OneSpan Is Not Expensive, But It May Have A Product Problem

OneSpan remains rated 'Hold' as overall growth stays elusive despite strong Digital Agreements performance. Digital Agreements posted 10%+ YoY revenue growth and 9 percentage points of margin expansion, but the Cybersecurity segment is largely acquisition-driven, with organic ARR growth stalling and margins deteriorating by 8 percentage points. The mix points to improving profitability in the star business, but weak underlying growth keeps the stock view cautious.

Analysis

The key read-through is that OSPN is becoming a two-speed business: one engine is still compounding, but the other is increasingly masking the economics of the whole. That matters because the market typically pays up for “platform” software only when both revenue quality and operating leverage are improving together; here, the high-growth pocket is doing the heavy lifting while the adjacent segment is increasingly looking like a roll-up with fading organic demand. If that pattern persists for another 2-3 quarters, multiple support is likely to erode even if headline revenue remains stable.

The second-order issue is competitive rather than purely financial. In cybersecurity, acquisition-led growth usually signals that management is buying time, not winning share, which often invites more aggressive pricing from better-capitalized peers. That can pressure renewals and cross-sell economics across the category, especially if customers perceive the acquired stack as fragmented or less strategic than integrated alternatives. The margin deterioration also suggests integration costs are not yet fully absorbed, so any near-term revenue acceleration in that segment may still be low-quality and come with weaker incremental returns.

From a catalyst standpoint, the setup is more about what fails to inflect than what surprises positively. The next few earnings prints are likely to hinge on whether organic ARR can reaccelerate; absent that, the market may start valuing the cybersecurity segment closer to a melting ice cube than a growth asset, which would dominate any goodwill from Digital Agreements. A true bull case needs evidence that cross-selling from the strong segment is translating into durable expansion elsewhere, not just temporary cost leverage.

The contrarian view is that the market may already be discounting the weak segment too harshly if Digital Agreements can sustain low-double-digit growth and continue expanding margins. If management can hold consolidated EBITDA while buying back stock, the equity could still work as a cash-yielding compounder even without clean top-line growth. But that’s a defensive holder thesis, not an aggressive re-rating story.

Key Decisions for Investors

• Avoid initiating fresh longs in OSPN into the next 1-2 earnings prints unless there is clear evidence of organic ARR reacceleration; the risk/reward is skewed toward multiple compression if the weak segment keeps dragging consolidated quality lower.
• If already long OSPN, consider reducing exposure on strength and keep only a smaller core position as a 'hold-the-cash-flow' trade; upside likely capped unless management proves the cybersecurity business can stabilize within the next 2-3 quarters.
• For a relative-value trade, pair long higher-quality cybersecurity software names with recurring organic growth against short OSPN over a 3-6 month horizon; the short leg benefits if the market continues to penalize acquisition-led growth and margin slippage.
• Buy downside protection via OSPN put spreads around the next earnings date if options liquidity allows; the catalyst risk is asymmetric because any guide-down or ARR weakness could reprice the stock quickly despite the seemingly benign 'Hold' framing.
• Only revisit a constructive view if the company shows sequential improvement in organic ARR and margin in Cybersecurity for at least two quarters; until then, treat Digital Agreements as a stabilizer, not a reason to pay growth multiples.