OneSpan
OneSpan is a cybersecurity and digital-transactions company providing authentication, fraud-prevention, secure document workflow, and electronic-signature technologies.
Last updated October 30, 2026
AI crawler reads
4requests
1companies- Anthropic4
- Profile
- 2
- Controversies
- 2
- JSON · MD
- 0
- First read
- Nov 4, 2026
- Latest read
- Nov 4, 2026
From this site's server log
Overview
OneSpan is an information-security and digital-transactions company headquartered in Boston, Massachusetts. The business began in 1984 when T. Kendall Hunt founded Vasco as a consulting and software-services company serving corporate and government agencies. It later developed into a specialist provider of authentication and security technologies, operating internationally under the Vasco Data Security name before adopting the OneSpan identity in 2018. The company’s early expansion included the 1991 acquisition of ThumbScan, a business associated with fingerprint-reader technology for computers. In 1993, Vasco changed its name to Vasco Data Security International and broadened its focus toward data security. The company was incorporated in 1997 and completed an initial public offering in January 2000. During the 2000s, it developed and commercialized Digipass, a family of hardware and software technologies for two-factor and multifactor authentication. Digipass became particularly relevant to banks and other organizations seeking to protect online transactions and customer access. Vasco expanded its portfolio through acquisitions and product development. The 2006 purchase of Austria-based LOGiCO Smart Card Solutions added smart-card authentication and public-key-infrastructure capabilities. In 2011, Vasco acquired the Dutch certificate authority DigiNotar. DigiNotar was subsequently compromised and issued fraudulent security certificates; after the incident became public, its certificates were revoked and the company entered bankruptcy. The episode remains a significant event in the company’s corporate history and in the wider history of digital certificate security. The company continued building fraud and transaction-security capabilities through the acquisition of Cambridge-based Cronto in 2013. Cronto’s CrontoSign technology used specialized color barcodes, also known as visual cryptograms or photoTAN, to help defend against man-in-the-browser attacks. In 2014, Vasco acquired Risk IDS, a provider of risk-based authentication technology for banking. Its capabilities later supported IDENTIKEY Risk Manager, a solution designed to help organizations identify suspicious activity and improve fraud-detection processes. Vasco also moved beyond authentication into electronic signatures and agreement automation. In October 2015, it acquired Canadian electronic-signature provider Silanis Technology for approximately US$113 million, bringing the eSignLive platform into its portfolio. eSignLive was subsequently developed as a cloud-based electronic-signature service and was updated with Salesforce integration in 2016. In May 2018, Vasco acquired Dealflo, a financial-agreement automation company operating in the United Kingdom and Canada, for approximately £41 million. On May 30, 2018, Vasco Data Security International changed its name to OneSpan. The rebrand reflected a broader strategy combining authentication, fraud mitigation, electronic signatures, and secure digital agreements rather than focusing solely on traditional authentication tokens. OneSpan’s products and partnerships are particularly relevant to financial institutions and regulated organizations, including banks and public-sector entities. The company has also participated in industry standardization through involvement with the FIDO Alliance. In January 2023, OneSpan announced an agreement to acquire ProvenDB, an Australian startup focused on secure document storage and vaulting using blockchain-related technology. In June 2025, OneSpan acquired Nok Nok Labs, known for authentication technology. These transactions indicate the company’s continuing interest in passwordless access, identity assurance, and protection of digitally executed documents. OneSpan’s current corporate status and operating structure require verification, but its documented business scope centers on enterprise cybersecurity and trusted digital transactions.
