OneSpan (OSPN) Q2 2026 Earnings Call Transcript

Image source: The Motley Fool.

DATE

Tuesday, Aug. 4, 2026 at 4:30 p.m. ET

CALL PARTICIPANTS

• VP of Investor Relations - Joe Maxa
• Chief Executive Officer - Victor Limongelli
• Chief Financial Officer - Jorge Martell

Need a quote from a Motley Fool analyst? Email pr@fool.com

TAKEAWAYS

• Total Revenue -- $60.5 million, reflecting 1% growth as expansion in digital agreements was largely offset by anticipated declines in hardware and perpetual maintenance revenue.
• Subscription Revenue -- $46.7 million, increasing 11% year over year and now accounting for 77% of total revenue.
• Annual Recurring Revenue -- $189.7 million, representing 7% growth driven by expansion of existing customer contracts, new logos, and the acquisition of Build38.
• Digital Agreements Revenue -- $19.5 million, rising 25% due to strong overage revenue, expansion of renewal contracts, and new customer additions.
• Cybersecurity Revenue -- $40.9 million, declining 7% year over year as lower hardware and perpetual maintenance sales offset 2.5% growth in subscription revenue.
• Adjusted EBITDA -- $16.9 million, resulting in a 28% margin compared to 29.5% in the second quarter of 2025.
• Net Retention Rate -- 103%, reflecting stable expansion across the company's existing customer base.
• Digital Agreements Operating Income -- $7 million, or 36% of revenue, a significant increase from 18% in the prior year period driven by higher gross margins and revenue growth.
• Cybersecurity Operating Income -- $13.8 million, or 34% of revenue, down from 45% in the prior year due to increased operating costs from acquisitions and go-to-market investments.
• Gross Margin -- 73.6%, remaining relatively stable compared to 73.5% in the second quarter of 2025.
• Share Repurchases -- $2.9 million, used to buy back approximately 230,000 shares of common stock during the quarter.
• Dividends -- $4.8 million, paid as part of the company's recurring quarterly dividend program at $0.13 per share.
• Cash and Cash Equivalents -- $43.3 million, down from $70.5 million at the end of 2025 following acquisition payments and shareholder returns.
• Full-Year Revenue Guidance -- $248 million to $252 million, an increase from the previous range of $244 million to $249 million due to higher consumption in the e-signature business.
• Full-Year Adjusted EBITDA Guidance -- $67 million to $71 million, raised from the previous range of $64 million to $68 million.
• Software and Services Guidance -- $202 million to $204 million, reflecting increased volumes and consumption in Digital Agreements.
• Hardware Revenue Guidance -- $46 million to $48 million, increased from the previous $43 million to $45 million following stronger than planned bookings in the first half of the year.
• ARR Guidance -- $194 million to $198 million for the full year, with management expecting sequential increases in both divisions during the second half.
• Geographic Revenue Mix -- 46% from the Americas, 35% from EMEA, and 19% from Asia Pacific, with the Americas growing from 40% in the prior year.
• Hardware Revenue Seasonal Trend -- Management expects Q3 to be the seasonally lowest quarter for hardware revenue before a stronger Q4 recovery.

SUMMARY

Management reported a continued transition toward recurring software revenue, which now comprises the vast majority of the company's financial profile. The quarter was highlighted by the launch of a unified security platform designed to integrate recent acquisitions and provide a foundation for emerging AI-driven banking interactions. OneSpan Inc. (NASDAQ:OSPN) maintained its focus on profitability and capital return, increasing its full-year guidance for both revenue and earnings based on strong first-half transaction volumes and hardware bookings. The company stated it is prioritizing cross-selling new capabilities into its established global banking customer base to drive future subscription growth.

