CISO Tribune

Vendor comparison · 2 companies

NowSecure vs OneSpan

NowSecure sells mobile application risk management software that analyzes compiled iOS and Android app binaries on real devices to find hidden AI, risky SDKs, vulnerabilities and data flows. OneSpan sells advanced authentication and fraud prevention products that secure users, devices and applications, together with software that handles agreement preparation, signing and management through secure workflows. CISO Tribune files both under Mobile security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • NowSecure
  • OneSpan
NowSecure vs OneSpan: Products, Customers and Funding Compared
NowSecureNowSecure sells mobile application risk management software that analyzes compiled iOS and Android app binaries on real devices to find hidden AI, risky SDKs, vulnerabilities and data flows.nowsecure.comOneSpanOneSpan sells advanced authentication and fraud prevention products that secure users, devices and applications, together with software that handles agreement preparation, signing and management through secure workflows.onespan.com
What it sells
  • Mobile Application Risk Management[1][2][3][5]Continuously assesses apps a company builds and third-party apps its workforce uses.
  • Dynamic Mobile SBOM[7]Generates SBOMs from binary analysis of iOS, Android and hybrid apps.
  • NowSecure Privacy[8]Protects sensitive data and minimizes compliance exposure in mobile apps.
  • DigipassONE[1][3][14]A unified platform for authentication, transaction security, digital credentials, application protection and analytics.
  • OneSpan Sign[1][9][10][11][12]An eSignature platform built for customer agreements.
  • OneSpan Application Shielding[7]Protects a mobile banking app from the inside out.
  • OneSpan Cloud Authentication[7]Authentication aimed at financial institutions facing the challenges of legacy systems.
  • Cronto[6][7]A passwordless authentication method that requires no manual input from the customer.
  • Digipass FIDO2 security keys[8]FIDO2-certified passkeys that enable passwordless authentication.
  • Intelligent Adaptive Authentication[6]Applies a level of security to each customer interaction.
  • OneSpan hardware authenticators[6]Hardware authenticators for two-factor authentication and transaction signing.
Categories
Headquarters
Chicago, United States[1]Not stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesPublic (NASDAQ: OSPN)[2][11][16]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • April 28, 2026NowSecure announced Mobile App Risk Intelligence (MARI), giving enterprises evidence-based visibility into third-party mobile apps, including hidden AI components and data flows.[13]
  • October 19, 2026OneSpan appointed Megan Shamas as Senior Director of Product Marketing and Matthew Miller as Director of Product Management for its Cybersecurity business.[15]
  • July 22, 2026OneSpan introduced DigipassONE, a unified platform covering authentication, transaction security, in-app protection, analytics and digital credentials.[14]
  • June 15, 2026OneSpan announced it will show its digital credentials early-access release at Identiverse 2026 in Las Vegas, June 15 to 17.[13]
G2 and Gartner Peer Insights
  • G2: listed, seen November 4, 2026[4]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, NowSecure sells mainly to enterprises that build, use and manage mobile apps. NowSecure addresses privacy, compliance and AI governance roles. NowSecure addresses AppSec, DevSecOps and mobile engineering roles. NowSecure addresses workforce app and third-party risk roles. NowSecure says financial institutions are accountable for every component shipped to production. NowSecure helps federal, local and state agencies deliver secure mobile apps.OneSpan solutions for digital agreements and transactions are described across banking, financial services, healthcare and professional services. OneSpan Cloud Authentication is aimed at financial institutions facing the challenges of legacy systems. OneSpan Sign is offered with global data centers that support data residency requirements, private cloud and on-premises deployments. OneSpan services offerings are built on experience gained working with enterprise organizations.
Last verified
September 27, 2026October 16, 2026

Where they overlap

  • NowSecure and OneSpan are both filed under Mobile security.

Where they differ, field by field

  • NowSecure's primary category is Mobile security; OneSpan's is Passwordless authentication and authenticators.
  • NowSecure is also filed under AI model and agent security. OneSpan is also filed under Application shielding and RASP and Identity verification.
  • NowSecure lists Mobile Application Risk Management, Dynamic Mobile SBOM and NowSecure Privacy. OneSpan lists DigipassONE, OneSpan Sign, OneSpan Application Shielding, OneSpan Cloud Authentication, Cronto and 3 more.
  • NowSecure is headquartered in Chicago, United States.
  • OneSpan is a public company listed on NASDAQ as OSPN.

What it sells: NowSecure

What Mobile Application Risk Management does[1][2][3][5]
NowSecure gives enterprises continuous visibility into the security, privacy, compliance, and AI risk inside the mobile apps they build, use, and manage. Findings are based on what shipped apps do on real devices at runtime.
What Dynamic Mobile SBOM does[7]
NowSecure inspects compiled iOS, Android, and hybrid apps to identify every dependency, framework, and SDK actually present. It generates SBOMs for each build, storing version history and provenance.
What NowSecure Privacy does[8]
NowSecure Privacy protects sensitive data, minimizes compliance exposure, and maintains trust. NowSecure describes continuous mobile privacy testing as identifying excessive permissions, hidden data sharing, insecure SDK behaviors, and policy violations across iOS and Android applications.

