Cuộc họp báo cáo kết quả kinh doanh Quý 3/2026 của OneSpan (OSPN): Doanh thu tăng 12%, nâng dự phóng

Các điểm chính

• OneSpan báo cáo doanh thu quý 3/2026 đạt 63,9 triệu USD, tăng 12% so với cùng kỳ năm trước. Doanh thu dịch vụ đăng ký tăng 16% lên 51,5 triệu USD và chiếm 81% tổng doanh thu.
• Doanh thu định kỳ hàng năm (ARR) tăng 8,5% lên 195,5 triệu USD và tăng 5,9 triệu USD so với quý trước. Tỷ lệ duy trì doanh thu thuần cải thiện lên 105% từ mức 103% của quý trước, trong khi tỷ lệ duy trì doanh thu gộp đạt 91%.
• Biên lợi nhuận gộp mở rộng lên 76,3% từ mức 73,6%. EBITDA đã điều chỉnh tăng lên 19,3 triệu USD, mặc dù biên EBITDA đã điều chỉnh giảm xuống 30,1% từ mức 30,7%.
• Cả hai bộ phận đều đạt mức tăng trưởng doanh thu hai chữ số. Doanh thu mảng An ninh mạng tăng 11,3% lên 44,9 triệu USD, trong khi doanh thu mảng Thỏa thuận kỹ thuật số tăng 13,5% lên 19,0 triệu USD.
• Ban lãnh đạo đã nâng dự báo cho cả năm 2026. Doanh thu hiện dự kiến đạt từ 254 triệu USD đến 258 triệu USD, và EBITDA đã điều chỉnh dự kiến đạt từ 72 triệu USD đến 76 triệu USD.
• Công ty đã công bố cổ tức hàng quý là 0,13 USD cho mỗi cổ phiếu. Kể từ đầu năm 2025, OneSpan đã hoàn trả 55 triệu USD, tương đương dưới 1,50 USD cho mỗi cổ phiếu, thông qua cổ tức và mua lại cổ phiếu.

Dữ liệu tài chính chính

OneSpan kết thúc quý với 51,4 triệu USD tiền và các khoản tương đương tiền cùng 5 triệu USD dư nợ theo hạn mức tín dụng. Khoản vay này đã được hoàn trả sau khi kết thúc quý.

Kết quả kinh doanh và hoạt động

An ninh mạng

Doanh thu mảng An ninh mạng tăng 11,3% lên 44,9 triệu USD. Doanh thu dịch vụ đăng ký tăng 17,4% lên 32,5 triệu USD, nhờ vào việc mở rộng khách hàng, các giấy phép sử dụng có thời hạn nhiều năm, khách hàng mới, các thương vụ thâu tóm, sản phẩm mới và doanh thu gia hạn tính bù.

Doanh thu phần cứng tăng 7% lên 10,5 triệu USD do một số khách hàng yêu cầu giao thiết bị xác thực Digipass sớm hơn dự kiến vốn ban đầu được lên kế hoạch vào quý 4. ARR mảng An ninh mạng tăng 10,1% lên 127,2 triệu USD.

Biên lợi nhuận gộp của bộ phận này cải thiện lên 77% từ mức 74%. Lợi nhuận hoạt động tăng lên 18,5 triệu USD từ 16,7 triệu USD và duy trì ở mức 41% doanh thu.

Ban lãnh đạo cho biết DigipassONE đang thúc đẩy các cuộc thảo luận với khách hàng và giúp tăng cường tỷ lệ duy trì. DigipassONE Verify dự kiến sẽ ra mắt vào quý 1, trong khi DigipassONE Insights dự kiến sẽ theo sau. Verify được thiết kế để hỗ trợ chứng thư số và nhiều hệ sinh thái ví trước yêu cầu về định danh kỹ thuật số của châu Âu dành cho các ngân hàng vào tháng 12 năm 2027.

Thỏa thuận kỹ thuật số

Doanh thu mảng Thỏa thuận kỹ thuật số tăng 13,5% lên 19,0 triệu USD, nhờ doanh thu vượt định mức, các hợp đồng gia hạn được mở rộng và khách hàng mới. ARR tăng 5,7% lên 68,4 triệu USD.

