OneSpan Inc. (OSPN) 2025 Annual Report (10-K) Summary
Business Context and Reporting Period
This summary covers OneSpan Inc.'s Annual Report on Form 10-K for the fiscal year ended December 31, 2025. OneSpan provides cybersecurity and digital agreement solutions, operating through two reportable segments: Cybersecurity (authentication, mobile app protection) and Digital Agreements (e-signatures, identity verification). The company serves over 60% of the world's 100 largest banks and operates in more than 120 countries. The reporting period reflects a strategic shift from hardware-based authentication (Digipass tokens) to higher-margin software and cloud-based solutions.
Key Financial Metrics
| Metric | 2025 | 2024 | Change |
|---|---|---|---|
| Total Revenue | $243.2 million | $243.2 million | Flat (0%) |
| Gross Profit | $179.4 million | $174.6 million | +$4.8 million |
| Gross Margin | 74% | 72% | +200 bps |
| Operating Income | $48.4 million | $44.8 million | +$3.6 million |
| Net Income | $72.9 million | $57.1 million | +$15.8 million |
| Diluted EPS | $1.88 | $1.46 | +$0.42 |
| Operating Cash Flow | $59.5 million | $55.7 million | +$3.8 million |
| Cash & Equivalents (Year End) | $70.5 million | $83.2 million | -$12.7 million |
| Debt | $0 (Borrowings) | $0 | N/A |
| Annual Recurring Revenue (ARR) | $186.9 million | $167.7 million | +11% |
Note: Net income for 2025 includes a significant tax benefit of $23.5 million, primarily due to the release of valuation allowances in Canada.
Material Changes vs. Prior Period
- Revenue Composition: While total revenue remained flat, the mix shifted significantly. Hardware revenue (Digipass) declined 17% to $49.1 million due to the "mobile-first" trend, while subscription revenue grew to $156.1 million.
- Profitability: Operating income increased 8% despite flat revenue, driven by improved gross margins (74% vs. 72%) and reduced restructuring charges ($1.6 million in 2025 vs. $4.4 million in 2024).
- Acquisitions: The company acquired Nok Nok Labs in June 2025 for $19.2 million to enhance passwordless authentication capabilities. This contributed to the Cybersecurity segment's revenue.
- Capital Allocation: The company returned approximately $31.6 million to shareholders in 2025 via dividends ($18.5 million paid) and share repurchases ($13.1 million).
- Geographic Performance: Americas revenue grew 10% to $95.7 million, offsetting declines in EMEA (-5%) and APAC (-6%).
Guidance, Outlook, and Risks
Outlook and Strategy: Management expects Digipass hardware revenue to continue declining modestly in 2026. Growth is targeted through higher-margin software solutions in both Cybersecurity and Digital Agreements segments. The company plans to close the acquisition of Build38 GmbH (mobile app protection) in March 2026.
Key Risks and Contingencies:
- Supply Chain: Digipass manufacturing relies on third-party factories in China and Romania, exposing the company to geopolitical tensions, tariffs, and component shortages.
- Customer Concentration: The top 10 customers accounted for 18% of total revenue in 2025.
- Cybersecurity Threats: As a security provider, OneSpan faces heightened risks from sophisticated cyberattacks, including AI-driven threats.
- Regulatory Compliance: Significant exposure to evolving global regulations, including GDPR, DORA (Digital Operational Resilience Act), and NIS2, which may increase compliance costs.
- Integration Risk: Risks associated with integrating recent and planned acquisitions (Nok Nok Labs, Build38) and realizing anticipated synergies.
Investor Verification Checklist
- Tax Benefit Sustainability: Verify the sustainability of the $23.5 million tax benefit in 2025, which was driven by the release of valuation allowances in Canada and a prior year worthless stock deduction.
- Hardware Decline Trajectory: Monitor the rate of decline in Digipass hardware revenue versus the growth rate of software subscriptions to ensure the transition strategy is offsetting volume losses.
- Acquisition Integration: Track the financial contribution and integration progress of Nok Nok Labs and the closing timeline for Build38.
- Debt Covenants: Review the $100 million credit facility (established June 2025) for compliance with leverage and interest coverage covenants, though no borrowings were outstanding at year-end.
- Customer Retention: Analyze the Net Retention Rate (104% in 2025) to assess the health of the recurring revenue base amidst competitive pressures from larger players like DocuSign and Thales.