ROKU · CIK 1428439
What Roku, Inc. told the SEC could break it.
Roku's disclosures stack a set of concentrations on both sides of its platform. On the hardware side, its players and Roku TV OS devices depend on sole-source key components — a specific system-on-chip, Wi-Fi silicon and Wi-Fi front-end module each from a single manufacturer with no second source — built by contract manufacturers concentrated in Taiwan, China, Vietnam and Mexico, adding supply-interruption and tariff risk. On the revenue side it is similarly concentrated: one customer was 11% of 2025 net revenue, and engagement leans on a few content partners, with the top three streaming services (excluding The Roku Channel) accounting for nearly half of all hours streamed.
3 self-disclosed vulnerabilities, pulled from its own filings — each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Sole-source dependency
- single-source components (SoC, Wi-Fi silicon/front-end modules)high
Roku's streaming players and Roku TV OS TVs rely on sole-source key components — a specific system-on-chip, Wi-Fi silicon and Wi-Fi front-end module each available from only one manufacturer with no second source — built by contract manufacturers concentrated in Taiwan, China, Vietnam and Mexico, adding supply-interruption and tariff risk.
“We depend on sole source suppliers for key components in our products. For example, each of our streaming players and TVs powered by the Roku TV OS may utilize a specific system on chip (or SoC), Wi-Fi silicon product, and Wi-Fi front-end module, each of which may be available from only a single manufacturer and for which we do not have a second source.”
SEC filing →As of 2026
Customer concentration
- single customer (11% of net revenue)medium
One customer ('Customer J') accounted for 11% of Roku's total net revenue in 2025 (10% in 2024), concentrating revenue with a single large counterparty.
“Customer J accounted for 11 % and 10 % of total net revenue for the years ended December 31, 2025 and 2024, respectively. Customer I accounted for 11 % of total net revenue for the year ended December 31, 2023.”
SEC filing →As of 2026
Other disclosures
- content-partner concentration (streaming hours)medium
Roku depends on a small number of content partners for engagement — the top three streaming services (excluding The Roku Channel) represented nearly half of all hours streamed in 2025 — so losing these relationships could harm its platform and ad business.
“We depend on a small number of content partners for nearly half of our Streaming Hours, and if we fail to maintain these relationships, our business could be harmed. Historically, a small number of content partners have accounted for a significant portion of the hours streamed on our platform. In the fiscal year ended December 31, 2025, the top three streaming services (excluding The Roku Channel) represented nearly half of all hours streamed in the period.”
SEC filing →As of 2026
The hidden graph
Who it depends on, and who depends on it.
Relationships surfaced from filings — including ones disclosed by the other side, which is how the non-obvious ones come to light.
Its suppliers
“We have affiliate agreement relationships with, and our service is available directly from major MVPDs that include Comcast, Cox, and Dish, and vMVPDs and digital distributors that include Amazon Prime Video Channels, Roku Channels, Sling TV and YouTube TV.”
Cited →
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch