Onespan Q2 2026 Earnings Report

Onespan EPS Results

• Actual EPS: $0.30
• Consensus EPS: $0.23
• Beat/Miss: Beat by +$0.07
• One Year Ago EPS: N/A

Onespan Revenue Results

• Actual Revenue: $60.47 million
• Expected Revenue: $58.25 million
• Beat/Miss: Beat by +$2.21 million
• YoY Revenue Growth: N/A

Onespan Announcement Details

• Quarter: Q2 2026
• Date: 8/4/2026
• Time: After Market Closes
• Conference Call Date: Tuesday, August 4, 2026
• Conference Call Time: 4:30PM ET

Onespan (NASDAQ:OSPN), formerly known as Vasco Data Security International, is a Chicago-based cybersecurity software company specializing in digital identity and anti-fraud solutions. Founded in 1991, the company provides a suite of authentication and transaction security products designed to help organizations protect critical applications and high-value transactions across online, mobile and in-branch channels.

The core OneSpan portfolio includes multi-factor authentication, risk-based authentication and transaction signing solutions. OneSpan Sign, the company’s electronic signature platform, enables secure digital agreement workflows while meeting regulatory requirements for audit trails and identity verification. Other offerings include mobile smart-authentication tools, adaptive risk orchestration, and document security features that can be integrated into existing enterprise systems or deployed as standalone SaaS applications.

OneSpan serves a diverse set of clients globally, with a strong focus on financial institutions, insurance companies, government agencies and healthcare organizations. The company’s solutions are employed in more than 100 countries to secure online banking sessions, facilitate compliant e-signatures, streamline customer onboarding and reduce fraud. OneSpan’s reach extends across North America, Europe, Asia-Pacific and Latin America, supported by regional offices and partnerships with technology integrators worldwide.

Onespan Q2 2026 Earnings Call Transcript

Key Takeaways

• Positive Sentiment: Subscription revenue grew 11% to $47 million and represented 77% of total revenue, while ARR increased 6.7% to $189.7 million with a 103% net retention rate.
• Positive Sentiment: OneSpan raised its 2026 outlook, now expecting revenue of $248 million-$252 million and adjusted EBITDA of $67 million-$71 million, citing stronger digital-agreement usage and higher anticipated hardware revenue.
• Positive Sentiment: The newly launched DigipassONE platform combines authentication, verifiable credentials, mobile-app protection, and analytics, creating potential cross-sell opportunities among OneSpan’s banking customers and supporting longer-term growth.
• Positive Sentiment: Digital agreements revenue rose 25.2% to $19.5 million, helped by strong transaction overages that management views as an indicator of customer activity and potential future expansion contracts.
• Negative Sentiment: Total revenue grew only 1% as cybersecurity revenue declined 7.5%, while GAAP operating income and adjusted EBITDA margin fell year over year due to lower hardware and license-related revenue and increased acquisition and go-to-market investment.

Presentation

[Operator]

Good day, and thank you for standing by. Welcome to the OneSpan Second Quarter 2026 Earnings Conference Call. At this time, all participants are in a listen-only mode. After the speaker's presentation, there will be a question-and-answer session. To ask a question during the session, you will need to press star one one on your telephone. You will then hear an automated message advising your hand is raised. To withdraw your question, please press star one one again. Please be advised that today's conference is being recorded. I would now like to hand the conference over to your first speaker today, Joe Maxa, VP of Investor Relations. Please go ahead.

[Joe Maxa, VP of Investor Relations at OneSpan]

Thank you, operator. Hello everyone? Thank you for joining the OneSpan second quarter 2026 earnings conference call. This call is being webcast and can be accessed on the investor relations section of OneSpan's website at investors.onespan.com. Joining me on the call today is Victor Limongelli, our Chief Executive Officer, and Jorge Martell, our Chief Financial Officer. This afternoon, after market close, OneSpan issued a press release announcing results for our second quarter of 2026. To access a copy of the press release and other investor information, please visit our website. Following our prepared comments today, we will open the call for questions. Please note that statements made during this conference call that relate to future plans, events, or performance, including the outlook for full year 2026 and other long-term financial targets, are forward-looking statements. These statements involve risks and uncertainties and are based on current assumptions.