• CEO Limongelli stated that the launch of DigipassONE "unifies the innovations from our Nok Nok Labs and Build38 acquisitions" into a single platform for authentication, verification, and app protection.
• Management identified agentic-driven interactions as a future growth channel, predicting that banks will increasingly engage customers through AI agents that require specialized authentication and intent verification.
• CFO Martell noted that Digital Agreements overage revenue was higher by $2 million year over year, describing it as a "positive indicator of transaction volume growth" that often leads to expansion contracts.
• Limongelli noted that the company is preparing for European digital identity regulations that will require banks to accept digital wallets by the end of 2027.
• The company has returned over $40 million to shareholders, or more than $1 per share, through dividends and repurchases over the last four quarters.
• CEO Limongelli stated that the easiest path to higher software growth rates is a "cross-sell" strategy focused on selling new Verify and Protect components to the existing customer base.

INDUSTRY GLOSSARY

• DigipassONE: A unified cloud-based platform integrating authentication, identity verification, mobile app protection, and threat insights.
• FIDO2: A set of standards for fast, secure authentication that uses public-key cryptography to eliminate passwords.
• Phishing-resistant: Authentication methods, such as hardware keys or certain passkeys, that prevent attackers from intercepting login credentials.
• Verifiable Credentials: Cryptographically secure, tamper-proof digital versions of physical documents used for identity verification.
• App Shielding: Technology that protects mobile applications against tampering, reverse engineering, and runtime threats.
• Agentic Workflows: Digital interactions driven by AI agents capable of performing tasks or transactions on behalf of users.
• Overage Revenue: Fees charged to customers when their transaction volumes exceed the limits specified in their base subscription contracts.

Full Conference Call Transcript

Operator: Good day and thank you for standing by. Welcome to the OneSpan Second Quarter 2026 Earnings Conference Call. Please be advised that today's conference is being recorded. I would now like to hand the conference over to your first speaker today, Joe Maxa, VP of Investor Relations. Please go ahead.

Joe Maxa: Thank you, Operator. Hello, everyone. Thank you for joining the OneSpan Second Quarter 2026 Earnings Conference Call. This call is being webcast and can be accessed on the Investor Relations section of OneSpan's website at investors.onespan.com. Joining me on the call today is Victor Limongelli, our Chief Executive Officer; and Jorge Martell, our Chief Financial Officer. This afternoon, after market close, OneSpan issued a press release announcing results for our second quarter of 2026. To access a copy of the press release and other investor information, please visit our website. Following our prepared comments today, we will open the call for questions.

Please note that statements made during this conference call that relate to future plans, events, or performance, including the outlook for full year 2026 and other long-term financial targets are forward-looking statements. These statements involve risks and uncertainties and are based on current assumptions. Consequently, actual results could differ materially from the expectations expressed in these forward-looking statements. I direct your attention to today's press release and the company's filings with the U.S. Securities and Exchange Commission for a discussion of such risks and uncertainties. Also note that certain financial measures that may be discussed on this call are expressed on a non-GAAP basis and have been adjusted from a related GAAP financial measure.

We have provided an explanation for and reconciliations of these non-GAAP financial measures to the most directly comparable GAAP financial measures in the earnings press release and in the investor presentation available on our website. In addition, please note that all growth rates discussed on this call refer to a year-over-year basis unless otherwise indicated. The date of this conference call is August 4, 2026. Any forward-looking statements and related assumptions are made as of this date. Except as required by law, we undertake no obligation to update these statements as a result of new information or future events or for any other reason. I will now turn the call over to Victor.

Victor Limongelli: Thank you, Joe. Hello, everyone. Thank you for joining us today. We had a strong second quarter, including subscription revenue growth of 11% and solid profitability with an adjusted EBITDA margin of 28%. Before reviewing our results in more detail, I'd like to spend a few minutes discussing our recently launched DigipassONE authentication platform, which represents an important milestone in OneSpan's evolution. DigipassONE unifies the innovations from our Nok Labs and Build38 acquisitions with OneSpan's existing capabilities, delivering a single integrated platform solution. DigipassONE includes 4 components: DigipassONE Authenticate, DigipassONE Verify, DigipassONE Protect and DigipassONE Insights.

