From its origins to digital identity, authentication and e-signature security: the OneSpan story

OneSpan’s present-day identity makes more sense when its early business is separated from the language used to market the company today. OneSpan’s predecessor VASCO entered data security in 1991 through an investment in ThumbScan and developed a long-running authentication business.

This TechnologyBlog.co.za profile follows OneSpan from its documented origins to its position in digital identity, authentication and e-signature security as of 18 September 2026. Corporate milestones are separated from broader market analysis, and company claims about leadership or future growth are not treated as independent fact. The editorial test throughout is whether a change altered the product, customer base, ownership or economics of the business.

Origins and first commercial model — OneSpan

OneSpan’s predecessor VASCO entered data security in 1991 through an investment in ThumbScan and developed a long-running authentication business.

The rebrand marked a strategic move from hardware-token heritage toward a wider digital-trust platform. That distinction matters when comparing the current company with earlier legal entities or brands: a new holding company or name can be recent even when the underlying technology and customer relationships are much older. For OneSpan, this article follows the operating lineage that best explains the digital identity, authentication and e-signature security business readers encounter in 2026.

Conditions in digital identity, authentication and e-signature security were not static while OneSpan developed. Technology costs fell, connectivity improved, regulation changed and new distribution models appeared. That matters because a strategy that looks conventional in 2026 may have been uncertain when it was first attempted, while some early advantages can disappear as infrastructure becomes easier for competitors to access.

Strategic turning points

The listed parent was established in 1997, operated for years as VASCO Data Security International and changed its name to OneSpan in May 2018. It later added e-signature and passwordless-authentication capabilities through acquisitions.

Not every corporate event deserves equal weight in OneSpan’s history. A listing, acquisition, disposal or rebrand matters when it changes ownership, product scope, customers or capital needs. Applying that test to digital identity, authentication and e-signature security makes it easier to distinguish a genuine strategic break from an announcement that simply extends the existing business.

When a listing, acquisition, disposal or restructuring appears in OneSpan’s timeline, its importance is measured by what changed afterward. Transactions can add technology, customers or capital, but they can also create integration costs and strategic distraction. In this history, corporate events are treated as turning points only when they materially altered the digital identity, authentication and e-signature security operating model.

Business model beneath the technology

Where OneSpan sells digital identity, authentication and e-signature security into government or regulated organisations, procurement itself becomes part of the competitive moat. Certifications, security reviews, data-sovereignty rules and long contracting cycles can slow expansion, yet they also make qualified suppliers harder to displace. This creates a different growth pattern from consumer technology, where distribution can change much faster.

OneSpan’s business model should be read from the customer’s side. Buyers of digital identity, authentication and e-signature security are not paying for a category label; they are paying because the product removes friction, reduces risk, creates access or improves performance. The strongest comparison with rivals is therefore the total outcome delivered after implementation, including support and integration rather than the headline feature list alone.

South African organisations considering technology from OneSpan need to evaluate local implementation and privacy obligations as well as the global feature set. In digital identity, authentication and e-signature security, support arrangements, data handling and POPIA compliance can matter as much as a technical benchmark. A product can be globally available without every deployment model being suitable for a South African customer.

A useful distinction for OneSpan is capability versus adoption. Technology relevant to digital identity, authentication and e-signature security can be impressive in a demonstration yet remain commercially small until customers deploy it in production, renew around it or pay for it at scale. Future reporting should therefore separate technical progress, pilots and partnerships from evidence that a capability is materially changing customer behaviour or revenue.

Market structure and competitive pressure

The market around OneSpan changes because attackers adapt. In digital identity, authentication and e-signature security, research, telemetry and rapid updates are continuing operating requirements rather than occasional product cycles. A control that performs well against one threat pattern can lose value as infrastructure and adversary behaviour change, so long-term competitiveness depends on response speed as well as the original technology.

The competitive question for OneSpan is not simply who offers similar features in digital identity, authentication and e-signature security. Buyers also weigh migration cost, support, regulation, ecosystem fit and the risk of disrupting a system that already works. Those factors can protect an incumbent, but they can also favour a larger platform that bundles adjacent capabilities at a lower incremental cost.

Security buyers evaluating OneSpan face a consolidation-versus-specialisation trade-off. A broad security suite can reduce vendor count, while a focused product in digital identity, authentication and e-signature security may offer deeper expertise or a better workflow. The decision therefore turns on detection quality, response, integration, trust and migration risk rather than the number of features on a comparison sheet.

A company can participate in digital identity, authentication and e-signature security and still have very different financial characteristics from a rival. OneSpan should be read through the balance between recurring, transactional and project-based income because each carries different margin, cash-flow and customer-retention dynamics. That makes revenue composition a better analytical tool than treating the industry label as a complete description of the business.

OneSpan in 2026

By 2026 OneSpan provides authentication, application protection, identity and digital-agreement technology, with financial services an important customer segment.

The 2026 description above is a snapshot, not a permanent label. Future announcements from OneSpan should be tested against that baseline: does a new product, acquisition or partnership extend the established digital identity, authentication and e-signature security model, or does it require a genuinely different capability, customer or source of capital? That distinction helps separate incremental news from another strategic reset.

For South African organisations, evaluating OneSpan in digital identity, authentication and e-signature security also means checking local support, deployment architecture and data-handling obligations under POPIA. International availability does not by itself establish that every product or hosting configuration is appropriate for a South African customer.

As OneSpan grows, innovation should be measured by adoption rather than novelty. In digital identity, authentication and e-signature security, a new feature matters most when it reaches production users, improves retention or changes the economics of the existing product. Compared with an early-stage company that can pivot around one launch, a more established operator has to introduce change without weakening the workflows and customer relationships already supporting the business.

Why this history matters

The rebrand marked a strategic move from hardware-token heritage toward a wider digital-trust platform. The value of recording that point is practical: it lets later reporting compare new moves with the strategy that produced the present company. If OneSpan enters an adjacent market, sells a major asset or changes ownership again, readers can judge whether the move builds on the existing digital identity, authentication and e-signature security capabilities or asks the organisation to become something materially different.

A promising market does not remove operating risk. For OneSpan, performance in digital identity, authentication and e-signature security still depends on turning product plans into dependable deployments, controlling costs and keeping customers through technology cycles. Those measurable outcomes provide a better comparison with peers than promotional claims about disruption or addressable market size.

For OneSpan, the useful market question is not how large digital identity, authentication and e-signature security could become in theory, but how much of that demand the company can serve economically. Sales coverage, customer concentration, support capacity and capital all set practical limits. Those limits can move over time, but they should be visible in any serious comparison with larger or better-funded rivals.

Product breadth creates a trade-off for OneSpan. Expanding the digital identity, authentication and e-signature security portfolio can increase cross-selling and reduce dependence on one product, but every adjacent capability adds engineering, sales and support complexity. A more focused rival may move faster in one niche, while a broader platform may be easier for customers to consolidate around.

The practical value of this profile is continuity. Future reporting on OneSpan can focus on what changed because the background already establishes the company’s origin, major strategic breaks and current digital identity, authentication and e-signature security position. That makes it easier to challenge hype and harder for routine announcements to be mistaken for reinvention.

Reporting note: TechnologyBlog.co.za checked the chronology for OneSpan against company history material, investor-relations disclosures, regulatory filings and reputable independent reporting available up to 18 September 2026. Current-status statements are date-stamped because ownership, listings and product portfolios can change. Claims about leadership, superiority or future performance are treated as company assertions unless independently supported.