[Joe Maxa, VP of Investor Relations at OneSpan]

Consequently, actual results could differ materially from the expectations expressed in these forward-looking statements. I direct your attention to today's press release and the company's filings with the U.S. Securities and Exchange Commission for a discussion of such risks and uncertainties. Also note that certain financial measures that may be discussed on this call are expressed on a non-GAAP basis and have been adjusted from a related GAAP financial measure. We have provided an explanation for and reconciliations of these non-GAAP financial measures to the most directly comparable GAAP financial measures in the earnings press release and in the investor presentation available on our website. In addition, please note that all growth rates discussed on this call refer to a year-over-year basis unless otherwise indicated. The date of this conference call is August 4, 2026. Any forward-looking statements and related assumptions are made as of this date.

[Joe Maxa, VP of Investor Relations at OneSpan]

Except as required by law, we undertake no obligation to update these statements as a result of new information or future events or for any other reason. I will now turn the call over to Victor.

[Victor Limongelli, CEO at OneSpan]

Thank you, Joe. Hello, everyone? Thank you for joining us today. We had a strong second quarter, including subscription revenue growth of 11% and solid profitability with an adjusted EBITDA margin of 28%. Before reviewing our results in more detail, I'd like to spend a few minutes discussing our recently launched DigipassONE authentication platform, which represents an important milestone in OneSpan's evolution. DigipassONE unifies the innovations from our Nok Nok Labs and Build38 acquisitions with OneSpan's existing capabilities, delivering a single integrated platform solution. DigipassONE includes four components: DigipassONE Authenticate, DigipassONE Verify, DigipassONE Protect, and DigipassONE Insights. First and foremost, DigipassONE Authenticate builds on the foundation of the world's broadest suite of authentication functionality, including passkeys, FIDO2 security keys, hardware tokens, mobile authenticators, and software authenticators to deliver secure, phishing-resistant login and transaction signing.

[Victor Limongelli, CEO at OneSpan]

Banks and other high-value, high-trust customers gain the flexibility to support different users, devices, and authentication preferences through a unified platform. DigipassONE Verify expands the platform with our new capabilities for verifiable credentials and digital wallets. Verifiable credentials are designed to improve onboarding, authentication, and trust by enabling cryptographically secure and tamper-proof identity verification. DigipassONE Protect strengthens the offering with our mobile application shielding technology. Delivered via both SDKs and post-compilation app wrapping, it protects mobile apps against tampering, abuse, and runtime threats, promoting reliability and trustworthiness for users. Last but not least, DigipassONE Insights ties it all together with telemetry and analytical insights across authentication flows and application protection signals so that customers can better react to imminent threats or challenging operating environments.

[Victor Limongelli, CEO at OneSpan]

Looking ahead, over the next few years, we expect consumers to begin using agents to conduct banking and other high-value transactions, and we further expect that the development of this new channel for customer interaction will augment, not replace, the existing channels of in-person, online, and mobile. In other words, in the future, banks will continue to engage with their customers across branches, websites, and mobile apps while adding a new category of agent-driven banking interactions. DigipassONE provides the foundation to help banks and other high-value, high-trust businesses authenticate customers, verify intent, and protect transactions across both existing and emerging channels. We see the shift to agentic-driven interactions in the future as an opportunity to extend our offering and further strengthen our value to our customers.

[Victor Limongelli, CEO at OneSpan]

Stepping back, the launch of DigipassONE is a key milestone in a broader platform strategy that strengthens our ability to innovate, deepen customer relationships, address new market opportunities, and support long-term growth. Turning to our digital agreements business, where we focus on delivering secure, seamless agreement workflows purpose-built for financial services and other highly regulated industries. We believe our combination of white label e-signatures, identity verification, and workflow automation provides a meaningful differentiator in the market. In addition, we are investing in AI-enabled capabilities designed to help customers improve efficiency, gain deeper insights from agreement workflows, deliver a better end-user experience, seamlessly integrate with agentic workflows, and simplify deployment within existing environments. Turning to our results. As mentioned, we had a solid second quarter, including generating $17 million of adjusted EBITDA or 28% of revenue.

