DigipassONE, overage tells, and the agentic bet: OneSpan's Q2 pivot
A unified authentication platform, an agent-banking thesis, and Digital Agreements overages that point to durable expansion.
OSPN · Earnings Call · 2026-08-04
OneSpan's Q2 2026 was solid by the numbers — subscription revenue up 11% to $47M (now 77% of total), ARR at $189.7M (+6.7%), adjusted EBITDA margin above 27%, and full-year guidance raised across revenue, hardware, and EBITDA. But the quarter's real substance is strategic: the launch of DigipassONE, a single platform that folds the Nok Nok Labs and Build38 acquisitions into one stack, plus a genuinely new tell in Digital Agreements — a burst of overage revenue that management calls a leading indicator of expansion.
A platform milestone — and a cross-sell machine
DigipassONE is OneSpan's answer to a decade of product drift: a unified suite spanning passkeys and FIDO2 hardware tokens, verifiable credentials and digital wallets, mobile app shielding, and telemetry — the Authenticate, Verify, Protect, and Insights components, now all under one roof. The prior quarter teed this up — "“In five years, everyone will use passkeys, and passwords will seem outdated.” — Victor T. Limongelli, Chief Executive Officer · 2026-04-30" — but now there's a product to sell. And the monetization engine is plainly cross-sell into the installed base of the world's largest banks: “the easiest path there is going to be a cross-sell, is to sell new things to existing customers.” — Victor Limongelli, Executive (likely CEO or similar senior executive) · 2026-08-04 That is the core of the platform bet: lift the attach rate of identity verification and passwordless authentication across a customer base that includes 60 of the world's 100 largest banks.Riding the agentic wave
The boldest positioning is on agent-driven banking. OneSpan's thesis: consumers will delegate routine banking to AI agents, and banks will need to authenticate the agent, verify intent, and protect transactions across a new channel — one that management stresses will “augment, not replace, the existing channels of in-person, online and mobile” — Victor Limongelli, Executive (likely CEO or similar senior executive) · 2026-08-04. This echoes the prior call's framing — "“consumers employing agents to interact with their banks... is going to increase the need for authentication far above what it is today” — Victor T. Limongelli, CEO · 2026-02-26" — but DigipassONE now gives it a product. The near-term regulatory drivers are concrete: EU digital identity wallet specifications are due by year-end, with banks required to accept them by end-2027 — a pull for the Verify component and for the launch of DigipassONE. The company's own AI agents keyword jumped into its top-25 this quarter — a company-unique angle on a theme the whole market is now watching.The overage tell in Digital Agreements
The most empirically fresh data point is overage revenue. Digital Agreements grew 25% y/y (still 11.3% even excluding overages), with DA operating margin leaping to 35.7% from 18.4%. And management explicitly framed overages as forward-looking:Overage revenue jumping to the #1 spot in OneSpan's own keyword trajectory — from a typical ~$1M-1.5M annual run-rate to "we're obviously going to exceed that amount this year" — is a high-frequency signal that customers are consuming beyond contracted volume, historically the setup for expansion renegotiation. That, alongside the margin step-up, is the tangible evidence behind the raised guidance (revenue to $248M-252M, EBITDA to $67M-71M).you can think about overages as a leading indicator for ARR, if you would... often happens that overages then translate into higher expansion contracts now part of ARR.