First and foremost, DigipassONE Authenticate builds on the foundation of the world's broadest suite of authentication functionality, including passkeys, FIDO2 security keys, hardware tokens, mobile authenticators and software authenticators, to deliver secure phishing-resistant login and transaction signing. Banks and other high-value, high-trust customers gain the flexibility to support different users, devices and authentication preferences through a unified platform. DigipassONE Verify expands the platform with our new capabilities for verifiable credentials and digital wallets. Verifiable credentials are designed to improve onboarding, authentication and trust by enabling cryptographically secure and tamper-proof identity verification. DigipassONE Protect strengthens the offering with our mobile application shielding technology.

Delivered via both SDKs and post-compilation app wrapping, it protects mobile apps against tampering, abuse and runtime threats, promoting reliability and trustworthiness for users. Last but not least, DigipassONE Insights ties it all together with telemetry and analytical insights across authentication flows and application protection signals so that customers can better react to imminent threats or challenging operating environments. Looking ahead, over the next few years, we expect consumers to begin using agents to conduct banking and other high-value transactions, and we further expect that the development of this new channel for customer interaction will augment, not replace, the existing channels of in-person, online and mobile.

In other words, in the future, banks will continue to engage with their customers across branches, websites and mobile apps while adding a new category of agent-driven banking interactions. DigipassONE provides the foundation to help banks and other high-value, high-trust businesses authenticate customers, verify intent, and protect transactions across both existing and emerging channels. We see the shift to agentic-driven interactions in the future as an opportunity to extend our offering and further strengthen our value to our customers. Stepping back, the launch of DigipassONE is a key milestone in a broader platform strategy that strengthens our ability to innovate, deepen customer relationships, address new market opportunities and support long-term growth.

Turning to our Digital Agreements business, where we focus on delivering secure, seamless agreement workflows purpose built for financial services and other highly regulated industries. We believe our combination of white-labeled e-signatures, identity verification and workflow automation provides a meaningful differentiator in the market. In addition, we are investing in AI-enabled capabilities designed to help customers improve efficiency, gain deeper insights from agreement workflows, deliver a better end-user experience, seamlessly integrate with agentic workflows and simplify deployment within existing environments. Turning to our results. As mentioned, we had a solid second quarter, including generating $17 million of adjusted EBITDA or 28% of revenue. We ended the second quarter with annual recurring revenue of $190 million, up 7% year-over-year.

Total Q2 revenue grew 1% to $60.5 million, and second quarter subscription revenue grew 11% to $47 million and accounted for 77% of total revenue, up from 70% in last year's Q2. Both business units continued to be solidly profitable at the division level, supporting our Board's commitment to a balanced capital allocation strategy that considers shareholder returns, organic investment and targeted M&A. In the second quarter, we returned almost $8 million to shareholders through dividends and share repurchases. And on an aggregate basis over the last four quarters, the total return to shareholders exceeds $40 million or over $1 per share.

The Board has also approved a quarterly dividend of $0.13 per share to be paid in the current quarter, and we'll continue to evaluate additional share repurchase opportunities. In summary, we continue to make progress in building a stronger foundation for future growth. We have expanded our capabilities through targeted acquisitions and internal innovation, both of which are evidenced in the launch of DigipassONE. We remain focused on serving our customers now and investing for the future in order to be able to continue delivering value to them for years to come. With that, I'll turn the call over to Jorge.

Jorge Martell: Thanks, Victor, and good afternoon, everyone. I'm very pleased to report another strong quarter and continued progress in building a solid foundation for growth. I'm particularly excited about our recent launch of DigipassONE, our platform strategy built to help customers modernize authentication and address other security needs without disrupting existing systems, user experience or business operations. Turning to our results. Annual recurring revenue, or ARR, increased 6.7% year-over-year to $189.7 million, driven by expansion of existing customer contracts, new logos and the acquisition of Build38. Our net retention rate, or NRR, was 103%.

