Skip to content

Compare moats

Up to three covered companies, band by band. Every call is a curated editorial judgment, never a disclosed figure — and every band carries its cited basis.

comparing NetApp×Salesforce×Visa× maximum of 3 — remove one to swap
NetApp NTAP ai moat: latest change 2026-06-05 Salesforce CRM ai moat: latest change 2026-08-05 Visa V ai moat: latest change 2025-11-06
Moat rating narrow

The FY2026 10-K shows a real, durable lock but not an unassailable one. On the durable side: "Our cloud storage services are based on the same ONTAP data management software that underpins our on-premises ONTAP storage infrastructure offerings", and the same filing's income statement shows the company holding a gross margin near 71% across all three reported years - $4,433M on $6,268M in FY2024, $4,613M on $6,572M in FY2025 and $4,899M on $6,925M in FY2026 - while revenue grew from $6,268M to $6,925M and income from operations widened from 19% to 24% of net revenues. Holding that margin through the memory-cost shock the same filing discloses is the commercial evidence the lock is worth something. On the limiting side, the filing says competition "is intense", that in public cloud "customers may choose native cloud services that are consumed as operating expenses", and that "New competitors or alliances among existing competitors could emerge and quickly gain significant market share" - and IDC's 1Q26 external-storage tracker (Blocks & Files, 2026-06-16, cited on the AFF/ASA product row below) ranks NetApp second behind Dell, not first.

source: sec.gov

narrow

Salesforce's own language caps this at narrow: Item 1 calls its market "highly competitive, rapidly evolving and fragmented, and subject to changing technology with low barriers to entry." What holds it above none is scale and contract duration: $72.4B total RPO at 2026-01-31 versus $63.4B (+14%), current RPO $35.1B versus $30.2B (+16%), on revenue of $41.5B (+10%). But cRPO growth "was positively impacted by three percent" by currency, and total RPO "includes approximately $2.2 billion" from Informatica, acquired November 2025. Adjusted, the contracted base still outgrows revenue, but by less than the headline implies.

source: sec.gov

wide

The FY2025 10-K prints a network comparison for calendar year 2024: Visa at $13,433B payments volume, 311B total transactions and 4,805M cards, against Mastercard's $8,014B / 204B / 3,146M and American Express's $1,750B / 12B / 147M. Footnote (1) sources the American Express, Diners Club / Discover, JCB and Mastercard data to The Nilson Report issue 1288 (June 2025); Visa's own line is Visa's own data. On that table Visa's payments volume is roughly two-thirds larger than the next network's, and the same section states 'Based on available data, Visa is one of the largest retail electronic funds transfer networks used throughout the world.' The rating is wide because the lead rests on a two-sided installed base the filing quantifies — nearly 5 billion payment credentials and more than 175 million merchant locations across more than 200 countries and territories — which an entrant would have to reassemble on both sides at once. The table is a single-year snapshot with no prior-year column, so it evidences the size of the lead, not its direction.

source: sec.gov

Moat type switching costs

The FY2026 10-K makes the source of the advantage explicit and it is the cost of leaving the data-management layer, not a network or a patent estate. The same ONTAP software runs the on-premises arrays and the cloud services ("Our cloud storage services are based on the same ONTAP data management software that underpins our on-premises ONTAP storage infrastructure offerings"), and the AFF family "allows customers to connect to clouds for more data services, data tiering, caching, and disaster recovery". A customer's volume layout, snapshot and replication workflow and operating tools therefore carry from the array into Azure, AWS and Google rather than being abandoned at the cloud boundary — the filing describes NetApp as "the only provider of enterprise-grade storage services natively embedded in the world's largest public cloud providers", so the usual moment of escape is instead the moment the relationship renews.

source: sec.gov

switching costs

Switching costs, with a caveat: the filing's clearest lock-in sentence is about rivals' customers, not its own. "Many prospective customers have invested substantial personnel and financial resources to implement and integrate their current enterprise software... may be reluctant or unwilling to migrate away" is a headwind to Salesforce's own growth. Evidence for its own base is architectural: Data 360 unifies data into "a single, governed source of truth," Agentforce runs on existing processes "without requiring customers to remove and rebuild," behind $72.4B of contracted revenue. Contracts run "typically 12 to 36 months" with no renewal obligation.

source: sec.gov

network effects

Visa itself names the two sides as the source of advantage: 'We believe our fundamental value proposition of security, convenience, speed and reliability as well as the number of payment credentials and our acceptance footprint help us to succeed.' In fiscal 2025 the 10-K counts nearly 5 billion payment credentials, which it defines as issued Visa card accounts, available at more than 175 million merchant locations, with nearly 14,500 financial institutions among the clients that build payment programs on Visa products. The two bases are joined through VisaNet in what the filing calls the 'four-party' model. Neither side is worth joining without the other, so the advantage is the mutual pull of the two installed bases rather than a patent estate or a cost curve.