Biên lợi nhuận gộp cải thiện lên 74% từ mức 72%, phản ánh doanh thu cao hơn và hiệu quả hạ tầng điện toán đám mây tốt hơn. Lợi nhuận hoạt động tăng lên 6,9 triệu USD, tương đương 37% doanh thu, từ 4,2 triệu USD, tương đương 25%.

Một khách hàng ngân hàng lớn đã chuyển từ hình thức sử dụng theo dung lượng vượt định mức sang cam kết hợp đồng nhiều năm lớn hơn. OneSpan cũng đang bổ sung giao diện người dùng được thiết kế lại, xác thực tài liệu hỗ trợ bởi AI, xác minh danh tính nâng cao và mở rộng tích hợp vào OneSpan Sign. Cho đến nay, công ty đã đóng gói các năng lực AI của mình để tạo sự biệt hóa cho sản phẩm.

Cơ cấu theo khu vực địa lý

Khu vực Châu Mỹ đóng góp 43% doanh thu quý 3, EMEA đóng góp 37% và Châu Á - Thái Bình Dương đóng góp 20%. Doanh thu tăng trưởng tại cả ba khu vực, dẫn đầu là Châu Á - Thái Bình Dương, tiếp theo là EMEA và Châu Mỹ.

Dự báo của ban lãnh đạo

Ban lãnh đạo dự kiến biên lợi nhuận gộp cả năm sẽ cao hơn một chút so với mức 74%. Trong quý 4, doanh thu phần mềm và dịch vụ dự kiến sẽ vượt dự báo trước đó của công ty, một phần bị bù trừ bởi doanh thu phần cứng thấp hơn do một số lô hàng đã được hoàn tất bàn giao trong quý 3.

Rủi ro và các điểm cần theo dõi

• Doanh thu từ giấy phép sử dụng có thời hạn nhiều năm và doanh thu gia hạn tính bù có thể biến động giữa các quý.
• Doanh thu phần cứng quý 3 đã hưởng lợi từ các lô hàng được đẩy sớm lên từ quý 4, làm giảm đóng góp dự kiến của mảng phần cứng trong quý 4 mà không làm thay đổi triển vọng phần cứng cả năm.
• Doanh thu vượt định mức của mảng Thỏa thuận kỹ thuật số dự kiến sẽ giảm so với quý trước trong quý 4 về mức bình thường hơn sau khi một khách hàng lớn chuyển sang hợp đồng phân bổ theo thời gian có giá trị lớn hơn.
• Ban lãnh đạo dự kiến tác động từ việc mất các khách hàng lớn đã được nhận diện trước đó sẽ tiếp tục kéo dài trong vài quý tới.
• Chu kỳ bán hàng với các ngân hàng lớn thường kéo dài, do đó các sản phẩm mới ra mắt có thể mất thời gian để đóng góp đáng kể vào doanh thu.
• Hai trong số bốn hợp phần của DigipassONE là Verify và Insights vẫn chưa được phát hành tại thời điểm diễn ra cuộc họp.