Q2 revenue was $60.5 million, an increase of 1% compared to last year's second quarter, driven by 11% growth in subscription revenue, partially offset by a decline in hardware revenue due to the fact that significant hardware revenue had been pulled forward into Q1, which we discussed with you last quarter, as well as a decline in perpetual maintenance revenue as customers continue to move to term licenses. For the quarter, as Victor mentioned, subscription revenue increased to 77% of total revenue, up from 70% in the prior year quarter. While hardware and perpetual maintenance revenues accounted for a combined 23% of total revenue as compared to 30% in last year's Q2.

Gross margin was 73.6% compared to 73.5% in Q2 of last year. GAAP operating income was $8.7 million compared to $10.5 million in Q2 2025. The year-over-year change primarily reflects increased operating costs related to our recent acquisitions, including headcount, as well as certain cost-related go-to-market leadership and other organic investments. GAAP net income per share was $0.18 compared to $0.21 in the second quarter of last year. Non-GAAP net income per share was $0.30 compared to $0.34 in last year's Q2. Adjusted EBITDA and adjusted EBITDA margin were $16.9 million and 27.9%, respectively. This is compared to $17.6 million and 29.5% in the same period last year.

Next, I will discuss the financial results for our 2 business divisions starting with Cybersecurity. Cybersecurity ARR grew 7.4% year-over-year to $123 million, inclusive of the $3 million headwind we discussed last quarter and the acquisition of Build38. Revenue decreased 7.5% to $40.9 million. Subscription revenue grew 2.5% to $27.2 million, driven by customer expansion contracts, new logos as well as revenue from our acquisitions of Nok and Build38, partially offset by lower year-over-year multi-year term license revenue and lower past-due renewal catch-up revenue this quarter compared to last year's second quarter as we continue to improve our on-time renewal performance. As noted, hardware and perpetual maintenance revenue declined as expected.

Gross margin for the Cybersecurity division was 73% compared to 74% in the prior year quarter, primarily reflecting incremental third-party license costs and incremental amortization of capitalized software costs from the Build38 acquisition. Operating income was $13.8 million or 34% of revenue compared to $19.8 million or 45% of revenue in last year's Q2. The year-over-year change was driven by the differences in revenue and gross margin just discussed, an increase in operating expenses from acquired companies and increased organic investments. Now turning to Digital Agreements. ARR grew 5.3% year-over-year to $66.7 million. Revenue grew 25.2% to $19.5 million, driven by strong overage revenue, expansion of renewal contracts and new customer additions.

We are encouraged by the strong overage revenue because it is a positive indicator of transaction volume growth, which often results in expansion contracts with existing customers due to higher utilization rates. We expect additional overages in the third quarter of 2026 but not to the same extent as in Q2. As a reminder, overages are not included in ARR or NRR. Gross margin improved to 74.7%, up from 71.4% in the prior year period, primarily reflecting higher revenue, including overage revenue. Operating income was $7 million or 35.7% of revenue compared to $2.9 million or 18.4% of revenue in the same period last year.

The strong improvement in operating income was primarily driven by revenue growth, higher gross margin and a modest decline in operating expenses, primarily reflecting higher internal software capitalization costs. Turning to our balance sheet. We ended the second quarter with $43.3 million in cash and cash equivalents and $5 million outstanding under our credit facility compared to $49.8 million in cash and cash equivalents and no outstanding debt at the end of the first quarter. During the quarter, our primary cash outflows, including $4.8 million for our quarterly dividend, $2.9 million to repurchase approximately 230,000 shares of common stock and $3 million for capitalized software development costs.

Operating cash flow was a modest outflow of $0.1 million, primarily reflecting normal net working capital fluctuations. By geographic region, revenue in the second quarter of 2026 was 46% from the Americas, 35% from EMEA and 19% from Asia Pacific compared to 40%, 39% and 21% from the same regions in the second quarter of 2025, respectively. The year-over-year changes in revenue by region primarily reflect growth in digital agreements and cybersecurity software in the Americas, which is consistent with our investment strategy and plan; lower cybersecurity hardware, and software revenue in EMEA partially offset by growth in digital agreements; and lower hardware revenue in Asia Pacific, partially offset by an increase in cybersecurity software.