What it sells: OneSpan

What OneSpan Sign does[1][9][10][11][12]
OneSpan Sign manages the full agreement lifecycle from document preparation and identity assurance to electronic signatures and connected workflows. OneSpan Sign supports the file formats .doc, .pdf, .odt, .rtf and .txt. The OneSpan Sign Print Driver sends transactions directly to OneSpan Sign from any Windows-based application. OneSpan Sign is offered with global data centers that support data residency requirements, private cloud and on-premises deployments.
What OneSpan Application Shielding does[7]
OneSpan Application Shielding addresses threats such as tampering, reverse engineering, overlay attacks, code injection, code modification and data theft from the app. OneSpan Application Shielding allows the app to operate in environments such as jailbroken or rooted devices.
What OneSpan Cloud Authentication does[7]
OneSpan Cloud Authentication helps financial institutions with the challenges of legacy systems. OneSpan Cloud Authentication supports migration from legacy on-premises infrastructure to a SaaS authentication platform.
What Digipass FIDO2 security keys does[8]
Digipass FIDO2 security keys can be connected to desktop and mobile devices via USB-C. Digipass FX1 is a phishing-resistant, passwordless FIDO2 security key with a fingerprint biometric sensor. Digipass FX7 is a phishing-resistant, passwordless FIDO2 security key where users authenticate with a simple tap.

Questions about NowSecure and OneSpan

What do NowSecure and OneSpan sell?
NowSecure sells Mobile Application Risk Management, Dynamic Mobile SBOM and NowSecure Privacy. OneSpan sells DigipassONE, OneSpan Sign, OneSpan Application Shielding, OneSpan Cloud Authentication, Cronto and 3 more.
Are NowSecure and OneSpan in the same category?
They share Mobile security. NowSecure's primary category is Mobile security and OneSpan's is Passwordless authentication and authenticators.
Where are NowSecure and OneSpan headquartered?
NowSecure is headquartered in Chicago, United States.
Who owns NowSecure and OneSpan?
OneSpan is a public company listed on NASDAQ as OSPN.
Who are NowSecure and OneSpan sold to?
From its own pages, NowSecure sells mainly to enterprises that build, use and manage mobile apps. OneSpan solutions for digital agreements and transactions are described across banking, financial services, healthcare and professional services.
What have NowSecure and OneSpan announced recently?
April 28, 2026: NowSecure announced Mobile App Risk Intelligence (MARI), giving enterprises evidence-based visibility into third-party mobile apps, including hidden AI components and data flows. October 19, 2026: OneSpan appointed Megan Shamas as Senior Director of Product Marketing and Matthew Miller as Director of Product Management for its Cybersecurity business.

About NowSecure

NowSecure sells mobile application risk management software that analyzes compiled iOS and Android app binaries on real devices to find hidden AI, risky SDKs, vulnerabilities and data flows. NowSecure says it helps organizations secure and govern mobile app risk, from code and dependencies to runtime behavior and data flows.

NowSecure says more than half of the 50,000+ mobile apps it analyzes each month contain undisclosed AI. NowSecure says most AI governance programs cover SaaS, cloud, and employee AI tools. NowSecure says it builds the mobile app record those programs are missing: which apps contain AI, what data it touches, where that data goes, and who owns the risk.

NowSecure analyzes the shipped mobile binary to identify AI models, SDKs, dependencies, APIs, and indicators of AI-generated code. NowSecure runs the app on real devices to observe live behavior, permissions, connections, and data movement. NowSecure says the result is a Dynamic SBOM showing every component and where its data lands. NowSecure says it fills the gap with binary and runtime truth, not source, SBOM, or SCA assumptions.

Mobile Application Risk Management brings four risk domains into one operating model. NowSecure says Mobile Application Risk Management exists to close visibility gaps before they become business events. NowSecure gives enterprises continuous, evidence-based visibility into the security, privacy, compliance, and AI risk inside the mobile apps they build, use, and manage. NowSecure says the new shape of mobile app risk management is continuous, evidence-based, and proportioned to business impact, governing security, privacy, safety, compliance, and AI risk in one program. NowSecure describes a living catalog of apps, SDKs, APIs, AI components, data destinations, and ownership across the mobile estate. NowSecure says it gives every accountable function the evidence to find hidden AI, govern data flows, and reduce risk across the apps an organization builds and uses.[5]

NowSecure tests the compiled iOS and Android app on real devices, logged in, with every SDK and AI feature inside it. NowSecure says AI-Navigator logs in so dynamic testing reaches every post-login screen. NowSecure research found that authenticated mobile app security testing finds 78% more sensitive data risk. Customers can upload an IPA or APK, or trigger tests automatically from GitHub Actions, GitLab, Azure DevOps, Jenkins, CircleCI, or Bitrise. NowSecure maps findings to OWASP MASVS and sends them to the customer's tracker with remediation guidance. NowSecure adds Guided Testing or Pen Testing as a Service when an app needs an analyst to work through MFA. NowSecure identifies every component inside the compiled app and watches what each one does at runtime. NowSecure identifies the AI inside an app and shows what data reaches it.[5][6]