Tóm tắt phiên hỏi đáp với chuyên gia phân tích

• Triển vọng mảng phần cứng: Ban lãnh đạo đánh giá mảng kinh doanh phần cứng hiện tại bền vững hơn so với các năm trước. Khóa bảo mật FIDO2 đang tạo đà tăng trưởng và dự kiến sẽ đóng góp nhiều hơn từ năm 2027 trở đi, mặc dù doanh thu phần cứng trong ba quý đầu năm 2026 vẫn chủ yếu gắn liền với các thiết bị xác thực ngân hàng thế hệ cũ.
• Động lực tăng trưởng ARR: Tăng trưởng diễn ra diện rộng trên các khu vực địa lý nhưng chủ yếu đến từ việc mở rộng trong tập khách hàng hiện hữu. Build38 và ThreatFabric đóng góp ở mức khiêm tốn, trong khi các sản phẩm truyền thống và sản phẩm hiện có vẫn là những động lực chính.
• Đóng góp từ khách hàng mới: Tăng trưởng của mảng An ninh mạng nghiêng về các khách hàng hiện hữu do OneSpan đã phục vụ 60 trong số 100 ngân hàng lớn nhất thế giới. Theo ban lãnh đạo, trong mảng Thỏa thuận kỹ thuật số, khách hàng mới chiếm khoảng 20% đến 30% mức tăng trưởng ARR.
• Tiềm năng tăng trưởng năm 2027: Ban lãnh đạo không đưa ra dự báo cho năm 2027 nhưng cho biết họ cảm thấy khả quan hơn về tình hình kinh doanh so với 6 hoặc 12 tháng trước. DigipassONE và các năng lực mới của mảng Thỏa thuận kỹ thuật số nhằm hỗ trợ duy trì, mở rộng và tăng trưởng dài hạn.
• Passkey và phần cứng: Ban lãnh đạo kỳ vọng sự kết hợp giữa các phương thức xác thực thay vì thay thế hoàn toàn phần cứng. Phần cứng vẫn phổ biến hơn trong các trường hợp sử dụng của doanh nghiệp, Châu Âu và Châu Á - Thái Bình Dương so với ngân hàng bán lẻ hoặc Bắc Mỹ.

Toàn văn biên bản cuộc họp kết quả kinh doanh

Toàn văn cuộc gọi công bố kết quả kinh doanh

Phần trình bày của ban lãnh đạo

Operator

Good day, everyone. Welcome to the OneSpan Quarter 3 2026 Earnings Call.

[Operator Instructions] This call is being recorded. If you have any objections, please disconnect at this time.

I would now like to turn the call over to Joe Maxa, Vice President of Investor Relations. Please go ahead.

Joe Maxa

Thank you, operator. Hello, everyone. Thank you for joining the OneSpan Third Quarter 2026 Earnings Conference Call.

This call is being webcast and can be accessed on the Investor Relations section of OneSpan's website at investors.onespan.com.

Joining me on the call today is Victor Limongelli, our Chief Executive Officer; and Jorge Martell, our Chief Financial Officer. This afternoon, after market close, OneSpan issued a press release announcing results for our third quarter of 2026. To access a copy of the press release and other investor information, please visit our website. Following our prepared comments today, we will open the call for questions.

Please note that statements made during this conference call that relate to future plans, events or performance, including the outlook for full year 2026 and other long-term financial targets are forward-looking statements. These statements involve risks and uncertainties and are based on current assumptions.

Consequently, actual results could differ materially from the expectations expressed in these forward-looking statements. I direct your attention to today's press release and the company's filings with the U.S. Securities and Exchange Commission for a discussion of such risks and uncertainties.

Also note that certain financial measures that may be discussed on this call are expressed on a non-GAAP basis and have been adjusted from a related GAAP financial measure. We have provided an explanation for and reconciliations of these non-GAAP financial measures to the most directly comparable GAAP financial measures in the earnings press release and in the investor presentation available on our website.

In addition, please note that all growth rates discussed on this call refer to a year-over-year basis unless otherwise indicated. The date of this conference call is October 29, 2026. Any forward-looking statements and related assumptions are made as of this date. Except as required by law, we undertake no obligation to update these statements as a result of new information or future events or for any other reason.

I will now turn the call over to Victor.

Victor Limongelli

Thank you, Joe. Hello, everyone. Thank you for joining us today.

Our goal for 2026 was to deliver solid performance while positioning the company for future growth. We are achieving those goals. We had an excellent third quarter with 12% revenue growth, including 16% subscription revenue growth and a 12% increase in operating income.

Before diving into the details, I want to take a moment to thank the entire OneSpan team for all of their efforts in delivering these results and also to underscore the progress we have made as a business, achieving a Rule of 42 performance level in Q3, whereas just a few years ago, in 2023, OneSpan performed at a Rule of 12 level.

Looking at Q3 specifically, I'm happy to report that both business units grew at a double-digit rate with Digital Agreements up 14% and Cybersecurity up 11%. Our overall gross margin also improved, rising to 76.3% compared to 73.6% in the year ago period. And we achieved a company-wide GRR of 91% in Q3, evidence of our stronger customer engagement and our delivery of better customer experiences across both our Cybersecurity and Digital Agreements business units.