Now turning to some modeling notes and our outlook. We are pleased with our second quarter results and the progress we've made in positioning the company for long-term growth. For the full year 2026, we are increasing our revenue guidance primarily to reflect higher volumes and consumption in our e-signature business that is expected to result in incremental contract overages, along with an increase in expected hardware revenue in the second half of the year, primarily Q4, due to increased hardware bookings in the first half of the year as compared to our plan.

Our current hardware revenue forecast calls for about 1/3 of the second half hardware revenue to be recognized in Q3, which is consistent with the last couple of years showing Q3 as the seasonally lowest of the 4 quarters, followed by a much stronger fourth quarter. More specifically, for the full year 2026, we expect total revenue to be in the range of $248 million to $252 million as compared to our previous guidance range of $244 million to $249 million. We expect software and services revenue to be in the range of $202 million to $204 million as compared to our previous guidance range of $201 million to $204 million.

We expect hardware revenue to be in the range of $46 million to $48 million as compared to our previous guidance range of $43 million to $45 million. We expect ARR to be in the range of $194 million to $198 million, and we expect adjusted EBITDA to be in the range of $67 million to $71 million as compared to our previous guidance range of $64 million to $68 million. That concludes my remarks. I will now turn the call back to Victor.

Victor Limongelli: Thanks, Jorge. To recap, we are pleased with our second quarter results and the progress we continue to make across the business. We are serving our customers with mission-critical solutions, investing in areas where we see meaningful growth opportunities and maintaining the financial discipline that enables us to return capital to shareholders. We believe OneSpan is becoming a stronger and more focused company, and we remain committed to creating long-term value for our customers and shareholders. Jorge and I will now be happy to take your questions.

Operator: Our first question comes from Gray Powell from U.S. Bank.

Gray Powell: Maybe a couple on my side and more of a high-level question, I guess. So just thinking out like over the next year or 2, as hardware becomes a smaller component of the business, how should we think about the potential for growth to improve on a sustainable basis? And then just more specifically, what are like the 2 or 3 things that need to happen for OneSpan to sustainably get revenue growth back into the, call it, mid- to high single digits on an organic basis?

Victor Limongelli: Yes, thanks, Gray. So I think you're familiar with this. We've certainly talked about it in the past, and you can see it in the numbers. Over time, our software business has been growing, and we had an offset, a negative offset from the hardware business for quite some time. And we felt like if we could get the hardware business stable, maybe have some revenue coming from the newer security keys as well as stabilization in the overall hardware business, that, that growth would show up -- overall growth would show up as a result of the software growth. So we've seen -- you see in the subscription revenue numbers. You see it in the ARR numbers.

We've been having solid software growth, and we expect that to continue. Obviously we're not giving guidance for next year, but we have some exciting things happening in terms of our product portfolio, the new DigipassONE platform, and we have emerging technologies with DigipassONE Verify as well, so -- as well as new hires that we've announced on the go-to-market side, new head of marketing, new channel leader, et cetera. So we are taking all those steps to build for additional growth and get those targets that you're talking about.

Gray Powell: Okay. That's helpful. And then just, I guess, a separate question. So look, I know DigipassONE has only been out a couple of weeks. Anything you can say on early feedback or customer interest? And then just trying to think through like what kind of ASP uplift you think that could create for the platform and the potential for net retention rates to improve off of current levels.

Victor Limongelli: Yes, so if you think about the platform, we had a very strong authentication offering, which we strengthened considerably about a year ago, a little over a year ago when we bought Nok and added the passkey capability. So we have that strong authentication platform, and we have been providing app shielding, what we're calling DigipassONE Protect for some time, but now we own the technology with the acquisition of Build38. So those are cross opportunities going to all the banks that we have and adding app shielding and a potential new capability -- not a potential, a new capability that we're developing, DigipassONE Verify. So those are cross opportunities.

