Vir2us, Inc. v. Sophos Inc.

CourtCourt of Appeals for the Fourth Circuit
DecidedJune 23, 2026
Docket25-1158
StatusUnpublished

This text of Vir2us, Inc. v. Sophos Inc. (Vir2us, Inc. v. Sophos Inc.) is published on Counsel Stack Legal Research, covering Court of Appeals for the Fourth Circuit primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
Vir2us, Inc. v. Sophos Inc., (4th Cir. 2026).

Opinion

USCA4 Appeal: 25-1158 Doc: 77 Filed: 06/23/2026 Pg: 1 of 19

UNPUBLISHED

UNITED STATES COURT OF APPEALS FOR THE FOURTH CIRCUIT

No. 25-1158

VIR2US, INC.,

Plaintiff – Appellee,

v.

SOPHOS INC.; INVINCEA, INC.,

Defendants – Appellants,

and

SOPHOS LIMITED; SOPHOS GROUP PLC,

Defendants.

Appeal from the United States District Court for the Eastern District of Virginia, at Norfolk. Jamar Kentrell Walker, District Judge. (2:19-cv-00018-JKW-RJK)

Argued: May 7, 2026 Decided: June 23, 2026

Before KING, AGEE, and HEYTENS, Circuit Judges.

Affirmed by unpublished per curiam opinion.

ARGUED: Jeffrey A. Lamken, MOLOLAMKEN, LLP, Washington, D.C., for Appellant. Kevin P. Martin, GOODWIN PROCTER LLP, Boston, Massachusetts, for Appellees. ON BRIEF: Lauren F. Dayton, New York, New York, Lucas M. Walker, Washington, D.C., USCA4 Appeal: 25-1158 Doc: 77 Filed: 06/23/2026 Pg: 2 of 19

Bonnie K. St. Charles, MOLOLAMKEN LLP, Chicago, Illinois; Brian A. E. Smith, BARTKO PAVIA LLP, San Francisco, California, for Appellant. Wendy Leben, New York, New York, Douglas J. Kline, Boston, Massachusetts, Rohiniyurie Tashima, GOODWIN PROCTER LLP, Washington, D.C., for Appellees.

Unpublished opinions are not binding precedent in this circuit.

2 USCA4 Appeal: 25-1158 Doc: 77 Filed: 06/23/2026 Pg: 3 of 19

PER CURIAM:

This case involves the proper interpretation of the royalty provision of a patent

license agreement under Virginia law. In a prior appeal, we held that one part of the salient

definition meant that royalties were not due on the sales of certain of Defendants’ products.

After rejecting the district court’s contrary conclusion, we remanded for that court to

address whether another part of the definition applied to those products. On remand, the

district court relied on a plain-language analysis to conclude that the second part of the

definition did not apply to the products at issue, leading it to deny summary judgment to

Plaintiff and award summary judgment to Defendants.

Plaintiff appeals, arguing that the definition’s plain language supports its

interpretation, meaning that it should have been awarded summary judgment. In the

alternative, Plaintiff argues that the provision is ambiguous and summary judgment should

not have been granted at all. Finding no error in the grant of summary judgment to

Defendants, we affirm the judgment of the district court.

I.

This case involves competing corporations that design and sell computer-security

software. 1 Plaintiff Vir2us, Inc., is a California corporation that, among other things,

1 When reciting the underlying facts, we draw liberally from our prior decision’s account. Vir2us, Inc. v. Sophos Inc., 2023 WL 2136379 (4th Cir. Feb. 21, 2023) (per curiam).

3 USCA4 Appeal: 25-1158 Doc: 77 Filed: 06/23/2026 Pg: 4 of 19

developed and patented antivirus software that uses a process called “containerization” to

isolate and then test potentially malicious files in a virtual safe room.

Defendant Invincea, Inc., is a Delaware corporation that sells antivirus software,

including a line of products called “X by Invincea.” Some products in this line employ

containerization, while others employ a different type of antivirus technology called

“machine learning.” At all times relevant to this appeal, X by Invincea products used the

same underlying source code regardless of which type of technology the individual product

employed. Invincea then activated (or left deactivated) the specific portions of source code

for the product a purchaser licensed: containerization, machine learning, or both.

After Vir2us sued Invincea for allegedly selling software that infringed Vir2us’s

patented containerization technology, the parties entered into a settlement agreement (“the

Agreement”). One part of the July 2016 Agreement granted Invincea a “worldwide license”

to use “all patents and patent applications owned by Vir2us.” S.J.A. 717, 718. Another

provision bound Invincea to a number of conditions, including that it would (1) deliver

quarterly reports to Vir2us containing specific information regarding certain of its sales,

and (2) pay Vir2us a royalty for certain other sales. While both of these obligations are

relevant here, the second obligation—the royalty provision—is the focal point of the

parties’ dispute.