With respect to the other part of our goals, that is positioning the company for future growth, we made great progress in that area in Q3 as well. In July, we launched the DigipassONE platform in our Cybersecurity business. DigipassONE brings together our suite of security solutions, including DigipassONE Authenticate, the industry's broadest customer authentication capabilities, spanning hardware, software, on-prem, in the cloud, OTP and Passkeys.

DigipassONE Protect, our mobile application protection portfolio, providing continuous in-app protection, active defense and real-time threat visibility.

DigipassONE Verify, a new offering that provides support for digital credentials and verification capabilities across multiple wallet ecosystems, which will be a key requirement for banks in Europe.

And DigipassONE Insights, another new offering that will deliver cross-platform analytics and visibility that will provide enriched insights and actionable intelligence from telemetry spanning the entire platform, providing value not only to our customers' authentication teams, but to their broader security teams as well.

You are all familiar with OneSpan as an authentication provider, but I want to take a moment to talk about DigipassONE Verify, which we plan to release early next year. As an important reminder, the European digital identity regulation will require banks to support digital identity wallets for customer onboarding and authentication by December 2027.

We remain actively engaged with the ecosystem as verifiable credentials and digital wallets develop, and we plan to support the first country-specific wallets slated to be released early next year.

We are encouraged by the discussions that we have seen around DigipassONE Verify and expect this to be an important offering as these wallets become more broadly available. As you know, we have a broad customer base of European banks, and we expect this offering to be a particular interest in that market.

We also continue to see encouraging interest in DigipassONE Protect and our expanded capabilities introduced with our acquisition of Build38. As more consumer banking actions move to mobile applications, there is increased recognition of the importance in protecting these applications and the users from attacks and fraudulent behavior. Our expanded portfolio now offers both a post-compilation or wrapping approach and an SDK approach to provide next-gen in-app protection capabilities.

Turning to Digital Agreements. We also made meaningful progress during the quarter. Earlier this month, we announced exciting advancements and innovations that we are adding to OneSpan Sign, expanding the value it brings to e-signatures and the workflows involved with high-value agreements. We continue to focus on purpose-built features and functions that serve the broader financial services vertical where security, compliance and assurance are core requirements.

Our recent e-signature innovations are focused on 3 key areas, making agreements easier and faster to complete, strengthening identity and document assurance without adding unnecessary friction and better connecting completed agreements into the systems and processes that drive the next business action in our customers' workflows. This includes investments in a redesigned user experience, AI-assisted capabilities such as automatic document validation as well as advanced identity verification and expanded integration capabilities.

We are encouraged by continued healthy gross retention metrics and customer activity we are seeing, including expansion and longer-term contract commitments from large customers. During the third quarter, a major banking customer of our Digital Agreements business meaningfully expanded its contract in both term and in size, moving from overages under the previous contract into a multiyear contract that will support their continued growth and utilization of OneSpan Sign.

Stepping back, we are encouraged by the progress we are making as a company overall, both in Q3 and more broadly over the past few years. We believe we are investing in the right strategic areas and putting the pieces in place to enable growth over the longer term. And we're proud that we are able to do so while also improving in the day-to-day execution of the business.

Please note that the Board has approved a quarterly dividend of $0.13 per share to be paid in the current quarter, and we'll continue to evaluate additional share repurchase opportunities. Since the beginning of last year, we have returned $55 million or just under $1.50 per share to our shareholders through dividends and share repurchases. In summary, we had an excellent quarter and continue to strengthen the business and position OneSpan for durable long-term growth.

With that, I'll turn the call over to Jorge.

Jorge Martell

Thanks, Victor, and good afternoon, everybody.

I'm pleased to report another strong quarter and continued progress in positioning OneSpan for long-term growth. Q3 revenue was $63.9 million, an increase of 12% compared to last year's third quarter. Subscription revenue grew 16% to $51.5 million and hardware revenue grew 7%. This growth was partially offset by an expected decline in perpetual maintenance revenue as customers move to term licenses.