If you think about how to increase revenue growth rates, you're either selling existing things to new customers or new things to existing customers or new or existing things to new customers as well, but the easiest path there is going to be a cross-sell, is to sell new things to existing customers. And that's what we're trying to do, to drive up the attach rate with DigipassONE Protect, to start down the path of an attach rate with DigipassONE Verify since that's new. And both of those give us an opportunity because we do have this great customer base built out over many years, and that's where we see the most straightforward way to increase the software growth rates.

Operator: Our next question comes from Catharine Trebnick from Rosenblatt.

Catharine Trebnick: You frame the agent-driven interactions as incremental in the channel. I know you just released this product. So any specific use cases that your marketing team has identified that you're going after, like high-value payments, dispute resolution? And then what are you actually seeing in the budget for '26? Or should we really think of this more like a '27 item? And then Gray already grabbed my question on the ASP.

Victor Limongelli: So Catharine, to clarify, are you asking about DigipassONE Verify?

Catharine Trebnick: Yes.

Victor Limongelli: Yes, so that's a new capability. We're doing POCs with customers in the second half of the year. We released an early release version of that in June, and we expect to be learning a lot more about budgets as we go through the process.

Catharine Trebnick: But...

Victor Limongelli: I think you know this, but in general -- oh, go ahead. Sorry.

Catharine Trebnick: No, no, I'm just trying to figure out what use cases you'd be targeting with that and how different that is from what you're currently selling.

Victor Limongelli: So if you think about what it's doing, there is a European digital identity regulations. The countries have to have wallet specifications done by the end of the year. Obviously, that's going to be many, many different wallets. You have Google and Apple as well so -- and then banks are going to have to accept them by the end of '27. So we see this as just such a great complement to our authentication offering because people are going to, in a cryptographically tamper-proof way, prove their identity, which is obviously super important in onboarding and in general, in authentication.

So we see this as an add-on that a lot of banks, well, first of all, in Europe are going to be -- they're going to be regulatory drivers behind it, but also in other markets, it's going to be a super helpful way to make for more secure interactions with your customers. Now in terms of budgets for it, there are regulatory drivers in '27. Most of our, probably over half of our bookings come between September and Labor Day and the end of the year. So we're heading into our busy season in terms of sales.

And I would say, we don't have a clear read on 2027 budgets from our customers yet because we're focused, as you might imagine, very much on closing 2026 business. But the POCs and the interest we're seeing from customers are a good sign.

Operator: Our next question comes from Erik Suppiger from B. Riley Securities.

Erik Suppiger: Congrats on a good quarter and getting DigipassONE out. Just following up on Catharine's question. What adoption -- what are the use cases for banks that are using AI agents for banking? And then I'm just curious on the Digital Agreements side, was the overage associated with a particular account? Or is this more of a broader trend? It seemed like it was a particularly strong quarter and you're talking about some strength in Q3. So what's driving that?

Victor Limongelli: Yes, so I'll let Jorge answer the overage question, but let me talk about AI agents. So what we believe will occur -- so if you think about mobile banking apps, the most common activities that are undertaken by customers are things that are pretty straightforward, checking their balance, sending money to a friend or a payment for something, monitoring transactions that have hit or not hit their account. And we think that agents will do, not all of it, right? I think this is going to be a new channel for banks, not a -- everything will happen with agents. So if you fast forward, 4 or 5 years, then banks are interacting with customers in their physical branches.

Some people still go into those, a few people at least. Through websites, on a laptop or desktop, through a mobile banking app, which is very, very common today, but also through agentic workflows. Now, the ability for a bank to accept those agentic workflows, for a consumer to have an agent that they use to hit multiple different accounts and for the bank to be able to authenticate that this agent is authorized to act on behalf of this consumer and to verify intent, there's work to be done on those things. But I think that channel is absolutely coming.

And the more -- one of the things that we offer to banks and other high-trust, high-value customers is this breadth of offering. So it's not -- we're not offering just passkeys or just protection for your mobile banking app, but across the ways that you interact with your customers, you don't need multiple vendors for this consumer -- customer interaction. You can use OneSpan and cover -- well, we don't cover branches, I guess, but you can cover all of the digital channels.

