The 10-K Is a Pain-Signal Goldmine. Here's the Read Order.

Most outbound skips public company filings entirely. The 10-K is 80 pages. The email has to go out today. So reps pull a LinkedIn summary and write a guess.

That is not research. The 10-K is where public companies are required to tell you, in plain language, what is going wrong. They call them "risk factors." We call them signals.

Here is how to read one in under 20 minutes and walk away with three emails worth writing.

Why public companies are the easiest research target

Private companies hide their pain. They have no obligation to surface it, and most do not. Public companies file a 10-K annually that describes their strategy, operations, competitive position, and — most usefully — a section labeled "Risk Factors" that is legally required to be honest about what could kill the business.

The CFO did not write this for your benefit. They wrote it for their auditors and shareholders. That is what makes it useful. It has not been edited for marketing purposes.

When we built Stage 05 (Pain Signals) to handle publicly traded companies, we started by asking: what would a senior enterprise rep read? The answer, consistently, was the 10-K. Specifically, five sections of it.

The read order, with what you are looking for

Section 1: Business (pages 1–8 in most filings)

This is the company's self-description. Read it fast. What you want is anything that does not match their website. The website shows aspiration. The 10-K shows position. When a company's website says "the leading platform for X" and the 10-K describes X as a secondary line of business behind a shrinking core product, that gap is worth noting.

One example: a software company's homepage led with an AI narrative in 2024. Their 10-K disclosed that AI-related revenue was 4% of total ARR. Three of their senior competitors disclosed 18–25%. That discrepancy is a signal — the company is under pressure to catch up, has not, and is publicly committed to doing so.

Section 1A: Risk Factors (pages 8–30 in most filings)

This is the section most reps skip. It is the most valuable 20 pages in the document.

Risk factors read like pessimism. They are not. They are the company's lawyers identifying every real threat to the business and requiring disclosure. A risk factor that appears in this year's filing but not last year's is almost always a live operational concern.

Read for new risks. Cross-reference last year's filing if you can find it. The diff between the two versions is the intelligence.

Useful risk-factor categories for outbound purposes:

Customer concentration risk ("One customer represents 31% of revenue") — this company is one decision away from a bad quarter and knows it
Technology transition risk ("We may be unable to adapt our platform to changes in X") — they have acknowledged in writing that their stack is at risk
Key-person risk ("Our performance depends significantly on [Named Executive]") — if that person has recently departed, the filing is already outdated and the risk has materialized
Competitive risk framed with named competitors — when a 10-K names a specific competitor in the risk factors section, that competitor is actively winning business from them

Section 7: MD&A — Management's Discussion and Analysis (pages 40–55 typically)

MD&A is where the numbers get explained in English. Look for two things.

First: revenue mix shift. If product line A was 60% of revenue last year and is now 47%, something happened. The 10-K may explain it or may not. Either way, the shift is evidence of pressure on that line.

The CFO did not write this for your benefit. They wrote it for their auditors and shareholders. That is what makes it useful.

Second: operating expense comments that do not match headcount trends. If a company reports that sales and marketing expenses grew 34% year-over-year while headcount grew 8%, they are spending more to acquire less. That is a specific, citable operational signal for any company selling into their GTM function.

Section 7A: Quantitative Disclosures About Market Risk

Short section, often skipped. For companies with significant international revenue, currency exposure disclosures can signal an operating pressure that is not visible anywhere on their website. A company with 40% of revenue in euros and a strong dollar year is quietly under pressure on margins. If you sell something that helps on margins, this is your opening.

Exhibit 21: List of Subsidiaries

Last section most people read, but occasionally the most useful. Acquisition activity shows up here before it shows up in press releases. A new subsidiary in a country they had no presence in, filed in the past year, signals geographic expansion — and the operational challenges that come with it. A missing subsidiary that was present in last year's filing signals a divestiture or shutdown.

What the pipeline does with this

Paitho's Stage 02 (Web Audit) runs against public data. For publicly traded companies, that includes SEC EDGAR filings. The model reads the current 10-K and the prior year's 10-K, runs a comparison against the five sections above, and flags changes.

The output is a structured brief that looks like this (simplified):

company: Acme Corp (ACME)
filing_year: 2025
new_risk_factors_vs_prior_year:
  - "Dependence on third-party AI infrastructure" (not in 2024 filing)
  - "Increased pricing pressure in core product segment" (not in 2024 filing)
revenue_mix_shift:
  - product_a: 61% → 47% YoY
  - product_b: 22% → 38% YoY
notable_expense_anomaly: "S&M expenses +34% while headcount +8%"
mda_quote: "We experienced increased churn in our mid-market segment..."

That brief goes into Stage 06 (Pitch Brief). The pitch is written against it. The result is a six-sentence email that cites the 34% S&M spend increase and asks whether the mid-market churn is a messaging problem or a fit problem. One question. Specific source. Reads like it came from someone who did their homework — because it did.

Receipts

Illustrative figures from Paitho v0.9 beta testing on publicly traded company targets.

10-K-derived signals produced a ~19-21% average reply rate in the Devtools and Fintech packs — highest of any signal source category tested
New risk factors (vs. prior year) were the single most-cited signal type in winning emails: present in 41% of opened-and-replied threads
Time to extract structured signal brief from 10-K (AI pipeline): 3.2 minutes average
Average 10-K is 84 pages. The five sections above account for 31 pages. The model reads all of it; the operator reviews the brief
Of 214 publicly traded company targets processed in Q1 testing, 188 had at least one new risk factor vs. their prior year filing

What the 10-K cannot tell you

Current. The 10-K is always stale by the time you read it — usually 60–90 days behind reality for annual filers, or up to six months behind if they filed early. It describes conditions as of the filing date, not today.

This matters for signal timing. A risk factor disclosed in a February filing reflects Q4 conditions. By the time your email goes out in April, the risk may have materialized, worsened, or been addressed. The 10-K is the starting hypothesis, not the conclusion.

The Paitho pipeline cross-references 10-K signals against current web data, job postings, and social activity before writing the pitch. If the risk factor from February is also showing up in a March hiring post, the signal has corroboration. If it is contradicted by a press release announcing a fix, the signal is retired.

Closing

Principle 1 — Research is the product — means reading the documents other people skip. The 10-K is 80 pages because the company is legally required to tell you everything. You do not have to read all 80. You have to know which 31 pages matter and what to look for.

The email that wins is the one that shows the prospect you read their filing. Most of the people in their inbox did not.

Related:

— Jane Doe , Founder & CEO
Principle 1 — Research is the product.