In a move set to redefine mobile application protection, OneSpan Inc. (NASDAQ: OSPN) has announced its agreement to acquire Build38, a European leader in next-generation mobile security solutions. This strategic acquisition will bolster OneSpan’s SDK-based mobile security capabilities, enabling financial institutions to better defend against the rising wave of digital threats.
Strengthening Mobile Security in the Financial Sector
With mobile channels now the primary interface between banks and customers, protecting these applications has never been more critical. Financial institutions face increasing pressure to secure digital interactions while maintaining seamless user experiences. The surge in AI-driven attacks and mobile-targeted threats has underscored the need for multi-layered, intelligent security solutions that go beyond traditional measures.
By integrating Build38’s Runtime Application Self-Protection (RASP) technology, OneSpan will enhance its App Shielding offerings with in-app, cloud, and AI-driven security defenses. This integration ensures that businesses can detect, prevent, and respond to threats in real time, while gaining critical insights into device-level vulnerabilities.
Build38’s Innovative SDK Enhances OneSpan’s Security Portfolio
Build38 is recognized as a Sample Vendor in the Gartner® Hype Cycle™ for Application Security, 2025, highlighting its industry-leading role in mobile application protection. The company specializes in securing mobile identities, including EUDI wallets, healthcare apps, and citizen-focused platforms, with compliance to some of the most rigorous certifications worldwide.
By adopting Build38’s SDK-based approach, OneSpan can deliver deeper in-app security and provide banks with comprehensive telemetry on mobile devices, enabling smarter threat detection and mitigation. Currently, Build38’s technology protects over 250 million endpoints, demonstrating its proven capability in safeguarding sensitive digital interactions.
Driving Innovation Through Strategic Acquisitions
The Build38 acquisition aligns with OneSpan’s broader strategy to accelerate innovation and expand its leadership in digital security for financial services. Over the past year, OneSpan has made significant moves to enhance its technology portfolio:
- June 2025: Acquired Nok Nok Labs Inc., boosting passwordless authentication solutions.
- October 2025: Made a strategic investment in ThreatFabric, advancing fraud prevention capabilities.
These initiatives, combined with the integration of Build38’s SDK-based security, position OneSpan to deliver comprehensive, AI-driven protection across authentication, transaction signing, and application security.
Executive Insights on the Acquisition
Victor Limongelli, CEO of OneSpan, emphasized the importance of this move:
“Our goal is to provide leading financial institutions with the most complete protection for their customer interactions—covering strong authentication, transaction signing, application protection, and fraud detection. Build38’s SDK enables banks to incorporate next-generation RASP protection within their mobile apps, providing more comprehensive data about mobile devices and the threats facing them.”
Dr. Christian Schläger, CEO of Build38, added:
“Joining OneSpan allows us to scale our vision globally and deliver best-in-class protection to banks and businesses that demand the highest security standards.”
A Safer Mobile Experience
The acquisition is expected to close by March 2026, pending regulatory approvals and customary closing conditions. Together, OneSpan and Build38 are set to define a new standard for mobile app security, helping financial institutions stay ahead of emerging threats while providing customers with a secure, frictionless digital experience.
Financial institutions and security leaders looking to strengthen their mobile security strategy can expect enhanced SDK-based protections, AI-driven intelligence, and cloud-integrated defenses to become key tools in safeguarding their digital ecosystems.
About Build38
Build38 is the leading provider of mobile app security solutions, offering advanced protection for mobile applications across various industries including mobile banking, payments, SoftPOS, fintech, mobile ID, crypto wallets, automotive, and eHealth. With its cutting-edge technology and commitment to innovation, Build38 ensures that mobile apps are secure, resilient, and compliant with industry standards. Founded in 2019 as a Spin-off of Giesecke+Devrient, the company has attracted strategic investments from G+D Ventures, eCAPITAL Entrepreneurial Partners, Criteria Venture Tech, and Tikehau Capital.
About OneSpan
OneSpan provides secure authentication, identity, electronic signature and digital workflow solutions that protect and facilitate digital transactions and agreements. The Company delivers products and services that automate and secure customer-facing and revenue-generating business processes for use cases ranging from simple transactions to workflows that are complex or require higher levels of security. Trusted by global blue-chip enterprises, including more than 60% of the world’s 100 largest banks, OneSpan processes millions of digital agreements and billions of multi-factor authentication transactions in 100+ countries annually.