Jorge Martell: Yes, I can jump in and address the Digital Agreements overage question, Erik. Thanks for that question. So look, I think we're pretty happy in terms of how DA performed for the quarter, 25% growth. Even if you exclude the overages, which were about year-over-year higher by $2-and-change million, you still get to a growth, Erik, of double digit, 11.3%, which is pretty encouraging. And again, when you think about -- take a step back and think about how are these overages generated. They're generated because our clients are overutilizing our -- the volume of transactions they committed, which is a good thing.

Arguably, you can think about overages as a leading indicator for ARR, if you would, because often happens that overages then translate into higher expansion contracts now part of ARR. At this point, if it's an overage, it's not part of ARR. So it's not part of NRR and all those metrics but -- so you can think about overages as a leading indicator for ARR and then a leading indicator for revenue. So we feel good about that, obviously happy with the performance. And yes, it did come from, I would say, a couple of customers primarily, Erik.

We normally have a run rate of overages for the full year, I'll talk full year now, probably about $1 million to $1.5 million. I think this year, we're obviously going to exceed that amount. For the second half of the year, it's going to be much less than we recognized so far in the first half, but nonetheless, we feel good about overages. We like overages not only because it is revenue, but it is a leading indicator for activity in our platform.

Erik Suppiger: Okay. And then real quick on -- one last one on the hardware. It looks like you're looking for a pretty strong second half. Is that driven by FIDO2? Or is there anything that's incrementally picking up in the second half within the hardware?

Jorge Martell: Yes, we -- I can add.

Victor Limongelli: Go ahead, Jorge. Go ahead.

Jorge Martell: Sorry, just real quickly. So yes, so we increased our guidance for hardware from $44 million midpoint to now $47 million, Erik. The primary reason for that is, I guess, a couple things. One is we saw better activity or higher activity compared to our plan bookings in this case. In the first half of the year, which gives us confidence in terms of when these orders are going to get delivered. The earlier we have the bookings, the higher likelihood that those bookings will get delivered in year. And so for that reason, we increased our -- have a better visibility and then increased our guidance as well. Go ahead, Vic.

Victor Limongelli: Yes, I was going to say, the FIDO2 security keys, we see an avenue for that even within banking to make for easier login. Primarily -- not exclusively but primarily in a corporate banking market, where hardware is a little bit stronger in corporate banking than in consumers, consumers tend to use a mobile banking app. Many, many corporate customers, if they're a treasury department or something like that are doing their online banking in front of a big screen, where a hardware device is not inconvenient. They keep it in their desk drawer and then they use it when it's time to login and time for transaction signing as well.

So we see the FIDO token opportunity there as well, looking ahead to '27, which is one of the reasons we feel good about -- well, better than we have in the past about hardware, about being able to have that be a flattish business rather than a declining business. Obviously, we haven't given '27 guidance, but it's encouraging, what we've seen in '26 on the hardware side.

Erik Suppiger: Okay. And it sounds like it's finally the FIDO2 is offsetting the decline in the legacy hardware products. Is that right?

Victor Limongelli: It's promising on the banking side overall and getting hardware to a -- it was quite a large business a decade ago. So getting it to a flat to potentially even growing if things go really well, business really helps the overall number. Even though, of course, software is the overwhelming majority of our business, it helps to not to have a decline in a segment.

Operator: Our next question comes from Rudy Kessinger from D.A. Davidson. Please go ahead.

Rudy Kessinger: Just one for me. What did renewals look like in the quarter? I know the overage is good. The hardware looks like it's better, but if I look at ARR, if you take a step down quarter-by-quarter, your expansion rate stepped down a couple points quarter-over-quarter as well. So what do renewals look like? Or any color on the quarter-over-quarter declines in those metrics?

Jorge Martell: Yes, I can give you some commentary. Rudy, thanks for the question. So look, I think GRR metrics for the businesses were, I'd say, relatively consistent. I think Digital Agreements was in the 93-ish percent, and the GRR for security business was in the kind of 86-ish percent, Rudy, so relatively consistent, within the band. As we mentioned, sequentially, we were going to have a hit of about $3 million just sequential Q1 to Q2, and that's already part of these numbers. As we go into the second half of the year, we expect to see sequential increases on both DA and security but overall, I think I would say healthy renewal rates. We're getting more proactive.

