OSPN · OneSpan

The thesis

OneSpan's shift from hardware security tokens to subscription software is working, but the company's own guidance implies a slower fourth quarter, so the shares are more likely to lag the S&P 500 over the next three months than to lead it. The fourth-quarter report expected in late February 2027 settles whether annual recurring revenue (ARR) growth of 8.5% holds.

The rating is Low because the third-quarter beat reported on 29 October 2026 is already in the price and no earnings report is expected before late February 2027. At the $22.18 close on 11 November 2026, the shares sit at about DA Davidson's $22 target, set on 30 October 2026. That suggests the market has already priced in the raised 2026 guidance.

Two facts are new since the report, and they point in opposite directions. On 10 November 2026 OneSpan said its FIDO authentication technology had been selected for a shared mobile-banking sign-in platform used by banks in Japan's TSUBASA Alliance, a group of 10 regional banks. The company disclosed no contract value or rollout dates. On 9 November 2026 and 10 November 2026 the general counsel and the chief financial officer sold shares on the open market near the current price, according to SEC Form 4 filings.

Bullish and bearish views on OneSpan Inc.

The bull case on OneSpan Inc. (OSPN), in brief: recurring growth picked up in Q3. The bear case: guidance implies a slower fourth quarter.

Bull case

• Recurring growth picked up in Q3. ARR grew 8.5% to $195.5 million at 30 September 2026, up from 7% growth to $189.7 million at the second quarter (company results; the Q3 release rounds the figure to 9%). Net revenue retention rose to 105% from 103% (Q3 call summary, 31 October 2026).
• Subscriptions now 81% of revenue. Subscription revenue rose 16% to $51.5 million out of $63.9 million total revenue in the third quarter of 2026, up from a 78% share (Q3 call summary, 31 October 2026).
• Guidance raised on every software line. On 29 October 2026 the company lifted its full-year revenue guidance to $254–258 million from $248–252 million and its ARR guidance to $197–201 million from $194–198 million. It raised adjusted EBITDA (earnings before interest, taxes, depreciation and amortisation) guidance to $72–76 million from $67–71 million.
• Gross margin is expanding. Gross margin was 76.3% in the third quarter of 2026, up from 73.6% a year earlier, and operating cash flow was $16.5 million (Q3 call summary, 31 October 2026).
• New regional bank win in Japan. On 10 November 2026 OneSpan said its FIDO technology had been selected for a shared authentication platform covering the mobile banking apps of TSUBASA Alliance banks, including Chiba Bank and Gunma Bank. ID Tech reports that the platform runs on DigipassONE, the company's new subscription authentication platform.
• One broker sees far more upside. B. Riley raised its target to $32 from $22 on 30 October 2026 and kept its Buy rating.

Bear case

• Guidance implies a slower fourth quarter. Finsee's 29 October 2026 review calculates that the guidance midpoints imply fourth-quarter revenue of $65.7 million, up 4.4%. They also imply adjusted EBITDA of $16.8 million, down 13.4% from $19.4 million. Third-quarter revenue grew 12%.
• Year-end ARR target implies less growth. Finsee calculates that the $199 million midpoint implies 6.5% reported growth, on new ARR of $3.5 million against $6.7 million in the fourth quarter of 2025. On the Q3 call, management described fourth-quarter ARR growth as "relatively consistent" with the third quarter's pace.
• An acquisition inflates the growth rate. Build38, bought on 2 March 2026, added about 1.5 percentage points to third-quarter ARR growth, according to the Q3 call summary published 31 October 2026. Finsee puts growth excluding Build38 at about 6.9%. Digital Agreements ARR grew only 5.7%, to $68.4 million.
• Part of the beat was timing. Management said customers took Digipass tokens earlier than planned, which moved revenue into the third quarter while hardware guidance stayed at $46–48 million. Overage revenue from a major banking customer will now be recognised evenly under a renewed multi-year contract, which lowers that revenue in the fourth quarter (Q3 call summary, 31 October 2026).
• Executives sold after the rally. Chief financial officer Jorge Garcia Martell sold 8,000 shares at $22.04 on 10 November 2026. General counsel Lara Mataac sold 5,000 shares at an average of $22.77 on 9 November 2026 (SEC Form 4 filings).
• Cash balance is falling. Cash was $51.4 million on 30 September 2026, down from $70.5 million on 31 December 2025. Over the period the company paid $34.6 million for acquisitions and $8.3 million for buybacks (Q3 2026 8-K). Finsee's 29 October 2026 review shows $5.0 million drawn on the credit line.

Price setup

The shares closed at $22.18 on 11 November 2026, 19.2% below the 52-week intraday high of $27.45 set on 30 October 2026, the session after the report. They are up 32.1% over three months, and the 52-week closing low was $10.15 on 27 March 2026.

The last close sits above the 50-day moving average of $18.93 and the 200-day moving average of $14.36, both from adjusted daily closes as of 11 November 2026. Since 5 November 2026 the shares have closed between $21.59 (6 November 2026) and $22.59 (9 November 2026), after a $23.66 close on 4 November 2026. The two executive sales at $22.04 and $22.77 fell inside that range.

For the shares to lead the index, they would need to retake the late-October highs without a new earnings report, and no report is expected before late February 2027.

Catalysts ahead

• ~30 November 2026 (est.): Launch of the DigipassONE Authenticate free trial. Early uptake would give a first reading on demand for the new Cybersecurity subscription platform, which is also the platform behind the TSUBASA Alliance selection.
• ~25 February 2027 (est.): Q4 and full-year 2026 report, with first 2027 outlook. Shows whether ARR lands in the $197M–$201M range, whether Q3 included revenue pulled forward from Q4, and what recurring growth the 2027 guidance implies.

Elapsed catalysts

• 13 November 2026: Record date for the $0.13 quarterly dividend. A routine income event that confirms cash returns continue; it does not test the subscription growth case. (passed)

What would change the view

A daily close above $25.66, the 30 October 2026 close and the highest close since the third-quarter report, would show the shares leading the S&P 500 and prove this call wrong. So would fourth-quarter 2026 ARR above the $201 million top of the guidance range.

What it trades with

The October move was specific to the company: Benzinga listed OneSpan among its double-digit gainers on 30 October 2026, a session in which the Nasdaq was down 2.48% midway through trading. One session is too small a sample to show how the shares track the market.

The business exposures are clearer. Cybersecurity is the larger part of recurring revenue, with ARR up 10.1% to $127.2 million at 30 September 2026, against $68.4 million for Digital Agreements. CEO Victor Limongelli said hardware sales in the first three quarters of 2026 were still mostly tied to older banking products, so bank technology budgets drive token orders. The TSUBASA selection on 10 November 2026 adds to that exposure to banks.