CISO Tribune

Vendor comparison · 2 companies

OneSpan vs Promon

OneSpan sells advanced authentication and fraud prevention products that secure users, devices and applications, together with software that handles agreement preparation, signing and management through secure workflows. Promon sells the Runtime Intelligence Platform for apps, which embeds protection into compiled applications with no source code changes and no SDK. CISO Tribune files both under Application shielding and RASP. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • OneSpan
  • Promon
OneSpan vs Promon: Products, Customers and Funding Compared
OneSpanOneSpan sells advanced authentication and fraud prevention products that secure users, devices and applications, together with software that handles agreement preparation, signing and management through secure workflows.onespan.comPromonPromon sells the Runtime Intelligence Platform for apps, which embeds protection into compiled applications with no source code changes and no SDK.promon.io
What it sells
  • DigipassONE[1][3][14]A unified platform for authentication, transaction security, digital credentials, application protection and analytics.
  • OneSpan Sign[1][9][10][11][12]An eSignature platform built for customer agreements.
  • OneSpan Application Shielding[7]Protects a mobile banking app from the inside out.
  • OneSpan Cloud Authentication[7]Authentication aimed at financial institutions facing the challenges of legacy systems.
  • Cronto[6][7]A passwordless authentication method that requires no manual input from the customer.
  • Digipass FIDO2 security keys[8]FIDO2-certified passkeys that enable passwordless authentication.
  • Intelligent Adaptive Authentication[6]Applies a level of security to each customer interaction.
  • OneSpan hardware authenticators[6]Hardware authenticators for two-factor authentication and transaction signing.
  • Promon Shield for Desktop[4][8]Promon Shield for Desktop builds desktop application security into Windows and macOS apps.
  • Promon Code Protect[4][9]Promon Code Protect protects compiled code from static and dynamic analysis.
  • Promon Data Protect[4][10]Encrypts and isolates sensitive assets inside the app package and on the device.
  • Promon Verify[4][11]Ensures that only genuine, untampered apps can connect to backend APIs.
  • Promon Control[12]Promon Control is a runtime configuration layer for Shield for Mobile protected apps.
  • Promon Insight for App Risk[13]Promon Insight for App Risk is a device-risk signal layer for mobile apps.
Categories
Headquarters
Not stated on its pagesOslo, Norway[1]
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Public (NASDAQ: OSPN)[2][11][16]Not stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 19, 2026OneSpan appointed Megan Shamas as Senior Director of Product Marketing and Matthew Miller as Director of Product Management for its Cybersecurity business.[15]
  • July 22, 2026OneSpan introduced DigipassONE, a unified platform covering authentication, transaction security, in-app protection, analytics and digital credentials.[14]
  • June 15, 2026OneSpan announced it will show its digital credentials early-access release at Identiverse 2026 in Las Vegas, June 15 to 17.[13]
  • June 30, 2026Promon and LexisNexis Risk Solutions announced a strategic alliance to strengthen fraud prevention in mobile apps.[15]
G2 and Gartner Peer Insights
  • G2: listed, seen November 10, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[5]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
OneSpan solutions for digital agreements and transactions are described across banking, financial services, healthcare and professional services. OneSpan Cloud Authentication is aimed at financial institutions facing the challenges of legacy systems. OneSpan Sign is offered with global data centers that support data residency requirements, private cloud and on-premises deployments. OneSpan services offerings are built on experience gained working with enterprise organizations.Promon addresses security, fraud, product, and compliance teams. Security teams can respond to new threat intelligence, fraud teams can tighten or relax app-level responses based on live signals, and product teams can enforce upgrade policies. Gaming companies are offered protection against cheaters and reverse engineering, and protection for in-app purchases. The telemetry, analytics and decisioning layer can run on prem, as SaaS, or hybrid.
Last verified
October 16, 2026September 27, 2026

Where they overlap

  • OneSpan and Promon are both filed under Application shielding and RASP.

