OneSpan Adds Nok Nok Labs for $8 M, Boosting ARR to $178 M

Why It Matters

The acquisition signals a decisive pivot toward software‑centric identity security, a trend that CIOs must factor into roadmap planning. By adding Nok Nok’s password‑less technology, OneSpan can offer a more unified authentication stack, potentially reducing the complexity and cost of managing disparate token systems. This aligns with enterprise priorities around zero‑trust architectures and the need for scalable, cloud‑ready security solutions. Moreover, OneSpan’s use of a $100 million revolving credit facility to fund the deal without tapping long‑term debt demonstrates a disciplined capital approach that may appeal to investors and corporate treasurers alike. The move also intensifies competition in the authentication market, pressuring rivals to accelerate their own product integrations or acquisitions to stay relevant.

Key Takeaways

• OneSpan acquired Nok Nok Labs for $8 million, adding $8 million to ARR.
• ARR reached $178 million, up 8% YoY; subscription revenue grew 22% in Q2 2025.
• Security ARR rose to $114.5 million, while hardware revenue fell 3% to $44.2 million.
• Adjusted EBITDA hit $17.6 million (29.5% margin) and operating cash flow rose to $6.2 million.
• A new $100 million revolving credit facility was established to fund future M&A.

Pulse Analysis

OneSpan’s acquisition of Nok Nok Labs is more than a balance‑sheet transaction; it is a strategic response to the erosion of hardware token demand that has plagued the security hardware market for years. By embedding FIDO‑based, password‑less capabilities, OneSpan can address the growing CIO mandate for frictionless, zero‑trust authentication while leveraging its existing relationships with large banks. The $8 million price tag is modest relative to the $100 million credit line, suggesting the company is positioning itself for a series of bolt‑on deals that could further consolidate the fragmented authentication space.

The financials reveal a company in transition. Subscription growth outpaces hardware decline, driving margin expansion and cash generation. However, the CFO’s admission of ARR contraction at key customers underscores the volatility that still exists in the banking segment, where long‑term contracts can be renegotiated or lost. The success of the Nok Nok integration will hinge on OneSpan’s ability to cross‑sell to these same customers, turning a potential weakness into a revenue engine.

For CIOs, the practical implication is a clearer path to retire legacy token infrastructure in favor of a unified, cloud‑native platform. Yet, integration risk remains a concern; organizations will need to evaluate the maturity of OneSpan’s combined offering, its roadmap for API support, and the robustness of its compliance certifications. As the market continues to coalesce around password‑less standards, OneSpan’s move could set a benchmark for how mid‑size security firms scale through targeted acquisitions while maintaining fiscal discipline.