OneSpan

OneSpan is an information-security and digital-transactions company headquartered in Boston, Massachusetts. The business began in 1984 when T. Kendall Hunt founded Vasco as a consulting and software-services company serving corporate and government agencies. It later developed into a specialist provider of authentication and security technologies, operating internationally under the Vasco Data Security name before adopting the OneSpan identity in 2018. The company’s early expansion included the 1991 acquisition of ThumbScan, a business associated with fingerprint-reader technology for computers. In 1993, Vasco changed its name to Vasco Data Security International and broadened its focus toward data security. The company was incorporated in 1997 and completed an initial public offering in January 2000. During the 2000s, it developed and commercialized Digipass, a family of hardware and software technologies for two-factor and multifactor authentication. Digipass became particularly relevant to banks and other organizations seeking to protect online transactions and customer access. Vasco expanded its portfolio through acquisitions and product development. The 2006 purchase of Austria-based LOGiCO Smart Card Solutions added smart-card authentication and public-key-infrastructure capabilities. In 2011, Vasco acquired the Dutch certificate authority DigiNotar. DigiNotar was subsequently compromised and issued fraudulent security certificates; after the incident became public, its certificates were revoked and the company entered bankruptcy. The episode remains a significant event in the company’s corporate history and in the wider history of digital certificate security. The company continued building fraud and transaction-security capabilities through the acquisition of Cambridge-based Cronto in 2013. Cronto’s CrontoSign technology used specialized color barcodes, also known as visual cryptograms or photoTAN, to help defend against man-in-the-browser attacks. In 2014, Vasco acquired Risk IDS, a provider of risk-based authentication technology for the banking sector. Its capabilities later supported IDENTIKEY Risk Manager, a solution intended to help organizations identify suspicious activity and improve fraud-detection processes. Vasco also moved beyond authentication into electronic signatures and agreement automation. In October 2015, it acquired Canadian electronic-signature provider Silanis Technology for approximately US$113 million, bringing the eSignLive platform into its portfolio. eSignLive was subsequently developed as a cloud-based electronic-signature service and was updated with Salesforce integration in 2016. In May 2018, Vasco acquired Dealflo, a financial-agreement automation company operating in the United Kingdom and Canada, for approximately £41 million. On May 30, 2018, Vasco Data Security International changed its name to OneSpan. The rebrand reflected a broader strategy combining authentication, fraud mitigation, electronic signatures, and secure digital agreements rather than focusing only on traditional authentication tokens. OneSpan’s products and partnerships have been particularly associated with financial institutions and regulated organizations, including banks and public-sector entities. The company has also participated in industry standardization through involvement with the FIDO Alliance. In January 2023, OneSpan announced an agreement to acquire ProvenDB, an Australian startup focused on secure document storage and vaulting using blockchain-related technology. In June 2025, OneSpan acquired Nok Nok Labs, a company known for authentication technology. These transactions indicate continued interest in passwordless access, identity assurance, and the protection of digitally executed documents. OneSpan’s current corporate status and operating structure require verification, but its documented business scope centers on enterprise cybersecurity and trusted digital transactions.

OneSpan traces its origins to 1984, when T. Kendall Hunt established Vasco as a consulting and software-services company for corporate and government customers. The company’s early development included the 1991 acquisition of ThumbScan, associated with fingerprint-reader equipment for computers. In 1993, the business was renamed Vasco Data Security International as it expanded into data-security products. Vasco was incorporated in 1997 and went public through an initial public offering in January 2000. During the early 2000s, Vasco developed Digipass, a technology family supporting two-factor and multifactor authentication. The company marketed Digipass internationally, including from Belgium, and later made the technology available for Apple mobile devices. In 2006, Vasco acquired Austria-based LOGiCO Smart Card Solutions, adding smart-card authentication and public-key-infrastructure capabilities. In 2009, it announced Digipass availability through the App Store for iPhone and iPod touch. The same year, Forbes included Vasco on a list of fast-growing American technology companies. Vasco broadened its geographic presence in 2012 by establishing an international headquarters at Dubai Silicon Oasis. It also announced efforts to reduce entry requirements for value-added resellers in the Europe, Middle East, and Africa channel. Its technology portfolio expanded further through the 2013 acquisition of Cambridge-based Cronto. CrontoSign used specialized color barcodes, called visual cryptograms or photoTAN, to help protect online banking and other transactions against man-in-the-browser malware. The company’s most serious historical controversy followed its January 2011 acquisition of DigiNotar, a Dutch certificate authority. In June 2011, DigiNotar suffered a major compromise and began issuing fraudulent security certificates. When the breach became known, the certificates were cancelled. DigiNotar subsequently went bankrupt. The event damaged trust in the affected certificate infrastructure and became a prominent example of the operational and governance risks associated with certificate authorities. In 2014, Vasco acquired Risk IDS, a provider of risk-based authentication services to the global banking sector. The resulting capabilities supported IDENTIKEY Risk Manager, released by 2015 as a broader risk-management product intended to help organizations identify fraud more quickly and effectively. Vasco also developed relationships with financial institutions and public-sector organizations, including HSBC Bank USA, Fedict, Rabobank, Arab Bank, and Riyadh Bank. The company was appointed to the board of directors of the FIDO Alliance, connecting it with industry efforts around stronger and less password-dependent authentication. A major strategic shift occurred in October 2015, when Vasco purchased Canadian electronic-signature company Silanis Technology for approximately US$113 million. Silanis brought eSignLive, a cloud electronic-signature platform, into Vasco’s portfolio. By early 2016, eSignLive had been enhanced with Salesforce integration. Vasco also announced a face-recognition authentication capability for Digipass in May 2016, illustrating the company’s movement toward software-based and biometric authentication alongside traditional tokens. In May 2018, Vasco acquired Dealflo, a financial-agreement automation provider based in the United Kingdom and Canada, for approximately £41 million. On May 30 of the same year, Vasco Data Security International changed its name to OneSpan. The new identity presented the business as a provider of secure digital transactions rather than solely as an authentication-hardware company. The OneSpan portfolio consequently combined multifactor authentication, transaction protection, fraud detection, electronic signatures, and agreement automation. In January 2023, OneSpan announced the acquisition of ProvenDB, an Australian startup focused on secure document storage and vaulting using blockchain-related technology. In June 2025, OneSpan acquired Nok Nok Labs, adding further authentication capabilities. These later moves are consistent with the company’s continuing effort to connect identity verification, fraud prevention, digital signing, and trusted document management. The company’s present ownership and listing status require additional verification, but its documented historical identity is that of a US-based enterprise cybersecurity and digital-transactions provider with substantial banking and regulated-industry exposure.