History
OneSpan traces its origins to 1984, when T. Kendall Hunt established Vasco as a consulting and software-services company for corporate and government customers. The company’s early development included the 1991 acquisition of ThumbScan, associated with fingerprint-reader equipment for computers. In 1993, the business was renamed Vasco Data Security International as it expanded into data-security products. Vasco was incorporated in 1997 and went public through an initial public offering in January 2000. During the early 2000s, Vasco developed Digipass, a technology family supporting two-factor and multifactor authentication. The company marketed Digipass internationally, including from Belgium, and later made the technology available for Apple mobile devices. In 2006, Vasco acquired Austria-based LOGiCO Smart Card Solutions, adding smart-card authentication and public-key-infrastructure capabilities. In 2009, it announced Digipass availability through the App Store for iPhone and iPod touch. The same year, Forbes included Vasco on a list of fast-growing American technology companies. Vasco broadened its geographic presence in 2012 by establishing an international headquarters at Dubai Silicon Oasis. It also announced efforts to reduce entry requirements for value-added resellers in the Europe, Middle East, and Africa channel. Its technology portfolio expanded further through the 2013 acquisition of Cambridge-based Cronto. CrontoSign used specialized color barcodes, called visual cryptograms or photoTAN, to help protect online banking and other transactions against man-in-the-browser malware. The company’s most serious historical controversy followed its January 2011 acquisition of DigiNotar, a Dutch certificate authority. In June 2011, DigiNotar suffered a major compromise and began issuing fraudulent security certificates. When the breach became known, the certificates were cancelled. DigiNotar subsequently went bankrupt. The event damaged trust in the affected certificate infrastructure and became a prominent example of the operational and governance risks associated with certificate authorities. In 2014, Vasco acquired Risk IDS, a provider of risk-based authentication services to the global banking sector. The resulting capabilities supported IDENTIKEY Risk Manager, released by 2015 as a broader risk-management product intended to help organizations identify fraud more quickly and effectively. Vasco also developed relationships with financial institutions and public-sector organizations, including HSBC Bank USA, Fedict, Rabobank, Arab Bank, and Riyadh Bank. The company was appointed to the board of directors of the FIDO Alliance, connecting it with industry efforts around stronger and less password-dependent authentication. A major strategic shift occurred in October 2015, when Vasco purchased Canadian electronic-signature company Silanis Technology for approximately US$113 million. Silanis brought eSignLive, a cloud electronic-signature platform, into Vasco’s portfolio. By early 2016, eSignLive had been enhanced with Salesforce integration. Vasco also announced a face-recognition authentication capability for Digipass in May 2016, illustrating the company’s movement toward software-based and biometric authentication alongside traditional tokens. In May 2018, Vasco acquired Dealflo, a financial-agreement automation provider based in the United Kingdom and Canada, for approximately £41 million. On May 30 of the same year, Vasco Data Security International changed its name to OneSpan. The new identity presented the business as a provider of secure digital transactions rather than solely as an authentication-hardware company. The OneSpan portfolio consequently combined multifactor authentication, transaction protection, fraud detection, electronic signatures, and agreement automation. In January 2023, OneSpan announced the acquisition of ProvenDB, an Australian startup focused on secure document storage and vaulting using blockchain-related technology. In June 2025, OneSpan acquired Nok Nok Labs, adding further authentication capabilities. These later moves are consistent with the company’s continuing effort to connect identity verification, fraud prevention, digital signing, and trusted document management. The company’s present ownership and listing status require additional verification, but its documented historical identity is that of a US-based enterprise cybersecurity and digital-transactions provider with substantial banking and regulated-industry exposure.
- 2025
Nok Nok Labs acquisition
[1]OneSpan acquired Nok Nok Labs, extending its authentication technology portfolio.
- 2023
ProvenDB acquisition announced
[1]OneSpan announced an agreement to acquire ProvenDB, an Australian secure document-storage and vaulting startup.
- 2018
OneSpan rebrand and Dealflo acquisition
[1]Vasco acquired Dealflo for approximately £41 million and changed its corporate name to OneSpan on May 30.
- 2015
Silanis Technology acquisition
[1]Vasco acquired Silanis Technology for approximately US$113 million and expanded into electronic signatures through eSignLive.
- 2014
Risk IDS acquisition
[1]Vasco acquired Risk IDS, strengthening its risk-based authentication and banking fraud-prevention capabilities.
- 2013
Cronto acquisition
[1]Vasco acquired Cronto and its CrontoSign visual-cryptogram technology for transaction protection.
- 2012
Dubai international headquarters
[1]The company established an international headquarters at Dubai Silicon Oasis and adjusted its EMEA reseller strategy.
- 2011
DigiNotar acquisition and security failure
[1]Vasco acquired DigiNotar; the certificate authority was later compromised, fraudulent certificates were issued, and the business ultimately went bankrupt.
- 2009
Digipass reaches mobile app distribution
[1]Vasco announced that Digipass two-factor authentication was available through the App Store for iPhone and iPod touch.
- 2006
LOGiCO acquisition
[1]Vasco acquired LOGiCO Smart Card Solutions in Austria, adding smart-card and PKI capabilities.
Products and positioning
OneSpan positions itself at the intersection of cybersecurity and digital business processes, helping banks, enterprises, and public-sector organizations authenticate users, reduce online fraud, and execute or retain sensitive agreements digitally. Its historical differentiation came from combining strong authentication with transaction security and electronic-signature workflows.
Multifactor authentication
Digipass
Digipass is OneSpan’s historic authentication technology family. It began as a set of authentication mechanisms associated with Vasco’s expansion during the early 2000s and supported two-factor and multifactor access for online services. The portfolio has included hardware and software approaches and was marketed extensively to banks and other organizations handling sensitive transactions. Digipass also became available in mobile-app form and was later associated with biometric features such as face recognition.
