OneSpan Inc., a global leader in digital security, has announced a definitive agreement to acquire Build38, a provider of next-generation mobile application protection solutions. The acquisition is designed to strengthen OneSpan's App Shielding capabilities by integrating Build38's SDK-based Runtime Application Self-Protection (RASP) technology. This move aims to provide financial institutions with enhanced, multi-layered defenses against the rising tide of mobile and AI-driven threats targeting customer applications.
OneSpan enters an agreement to acquire mobile app security provider Build38.
The deal will enhance OneSpan's App Shielding with SDK-based RASP (Runtime Application Self-Protection) technology.
Build38's technology protects over 250 million endpoints and is recognized in Gartner's Hype Cycle for Application Security.
The acquisition aims to combat the surge in mobile and AI-driven attacks on financial institutions.
Integration will provide deeper in-app protection and critical threat telemetry from mobile devices.
The transaction is expected to close by March 2026, pending regulatory approval.
Financial institutions are under increasing pressure to secure their primary digital channel—mobile applications—against sophisticated, AI-powered attacks. This acquisition is a direct response to that need, aiming to deliver a multi-layered security approach that combines in-app, cloud, and AI-driven defenses. OneSpan plans to integrate Build38's advanced SDK-based RASP technology to provide deeper, embedded protection within mobile apps themselves, moving beyond perimeter security to safeguard the application at runtime.
The integration of Build38 is strategic to OneSpan's goal of offering comprehensive protection for customer interactions. “Our goal is to provide leading financial institutions with the most complete protection for their customer interactions—covering strong authentication, transaction signing, application protection, and fraud detection,” said Victor Limongelli, CEO of OneSpan. Build38's technology, which already secures over 250 million endpoints, will add critical intelligence and device-level telemetry, giving banks greater visibility into the threats facing their mobile channel.
Build38 brings proven expertise in securing mobile identities, including EUDI wallets, and holds rigorous industry certifications. Its technology is designed to deliver protection via a software development kit (SDK) that integrates cloud services and AI. “Build38 was founded to redefine mobile application security through next-generation RASP, combining cloud delivered services and AI innovation,” said Dr. Christian Schläger, CEO of Build38. The union is expected to set a new benchmark for mobile identity protection, allowing Build38's vision to scale globally under OneSpan's established enterprise platform.
This planned acquisition continues OneSpan's focused strategy of expanding its digital security capabilities through strategic investments. It follows the acquisition of Nok Nok Labs for passwordless authentication in June 2025 and a strategic investment in ThreatFabric for enhanced fraud prevention in October 2025. Together, these moves are designed to create a more integrated and robust security suite for global financial institutions facing evolving digital threats.
The acquisition of Build38 positions OneSpan to offer a more holistic and proactive defense for the mobile banking channel. By embedding advanced app shielding directly into financial applications, the combined company aims to deliver a safer user experience while providing institutions with the tools and intelligence needed to stay ahead of sophisticated threat actors, ultimately aiming to reinforce trust in digital financial interactions.
About Build38
Build38 is the leading provider of mobile app security solutions, offering advanced protection for mobile applications across various industries including mobile banking, payments, SoftPOS, fintech, mobile ID, crypto wallets, automotive, and eHealth. With its cutting-edge technology and commitment to innovation, Build38 ensures that mobile apps are secure, resilient, and compliant with industry standards. Founded in 2019 as a Spin-off of Giesecke+Devrient, the company has attracted strategic investments from G+D Ventures, eCAPITAL Entrepreneurial Partners, Criteria Venture Tech, and Tikehau Capital.
About OneSpan
OneSpan provides secure authentication, identity, electronic signature and digital workflow solutions that protect and facilitate digital transactions and agreements. The Company delivers products and services that automate and secure customer-facing and revenue-generating business processes for use cases ranging from simple transactions to workflows that are complex or require higher levels of security. Trusted by global blue-chip enterprises, including more than 60% of the world’s 100 largest banks, OneSpan processes millions of digital agreements and billions of multi-factor authentication transactions in 100+ countries annually.
TechIntelPro empowers B2B technology decision-makers with the latest industry trends, deep insights, leadership perspectives and actionable intelligence to drive both organizational and professional milestones—and thrive on the tech pulse.