1. 2025Nok Nok Labs acquisition

   OneSpan acquired Nok Nok Labs, extending its authentication technology portfolio.

   Source
2. 2023ProvenDB acquisition announced

   OneSpan announced an agreement to acquire ProvenDB, an Australian secure document-storage and vaulting startup.

   Source
3. 2018OneSpan rebrand and Dealflo acquisition

   Vasco acquired Dealflo for approximately £41 million and changed its corporate name to OneSpan on May 30.

   Source
4. 2015Silanis Technology acquisition

   Vasco acquired Silanis Technology for approximately US$113 million and expanded into electronic signatures through eSignLive.

   Source
5. 2014Risk IDS acquisition

   Vasco acquired Risk IDS, strengthening its risk-based authentication and banking fraud-prevention capabilities.

   Source
6. 2013Cronto acquisition

   Vasco acquired Cronto and its CrontoSign visual-cryptogram technology for transaction protection.

   Source
7. 2012Dubai international headquarters

   The company established an international headquarters at Dubai Silicon Oasis and adjusted its EMEA reseller strategy.

   Source
8. 2011DigiNotar acquisition and security failure

   Vasco acquired DigiNotar; the certificate authority was later compromised, fraudulent certificates were issued, and the business ultimately went bankrupt.

   Source
9. 2009Digipass reaches mobile app distribution

   Vasco announced that Digipass two-factor authentication was available through the App Store for iPhone and iPod touch.

   Source
10. 2006LOGiCO acquisition

    Vasco acquired LOGiCO Smart Card Solutions in Austria, adding smart-card and PKI capabilities.

    Source
11. 2000Initial public offering

    The company completed its initial public offering in January.

    Source
12. 1997Corporate incorporation

    Vasco Data Security International was incorporated.

    Source
13. 1993Vasco adopts a data-security identity

    The company was renamed Vasco Data Security International and expanded its business into data security.

    Source
14. 1991ThumbScan acquisition

    Vasco acquired ThumbScan, a company associated with early fingerprint-reader technology for computers.

    Source
15. 1984Vasco is founded

    T. Kendall Hunt founded Vasco as a consulting and software-services company serving corporate and government agencies.

    Source

OneSpan positions itself at the intersection of cybersecurity and digital business processes, helping banks, enterprises, and public-sector organizations authenticate users, reduce online fraud, and execute or retain sensitive agreements digitally. Its historical differentiation came from combining strong authentication with transaction security and electronic-signature workflows.

• DigipassMultifactor authentication

  Digipass is OneSpan’s historic authentication technology family. It began as a set of authentication mechanisms associated with Vasco’s expansion during the early 2000s and supported two-factor and multifactor access for online services. The portfolio has included hardware and software approaches and was marketed extensively to banks and other organizations handling sensitive transactions. Digipass also became available in mobile-app form and was later associated with biometric features such as face recognition.

• CrontoSignTransaction authentication2013

  CrontoSign is a transaction-security technology obtained through OneSpan’s acquisition of Cronto. It uses specialized color barcodes, known as Cronto Visual Cryptograms or photoTAN, to convey transaction information visually. The approach was designed to make it harder for man-in-the-browser malware to alter or intercept authenticated banking transactions.