For the quarter, subscription revenue increased to 81% of total revenue, up from 78% in the prior year quarter, while hardware and perpetual maintenance revenues accounted for a combined 19% of total revenue as compared to 22% in last year's Q3.

Annual recurring revenue or ARR also continued to grow, increasing 8.5% year-over-year to $195.5 million. ARR growth was driven by expansion of existing customer contracts and new logos as well as Build38, which contributed approximately 1.5 percentage points. ARR increased $5.9 million sequentially, consistent with the expectation we shared last quarter of sequential quarterly growth in the second half of the year. Our net retention rate, or NRR, was 105%, up from 103% last quarter.

Third quarter gross margin was 76.3% compared to 73.6% in Q3 of last year. GAAP operating income was $9.2 million compared to $8.2 million in Q3 2025. The year-over-year improvement reflects higher revenue and gross profit, partially offset by increased operating costs related to Build38, organic investments, including certain costs related to go-to-market leadership and higher share-based compensation expense and bonus accruals.

GAAP net income per share was $0.20 compared to $0.17 in the third quarter of last year. Non-GAAP net income per share was $0.35 compared to $0.33 in last year's Q3. Adjusted EBITDA and adjusted EBITDA margin were $19.3 million and 30.1%, respectively. This is compared to $17.5 million and 30.7% in the same period last year.

Next, I will discuss the third quarter financial results for our 2 business divisions, starting with Cybersecurity. Cybersecurity revenue increased 11.3% to $44.9 million. Subscription revenue increased 17.4% to $32.5 million, primarily driven by customer expansion contracts, including an increase in multiyear term license revenue, new logos, M&A, new products and an increase in past to renewal catch-up revenue as compared to last year's third quarter. As a reminder, multiyear term license and catch-up revenue can vary from quarter-to-quarter.

Hardware revenue grew 7% to $10.5 million, largely due to certain customers requesting earlier-than-anticipated deliveries of Digipass tokens, which we had expected to ship in Q4. As discussed last quarter, Q3 is typically our seasonally low hardware quarter, but deliveries were higher than we expected this year due to the timing of these shipments.

Our full year 2026 hardware outlook has not changed, which means we now expect a correspondingly lower hardware contribution in Q4 than previously forecast. Perpetual maintenance revenue in Cybersecurity declined as expected. ARR for the Cybersecurity division increased 10.1% year-over-year to $127.2 million.

Gross margin was 77% compared to 74% in the prior year quarter. The increase in gross margin primarily reflects increased subscription revenue and a more favorable mix of hardware devices shipped, partially offset by incremental amortization of acquired software related to Build38.

Operating income was $18.5 million or 41% of revenue compared to $16.7 million or 41% of revenue in last year's Q3. The year-over-year increase in revenue and gross margin was partially offset by higher operating expenses related to Build38 and higher organic investments to help drive future growth.

Now turning to Digital Agreements. Revenue grew 13.5% to $19 million, driven by overages, expansion of renewal contracts and new customer additions. As we discussed previously, overage revenue can be a positive indicator of transaction volume growth that can lead to expansion with existing customers.

As Victor mentioned earlier, a large customer generating overages renewed during the third quarter with a materially larger annual commitment. As a result, overage revenue from that customer has ended and revenue from them is now ratable. This also led to a sequential decline in overage revenue in Q3, and we expect a further sequential decline in overage revenue in Q4 towards more typical levels.

ARR grew 5.7% year-over-year to $68.4 million. As a reminder, overages are not included in ARR or NRR. Gross margin improved to 74%, up from 72% in the prior year period, primarily reflecting higher revenue, including overage revenue and greater efficiency in our cloud infrastructure costs.

Operating income was $6.9 million or 37% of revenue compared to $4.2 million or 25% of revenue in the same period last year. The strong improvement in operating income was primarily driven by revenue growth and higher gross margin.

Turning to our balance sheet. We ended the third quarter with $51.4 million in cash and cash equivalents and $5 million outstanding under our credit facility, which was repaid subsequent to quarter end. This compares to $43.3 million in cash and cash equivalents and $5 million of outstanding debt at the end of the second quarter of 2026.

