A cash-rich, high-margin security incumbent is being priced like a melting hardware vendor—creating a potential re-rating or buyout setup as ARR compounds and activists push for a sale.
Overview
OneSpan (OSPN) is a profitable, cash-generative cybersecurity/identity company in the late stages of pivoting from legacy Digipass hardware tokens toward a software-first, cloud-centric recurring-revenue model spanning authentication, mobile app security, fraud prevention, and high-assurance digital agreements. The company now operates through Security Solutions (legacy hardware plus modern software tools) and Digital Agreements (bank-grade e-sign + IDV). FY2024 marked a major profitability inflection after restructuring, while FY2025 has been mixed: ARR grew to roughly $180M (~10% YoY) and net retention improved to ~103%, but faster hardware attrition and weaker expansion outside North America forced a guidance cut that repriced the stock. Strategic catalysts include the June 2025 acquisition of Nok Nok Labs (FIDO/passwordless), investment in ThreatFabric (APP fraud defense), and late-2025 reports of activist investors pushing for an immediate sale. The setup is a valuation dislocation—priced like a no-growth hardware vendor despite software-like margins, a clean balance sheet, and credible M&A optionality.