• IDENTIKEY Risk ManagerRisk-based authentication2015

  IDENTIKEY Risk Manager grew from the risk-based authentication capabilities obtained through Risk IDS. Released as a comprehensive risk-management solution by 2015, it was intended to help banks and other organizations assess suspicious activity, detect fraud, and improve the speed and quality of authentication decisions.

• eSignLiveElectronic signatures

  eSignLive is a cloud electronic-signature platform brought into the company through the acquisition of Silanis Technology. It supports digital signing and agreement workflows for enterprise and regulated-industry users. In 2016, the platform was updated with Salesforce integration, linking electronic-signature processes with customer and business-process data.

• DealfloFinancial-agreement automation2018

  Dealflo was a financial-agreement automation software business acquired by OneSpan in 2018. Its capabilities extended the company’s focus from authenticating users and transactions to automating the broader process of creating, approving, signing, and managing financial agreements.

• ProvenDBSecure document storage2023

  ProvenDB is an Australian technology business associated with secure storage and vaulting for documents using blockchain-related methods. OneSpan announced its acquisition in 2023, linking document integrity and retention capabilities with its existing electronic-signature and digital-agreement portfolio.

• Nok Nok Labs technologyPasswordless authentication2025

  Nok Nok Labs technology became part of OneSpan through a 2025 acquisition. The transaction expanded OneSpan’s authentication portfolio in the direction of modern identity assurance and passwordless access, although detailed product and integration information requires further verification.

• 2025Acquire Nok Nok LabsM&A

  OneSpan continued investing in authentication as identity systems moved toward passwordless and stronger device-based methods.

  What changed. OneSpan acquired Nok Nok Labs in June 2025.

  Aftermath. The acquisition expanded OneSpan’s authentication capabilities, although the full product and organizational impact requires further verification.

  Source
• 2023Announce ProvenDB acquisitionM&A

  OneSpan sought to extend its secure digital-transaction portfolio into document integrity, storage, and vaulting.

  What changed. The company announced an agreement to acquire ProvenDB, an Australian secure-document technology startup.

  Aftermath. The announced transaction aligned document custody and integrity capabilities with OneSpan’s signing and agreement-management products.

  Source
• 2018Rebrand from Vasco to OneSpanStrategy

  The business had expanded from authentication products into fraud prevention, electronic signatures, and financial-agreement automation.

  What changed. Vasco Data Security International changed its name to OneSpan on May 30, 2018.

  Aftermath. The OneSpan identity presented the company as a broader secure-digital-transactions provider rather than a business focused primarily on authentication tokens.

  Source
• 2018Acquire DealfloM&A

  OneSpan aimed to strengthen financial workflow automation alongside authentication and electronic signatures.

  What changed. OneSpan acquired Dealflo, a financial-agreement automation company operating in the United Kingdom and Canada.

  Aftermath. The transaction broadened OneSpan’s coverage of digitally executed financial agreements.

  Acquisition price. Approximately £41 million (May 2018)

  Source
• 2015Acquire Silanis TechnologyM&A

  Vasco sought to expand beyond authentication and fraud prevention into electronic signatures and digital transaction workflows.

  What changed. The company acquired Canadian electronic-signature provider Silanis Technology for approximately US$113 million.

  Aftermath. The acquisition added the eSignLive cloud electronic-signature platform and created a foundation for the company’s later digital-agreement strategy.

  Acquisition price. Approximately US$113 million (October 2015)

  Source

• 2011DigiNotar certificate-authority compromiseControversy

  After Vasco acquired DigiNotar, the Dutch certificate authority was hacked and began issuing fraudulent security certificates. Once the incident became public, the certificates were cancelled and DigiNotar later went bankrupt. The event is a major security and governance controversy connected to the company’s acquisition history.

  Source

• 2025OneSpan acquires Nok Nok Labs

  OneSpan acquired Nok Nok Labs, extending its authentication portfolio in an area associated with passwordless and modern identity technologies.

  M&AProduct generation
  Source
• 2023OneSpan announces acquisition of ProvenDB

  OneSpan announced plans to acquire Australian startup ProvenDB, whose technology focused on secure document storage and vaulting using blockchain-related methods.

  M&A
  Source
• 2018Vasco changes its name to OneSpan

  Vasco Data Security International adopted the OneSpan name, reflecting a broader portfolio spanning authentication, fraud prevention, electronic signatures, and digital agreements.

  Leadership change
  Source
• 2018OneSpan acquires Dealflo

  OneSpan acquired UK- and Canada-based Dealflo, a provider of financial-agreement automation software, for approximately £41 million.

  M&A
  Source
• 2016eSignLive adds Salesforce integration

  The company enhanced its eSignLive cloud electronic-signature software with integration for Salesforce, supporting signature workflows within a widely used customer-relationship platform.

  Product launch
  Source
• 2015Vasco acquires Silanis Technology

  Vasco acquired Canadian electronic-signature company Silanis Technology, expanding into cloud-based electronic signatures and digital transaction workflows.

  M&AProduct generation
  Source

1. OneSpan