NowSecure inspects compiled iOS, Android, and hybrid apps to identify every dependency, framework, and SDK actually present. NowSecure generates SBOMs for each build, storing version history and provenance. A signed, machine-readable SBOM in CycloneDX or SPDX is generated and versioned. NowSecure produces SBOMs automatically at each merge or release, within GitHub Actions, GitLab, Jenkins, and Azure DevOps. NowSecure correlates SBOM data with live CVE, CWE, and license feeds for immediate risk visibility. NowSecure says organizations using Dynamic Mobile SBOM transition from reactive audits to proactive risk governance.[7]

NowSecure Privacy protects sensitive data, minimizes compliance exposure, and maintains trust. NowSecure tests for the OWASP MASVS throughout the mobile app security testing software and services. NowSecure supports organizations looking to comply with ISO 27001 by implementing mobile app security controls. NowSecure says it helps write the mobile security standards auditors rely on and maintains the open-source tools that power runtime analysis worldwide. Carlos Holguera, a NowSecure principal research engineer, co-leads the OWASP Mobile Application Security project that maintains MASVS and MASTG.[6][8][9]

For mobile banking apps, NowSecure says new regulatory standards demand a real-time Mobile App BOM and continuous runtime validation. NowSecure says financial institutions are fully accountable for every component shipped to production, including software their internal engineers never wrote. NowSecure says it generates an audit-ready Mobile Application Bill of Materials through automated binary analysis on every build. NowSecure helps federal, local and state agencies, including AirForce’s BESPIN software factory, deliver secure mobile apps. NowSecure Platform performs static, dynamic, interactive and API security analysis across the mobile apps in an organization's environment.[2][10][11]

NowSecure cites NIAP, ISO 17025, and Google MASA lab credentials. Independent auditor Coalfire completed its review of NowSecure and issued an attestation report finding zero deficiencies. NowSecure provides a SOC 2 report to requesters who first execute an NDA.[6][8][12]

NowSecure on the record

Sources

NowSecure full record

  1. [1]Nowsecure launches ai data partner program to expand mobile application risk intelligence for security platformsNowSecure · nowsecure.com · published March 18, 2026 · Tier A
  2. [2]nowsecure.comNowSecure · nowsecure.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Enterprise Mobile App Security & AI Governance | NowSecureNowSecure · undated page, accessed October 27, 2026 · Tier A
  4. [4]NowSecure Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 27, 2026 · Tier C
  5. [5]Mobile App Risk Management Platform & Programs | NowSecureNowSecure · undated page, accessed November 4, 2026 · Tier A
  6. [6]Mobile app security testing (MAST) for iOS & Android | NowSecureNowSecure · undated page, accessed November 4, 2026 · Tier A
  7. [7]Dynamic SBOM for iOS and Android Mobile Apps | NowSecureNowSecure · undated page, accessed November 4, 2026 · Tier A
  8. [8]Mobile Application Privacy Testing | NowSecure PrivacyNowSecure · undated page, accessed November 4, 2026 · Tier A
  9. [9]Mobile App Security Standards & Compliance | NowSecureNowSecure · undated page, accessed November 4, 2026 · Tier A
  10. [10]Financial Services - NowSecureNowSecure · undated page, accessed November 4, 2026 · Tier A
  11. [11]Government - NowSecureNowSecure · undated page, accessed November 4, 2026 · Tier A
  12. [12]Request NowSecure SOC 2 ReportNowSecure · undated page, accessed November 4, 2026 · Tier A
  13. [13]NowSecure Launches MARI to Close the AI Governance Gap in Third-Party Mobile AppsNowSecure · published April 28, 2026 · Tier A

OneSpan full record

  1. [1]onespan.comOneSpan · onespan.com · undated page, accessed October 16, 2026 · Tier A
  2. [2]News releasesOneSpan · onespan.com · published October 7, 2026 · Tier A
  3. [3]eSignature, Authentication, Mobile App Security | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  4. [4]About OneSpan - We protect the world from digital fraud | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  5. [5]Professional Services | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  6. [6]Authentication | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  7. [7]Customer Authentication | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  8. [8]Digipass FIDO2 security keys | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  9. [9]OneSpan Sign: eSignature platform for customer agreementsOneSpan · undated page, accessed November 10, 2026 · Tier A
  10. [10]OneSpan Sign: eSignature product features | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  11. [11]Qualified Electronic Signature | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  12. [12]OneSpan Sign FAQ | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  13. [13]The Shift to Digital Credentials Accelerates: OneSpan Launches Early Access at IdentiverseOneSpan · published June 15, 2026 · Tier A
  14. [14]OneSpan Introduces DigipassONE, Bringing a Unified Platform Approach to Authentication ModernizationOneSpan · published July 22, 2026 · Tier A
  15. [15]OneSpan Advances DigipassONE to Help Organizations Put Modern Authentication into PracticeOneSpan · published October 19, 2026 · Tier A
  16. [16]OneSpan Sign Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.