source: sec.gov

Leadership co leader

IDC's 1Q26 external enterprise storage systems tracker, as reported by Blocks & Files on 2026-06-16 (cited in full on the AFF/ASA product row below), ranks NetApp second worldwide behind Dell and ahead of Everpure, Huawei and HPE, attributing the placing to "its growing all-flash business and cloud-integrated data management". Second of five ranked vendors, in a market whose leader is someone else, is a shared front rank rather than an owned one - and the distinct claim NetApp makes in the FY2026 10-K is positional rather than volumetric: being "the only provider of enterprise-grade storage services natively embedded in the world's largest public cloud providers".

source: sec.gov

clear leader

Clear leader in the category as it exists today, runner-up in the one it is being rebuilt into. Per IDC's Worldwide Semiannual Software Tracker on 2025 data, Salesforce was first in worldwide CRM applications for a thirteenth consecutive year at 20.0% share, and first in Sales (fourteenth year), Customer Service (thirteenth), Marketing (seventh), model-driven application platform (eleventh) and Integration (fourth). These come from Salesforce announcing its own IDC results via a trade outlet, in translation, not IDC primary material. In the same tracker's new Agent Build and Deploy segment it ranked second at 17.5%, albeit as fastest-growing vendor.

source: sec.gov

clear leader

On the 10-K's CY2024 comparison table, Visa carried 311 billion total transactions and $13,433B of payments volume against 204 billion and $8,014B for Mastercard, the largest competitor listed. American Express is next at $1,750B and 147M cards — under a seventh of Visa's payments volume and under a thirtieth of its cards — with Diners Club / Discover ($253B, 72M cards) and JCB ($319B, 167M cards) smaller still on volume. Visa's line is its own data; the competitor lines are sourced to The Nilson Report issue 1288 (June 2025) per footnote (1).

source: sec.gov

Pricing power moderate

It holds price rather than raising it. On the figures filed with the FY2026 10-K, gross margin was 70.7% of revenue in FY2024 ($4,433M on $6,268M), 70.2% in FY2025 ($4,613M on $6,572M) and 70.7% in FY2026 ($4,899M on $6,925M) - flat across three years in which revenue grew from $6,268M to $6,925M - and it held that level while absorbing a component-cost shock. It is no stronger than that because the filing's own risk factor lists "competitive pricing, customer price sensitivity" and "pricing and discounting pressures" among the drivers of gross margin, and discloses that the company "experienced inflationary pressure and supply chain constraints beginning in the second half of fiscal 2026, resulting in increased costs for memory and other components, which have affected our gross margins" - a cost shock it is absorbing rather than fully passing on.

source: sec.gov

moderate

Gross margin rises across the Item 7 table — gross profit of $32,255M on $41,525M of revenue, 78% of total revenues in FY2026 against 77% in FY2025 and 75% in FY2024 — yet MD&A denies price as the cause: growth "was primarily caused by volume-driven increases from new business," and "Pricing was not a significant driver of the increase in revenues for the period." Item 1A names consumption-based pricing among attrition factors, says Agentforce and Data 360 monetization "remain relatively new and uncertain," and concedes "limited experience with determining optimal pricing for our consumption-based contracts."

source: sec.gov

strong

Visa's own take is insulated from the fees regulators target: it sets default interchange rates but does not collect them — the 10-K says 'Generally, IRFs are paid by acquirers to issuers' and that 'the fees we receive from issuers and acquirers are not derived from IRFs or MDRs.' The reported margin is high but moved down in fiscal 2025: operating income of $23,994M on $40,000M of net revenue is a 60.0% operating margin, against 65.7% ($23,595M on $35,926M) in fiscal 2024. The cause is printed two lines above operating income in the same statement — the litigation provision rose from $462M to $2,562M — and the filing says litigation provisions 'do not correlate to the underlying performance of our business' and that it excludes them 'to facilitate a comparison to our past operating performance.' Adding that provision back to operating income in both years leaves 66.4% against 67.0%, so the pricing base held and the decline is a legal charge, not a fee concession. The real limits are indirect: Dodd-Frank and the EU IFR cap interchange Visa never earns, client incentives are paid back to clients and rise with payments volume, and the UK Payment Systems Regulator holds 'wide-ranging powers and authority to review our business practices, systems, rules and fees with respect to promoting competition and innovation in the UK, and ensuring payment systems take care of, and promote, the interests of service users.'

source: sec.gov

Summary

NetApp sells storage hardware but the asset is ONTAP, the data-management software that has run its arrays for over three decades and now also runs inside the three largest public clouds as a first-party service. The FY2026 10-K organises the company into two segments, Hybrid Cloud (AFF and ASA all-flash arrays, AFX for AI workloads, FAS hybrid-flash, E/EF-Series, StorageGRID object storage) and Public Cloud (Azure NetApp Files, Amazon FSx for NetApp ONTAP, Google Cloud NetApp Volumes, Cloud Volumes ONTAP), and states that both rest on the same ONTAP software. That is the whole argument: an enterprise that has standardised its snapshots, replication and multiprotocol access on ONTAP carries those habits with it when it moves workloads to a hyperscaler, and NetApp is paid on both sides of the move. The evidence that the lock has commercial value is the margin's steadiness: across the three years the FY2026 10-K reports, gross margin sat at 70.7%, 70.2% and 70.7% of revenue ($4,433M on $6,268M, $4,613M on $6,572M, $4,899M on $6,925M) while revenue grew, and the filing's own percentage-of-revenue table shows no mix shift doing that work - product and services held near 46% and 54% of revenue throughout. The limits are equally in the filing. NetApp is second, not first: IDC's 1Q26 tracker puts it behind Dell in external enterprise storage, and the 10-K's competition section concedes that cloud providers are simultaneously partners and rivals, that consumption models "may reduce overall demand for our traditional on-premises offerings sold through a capital expenditure (capex) model", and that alternative architectures "may reduce or eliminate demand for some of our offerings". Component exposure is real too: the filing discloses "inflationary pressure and supply chain constraints beginning in the second half of fiscal 2026, resulting in increased costs for memory and other components, which have affected our gross margins", and names NAND among the components whose supply can tighten. This is a durable second place built on software stickiness, not a structural monopoly.

