OneSpan (OSPN) Q4 2025: Software Share Rises to 80% as Hardware Decline Moderates

OneSpan's fourth quarter capped a transformation year, with software revenue now comprising 80% of total business as the company further distances itself from legacy hardware. Digital Agreements and Cybersecurity segments both delivered double-digit ARR growth, while hardware headwinds eased, supporting a more balanced outlook. Strategic M&A and disciplined capital allocation signal a focus on sustainable, software-driven growth, even as near-term investments temper profitability guidance.

Summary

  • Software Mix Expansion: Software and services now represent the vast majority of revenue, accelerating the shift from hardware dependency.
  • Segment Execution: Digital Agreements delivered robust gross margin and record profitability, while Cybersecurity ARR continued to grow despite flat revenue.
  • Investment-Led Outlook: Increased R&D and sales investments, along with targeted M&A, position OneSpan for higher long-term growth at the expense of near-term margin compression.

Performance Analysis

OneSpan’s Q4 2025 results underscore the company’s successful pivot to a software-centric business model, with software and services accounting for 80% of total revenue, up from 76% a year ago. Annual recurring revenue (ARR) reached $187 million, up 11.5% year over year, reflecting 12% growth in Cybersecurity and 10% in Digital Agreements. This marks a significant milestone in the company’s multi-year transition away from hardware, which now comprises less than 20% of revenue, down sharply from over half in 2019.

Digital Agreements, the company’s SaaS-based e-signature and workflow platform, posted 11% revenue growth in Q4 and a record operating income margin of 32%, driven by contract expansion, new customer wins, and improved retention. Cybersecurity ARR grew 12%, though quarterly revenue was flat, reflecting tough comps from last year’s multi-year license surge and ongoing hardware decline. Gross margin remained robust at 74%, and operating cash flow reached nearly $60 million for the year, enabling continued investment and shareholder returns without drawing on debt.

  • Subscription Upside: Company-wide subscription revenue climbed 12% for the year, with Digital Agreements up 11% and Cybersecurity up 13%.
  • Hardware Headwind Moderates: Hardware revenue fell 17% in 2025, but the rate of decline is slowing as the shift to mobile banking stabilizes token demand.
  • Profitability Foundation: Both business units were solidly profitable, with Digital Agreements’ margin expansion outpacing Cybersecurity’s due to lower operating cost growth.

Overall, OneSpan exited 2025 with a stronger recurring revenue base, improved customer retention, and a clear path to further software-led margin expansion, even as near-term investments and M&A temper immediate profit growth.

Executive Commentary

"First and foremost, OneSpan is a software business with over 80% of revenue in 2026 expected to be derived from software. Hardware this year will be less than 20% of our business, down from over 50% in 2019 and over one-third of the business as recently as 2022... Both divisions, cybersecurity and digital agreements, are now solidly profitable."

Victor Lamangeli, Chief Executive Officer

"Combined with our strong balance sheet, this performance enabled us to invest in the business throughout the year organically and through M&A to support our long-term growth foundation, while also returning cash to shareholders."

Jorge Martel, Chief Financial Officer

Strategic Positioning

1. Software-Led Business Model Transformation

OneSpan has executed a deliberate shift from hardware authentication devices to a recurring software and SaaS model. This transition is visible in both the revenue mix and capital allocation, with hardware now under 20% of revenue and declining at a slower rate as the mobile banking shift matures. The company’s focus is on subscription-based authentication, app shielding, and digital agreements, which drive predictable cash flows and higher margins.

2. Segment Strength and Product Differentiation

Cybersecurity, B2C authentication and app protection, remains the largest segment by ARR, leveraging a broad portfolio that spans on-prem and cloud, passkeys, and FIDO2 keys. Digital Agreements, e-signature SaaS platform, has emerged as a margin leader, with improved gross retention (now above 90%) and new AI-driven features in development. Both segments are positioned to benefit from rising demand for secure digital transactions and regulatory scrutiny.

3. Strategic M&A and Capital Allocation

Targeted acquisitions (Knock Knock, Build38, ThreatFabric stake) are focused on technology integration rather than revenue scale, aiming to deepen OneSpan’s technical moat in authentication and app shielding. The company returned $32 million to shareholders in 2025 via dividends and buybacks, while maintaining a debt-free balance sheet and reserving capital for future M&A that fits its technology-first strategy.