Where they differ, field by field

  • OneSpan's primary category is Passwordless authentication and authenticators; Promon's is Application shielding and RASP.
  • OneSpan is also filed under Mobile security and Identity verification.
  • OneSpan lists DigipassONE, OneSpan Sign, OneSpan Application Shielding, OneSpan Cloud Authentication, Cronto and 3 more. Promon lists Promon Shield for Desktop, Promon Code Protect, Promon Data Protect, Promon Verify, Promon Control and 1 more.
  • Promon is headquartered in Oslo, Norway.
  • OneSpan is a public company listed on NASDAQ as OSPN.

What it sells: OneSpan

What OneSpan Sign does[1][9][10][11][12]
OneSpan Sign manages the full agreement lifecycle from document preparation and identity assurance to electronic signatures and connected workflows. OneSpan Sign supports the file formats .doc, .pdf, .odt, .rtf and .txt. The OneSpan Sign Print Driver sends transactions directly to OneSpan Sign from any Windows-based application. OneSpan Sign is offered with global data centers that support data residency requirements, private cloud and on-premises deployments.
What OneSpan Application Shielding does[7]
OneSpan Application Shielding addresses threats such as tampering, reverse engineering, overlay attacks, code injection, code modification and data theft from the app. OneSpan Application Shielding allows the app to operate in environments such as jailbroken or rooted devices.
What OneSpan Cloud Authentication does[7]
OneSpan Cloud Authentication helps financial institutions with the challenges of legacy systems. OneSpan Cloud Authentication supports migration from legacy on-premises infrastructure to a SaaS authentication platform.
What Digipass FIDO2 security keys does[8]
Digipass FIDO2 security keys can be connected to desktop and mobile devices via USB-C. Digipass FX1 is a phishing-resistant, passwordless FIDO2 security key with a fingerprint biometric sensor. Digipass FX7 is a phishing-resistant, passwordless FIDO2 security key where users authenticate with a simple tap.

What it sells: Promon

What Promon Shield for Desktop does[4][8]
Promon Shield for Desktop builds desktop application security into Windows and macOS apps. Shield for Desktop creates a secure execution environment for apps by blocking unwanted interactions initiated by possible malware residing on the system. Shield for Desktop integrates with existing tooling and supports zero-trust architecture.
What Promon Code Protect does[4][9]
Promon Code Protect protects compiled code from static and dynamic analysis by applying multi-layer obfuscation and encryption post-compile. Encrypts sensitive code and data sections within binaries, preventing attackers from performing static analysis or extracting core logic. Computes hashes and checksums across code regions to detect unauthorized changes.
What Promon Data Protect does[4][10]
Promon Data Protect encrypts and isolates sensitive assets inside the app package and on the device. SAROM protects information built into an app, like API keys or certificates, before the app is published. SLS protects data stored on the device, like session tokens.
What Promon Verify does[4][11]
Promon Verify ensures that only genuine, untampered apps can connect to backend APIs. Promon Verify authenticates each request through in-band attestation, confirming the integrity of both the app and its runtime environment. Promon Verify is fully self-hosted and stateless.
What Promon Control does[12]
Promon Control is a runtime configuration layer for Shield for Mobile protected apps. Promon Control is a post-deploy app security runtime control layer. Teams can update policies, adjust threat responses, and push configuration changes to apps protected by Shield for Mobile without re-shielding, rebuilding, or triggering an app store submission.
What Promon Insight for App Risk does[13]
Promon Insight for App Risk is a device-risk signal layer for mobile apps. Insight for App Risk collects, enriches, and delivers security-relevant signals from inside the app. Insight for App Risk ranks devices by configurable risk scores.