[Victor Limongelli, CEO at OneSpan]

We ended the second quarter with annual recurring revenue of $190 million, up 7% year-over-year. Total Q2 revenue grew 1% to $60.5 million, and second quarter subscription revenue grew 11% to $47 million and accounted for 77% of total revenue, up from 70% in last year's Q2. Both business units continued to be solidly profitable at the division level, supporting our board's commitment to a balanced capital allocation strategy that considers shareholder returns, organic investment, and targeted M&A. In the second quarter, we returned almost $8 million to shareholders through dividends and share repurchases. On an aggregate basis over the last four quarters, the total return to shareholders exceeds $40 million, or over a dollar per share. The board has also approved a quarterly dividend of $0.13 per share to be paid in the current quarter and will continue to evaluate additional share repurchase opportunities.

[Victor Limongelli, CEO at OneSpan]

In summary, we continue to make progress in building a stronger foundation for future growth. We have expanded our capabilities through targeted acquisitions and internal innovation, both of which are evidenced in the launch of DigipassONE. We remain focused on serving our customers now and investing for the future in order to be able to continue delivering value to them for years to come. With that, I'll turn the call over to Jorge.

[Jorge Martell, CFO at OneSpan]

Thanks, Victor, and good afternoon everyone? I am very pleased to report another strong quarter and continued progress in building a solid foundation for growth. I am particularly excited about our recent launch of DigipassONE, our platform strategy built to help customers modernize authentication and address other security needs without disrupting existing systems, user experience, or business operations. Turning to our results. Annual recurring revenue, or ARR, increased 6.7% year-over-year to $189.7 million, driven by expansion of existing customer contracts, new logos, and the acquisition of Build38. Our net retention rate, or NRR, was 103%.

[Jorge Martell, CFO at OneSpan]

Q2 revenue was $60.5 million, an increase of 1% compared to last year's second quarter, driven by 11% growth in subscription revenue, partially offset by a decline in hardware revenue due to the fact that significant hardware revenue had been pulled forward into Q1, which we discussed with you last quarter, as well as a decline in perpetual maintenance revenue as customers continued to move to term licenses. For the quarter, as Victor mentioned, subscription revenue increased to 77% of total revenue, up from 70% in the prior year quarter, while hardware and perpetual maintenance revenues accounted for a combined 23% of total revenue as compared to 30% in last year's Q2. Gross margin was 73.6% compared to 73.5% in Q2 of last year. GAAP operating income was $8.7 million compared to $10.5 million in Q2 2025.

[Jorge Martell, CFO at OneSpan]

The year-over-year change primarily reflects increased operating costs related to our recent acquisitions, including headcount, as well as certain cost-related go-to-market leadership and other organic investments. GAAP net income per share was $0.18, compared to $0.21 in the second quarter of last year. non-GAAP net income per share was $0.30, compared to $0.34 in last year's Q2. Adjusted EBITDA and adjusted EBITDA margin were $16.9 million and 27.9%, respectively. This is compared to $17.6 million and 29.5% in the same period last year. Next, I will discuss the financial results for our two business divisions, starting with cybersecurity. Cybersecurity ARR grew 7.4% year-over-year to $123 million, inclusive of a $3 million headwind we discussed last quarter and the acquisition of Build38. Revenue decreased 7.5% to $40.9 million.

[Jorge Martell, CFO at OneSpan]

Subscription revenue grew 2.5% to $27.2 million, driven by customer expansion contracts, new logos, as well as revenue from our acquisitions of Nok Nok and Build38, partially offset by lower year-over-year multi-year term license revenue and lower pass-through renewal catch-up revenue this quarter compared to last year's second quarter, as we continue to improve our on-time renewal performance. As noted, hardware and perpetual maintenance revenue declined as expected. Gross margin for the cybersecurity division was 73%, compared to 74% in the prior year quarter, primarily reflecting incremental third-party license costs and incremental amortization of capitalized software costs from the Build38 acquisition. Operating income was $13.8 million, or 34% of revenue, compared to $19.8 million, or 45% of revenue in last year's Q2.