The team is doing a fantastic job at being proactive, reaching out to customers and trying to secure those renewals as early as possible. And it gives us visibility into the timing. And one of the things that you also notice in my prepared remarks, Rudy, is that, year-over-year, we did have less, call it, catch-up revenue from past-due renewal just year-over-year. And that's also an indication that as we get better at renewals and those renewals are getting timely renewed, then you're not going to see this incremental lumpiness, if you would, because renewals are getting close to past due. And so that's also another sign that the team is doing great on renewals and we're improving those metrics.

Operator: Our next question comes from Anja Soderstrom from Sidoti.

Anja Soderstrom: Most of them have been addressed already, but I'm just curious in terms of M&A. You've been quite acquisitive over the past couple of years. What's your appetite for more acquisitions? And what would you be looking for?

Victor Limongelli: Well, we're certainly -- as you can tell by the last 13 or 14 months, we're certainly open to the idea if it fits into our product strategy. And you can see, really happy with the way we were able to take those 2 and fold it into our overall offering with DigipassONE. You can see how that strengthens the overall business. We're going to continue to be opportunistic and look for -- the term we've used is targeted M&A. We want to be prudent in how we do it and not reckless. So we're definitely going to be looking for things that fit in well and that makes sense for us.

And then the other thing, really kudos to our team and the teams from Nok and Build38 that joined us because the integrations have done very well. We've been able to build a unified team, I think, and retain talent, and all those things have been good proof points for us to make us continue to think that's a viable strategy. In terms of what we would be looking for, I don't want to disclose too much in that area, but you can see, I think, strategically where we're headed. So things that fit into our overall strategy, we'll continue to look for them.

Anja Soderstrom: And how do you see the market has developed over the past couple of months? Has it been -- the valuations come down or come up? Or what do you...

Victor Limongelli: Well, it's not like we're -- it's not like -- I don't know if we're the right person to ask on the month-by-month M&A market because we're looking, but we're not actively bidding every month on a business. Overall, I think we were very, very happy with the talent that we acquired and the technology we acquired with the deal in -- earlier this year in March with Build38 as well as last summer with Nok, and we'll continue to look.

Anja Soderstrom: Okay. And also, I'm just curious about the update to your go-to-market leadership and marketing. How is that evolving? And when do you expect to see some tangible results from those changes?

Victor Limongelli: Yes, I mean, look, we're already seeing results. I mean, the DigipassONE launch was -- I don't think would have gone as well or as smoothly without our new head of marketing. So the impact's already being felt. Channel and marketing are both super important. Revenue -- I think it's fair to say, if you think about a 9- to 12-month sales cycle for most of our customers and our deals, I think the impact's more in '27 than in '26 in terms of tangible revenue. But in terms of execution, we're already seeing an impact.

Operator: This concludes the question-and-answer session. I would now like to turn it back to Joe for closing remarks.

Joe Maxa: Thank you, everyone, for joining us today. We look forward to updating you again next quarter. Have a nice evening.

Operator: Thank you for your participation in today's conference. This does conclude the program and you may now disconnect.

This article is a transcript of this conference call produced for The Motley Fool. While we strive for our Foolish Best, there may be errors, omissions, or inaccuracies in this transcript. Parts of this article were created using Large Language Models (LLMs) based on The Motley Fool's insights and investing approach. It has been reviewed by our AI quality control systems. Since LLMs cannot (currently) own stocks, it has no positions in any of the stocks mentioned. As with all our articles, The Motley Fool does not assume any responsibility for your use of this content, and we strongly encourage you to do your own research, including listening to the call yourself and reading the company's SEC filings. Please see our Terms and Conditions for additional details, including our Obligatory Capitalized Disclaimers of Liability.

The Motley Fool has no position in any of the stocks mentioned. The Motley Fool has a disclosure policy.