Questions about OneSpan and Promon

What do OneSpan and Promon sell?
OneSpan sells DigipassONE, OneSpan Sign, OneSpan Application Shielding, OneSpan Cloud Authentication, Cronto and 3 more. Promon sells Promon Shield for Desktop, Promon Code Protect, Promon Data Protect, Promon Verify, Promon Control and 1 more.
Are OneSpan and Promon in the same category?
They share Application shielding and RASP. OneSpan's primary category is Passwordless authentication and authenticators and Promon's is Application shielding and RASP.
Where are OneSpan and Promon headquartered?
Promon is headquartered in Oslo, Norway.
Who owns OneSpan and Promon?
OneSpan is a public company listed on NASDAQ as OSPN.
Who are OneSpan and Promon sold to?
OneSpan solutions for digital agreements and transactions are described across banking, financial services, healthcare and professional services. Promon addresses security, fraud, product, and compliance teams.
What have OneSpan and Promon announced recently?
October 19, 2026: OneSpan appointed Megan Shamas as Senior Director of Product Marketing and Matthew Miller as Director of Product Management for its Cybersecurity business. June 30, 2026: Promon and LexisNexis Risk Solutions announced a strategic alliance to strengthen fraud prevention in mobile apps.

About OneSpan

OneSpan sells advanced authentication and fraud prevention products that secure users, devices and applications, together with software that handles agreement preparation, signing and management through secure workflows. OneSpan specializes in digital identity and anti-fraud solutions. OneSpan provides identity verification, transaction signing, authentication, mobile security, e-signature workflows and secure video collaboration for virtual transactions. OneSpan digital agreement and security solutions span identity verification, user authentication, Virtual Room, electronic signature and mobile app security.[1][3][4][5]

DigipassONE is OneSpan's unified platform for authentication, transaction security, digital credentials, application protection and analytics. OneSpan server solutions provide tools for authentication lifecycle management in one integrated system. OneSpan Cloud Authentication is aimed at financial institutions facing the challenges of legacy systems. OneSpan Cloud Authentication supports migration from legacy on-premises infrastructure to a SaaS authentication platform. Employees can use their own mobile devices as a second factor in OneSpan mobile authentication. Users can authenticate with a fingerprint, Apple Face ID or PIN along with a one-time password.[1][3][6][7]

OneSpan offers passwordless alternatives that include biometric options, FIDO and touchless banking. Cronto is a passwordless authentication method that requires no manual input from the customer. OneSpan Cronto technology moves transaction authorization control from the user to the trusted device and the bank. OneSpan hardware authenticators cover two-factor authentication, transaction signing including Cronto, FIDO U2F use cases and more. Digipass FIDO security keys are FIDO2-certified, phishing-resistant passkeys that enable passwordless authentication. Digipass FIDO2 security keys can be connected to desktop and mobile devices via USB-C, and OneSpan offers Bluetooth and NFC-enabled options. Digipass FX1 is a phishing-resistant, passwordless FIDO2 security key with a fingerprint biometric sensor. Digipass FX7 is a phishing-resistant, passwordless FIDO2 security key where users authenticate with a simple tap. Digipass FX2 is a FIDO2 authenticator for digital banking, offering phishing-resistant WYSIWYS transaction signing on a trusted display. OneSpan is a board member of the FIDO Alliance and an active participant in FIDO2 working groups.[6][7][8]

OneSpan Application Shielding protects a mobile banking app from the inside out. OneSpan Application Shielding addresses threats such as tampering, reverse engineering, overlay attacks, code injection, code modification and data theft from the app. OneSpan Application Shielding allows the app to operate in environments such as jailbroken or rooted devices.[7]

OneSpan Sign is the eSignature platform built for customer agreements. OneSpan Sign manages the full agreement lifecycle from document preparation and identity assurance to electronic signatures and connected workflows. OneSpan Sign supports the file formats .doc, .pdf, .odt, .rtf and .txt. The OneSpan Sign Print Driver sends transactions directly to OneSpan Sign from any Windows-based application. OneSpan Sign lets customers define workflows and control every step in the process. OneSpan Sign brings identity verification into the agreement workflow. OneSpan Sign provides support for working with Trust Service Providers that issue certificate-based IDs used to validate the identity of signers. OneSpan Sign is designed to meet the requirements for simple, advanced and qualified e-signatures. OneSpan Sign provides both document and process audit trails for demonstrating compliance to auditors. For every digital agreement, OneSpan Sign generates a single tamper-evident audit trail. OneSpan Sign is offered with global data centers that support data residency requirements, private cloud and on-premises deployments. OneSpan Sign infrastructure is compliant with SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018 and FedRAMP requirements.[1][9][10][12]