[Jorge Martell, CFO at OneSpan]

The year-over-year change was driven by the differences in revenue and gross margin just discussed, an increase in operating expenses from acquired companies, and increased organic investments. Turning to digital agreements. ARR grew 5.3% year-over-year to $66.7 million. Revenue grew 25.2% to $19.5 million, driven by strong overage revenue, expansion of renewal contracts, and new customer additions. We are encouraged by the strong overage revenue because it is a positive indicator of transaction volume growth, which often results in expansion contracts with existing customers due to higher utilization rates. We expect additional overages in the third quarter of 2026, but not to the same extent as in Q2. As a reminder, overages are not included in ARR or NRR. Gross margin improved to 74.7%, up from 71.4% in the prior year period, primarily reflecting higher revenue, including overage revenue.

[Jorge Martell, CFO at OneSpan]

Operating income was $7 million, or 35.7% of revenue, compared to $2.9 million or 18.4% of revenue in the same period last year. The strong improvement in operating income was primarily driven by revenue growth, higher gross margin, and a modest decline in operating expenses, primarily reflecting higher internal software capitalization costs. Turning to our balance sheet, we ended the second quarter with $43.3 million in cash and cash equivalents and $5 million outstanding under our credit facility, compared to $49.8 million in cash and cash equivalents and no outstanding debt at the end of the first quarter. During the quarter, our primary cash outflows including $4.8 million for our quarterly dividend, $2.9 million to repurchase approximately 230,000 shares of common stock, and $3 million for capitalized software development costs. Operating cash flow was a modest outflow of $0.1 million, primarily reflecting normal net working capital fluctuations.

[Jorge Martell, CFO at OneSpan]

By geographic region, revenue in the second quarter of 2026 was 46% from the Americas, 35% from EMEA, and 19% from Asia Pacific, compared to 40%, 39%, and 21% from the same regions in the second quarter of 2025, respectively. The year-over-year changes in revenue by region primarily reflect growth in digital agreements and cybersecurity software in the Americas, which is consistent with our investment strategy and plan. Lower cybersecurity hardware and software revenue in EMEA, partially offset by growth in digital agreements, and lower hardware revenue in Asia Pacific, partially offset by an increase in cybersecurity software. Turning to some modeling notes and our outlook. We are pleased with our second quarter results and the progress we've made in positioning the company for long-term growth.

[Jorge Martell, CFO at OneSpan]

For the full year 2026, we are increasing our revenue guidance primarily to reflect higher volumes and consumption in our e-signature business that is expected to result in incremental contract overages, along with an increase in expected hardware revenue in the second half of the year, primarily Q4, due to increased hardware bookings in the first half of the year as compared to our plan. Our current hardware revenue forecast calls for about 1/3 of the second-half hardware revenue to be recognized in Q3, which is consistent with the last couple of years, showing Q3 as the seasonally lowest of the four quarters, followed by a much stronger fourth quarter. More specifically, for the full year 2026, we expect total revenue to be in the range of $248 million-$252 million, as compared to our previous guidance range of $244 million-$249 million.

[Jorge Martell, CFO at OneSpan]

We expect software and services revenue to be in the range of $202 million-$204 million, as compared to our previous guidance range of $201 million-$204 million. We expect hardware revenue to be in the range of $46 million-$48 million, as compared to our previous guidance range of $43 million-$45 million. We expect ARR to be in the range of $194 million-$198 million. We expect adjusted EBITDA to be in the range of $67 million-$71 million, as compared to our previous guidance range of $64 million-$68 million. That concludes my remarks. I will now turn the call back to Victor.

[Victor Limongelli, CEO at OneSpan]

Thanks, Jorge. To recap, we are pleased with our second quarter results and the progress we continue to make across the business. We are serving our customers with mission-critical solutions, investing in areas where we see meaningful growth opportunities, and maintaining the financial discipline that enables us to return capital to shareholders. We believe OneSpan is becoming a stronger and more focused company, and we remain committed to creating long-term value for our customers and shareholders. Jorge and I will now be happy to take your questions.

