OneSpan Acquires Build38, Forging AI-Powered Shield for Mobile Apps

BOSTON, MA – March 02, 2026 – Cybersecurity firm OneSpan Inc. today announced the completion of its acquisition of Build38, a German-based leader in next-generation mobile application protection. The move, first announced in January, integrates Build38’s advanced security technology and engineering talent into OneSpan’s portfolio, significantly enhancing its capabilities to defend mobile applications against an increasingly complex and AI-driven threat landscape.

The acquisition marks a critical step for OneSpan, a company trusted by over 60% of the world's top 100 banks, as it seeks to fortify the digital channels that have become central to modern life. By absorbing Build38’s specialized technology, OneSpan aims to provide its clients with a more robust and adaptive defense system for the mobile apps that handle billions of dollars and sensitive personal data daily.

A New Arsenal Against AI-Driven Threats

At the heart of the acquisition is Build38’s sophisticated, multi-layered security platform. Unlike traditional security measures that may operate on the perimeter, Build38’s technology is integrated directly into mobile applications via a Software Development Kit (SDK). This enables what is known in the industry as Runtime Application Self-Protection (RASP), allowing an app to continuously monitor its own integrity and defend itself against attacks in real-time.

The integration brings three key technological advancements to OneSpan's App Shielding offering. First is the continuous in-app protection that guards against common attacks like reverse engineering, code tampering, debugging, and overlay attacks, where criminals place an invisible layer over a legitimate app to steal login credentials. Second is a cloud-powered threat intelligence platform that aggregates data from across a global network of protected applications, allowing for the rapid identification and neutralization of emerging threats.

Most significantly, the platform incorporates adaptive, AI-enabled defenses. This is particularly crucial in an era where cybercriminals are leveraging artificial intelligence to create more convincing phishing attacks, automate the generation of novel malware, and probe for vulnerabilities at an unprecedented scale. Build38’s technology uses AI to detect anomalous behavior and predict potential attacks, enabling a proactive rather than purely reactive security posture. This capability provides organizations with deeper visibility into emerging risks and the ability to mount a more precise response, future-proofing their security against threats that have yet to fully materialize.

A Strategic Consolidation in a Competitive Market

The acquisition is a calculated strategic maneuver by OneSpan to solidify its leadership in a fiercely competitive mobile security market, where it vies with specialized firms like Zimperium and Promon. While the financial terms of the deal were not disclosed, OneSpan has stated the acquisition is not expected to materially affect its full-year 2026 financial guidance, suggesting a well-planned integration that prioritizes long-term strategic value over short-term financial shifts.

Build38, founded in 2019 as a spin-off of German security technology giant Giesecke+Devrient (G+D), brings a strong pedigree. Its backing by prominent venture capital firms including G+D Ventures, eCAPITAL Entrepreneurial Partners, and Tikehau Capital underscores the perceived value and innovation of its technology. For OneSpan, acquiring this proven technology and its expert engineering team was a way to accelerate its own innovation roadmap, bringing advanced capabilities to market faster than developing them in-house.

“With the close of this acquisition, we’re excited to welcome Build38 to OneSpan and take this important next step in expanding our mobile app security capabilities,” said Victor Limongelli, CEO of OneSpan, in a statement. “By adding Build38’s SDK-based security capabilities to enhance our App Shielding offering, including the integration of in-app, cloud, and AI-driven protections, we’re strengthening our ability to safeguard high-value mobile channels and help our customers stay ahead of rapidly evolving threats. This combination enhances our platform, accelerates our innovation roadmap, and positions OneSpan to deliver the next generation of mobile application security to leading banks and other organizations around the world.”

Bolstering Trust for the Everyday User

While the deal's immediate impact is on enterprise clients in sectors like banking, fintech, automotive, and eHealth, the ultimate beneficiaries are the millions of everyday consumers who rely on mobile apps. The security of a mobile banking or payment app is fundamental to a user's trust in the service. A breach not only carries significant financial risk but also erodes the confidence necessary for the digital economy to function.

The enhanced protection offered by the combined OneSpan-Build38 solution directly addresses the real-world risks faced by users. By preventing malware from stealing credentials, stopping app tampering, and providing a resilient shield against fraud, the technology helps ensure that when a user logs into their bank account or makes a mobile payment, their session is secure. This allows financial institutions and other service providers to offer seamless and convenient digital experiences without compromising on security.

As digital life and financial services become increasingly intertwined on mobile devices, such proactive security enhancements are no longer just an optional feature, but a fundamental requirement for maintaining trust in the digital economy.