Onespan has entered into a definitive agreement to acquire Build38. The Munich-based cybersecurity scale-up develops protection solutions for next-generation mobile applications. With this acquisition, Onespan aims to expand its app shielding offering and integrate security solutions that combine in-app, cloud, and AI technologies.
Build38 was founded in 2019 as a spin-off from Giesecke+Devrient and positions itself as a provider of mobile app security for regulated and security-critical application areas. The platform combines in-app self-protection mechanisms with AI-powered cloud threat intelligence. Build38 applications are used in areas such as mobile banking, payment processing, digital identities, public transportation, the automotive industry, and healthcare.
SDK-based security in focus
At the heart of the acquisition is an SDK-based approach to Runtime Application Self-Protection (RASP). Software Development Kits (SDKs) are development packages that developers integrate directly into a mobile app. This means security functions run within the application itself, rather than as an external layer of protection. This approach detects attacks in real time, closes security gaps directly within the app, and provides telemetry data on end devices and threats. Banks and financial institutions can thus respond to the sharp rise in mobile and AI-driven attacks on digital channels.
Victor Limongelli, CEO of Onespan, says:
“Our goal is to provide leading financial institutions with the most comprehensive protection for their customer interactions – including strong authentication, transaction signing, application protection, and fraud detection. Build38’s technology already protects over 250 million endpoints. The company’s SDK enables banks to integrate next-generation RASP protection into their mobile apps and delivers more comprehensive data about mobile devices and the threats they face. Given the increasing prevalence of mobile threats and the market’s shift towards integrated security solutions and AI-powered defenses, we believe this acquisition positions us at the forefront and reinforces our strategy to meet the evolving needs of our customers.”
Build38 sees the merger with Onespan as an opportunity to scale its technology internationally. Christian Schläger, CEO of Build38, explains:
“Build38 was founded to redefine mobile application security through next-generation RASP by combining cloud-based services and AI innovations. By joining forces with Onespan, we can implement this vision globally and offer best-in-class protection to banks and businesses that demand the highest security standards.”
Want more startup news?
Subscribe to our newsletter here: Anyone who wants to stay regularly informed about financing, start-ups and technology trends in the Munich start-up ecosystem can subscribe to the Munich Startup Newsletter here.
