The acquisition will expand OneSpan’s SDK-based mobile application security capabilities to help financial institutions combat evolving threats
OneSpan Inc. announced that it has entered into a definitive agreement to acquire Build38, a leader in next-generation mobile application protection solutions, to extend OneSpan’s investment in advanced mobile security technologies. The planned acquisition is expected to enhance OneSpan’s App Shielding offering by adding SDK-based security solutions that integrate in-app, cloud, and AI technologies. These enhancements will provide businesses with unmatched protection against the growing wave of attacks targeting the mobile channel, as well as critical intelligence and telemetry on the mobile devices where the applications are deployed.
Banks and financial institutions face growing pressure to secure digital channels while enhancing customer experience and operational efficiency. This urgency is underscored by the proliferation of AI-driven attacks and the sharp rise in mobile threats, targeting the primary channel through which customers interact with their banks. These trends illustrate the need for multi-layered security solutions that combine in-app, cloud, and AI-driven defenses.
OneSpan plans to integrate Build38’s advanced SDK-based approach to Runtime Application Self-Protection (RASP) to enhance its mobile security portfolio and deliver deeper in-app protection against attacks targeting applications and devices. This will enable OneSpan to deliver a safer, more secure digital experience for customers. Build38 is named as a Sample Vendor in the Gartner® Hype Cycle™ for Application Security, 2025. Build38 is a leading provider in Europe for securing mobile identities, including EUDI wallets, healthcare, and citizen applications. Its deep industry expertise and compliance with some of the world’s most rigorous certifications will complement OneSpan’s strategy to deliver leading security solutions. Together, the companies will set a new benchmark for trust and innovation in mobile identity protection.
“Our goal is to provide leading financial institutions with the most complete protection for their customer interactions—covering strong authentication, transaction signing, application protection, and fraud detection,” said Victor Limongelli, CEO of OneSpan. “Build38’s technology already protects over 250 million endpoints. Its SDK enables banks to incorporate next-generation RASP protection within their mobile apps and provides more comprehensive data about the mobile devices and the threats facing them. As mobile threats surge and the market moves toward embedded security and AI-driven defenses, we believe this acquisition will position us ahead of the curve and validate our strategy to meet the evolving needs of our customers.”
“Build38 was founded to redefine mobile application security through next-generation RASP, combining cloud delivered services and AI innovation,” said Dr. Christian Schläger, CEO of Build38. “Joining OneSpan will allow us to scale this vision globally and deliver best-in-class protection to banks and businesses that demand the highest security standards.”
news builds on OneSpan’s recent strategic initiatives to accelerate innovation and strengthen its leadership in digital security. In June 2025, OneSpan acquired Nok Nok Labs Inc., advancing passwordless authentication capabilities and reinforcing its position in authentication. In October 2025, OneSpan announced a strategic investment in ThreatFabric to enhance fraud prevention solutions, creating new opportunities to deliver comprehensive protection for financial institutions worldwide.