During the quarter, we generated $16.5 million in operating cash flows. Primary uses of cash includes $4.8 million for our quarterly dividend and $2.9 million for capitalized software development costs. By geographic region, revenue in the third quarter of 2026 was 43% from the Americas, 37% from EMEA and 20% from Asia Pacific compared to 46%, 38% and 16%, respectively, in the third quarter of 2025. Revenue increased year-over-year across all 3 regions, led by APAC, followed by EMEA and the Americas.

Now turning to some modeling notes and our outlook. For the full year 2026, we are increasing our guidance to reflect our strong third quarter results and updated expectations for the remaining of the year. In Q4, we now expect software and services revenue to be higher than previously forecast, partially offset by lower hardware revenue due to the timing of shipments discussed earlier. As a result of this shift in revenue mix, we now expect a higher Q4 gross margin with a full year gross margin slightly above 74%.

More specifically, for the full year 2026, we expect total revenue to be in the range of $254 million to $258 million as compared to our previous guidance range of $248 million to $252 million. We expect software and services revenue to be in the range of $208 million to $210 million as compared to our previous guidance range of $202 million to $204 million. We expect hardware revenue to be in the range of $46 million to $48 million, unchanged from our previous guidance.

We expect ARR to be in the range of $197 million to $201 million as compared to our previous guidance range of $194 million to $198 million. And we expect adjusted EBITDA to be in the range of $72 million to $76 million as compared to our previous guidance range of $67 million to $71 million.

That concludes my remarks. I will now turn the call back to Victor.

Victor Limongelli

Thanks, Jorge.

To recap, we are pleased with our third quarter results and the progress we continue to make across the business. We are executing well while continuing to invest in the opportunities we believe can drive stronger growth over time. At the same time, we continue to deliver solid profitability and return capital to shareholders. We remain focused on executing our strategy and creating long-term value.

Jorge and I will now be happy to take your questions.

Operator

[Operator Instructions] Our first question comes from Erik Suppiger with B. Riley Securities.

Phần hỏi đáp

Erik Suppiger

Yes. Can you hear me okay?

Jorge Martell

Yes, we can hear you Erik.

Victor Limongelli

Great. Erik we can hear you.

Erik Suppiger

Congrats and good to see the upgraded system here. On the hardware, can you comment how you're thinking about hardware going forward? I know you're not guiding for fiscal '27, but are you thinking at this point that hardware is at a sustainable level? Are the FIDO2 tokens enabling you to offset any of the legacy declines?

Victor Limongelli

Yes. Thank you very much for the question. So we used to talk about hardware saying if we could just offset the decline and be flattish, it would really improve our business. And we're starting to see that. I think if you look at our guidance for the year, it implies being down just a couple -- just a few percent from last year.

And of course, we're not giving 2027 guidance yet, but we do think that we have a much more sustainable hardware business at the level we're currently at, and some of that will come from the FIDO2 security keys increasingly in '27 and subsequent years.

Erik Suppiger

Can you give any update specific to the FIDO2 tokens? How are those -- how is that business performing?

Victor Limongelli

Erik, it is definitely picking up speed, and I expect that when we get to next quarter, we'll be able to give you a lot more details on that. To date, the business through the first 3 quarters, it is still overwhelmingly related to our older banking tokens.

Erik Suppiger

Good. Congratulations.

Victor Limongelli

Thank you.

Operator

Our next question comes from Gray Powell with U.S. Bank BTIG.

Gray Powell

Okay. Great. And yes, congratulations on the good set of numbers. It was really nice to see, particularly after some of the results we saw yesterday.

Victor Limongelli

Thank you, Gray. Thanks.

Gray Powell

Yes, absolutely. Okay. So it was really good to see the improvement in net new ARR in the Cybersecurity division. And look, I know that like over the last 12 months, there have been some quasi onetime issues there. Just where are we now? Like do you think that the business is in a good spot? And should the success you saw in Q3 be more indicative of your performance going forward?

