OSPN · OneSpan Inc.

The thesis

OneSpan's move from hardware security tokens to subscription software is working, but its own guidance implies a softer fourth quarter, so the case for the shares outrunning the market over the next three months is weak. The fourth-quarter report expected in late February 2027 settles whether annual recurring revenue (ARR) growth of 8.5% lasts.

The shares closed at $21.90 on 5 November 2026, down 14.7% from the $25.66 52-week high set on 30 October 2026 (adjusted daily closes). That close is under the $22 invalidation level in the previous note, which was DA Davidson's target. Company news through 6 November 2026 shows no result, guidance change or analyst action dated after 31 October 2026, so this is a price move. The business facts stand as reported on 29 October 2026.

The fall shrinks the valuation objection without removing it. The shares now sit at about DA Davidson's $22 target, above Rosenblatt's $18 and well below B. Riley's $32. No earnings report is expected before late February 2027, so the next three months hold no scheduled test of the business.

The narrative is maturing: target raises and movers-list mentions clustered on 30 October 2026 and 31 October 2026, and no fresh company headline has followed.

Bullish and bearish views on OneSpan Inc.

The bull case on OneSpan Inc. (OSPN), in brief: Recurring growth picked up in Q3. The bear case: Guidance implies a slower fourth quarter.

Bull case

• Recurring growth picked up in Q3. ARR grew 8.5% to $195.5 million on 30 September 2026, against 7% growth to $189.7 million at the second quarter (company results; the Q3 release rounds to 9%). Net revenue retention rose to 105% from 103% in the prior quarter (Q3 call summary, 31 October 2026).
• Subscriptions now 81% of revenue. Subscription revenue rose 16% to $51.5 million of $63.9 million in the third quarter of 2026, up from a 78% share (Q3 call summary, 31 October 2026).
• Guidance raised on every software line. On 29 October 2026 the company lifted full-year revenue guidance to $254–258 million from $248–252 million, and ARR to $197–201 million from $194–198 million. Adjusted EBITDA (earnings before interest, taxes, depreciation and amortisation) guidance rose to $72–76 million from $67–71 million.
• Management has beaten its targets before. Finsee's 29 October 2026 earnings review says OneSpan beat its final full-year adjusted EBITDA target by an average of 8% over the past two years. Third-quarter adjusted EBITDA was $19.3 million, up 9.8%.
• Gross margin is expanding. Gross margin was 76.3% in the third quarter of 2026, up from 73.6% a year earlier, and operating cash flow was $16.5 million (Q3 call summary, 31 October 2026).
• One broker sees far more upside. B. Riley raised its target to $32 from $22 on 30 October 2026 and kept a Buy rating.

Bear case

• Guidance implies a slower fourth quarter. Finsee's 29 October 2026 review calculates that the guidance midpoints imply fourth-quarter revenue of $65.7 million, up 4.4%, and adjusted EBITDA of $16.8 million, down 13.4% from $19.4 million. Third-quarter revenue grew 12%.
• Year-end ARR target implies less growth. Finsee calculates that the $199 million midpoint implies 6.5% reported growth, on new ARR of $3.5 million against $6.7 million in the fourth quarter of 2025. Management described fourth-quarter ARR growth as "relatively consistent" with the third quarter's pace on the Q3 call, and the February report decides which reading is right.
• Acquisition flatters the growth rate. Build38, bought on 2 March 2026, contributed about 1.5 percentage points of third-quarter ARR growth, according to the Q3 call summary published 31 October 2026. Finsee puts growth excluding Build38 at about 6.9%. Digital Agreements ARR grew only 5.7% to $68.4 million.
• Part of the beat was timing. Management said customers took Digipass tokens earlier than planned, shifting revenue into the third quarter while hardware guidance stayed at $46–48 million. A major banking customer's overage revenue will now be recognised evenly under a renewed multi-year contract, which lowers the fourth quarter's overage revenue (Q3 call summary, 31 October 2026).
• Cash balance is falling. Cash was $51.4 million on 30 September 2026, down from $70.5 million on 31 December 2025, after $34.6 million of acquisition payments and $8.3 million of buybacks (Q3 2026 8-K). Finsee's 29 October 2026 review shows $5.0 million drawn on the credit line.
• Two of three brokers sit cautious. DA Davidson kept a Neutral rating with a $22 target on 30 October 2026, and Rosenblatt cut its rating to Neutral with an $18 target on 27 October 2026, before the report.

Price setup

The last close was $21.90 on 5 November 2026. The shares are 14.7% below the $25.66 52-week high and up 34.9% over three months (adjusted daily closes). The 14-day relative strength index, a momentum gauge running from 0 to 100, reads 67.0, close to the 70 level often read as overbought.

Benzinga quoted the shares at $24.41 before the market opened on 30 October 2026, up 21.13%, and the close is now below that quote. WallStreetZen's page dated 26 October 2026 showed a last close of $20.19, which marks the range before the report. A close under $20 would hand back the whole post-report gain.

Crowding evidence is modest. Attention spiked on 30 October 2026, when Benzinga listed OneSpan among its movers, and no earnings date is near. No insider sale dated after the 29 October 2026 report appeared in Form 4 trackers checked on 6 November 2026, and no share issuance appeared in company news.

Catalysts, next 30 days

• 13 November 2026: Record date for the $0.13 quarterly dividend, payable 4 December 2026. It confirms continued cash returns and tests nothing in the subscription case.
• ~30 November 2026, est.: Launch of the DigipassONE Authenticate free trial, previewed by the company on 19 October 2026. Early uptake would give a first reading on demand for the new Cybersecurity subscription platform.
• ~25 February 2027, est. (outside the 30 days; the case turns on it): Fourth-quarter and full-year 2026 report with the first 2027 outlook. It shows where ARR lands against $197–201 million and whether the third quarter borrowed from the fourth.

What would change the view

The business case breaks if fourth-quarter ARR comes in below $197 million, the bottom of the raised range, or net revenue retention falls under the 105% reported for the third quarter. A 2027 outlook that implies ARR growth below the 6.9% Finsee calculates excluding Build38 would also show the shift losing pace.

On price, a daily close below $20, under the $20.19 last close WallStreetZen showed on 26 October 2026, would erase the gain that followed the report and show the market rejecting the beat.

The cautious view is wrong if ARR finishes above $201 million, or if fourth-quarter adjusted EBITDA clearly exceeds the $16.8 million Finsee calculates. A daily close above the $25.66 52-week high before the February report would also count against it, because it would show buyers paying for more than the 29 October 2026 guidance.

What it trades with

The recent move was company-specific: OneSpan posted a double-digit gain on 30 October 2026 while the Nasdaq traded down 2.48% midway through the session (Benzinga). One session is too small a sample to support a conclusion about how the shares track the market.

The business exposures are clearer. Cybersecurity is the larger part of recurring revenue, with ARR up 10.1% to $127.2 million on 30 September 2026, against $68.4 million for Digital Agreements. CEO Victor Limongelli said hardware through the first three quarters of 2026 was still mostly tied to older banking products, so bank technology budgets drive token orders.