Salesforce is the incumbent of record in CRM applications and is paid like one: $41.5B of FY2026 revenue (+10%), 78% gross margin, $72.4B of contracted revenue not yet recognized, and first place in worldwide CRM for a thirteenth consecutive year at 20.0% share per IDC's tracker as announced by Salesforce. Enterprise data and workflow embedded through Data 360 and Agentforce is costly to unwind, and the agentic layer is deliberately built atop existing processes rather than requiring re-implementation. The limits are the company's own: it twice describes its market as having low barriers to entry, names AI-native startups whose solutions "may bypass traditional business process workflows or displace established user interfaces," ranks second at 17.5% in IDC's new Agent Build and Deploy segment, and concedes pricing did not drive FY2026 growth.

Visa runs the switchboard, not the bank. The FY2025 10-K is explicit that 'Visa is not a financial institution. We do not issue cards, extend credit or set rates and fees for account holders of Visa products nor do we earn revenue from or bear credit risk with respect to any of these activities.' That disclaimer is scoped to issuing and credit extension, not to risk at large — the same filing says indemnifying issuers and acquirers for one another's settlement failures 'creates settlement risk for us' because of the timing gap between a payment transaction and its settlement. What Visa earns is service, data-processing and international-transaction revenue, reduced by client incentives, for moving other people's money: 329 billion payments and cash transactions carried the Visa brand in fiscal 2025, 258 billion of them processed by Visa, an average of 901 million a day across more than 200 countries and territories on $17 trillion of total payments and cash volume. The pull between nearly 5 billion credentials and more than 175 million merchant locations is what a rival would have to buy on both sides at once. The filing is candid about what is arriving anyway: real-time payment networks have launched in at least 80 countries behind 'strong government sponsorship and regulatory initiatives' the filing names as FedNow, PIX and UPI; B2B blockchain payments including stablecoins 'can operate globally 24/7' for cross-border transactions; and Dodd-Frank and the EU IFR both cap interchange and limit network exclusivity and routing restrictions.

Chain position

NetApp sits between the memory supply and the enterprise data centre. Upstream, the FY2026 10-K says "Third-party component costs make up a significant portion of our product costs" and singles out NAND as hard to manage "if supplies of certain components, including NAND, become limited relative to demand". Downstream, the hyperscalers are channel, partner and rival at once: the filing states "We both partner with and compete against cloud service providers through our cloud-based software and services offerings", while Azure NetApp Files, Amazon FSx for NetApp ONTAP and Google Cloud NetApp Volumes are delivered as those clouds' own natively embedded services. Distribution is a mix of direct sales and "an ecosystem of partners, including the leading cloud providers".

Applications-layer incumbent: sells enterprise CRM and agentic software to end customers across industries, consumes cloud infrastructure (third-party IaaS partners plus its own Hyperforce estate) and third-party LLMs, and sits upstream of no hardware supply chain. Exposure is to enterprise software budgets and to whether the agentic layer is captured by incumbent suites or AI-native entrants.

Both a buyer and a seller of AI inside payments, not an AI infrastructure supplier: the 10-K claims 'early adoption and integration of artificial intelligence (AI) models in payment systems', sells 'risk detection and prevention solutions underpinned by real-time AI-driven scores' to issuers and acquirers, and opens its rails to third-party AI systems 'via on-demand APIs, our MCP server that enables AI systems to interface with our Visa Intelligent Commerce APIs, and fully managed solutions.'

Products (share / barrier)
  • Risk and Security Solutions (Visa Protect, Featurespace) Unknown · Moderate source: sec.gov
  • Stablecoin settlement and Visa Tokenized Asset Platform Niche · Low source: sec.gov
  • Tink open banking and Visa A2A Challenger · Low source: sec.gov
  • Visa Direct Leader · Moderate source: sec.gov
  • Visa consumer payments network (credit, debit, prepaid) Leader · Deep source: sec.gov
Long-horizon vote +0.13 at weight 0.20 · swarm neutral

Editorial prior, not backtested.

see exactly how it voted →

+0.20 at weight 0.20 · swarm neutral

Editorial prior, not backtested.

see exactly how it voted →

+0.42 at weight 0.20 · swarm neutral

Editorial prior, not backtested.

see exactly how it voted →