Victor Limongelli

Gray, yes. So the -- again, we're not going to give 2027 guidance, but we do feel better about the business than we did 6 months ago, 12 months ago. The launch of DigipassONE, I want to touch upon this a little bit. It certainly helps in our conversations with customers. You see things like our GRR going up as we are investing in solutions for them, and they feel more comfortable with the direction we're headed in.

But bear in mind that 2 of the 4 components of DigipassONE are not out yet. We're expecting to release Verify in Q1 and then subsequently after that, we'll release Insights. So we think there is an opportunity, as we said in the prepared remarks, to drive faster growth for the business overall. So the framework and the preparatory work, we feel like we've done a lot of that, and we're looking forward to continuing to improve the business.

And by the way, I mentioned at the beginning, I'm really proud of the team. We've improved OneSpan, both on the Digital Agreements and Cybersecurity business a lot over the last few years. So very proud of that.

Operator

Our next question comes from Rudy Kessinger with D.A. Davidson.

Rudy Kessinger

A lot of mentioned that the quarter certainly looks like a strong quarter here. A few questions for me. Firstly, just on the strong net ARR in the quarter, any color you can share on just how broad-based that was or concentrated it was, what products really drove that and just the mix between new logos and expansion activity that drove the net new ARR.

Jorge Martell

Yes. Thanks, Rudy, for the question.

Victor Limongelli

Yes, Jorge, go ahead.

Jorge Martell

Yes, I can give you a little color. So no, look, I think we're very proud of the metric going back to 8.5% of ARR and net new ARR to your point, $5.8 million for this quarter. So the -- largely, the product set is the existing products and kind of the legacy products that we normally sell licenses, on-prem, OCA, et cetera.

We did have a little bit of a contribution from the new products for Build38 and ThreatFabric as well through the partnership, but that was not overwhelmingly what drove the number up. So I think it's -- we see progress there, which is what I would characterize the progress on the new products. Hopefully, we can continue to accelerate those, but largely it's the existing products.

And primarily, as you know, our net new ARR or ARR growth primarily comes from expansion of existing business on both Digital Agreements on transaction volumes. And Victor alluded to the large expansion that we closed this quarter -- and we signaled in terms of the overages from last quarter, and we say normally that is a leading indicator for expansion. So that was the case for that large customer, which we're pleased with.

And then on the security side, again, the expansion also came from existing customer base. And it's good to see when customers are renewing, they renew with this expansion not only in certain regions, it is spading across all the regions that we normally see. So we're pretty pleased with that.

Victor Limongelli

Yes, Rudy, I was going to just add to what Jorge said. I said this is not a revenue number. But on a bookings basis, we did very well across many geographies. It wasn't just one geography or one area. So it was great to see.

Rudy Kessinger

Got it. Okay. Super helpful. Yes. I guess for me, similar maybe a question to Gray, I believe you asked it. I think the question on a lot of investors' minds is when can $5 million plus of net new ARR quarter to come the average or just the base, if you will. It's certainly been lumpy over the last few years. You have some new products that you've launched, still some underway. I guess I hear your comments that you sound better than 6, 12 months ago. I guess, I don't know, does 2027 feel like the year where really we can kind of escape kind of the growth ranges that we've been in and see some acceleration? Or just how should we think about that at this stage?

Victor Limongelli

Yes. No, I understand the question, of course. And we haven't, as a business completed, finalized our 2027 planning. So it would be completely premature for us to be giving specific guidance for '27. However, we are introducing new products, right? And you can see the strategy on the Cybersecurity side, you can see the strategy of DigipassONE, where we want to provide more value to our customers and earn more revenue from them by providing more capabilities. And so we'll be doing that.

Now keep in mind, you know this, I'm sure we're dealing with many of the companies you cover. You introduced a new product in Q1. The sales cycles at large banks are not 60 days. They tend to be longer than that. So it will take a little while for that to have a revenue impact, but we do think it's going to help the business overall. It does -- as I mentioned, it does help the renewal rates and the GRR. And obviously, once you start lending those deals, it helps NRR as well. So we feel like we're going in the right direction.

