OneSpan to Acquire Build38, Expanding Mobile App Security Portfolio

OSPN
January 13, 2026

OneSpan Inc. announced on January 12, 2026 that it has entered into a definitive agreement to acquire Build38, a European leader in mobile application security. The deal will add Build38’s SDK‑based Runtime Application Self‑Protection (RASP) technology to OneSpan’s App Shielding offering, allowing banks and financial institutions to embed next‑generation protection directly into their mobile apps.

Build38’s platform already protects more than 250 million endpoints worldwide and is listed as a sample vendor in Gartner’s 2025 Hype Cycle for Application Security. By integrating Build38’s technology, OneSpan can provide end‑to‑end security that covers strong authentication, transaction signing, and in‑app threat detection—capabilities that are increasingly critical as AI‑driven mobile attacks target the primary channel for customer interactions.

The transaction is expected to close by March 2026, subject to regulatory approvals and customary closing conditions. The acquisition aligns with OneSpan’s strategy to shift from legacy hardware tokens toward software‑centric solutions and to deepen its mobile security capabilities in a market where mobile‑first authentication is accelerating. OneSpan’s prior moves—acquiring Nok Nok Labs in June 2025 and investing in ThreatFabric in October 2025—demonstrate a focused effort to build a comprehensive, end‑to‑end security stack for financial institutions.

Management emphasized the strategic fit: CEO Victor Limongelli said, “Our goal is to provide leading financial institutions with the most complete protection for their customer interactions—covering strong authentication, transaction signing, application protection, and fraud detection.” He added that Build38’s technology protects over 250 million endpoints and enables banks to embed RASP protection within their mobile apps, providing richer data about mobile devices and threats.

CEO of Build38, Dr. Christian Schläger, noted, “Build38 was founded to redefine mobile application security through next‑generation RASP, combining cloud‑delivered services and AI innovation. Joining OneSpan will allow us to scale this vision globally and deliver best‑in‑class protection to banks and businesses that demand the highest security standards.”

The market reaction to the announcement was modest: OneSpan’s stock fell 0.53 % on the day of the announcement, a move that analysts attributed to broader market volatility rather than the deal itself. The acquisition is expected to strengthen OneSpan’s competitive position against broader identity platforms and to drive future subscription growth in its Digital Agreements and Security Solutions segments.

Overall, the acquisition positions OneSpan to capitalize on the growing demand for mobile security solutions, particularly as AI‑driven threats become more sophisticated. By adding Build38’s RASP technology, OneSpan expands its product portfolio, enhances its value proposition to banks, and reinforces its strategic shift toward software‑centric, cloud‑based security offerings.

The content on BeyondSPX is for informational purposes only and should not be construed as financial or investment advice. We are not financial advisors. Consult with a qualified professional before making any investment decisions. Any actions you take based on information from this site are solely at your own risk.