4. Investment in Go-to-Market and R&D

Hiring a new Chief Revenue Officer and expanding sales and marketing investment signal a renewed focus on pipeline development and operational discipline. Planned incremental investments in 2026 will target both sales execution and product innovation, particularly in AI-enabled features and mobile security, with the expectation that these will drive growth in the second half and beyond.

5. Resilience to AI-Driven Threats and Opportunities

Management views AI as both a catalyst for new authentication demand and a threat landscape accelerator. The company’s investments in app shielding and dynamic detection are designed to keep pace with evolving AI-driven exploits, while the anticipated rise of consumer AI agents is expected to increase the need for robust authentication solutions.

Key Considerations

This quarter marks a critical inflection in OneSpan’s business model, with recurring software revenue and margin expansion offsetting hardware drag. Investors should weigh the following strategic considerations:

Key Considerations:

  • Recurring Revenue Mix: The move to 80% software/service revenue increases predictability and reduces exposure to hardware commoditization.
  • Margin Expansion in Digital Agreements: Record profitability and improved retention signal strong product-market fit and pricing power.
  • Hardware Decline Stabilization: The deceleration in hardware revenue decline suggests the worst of mobile-driven erosion may be behind, reducing volatility.
  • Investment Phase Impact: Near-term profit margin compression is expected as R&D and go-to-market investments ramp, but these are aimed at unlocking higher growth rates and sustaining Rule of 40 performance.
  • M&A Focus: Acquisitions are technology-driven, not customer-acquisition led, which could accelerate innovation but may delay revenue synergies.

Risks

Key risks include execution on software growth targets, particularly as hardware revenue continues its secular decline and as new investments take time to yield pipeline and product returns. Integration of recent M&A carries operational and cultural risks, while competition in authentication and e-signature markets remains intense. AI-driven threats could outpace OneSpan’s ability to adapt, and any delay in rolling out new features or sales productivity improvements could pressure margins and growth in the near term.

Forward Outlook

For Q1 2026 and full-year 2026, OneSpan guided to:

  • Software and services revenue of $201–$204 million, up 4–5% year over year
  • Hardware revenue of $43–$45 million, down 8–12% year over year
  • Total revenue of $244–$249 million, flat to up 2%
  • ARR of $192–$196 million, up 3–5%
  • Adjusted EBITDA of $64–$68 million, reflecting investment and M&A dilution

Management emphasized that incremental investments in sales, marketing, and R&D, as well as the Build38 acquisition, will dampen near-term profitability but are essential for achieving long-term software growth and sustainable Rule of 40 performance. Benefits from the new CRO and expanded go-to-market are expected to materialize in the second half of the year.

  • Pipeline growth and sales cycle improvements targeted for late 2026
  • Continued disciplined capital allocation, with further buybacks and dividend increases under consideration

Takeaways

OneSpan’s Q4 and FY25 results show a company in the midst of a successful business model transformation, with recurring software revenue and margin expansion offsetting legacy hardware headwinds. Strategic M&A and disciplined capital allocation support a clear focus on sustainable, software-driven growth, though near-term investments will weigh on profit margins until new capabilities and sales hires ramp.

  • Recurring Revenue Outpaces Hardware Drag: The shift to software and services is now self-sustaining, driving higher ARR and margin resilience.
  • Execution on Sales and Product Innovation Critical: Realizing the benefits of new leadership and product investments will determine if growth reaccelerates in 2026 and beyond.
  • Watch for Integration and Retention Signals: Monitoring retention, integration of new acquisitions, and the pace of pipeline build will be key for future upside and risk mitigation.

Conclusion

OneSpan exits 2025 as a fundamentally stronger, software-centric business, with robust recurring revenue, disciplined capital returns, and a clear focus on innovation in cybersecurity and digital agreements. Near-term margin pressure from growth investments is a calculated tradeoff, with the company betting on higher, more durable growth in the years ahead.

Industry Read-Through

OneSpan’s results highlight the accelerating shift from hardware to recurring software models in the cybersecurity and digital workflow sectors. The stabilization of hardware declines and the focus on AI-driven security innovation are themes likely to play out across authentication, identity, and e-signature providers. Companies that can successfully transition to subscription revenue and invest in cutting-edge security features will be best positioned to capture long-term value, while those reliant on legacy hardware or slow to adapt to AI threats may face ongoing margin and growth headwinds. Capital discipline and technology-focused M&A are emerging as key differentiators in the sector.