Onespan has closed a definitive agreement to acquire Build38. The Munich cybersecurity scaleup develops protection solutions for next-generation mobile applications. With the acquisition, Onespan aims to expand its app shielding offering and integrate security solutions that combine in-app, cloud, and AI technologies.
Build38 was founded in 2019 as a spin-off from Giesecke+Devrient and positions itself as a provider of mobile app security for regulated and security-critical use cases. The platform combines in-app self-protection mechanisms with AI-powered cloud threat intelligence. Build38 applications are used in areas such as mobile banking, payment processing, digital identities, public transportation, automotive, and healthcare.
SDK-based security in focus
At the heart of the acquisition is an SDK-based approach to Runtime Application Self-Protection (RASP). Software Development Kits (SDK) are development packages that developers integrate directly into a mobile app. Security functions run within the application itself rather than as an external protection layer. This approach detects attacks in real-time, closes security vulnerabilities directly in the app, and provides telemetry data on endpoints and threats. Banks and financial institutions can thus respond to the sharp increase in mobile and AI-driven attacks on digital channels.
Victor Limongelli, CEO of Onespan, says:
“Our goal is to provide leading financial institutions with the most comprehensive protection for their customer interactions – including strong authentication, transaction signing, application protection, and fraud detection. Build38’s technology already protects over 250 million endpoints. The company’s SDK enables banks to integrate next-generation RASP protection into their mobile apps and provides more comprehensive data about mobile devices and the threats they face. Given the increasing mobile threats and the market’s evolution toward integrated security solutions and AI-powered defense mechanisms, we believe this acquisition positions us as a leader and confirms our strategy to meet our customers’ evolving needs.”
Build38 sees the merger with Onespan as an opportunity to scale its technology globally. Christian Schläger, CEO of Build38, explains:
“Build38 was founded to redefine mobile application security through next-generation RASP by combining cloud-based services and AI innovations. By joining forces with Onespan, we can realize this vision globally and provide best-in-class protection to banks and enterprises that demand the highest security standards.”