[Operator]

Thank you. At this time, we will conduct the question and answer session. As a reminder, to ask a question, you will need to press star one one on your telephone and wait for your name to be announced. To withdraw your question, please press star one one again. Please stand by while we compile the Q&A roster. Our first question comes from Gray Powell from U.S. Bank, please go ahead.

[Gray Powell, Analyst at U.S. Bank]

Great. Thanks for taking the question. Yeah, maybe a couple on my side. More of a high-level question, I guess. Just thinking out, like over the next year or two, as hardware becomes a smaller component of the business, how should we think about the potential for growth to improve on a sustainable basis? Then just more specifically, what are like the two or three things that need to happen for OneSpan to sustainably get revenue growth back into the, call it, mid to high single digits on an organic basis?

[Victor Limongelli, CEO at OneSpan]

Yeah. Thanks, Gray. I think you're familiar with this. We've certainly talked about it in the past, and you can see it in the numbers. Over time, our software business has been growing, and we had an offset, a negative offset from the hardware business for quite some time. We felt like if we could get the hardware business stable, maybe have some revenue coming from the newer security keys, as well as stabilization in the overall hardware business, that growth would show up, overall growth would show up as a result of the software growth. You see it in the subscription revenue numbers, you see it in the ARR numbers. We've been having solid software growth, and we expect that to continue.

[Victor Limongelli, CEO at OneSpan]

Obviously, we're not giving guidance for next year, but we have some exciting things happening in terms of our product portfolio, the new DigipassONE platform, and we have emerging technologies with DigipassONE Verify as well, as well as new hires that we've announced on the go-to-market side, a new head of marketing, new channel leader, et cetera. We are taking all those steps to build for additional growth and get those targets that you're talking about.

[Gray Powell, Analyst at U.S. Bank]

Okay. That's helpful. Just, I guess a separate question. Look, I know DigipassONE has only been out a couple of weeks. Anything you can say on early feedback or customer interest? Just trying to think through what kind of ASP uplift you think that could create for the platform and the potential for net retention rates to improve off of current levels.

[Victor Limongelli, CEO at OneSpan]

Yeah. If you think about the platform, we had a very strong authentication offering, which we strengthened considerably about a year ago, a little over a year ago, when we bought Nok Nok and added the passkey capability. We had that strong authentication platform, and we have been providing app shielding, what we're calling DigipassONE Protect, for some time, but now we own the technology with the acquisition of Build38. Those are cross-sell opportunities going to all the banks that we have and adding app shielding and a potential new capability, not a potential, a new capability that we're developing, DigipassONE Verify. Those are cross-sell opportunities. If you think about how to increase revenue growth rates, you're either selling existing things to new customers or new things to existing customers, or newer or existing things to new customers as well.

[Victor Limongelli, CEO at OneSpan]

The easiest path there is going to be a cross-sell. Is to sell new things to existing customers. That's what we're trying to do to drive up the attach rate with DigipassONE Protect to start down the path of an attach rate with DigipassONE Verify, since that's new. Both of those give us an opportunity because we do have this great customer base built up over many years, and that's where we see the most straightforward way to increase the software growth rates.

[Gray Powell, Analyst at U.S. Bank]

Understood. Okay. Thank you.

[Operator]

Thank you. Our next question comes from Catharine Trebnick from Rosenblatt, please go ahead.

[Catharine Trebnick, Analyst at Rosenblatt]

Well, thanks for taking my question. You frame the agent-driven interactions as incremental to the channel. I know you just released this product. Any specific use cases that your marketing team has identified that you're going after, like high-value payments, dispute resolution? And what are you really seeing in the budget for 2026, should we really think of this more like a 2027 item? And then Gray already grabbed my question on the ASP, thanks. How do you change your go-to-market for this play? Go ahead.

[Victor Limongelli, CEO at OneSpan]

To clarify, are you asking about DigipassONE Verify?

[Catharine Trebnick, Analyst at Rosenblatt]

Yes.

[Victor Limongelli, CEO at OneSpan]

Yeah. That's a new capability. We're doing POCs with customers in the second half of the year. We released an early release version of that in June, we expect to be learning a lot more about budgets as we go through the process. I think you know this, but in general Oh, go ahead, sorry.