OneSpan solutions cover digital agreements and transactions across banking, financial services, healthcare and professional services. OneSpan authentication solutions and services enable financial institutions to create digital customer journeys from onboarding to login and transaction signing. OneSpan services offerings are built on experience gained working with enterprise organizations all around the world.[4][5][6][7]

OneSpan on the record

Sources

OneSpan full record

  1. [1]onespan.comOneSpan · onespan.com · undated page, accessed October 16, 2026 · Tier A
  2. [2]News releasesOneSpan · onespan.com · published October 7, 2026 · Tier A
  3. [3]eSignature, Authentication, Mobile App Security | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  4. [4]About OneSpan - We protect the world from digital fraud | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  5. [5]Professional Services | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  6. [6]Authentication | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  7. [7]Customer Authentication | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  8. [8]Digipass FIDO2 security keys | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  9. [9]OneSpan Sign: eSignature platform for customer agreementsOneSpan · undated page, accessed November 10, 2026 · Tier A
  10. [10]OneSpan Sign: eSignature product features | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  11. [11]Qualified Electronic Signature | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  12. [12]OneSpan Sign FAQ | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  13. [13]The Shift to Digital Credentials Accelerates: OneSpan Launches Early Access at IdentiverseOneSpan · published June 15, 2026 · Tier A
  14. [14]OneSpan Introduces DigipassONE, Bringing a Unified Platform Approach to Authentication ModernizationOneSpan · published July 22, 2026 · Tier A
  15. [15]OneSpan Advances DigipassONE to Help Organizations Put Modern Authentication into PracticeOneSpan · published October 19, 2026 · Tier A
  16. [16]OneSpan Sign Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Promon full record

  1. [1]Promon completes acquisition of codesealer extending protection to web applications and the apis behind themPromon · promon.io · undated page, accessed September 27, 2026 · Tier A
  2. [2]promon.ioPromon · promon.io · undated page, accessed September 27, 2026 · Tier A
  3. [3]Promon Platform | The runtime intelligence platform for app securityPromon · undated page, accessed October 27, 2026 · Tier A
  4. [4]Promon | Runtime app protection and intelligence platformPromon · undated page, accessed October 27, 2026 · Tier A
  5. [5]Promon Shield for Mobile Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 27, 2026 · Tier C
  6. [6]Promon products | App security built for every surfacePromon · undated page, accessed November 10, 2026 · Tier A
  7. [7]Promon Shield for Mobile: Always-on mobile app security | PromonPromon · undated page, accessed November 10, 2026 · Tier A
  8. [8]Promon Shield for Desktop: App shielding for Windows & macOS | PromonPromon · undated page, accessed November 10, 2026 · Tier A
  9. [9]Promon Code Protect: Post-compile IP and code protection for mobile apps | PromonPromon · undated page, accessed November 10, 2026 · Tier A
  10. [10]Promon Data Protect: Secure sensitive data and app secrets | PromonPromon · undated page, accessed November 10, 2026 · Tier A
  11. [11]Promon Verify: API trust and attestation for mobile apps | PromonPromon · undated page, accessed November 10, 2026 · Tier A
  12. [12]Promon Control | Post-Deploy Runtime Protection Without Re-ShieldingPromon · undated page, accessed November 10, 2026 · Tier A
  13. [13]Promon Insight for App Risk™ mobile fraud & risk analytics | PromonPromon · undated page, accessed November 10, 2026 · Tier A
  14. [14]Promon solutions | App security by outcome, industry and use casePromon · undated page, accessed November 10, 2026 · Tier A
  15. [15]LexisNexis Risk Solutions and Promon align to strengthen mobile fraud preventionPromon · published June 30, 2026 · Tier A

Spot a factual error? Request a correction.