The reporting and royalty provisions require Invincea to report how many of certain

products are sold and then pay a royalty only “for each Container Products and Services

Sold.” S.J.A. 719. (We will shorthand this label to “Container Products.”) The Agreement

defines Container Products as “the accused container products currently called Invincea X

4 USCA4 Appeal: 25-1158 Doc: 77 Filed: 06/23/2026 Pg: 5 of 19

Endpoint – Spearphish Protection and formerly known as Invincea FreeSpace, Invincea

Enterprise, and Invincea Advanced Endpoint Protection, as well as natural evolutions and

derivations of these products.” S.J.A. 717. 2 The first part of the definition thus identifies

four specific products by name, while the second clause extends the definition to “natural

evolutions and derivations” of those listed products. Id.

The year after the Agreement was executed, Invincea became a wholly-owned

subsidiary of Defendant Sophos, Inc., which is also a computer-security software company.

Before acquiring Invincea, Sophos developed and marketed its own software, including

Sophos Intercept X, Sophos Intercept X for Server, and Sophos Sandstorm. Sophos

acquired Invincea to access its machine-learning technology, and, consistent with that

objective, Sophos integrated Invincea’s source code into its own software and activated

only its machine-learning technology (i.e., Cynomix files). It’s undisputed that none of

Sophos’s products employ containerization technology. Put differently, some of Sophos’s

post-acquisition products contain source code that is also found in X by Invincea products,

but none of Sophos’s products employ X by Invincea’s containerization technology.

After acquiring Invincea, Sophos undertook Invincea’s reporting and royalty

obligations for X by Invincea products, but it did not pay royalties on sales for any of its

2 The accused container product Invincea X Endpoint – Spearphish Protection activates containerization-enabling files in the source code and, although it has source code (including the files identified as Cynomix.cpp and Cynomix.h) related to machine-learning processes, those files are deactivated.

5 USCA4 Appeal: 25-1158 Doc: 77 Filed: 06/23/2026 Pg: 6 of 19

own products. And approximately a year later, Sophos announced an immediate end to its

sale of all X by Invincea products.

The following year (2019), Vir2us invoked the federal courts’ diversity jurisdiction

to sue Invincea and Sophos for breach of contract (the Agreement) under Virginia law. 3

Vir2us alleged, among other things, that Invincea and Sophos (1) failed to provide accurate

quarterly reports (Count I), and (2) owed it more money under the royalty provision (Count

II). Relevant to this appeal, Vir2us asserted that post-acquisition versions of some Sophos

products (including Sophos Intercept X and Sandstorm, but collectively, “the disputed

Sophos products”) were actually Container Products subject to the Agreement’s royalty

provision. Invincea and Sophos denied these allegations, and Invincea filed a counterclaim

Free access — add to your briefcase to read the full text and ask questions with AI

Related

MCI CONSTRUCTORS, LLC v. City of Greensboro
610 F.3d 849 (Fourth Circuit, 2010)
Desmond v. PNGI Charles Town Gaming, L.L.C.
630 F.3d 351 (Fourth Circuit, 2011)
VEPCO v. Norfolk Southern Ry. Co.
683 S.E.2d 517 (Supreme Court of Virginia, 2009)
Video Zone, Inc. v. KF&F Properties, L.C.
594 S.E.2d 921 (Supreme Court of Virginia, 2004)
TM Delmarva Power, L.L.C. v. NCP of Virginia, L.L.C.
557 S.E.2d 199 (Supreme Court of Virginia, 2002)
Golding v. Floyd
539 S.E.2d 735 (Supreme Court of Virginia, 2001)
Smith v. Smith
597 S.E.2d 250 (Court of Appeals of Virginia, 2004)
Douglas v. Hammett
507 S.E.2d 98 (Court of Appeals of Virginia, 1998)
Travis Young v. Equinor USA Onshore Properties
982 F.3d 201 (Fourth Circuit, 2020)
Braswell Shipyards, Inc. v. Beazer East, Inc.
2 F.3d 1331 (Fourth Circuit, 1993)

Cite This Page — Counsel Stack

Bluebook (online)
Vir2us, Inc. v. Sophos Inc., Counsel Stack Legal Research, https://law.counselstack.com/opinion/vir2us-inc-v-sophos-inc-ca4-2026.