[Catharine Trebnick, Analyst at Rosenblatt]

Well, no. I'm just trying to figure out what use cases you'd be targeting with that and how different that is from what you're currently selling.

[Victor Limongelli, CEO at OneSpan]

If you think about what it's doing, there is a European digital identity regulations. The countries have to have wallet specifications done by the end of the year. Obviously, that's going to be many different wallets. You have Google and Apple as well. Then banks are going to have to accept them by the end of 2027. We see this as just such a great complement to our authentication offering because people are going to, in a cryptographically tamper-proof way, prove their identity which is obviously super important in onboarding and in general in authentication. We see this as an add-on that a lot of banks, well, first of all, in Europe, there are going to be regulatory drivers behind it, but also in other markets, it's going to be a super helpful way to make for more secure interactions with your customers.

[Victor Limongelli, CEO at OneSpan]

Now, in terms of budgets for it, there are regulatory drivers in 2027. Most of our, probably over half of our bookings come between September and Labor Day and the end of the year. We're heading into our busy season in terms of sales. I would say we don't have a clear read on 2027 budgets from our customers yet because we're focused, as you might imagine, very much on closing 2026 business.

[Catharine Trebnick, Analyst at Rosenblatt]

Yeah.

[Victor Limongelli, CEO at OneSpan]

The POCs and the interest we're seeing from customers are a good sign.

[Catharine Trebnick, Analyst at Rosenblatt]

Okay. Very good. Thank you.

[Operator]

Thank you. Our next question comes from Erik Suppiger from B. Riley Securities, please go ahead.

[Erik Suppiger, Analyst at B. Riley Securities]

Yeah. Thanks for taking the question, and congrats on a good quarter and getting DigipassONE out.

[Victor Limongelli, CEO at OneSpan]

Thank you.

[Erik Suppiger, Analyst at B. Riley Securities]

Just following up on Catharine's question, what adoption, what are the use cases for banks that are using AI agents for banking? Then I'm just curious on the digital agreement side, was the overage associated with a particular account, or is this more of a broader trend? It seemed like it was a particularly strong quarter, and you're talking about some strength in Q3, so what's driving that?

[Victor Limongelli, CEO at OneSpan]

Yeah. I'll let Jorge answer the overage question, but let me talk about AI agents. What we believe will occur. If you think about mobile banking apps, the most common activities that are undertaken by customers are things that are pretty straightforward, checking their balance, sending money to a friend or a payment for something, monitoring transactions that have hit or not hit their account. And we think that agents will do not all of it, right? I think this is going to be a new channel for banks, not everything will happen with agents. If you fast-forward four or five years, then banks are interacting with customers in their physical branches. Some people still go into those, a few people at least, through websites, on a laptop or desktop, through a mobile banking app, which is very common today, but also through agentic workflows.

[Victor Limongelli, CEO at OneSpan]

Now, the ability for a bank to accept those agentic workflows, for a consumer to have an agent that they use to hit multiple different accounts, and for the bank to be able to authenticate that this agent is authorized to act on behalf of this consumer and to verify intent. There's work to be done on those things, but I think that channel is absolutely coming. One of the things that we offer to banks and other high-trust, high-value customers is this breadth of offering. So we're not offering just passkeys or just protection for your mobile banking app, but across the ways that you interact with your customers, you don't need multiple vendors for this consumer-customer interaction. You can use OneSpan and cover, well, we don't cover branches, I guess, but you can cover all of the digital channels.

[Jorge Martell, CFO at OneSpan]

Yeah, I can jump in and address the agent overage question, Erik. Thanks for that question. Look, I think we're pretty happy in terms of how DA performed for the quarter, 25% growth. Even if you exclude the overages, which were about year-over-year higher by $2-and-change million, you still get to a growth, Erik, of double digits, 11.3%, which is pretty encouraging. And again, when you take a step back and think about how are these overages generated, they're generated because our clients are over-utilizing the volume of transactions they committed, which is a good thing. Arguably, you can think about overages as a leading indicator for ARR, if you would, because often happens that overages then transfer into higher expansion contracts, now part of ARR.

