credit Losses

We maintain allowances for credit losses for estimated losses resulting from the inability of our customers to make the required payments. Our receivables are uncollateralized, and we expect to continue this policy in the future. If the financial condition of our customers were to deteriorate, resulting in an impairment of their ability to make payments, increased allowances may be required. Historically, our estimate for sales returns and credit losses have not differed materially from actual results.

Fair Value of Financial Instruments

We calculate the fair value of our assets and liabilities which qualify as financial instruments and include additional information in the Notes to Consolidated Financial Statements when the fair value is different than the carrying value of these financial instruments. The estimated fair value of accounts receivable, accounts payable and accrued expenses approximate their carrying amounts due to the relatively short maturity of these instruments. Notes payable and financing and operating leases approximate fair value as they bear market rates of interest. None of these instruments are held for trading purposes.

Recent Accounting Pronouncements

See Note 2 to the Consolidated Financial Statements (Part II, Item 8 of this Annual Report on Form 10-K).

Evaluation of Effectiveness of Disclosure Controls and Procedures

As of the end of the period covered by this report, the Company, under the supervision and with the participation of our CEO and our CFO, conducted an evaluation of the effectiveness of the design and operation of the Company’s disclosure controls and procedures, as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act. Based on this evaluation, the CEO and CFO concluded that, as of the end of the period covered by this report, the Company’s disclosure controls and procedures were effective to provide reasonable assurance that information required to be disclosed by the Company in reports that it files or submits under the Exchange Act is recorded, processed, summarized, and reported within the time periods specified in the rules and forms of the SEC, and is accumulated and communicated to management, including the Company’s principal executive officer and principal financial officer, as appropriate, to allow timely decisions regarding required disclosure.

Management’s Report on Internal Control over Financial Reporting

Management is responsible for establishing and maintaining adequate internal control over financial reporting, as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act. These controls are designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of the Company’s consolidated financial statements in accordance with GAAP.

As of December 31, 2025, and under the supervision and with the participation of the CEO and CFO, management evaluated the effectiveness of the Company’s internal control over financial reporting using the criteria set forth in the 2013 Internal Control—Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).

Management’s evaluation included an assessment of elements such as the design and operating effectiveness of key financial reporting controls, process documentation, accounting policies, and the Company’s overall control environment. Based on its evaluation, management concluded that the Company’s internal control over financial reporting was effective as of December 31, 2025, to provide reasonable assurance regarding the reliability of the Company’s financial reporting and the preparation of Consolidated Financial Statements for external reporting purposes in accordance with U.S. GAAP. The Company reviewed the results of management’s assessment with the Audit Committee of the Board of Directors.

This Annual Report does not include an attestation report of the Company’s registered public accounting firm on internal control over financial reporting. In accordance with SEC rules applicable to smaller reporting companies, management’s report was not subject to attestation by the Company’s registered public accounting firm.

This report shall not be deemed to be filed for purposes of Section 18 of the Exchange Act or otherwise subject to the liabilities of that section and is not incorporated by reference into any filing of the Company, whether made before or after the date of this report, regardless of any general incorporation language in such filing.

Inherent Limitations on Effectiveness of Controls

The Company’s management, including our CEO and our CFO, does not expect that the Company’s disclosure controls or internal control over financial reporting will prevent or detect all errors and all fraud. A control system, no matter how well designed and operated, can provide only reasonable, not absolute, assurance that the control system’s objectives will be met. The design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs. Further, because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that misstatements due to error or fraud will not occur or that all control issues and instances of fraud, if any, have been detected. The design of any system of controls is based in part on certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions. Projections of any evaluation of the effectiveness of controls to future periods are subject to risks. Over time, controls may become inadequate because of changes in conditions or deterioration in the degree of compliance with policies or procedures.

Changes in Internal Control over Financial Reporting

During the quarter ended December 31, 2025, there were no changes in our internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.