OneSpan Beats Again, But Positives Have Been Priced In

OneSpan’s transition to a software subscription model has supported share-price appreciation and consistent earnings beats, with subscription revenue up 16%. New authentication products could benefit from upcoming European digital identity regulations, but guidance is limited and growth expectations into 2027 are muted. At a forward P/E of 19, OSPN trades only slightly above the sector median.

Analysis

The key valuation question is whether recurring revenue can translate into durable organic growth and cash generation—not whether the subscription transition is complete. A recurring-revenue mix can support a higher-quality earnings multiple, but with growth expectations muted, the current valuation offers limited room for multiple expansion unless authentication demand or guidance accelerates. European digital-identity rules are a potential demand catalyst, not booked revenue: implementation timing, procurement cycles, and whether buyers select OneSpan versus incumbent identity and security providers will determine the payoff. Okta is a relevant adjacent competitor; larger providers such as Thales and Entrust may also compete for enterprise deployments. Near term (days to weeks), the risk is that an earnings beat without stronger forward guidance is treated as backward-looking. Over 1–3 months, watch product adoption, bookings and guidance for evidence that regulation is converting into demand. Over 6–18 months, successful deployments could improve growth visibility; delays or competitive displacement would leave the multiple reliant on execution in a modest-growth profile. The contrarian risk is assuming regulatory opportunity is already monetizable; the counterpoint is that subscription mix and execution may provide more downside resilience than headline growth alone suggests. Falsify the cautious view with sustained acceleration in subscription growth and raised guidance; falsify the upside case with deceleration, weaker bookings, or delayed customer adoption.

Key Decisions for Investors

• No aggressive directional position on the information provided. Treat OSPN as a watchlist name: the modest valuation discount alone does not establish a mispricing when forward growth and guidance visibility are limited.
• Consider a staged long only after a reported improvement in bookings or forward guidance corroborates that authentication demand is converting into revenue; define the thesis around growth acceleration rather than regulatory announcements.
• For existing longs, avoid adding solely on earnings beats. Reassess if subscription growth decelerates or guidance fails to improve, since that would weaken the case for a recurring-revenue quality premium.
• Monitor European implementation and procurement evidence, plus customer adoption and competitive win disclosures. Regulatory progress without commercial conversion is not a sufficient catalyst.