[Jorge Martell, CFO at OneSpan]

At this point, if it's an overage, it's not part of ARR, so it's not part of NRR and all those metrics. You can think about overages as a leading indicator for ARR and then leading indicator for revenue. We feel good about that. Obviously happy with the performance. Yeah, it did come from, I would say, a couple of customers primarily. Erik, we normally have a run rate of overages for the full year, I'll talk full year now, probably about $1 million-$1.5 million. I think this year we're obviously going to exceed that amount. For the second half of the year is going to be much less than we recognized so far in the first half. Nonetheless, we feel good about overages. We like overages not only because it's revenue, but it's a leading indicator for activity in our platform.

[Erik Suppiger, Analyst at B. Riley Securities]

Okay, then real quick on-

[Jorge Martell, CFO at OneSpan]

Mm-hmm. Yep.

[Erik Suppiger, Analyst at B. Riley Securities]

One last one on the hardware. It looks like you're looking for a pretty strong second half. Is that driven by FIDO2, or is there anything that's incrementally picking up in the second half within the hardware?

[Victor Limongelli, CEO at OneSpan]

Yeah, we've had. Oh, go ahead, Jorge. Go ahead.

[Jorge Martell, CFO at OneSpan]

Sorry. Just real quickly. Yeah, we increased our guidance for hardware from 44 midpoint to now 47, Erik. The primary reason for that is, I guess a couple of things. One is we saw better activity or higher activity compared to our plan bookings in this case in the first half of the year, which gives us confidence in terms of when these orders are going to get delivered. The earlier we have the bookings, the higher likelihood that those bookings will get delivered in year. For that reason, we increased our better visibility and then increased our guidance as well. Go ahead, Vic.

[Victor Limongelli, CEO at OneSpan]

Yeah, I was going to say the FIDO2 security keys, we see an avenue for that even within banking to make for easier login. Primarily, not exclusively, but primarily in the corporate banking market where hardware is a little bit stronger in corporate banking than in consumers. Consumers tend to use a mobile banking app. Many corporate customers, if they're a treasury department or something like that, are doing their online banking in front of a big screen where a hardware device is not inconvenient. They keep it in their desk drawer, and then they use it when it's time to log in and time for transaction signing as well. We see the FIDO token opportunity there as well looking ahead to 2027.

[Victor Limongelli, CEO at OneSpan]

Which is one of the reasons we feel good about, better than we have in the past about hardware, about being able to have that be a flattish business rather than a declining business. Obviously, we haven't given 2027 guidance, it's encouraging what we've seen in 2026 on the hardware side.

[Erik Suppiger, Analyst at B. Riley Securities]

Okay. It sounds like finally the FIDO2 is offsetting the decline in the legacy hardware products. Is that right?

[Victor Limongelli, CEO at OneSpan]

It's promising on the banking side overall and It was quite a large business a decade ago, but getting it to a flat or potentially even growing if things go really well, business really helps the overall number, even though, of course, software is the overwhelming majority of our business. It helps not to have a decline in a segment.

[Erik Suppiger, Analyst at B. Riley Securities]

Very good. Thank you.

[Jorge Martell, CFO at OneSpan]

Thanks, Erik.

[Victor Limongelli, CEO at OneSpan]

Thank you.

[Operator]

Thank you. Our next question comes from Rudy Kessinger from D.A. Davidson, please go ahead.

[Rudy Kessinger, Analyst at D.A. Davidson]

Hey, guys. Great. Thank you for the question. Just one for me. What did renewals look like in the quarter? I know the overage is good, the hardware looks like it's better, but if you look at ARR to take a step down quarter-over-quarter, your net expansion rate stepped down a couple points quarter-over-quarter as well. What do renewals look like or any color on the quarter-over-quarter declines in those metrics?

[Jorge Martell, CFO at OneSpan]

I can give you some commentary. Rudy, thanks for the question. Look, I think GRR metrics for the businesses were, I'd say, relatively consistent. I think digital agreements was in the 93-ish%, and the GRR for our security business was in the 86-ish%, Rudy. Relatively consistent within the band. As we mentioned sequentially, we were going to have a hit of about $3 million just sequential Q1 to Q2, and that's already part of these numbers. As we go into the second half of the year, we expect to see sequential increases on both DA and security. Overall, I think I would say healthy renewal rates. We're getting more proactive. The team is doing a fantastic job at being proactive, reaching out to customers, and trying to secure those renewals as early as possible. It gives us visibility into the timing.