Transaction authentication · 2013
CrontoSign
CrontoSign is a transaction-security technology obtained through OneSpan’s acquisition of Cronto. It uses specialized color barcodes, known as Cronto Visual Cryptograms or photoTAN, to convey transaction information visually. The approach was designed to make it harder for man-in-the-browser malware to alter or intercept authenticated banking transactions.
Risk-based authentication · 2015
IDENTIKEY Risk Manager
IDENTIKEY Risk Manager grew from the risk-based authentication capabilities obtained through Risk IDS. Released as a comprehensive risk-management solution by 2015, it was intended to help banks and other organizations assess suspicious activity, detect fraud, and improve the speed and quality of authentication decisions.
Electronic signatures
eSignLive
eSignLive is a cloud electronic-signature platform brought into the company through the acquisition of Silanis Technology. It supports digital signing and agreement workflows for enterprise and regulated-industry users. In 2016, the platform was updated with Salesforce integration, linking electronic-signature processes with customer and business-process data.
Financial-agreement automation · 2018
Dealflo
Dealflo was a financial-agreement automation software business acquired by OneSpan in 2018. Its capabilities extended the company’s focus from authenticating users and transactions to automating the broader process of creating, approving, signing, and managing financial agreements.
Secure document storage · 2023
ProvenDB
ProvenDB is an Australian technology business associated with secure storage and vaulting for documents using blockchain-related methods. OneSpan announced its acquisition in 2023, linking document integrity and retention capabilities with its existing electronic-signature and digital-agreement portfolio.
Passwordless authentication · 2025
Nok Nok Labs technology
Nok Nok Labs technology became part of OneSpan through a 2025 acquisition. The transaction expanded OneSpan’s authentication portfolio in the direction of modern identity assurance and passwordless access, although detailed product and integration information requires further verification.
Controversies
2020
Securities class action filed against OneSpan
Pomerantz LLP filed a securities class action against OneSpan and certain officers. The complaint alleged that the defendants made misleading statements about the company's business, operations and compliance practices, including overstated software license revenues. The filing is recorded as a controversy note concerning the company.
2011
DigiNotar certificate-authority compromise
After Vasco acquired DigiNotar, the Dutch certificate authority was hacked and began issuing fraudulent security certificates. Once the incident became public, the certificates were cancelled and DigiNotar later went bankrupt. The event is a major security and governance controversy connected to the company’s acquisition history.
Brand decisions
2025
Acquire Nok Nok LabsM&ABackground
OneSpan continued investing in authentication as identity systems moved toward passwordless and stronger device-based methods.
Action taken
OneSpan acquired Nok Nok Labs in June 2025.
Aftermath
The acquisition expanded OneSpan’s authentication capabilities, although the full product and organizational impact requires further verification.
2023
Announce ProvenDB acquisitionM&ABackground
OneSpan sought to extend its secure digital-transaction portfolio into document integrity, storage, and vaulting.
Action taken
The company announced an agreement to acquire ProvenDB, an Australian secure-document technology startup.
Aftermath
The announced transaction aligned document custody and integrity capabilities with OneSpan’s signing and agreement-management products.
2018
Rebrand from Vasco to OneSpanStrategyBackground
The business had expanded from authentication products into fraud prevention, electronic signatures, and financial-agreement automation.
Action taken
Vasco Data Security International changed its name to OneSpan on May 30, 2018.
Aftermath
The OneSpan identity presented the company as a broader secure-digital-transactions provider rather than a business focused primarily on authentication tokens.
2018
Acquire DealfloM&ABackground
OneSpan aimed to strengthen financial workflow automation alongside authentication and electronic signatures.
Action taken
OneSpan acquired Dealflo, a financial-agreement automation company operating in the United Kingdom and Canada.
Aftermath
The transaction broadened OneSpan’s coverage of digitally executed financial agreements.
Acquisition price. Approximately £41 million (May 2018)
2015
Acquire Silanis TechnologyM&ABackground
Vasco sought to expand beyond authentication and fraud prevention into electronic signatures and digital transaction workflows.
Action taken
The company acquired Canadian electronic-signature provider Silanis Technology for approximately US$113 million.
Aftermath
The acquisition added the eSignLive cloud electronic-signature platform and created a foundation for the company’s later digital-agreement strategy.
Acquisition price. Approximately US$113 million (October 2015)
Recent events
Sources2 sources
Cite this profile: Cite the canonical profile. /brand-wiki/onespan · Editorial policy · How profiles are compiled