[Jorge Martell, CFO at OneSpan]

One of the things that you also notice in my prepared remarks really is that year-over-year, we did have less, call it catch from the revenue from past the renewal just year-over-year. That's also an indication that as we get better at renewals and those renewals are getting timely renewed, you're not going to see this incremental lumpiness, if you would, because renewals are getting closed past due. That's also another sign that the team is doing great on renewals and we're improving those metrics.

[Victor Limongelli, CEO at OneSpan]

Thanks, Rudy.

[Operator]

Thank you. Our next question comes from Anja Soderstrom from Sidoti, please go ahead.

[Anja Soderstrom, Analyst at Sidoti]

Hi, and thank you for taking my questions. Most of them have been addressed already, I'm just curious in terms of M&A, you've been quite acquisitive over the past couple of years. What's your appetite for more acquisitions, and what would you be looking for?

[Victor Limongelli, CEO at OneSpan]

As you can tell by the last 13 months or 14 months, we're certainly open to the idea if it fits into our product strategy. You can see I'm really happy with the way we were able to take those two and fold it into our overall offering with DigipassONE. You can see how that strengthens the overall business. We're going to continue to be opportunistic and look for The term we've used is targeted M&A. We want to be prudent in how we do it and not reckless. We're definitely going to be looking for things that fit in well and that make sense for us. The other thing, really kudos to our team, and the teams from Nok Nok and Build38 that joined us because the integrations have gone very well.

[Victor Limongelli, CEO at OneSpan]

We've been able to build a unified team, I think, and retain talent, and all those things have been good proof points for us to make us continue to think that that's a viable strategy. In terms of what we would be looking for, I don't want to disclose too much in that area, you can see, I think, strategically, where we're headed. Things that fit into our overall strategy, we'll continue to look for them.

[Anja Soderstrom, Analyst at Sidoti]

How do you see the market has developed over the past couple of months? Has the valuations come down or come up or what do you

[Victor Limongelli, CEO at OneSpan]

I don't know if we're the right person to ask on the month-by-month M&A market because we're looking, but we're not actively bidding every month on a business. Overall, I think we were very happy with the talent that we acquired and the technology we acquired with the deal earlier this year in March with Build38, as well as last summer with Nok Nok. We'll continue to look.

[Anja Soderstrom, Analyst at Sidoti]

Okay. Thank you. Also, I'm just curious about the update to your go-to-market leadership and marketing. How is that evolving, and when do you expect to see some tangible results from those changes?

[Victor Limongelli, CEO at OneSpan]

Yeah, look, we're already seeing results. The DigipassONE launch, I don't think would have gone as well or as smoothly without a new Head of Marketing. The impact's already being felt. Channel and marketing are both super important. Revenue, I think it's fair to say, if you think about a nine to twelve-month sales cycle for most of our customers and our deals, I think the impact's more in 2027 than in 2026 in terms of tangible revenue. In terms of execution, we're already seeing an impact.

[Anja Soderstrom, Analyst at Sidoti]

Okay. Thank you. That was all for me.

[Joe Maxa, VP of Investor Relations at OneSpan]

Thanks, Anja.

[Operator]

Thank you. This concludes the question-and-answer session. I would now like to turn it back to Joe for closing remarks.

[Joe Maxa, VP of Investor Relations at OneSpan]

Thank you, everyone, for joining us today. We look forward to updating you again next quarter. Have a nice evening.

[Operator]

Thank you for your participation in today's conference. This does conclude the program, and you may now disconnect.

Participants

Executives

• Jorge Martell, CFO

Analysts

• Joe Maxa, VP of Investor Relations at OneSpan
• Victor Limongelli, CEO at OneSpan
• Gray Powell, Analyst at U.S. Bank
• Catharine Trebnick, Analyst at Rosenblatt
• Erik Suppiger, Analyst at B. Riley Securities
• Rudy Kessinger, Analyst at D.A. Davidson
• Anja Soderstrom, Analyst at Sidoti