And also, the Digital Agreements business has been introducing new products as well, new capabilities, I should say, on the platform, and we think that's going to help that business as well. So we feel good about the trajectory, I would say, without getting into the specifics of 2027 growth rates.

Operator

Our next question comes from Anja Soderstrom with Sidoti.

Anja Soderstrom

Congrats on the nice progress here.

Victor Limongelli

Thank you.

Anja Soderstrom

I'm just curious, the ARR growth is slowing down a little bit in the fourth quarter. Is there any seasonality there? Or how should we think about that?

Victor Limongelli

Anja, thanks for the question. So when you look at the guide that we put in, so 199 at the midpoint, so that implies a 6.5% year-over-year growth. I think we obviously -- this is where we feel comfortable with. Hopefully, we can exceed it, Anja.

But I think there's a lot of indications as well. We mentioned last quarter, a couple of the large churns that we had, some of those related to the past before we acquired the business. So those are going to continue to be with us for the next couple of quarters still, Anja. So those are factored in.

And so I would say we should expect to see a relatively consistent number what we saw this quarter. Hopefully, we can do a little better, but that's the midpoint of what we decided to guide towards, Anja.

Anja Soderstrom

Okay. And then -- can you just bucket your growth with existing customers versus adding new logos?

Victor Limongelli

So largely, when we -- as I mentioned before, largely the ARR at this point, I think maybe you should unpack it by the 2 business units. So when it comes to security, it is largely an expansion driver when it comes to ARR. And as I mentioned, a little bit contribution -- a little bit of the contribution came from the new products.

And we -- so our goal is to continue to expand that contribution from new products into the customer base. Of course, we like to have new logos. But just because of the market share that we have in some regions, new logos tend to be, particularly in security, a lower contribution to the mix.

On the dealer agreement side, the new logo contribution is slightly higher, maybe it's 20% to 30% when it comes to ARR growth. And we want to continue to get that contribution because it is a land and expand, Anja, as we mentioned before, DA is completely land and expand. We got to land and then expand them. But at this point, it's still largely an expansion from ARR. We are running go-to-market initiatives to accelerate the new logo contribution and landing. And so that's all I can tell you at this point. I don't know if you have any other thoughts.

Jorge Martell

No, that's accurate. And I alluded to this a few minutes ago, when you're talking about large banks, the sales cycles tend to be kind of lengthy. So new logos will be harder to come by. And when you have -- we have 60 of the 100 biggest banks in the world as customers. So we already have the majority of the top 100.

Of course, we're trying to get new logos, and we do. We do add new logos, but most of our growth comes from existing customers, which is why our strategy is to add value, add products and have more to sell them because that's the most straightforward way to drive higher growth in the business.

Operator

Your final question comes from Catherine Trebnick with Rosenblatt Securities Inc.

Catharine Trebnick

A couple of product questions. For clarification, passkeys, does that cannibalize the Digipass hardware? Or does a hybrid model protect that revenue? And then I got a couple of few others.

Victor Limongelli

Yes, Catherine, great question. So there is a mix of use cases by our customers. Some people prefer hardware authentication. Passkeys are certainly a modern authentication method that are safe and convenient. And so there's going to be a mix. It kind of depends on the end market, the geography and also the use case.

Hardware authentication is not inconvenient if you're doing your banking in front of a big screen, multiple monitors with a desktop or laptop computer, you keep your hardware token in the drawer, you pull it out, you authenticate, super safe and not inconvenient. So you see that proportionately more in corporate than you do in retail banking, for example. And it also varies greatly by geography. Hardware is much more prevalent in Europe and in APAC and much less so in North America, for example.

Catharine Trebnick

Okay. And then Digital Agreements, just for my knowledge or everybody, are those AI features priced separately? Or are they bundled when you sell that? And congratulations on that order. That sounds really good.

Victor Limongelli

We have, to date, bundled the capabilities to create differentiation in the marketplace and TBD on how we handle future enhancements, but that's what we've done to date.

Operator

There are no further questions at this time. I will now turn the call back to Joe Maxa for closing remarks.

Joe Maxa

Thank you, everyone. We look forward to updating you again next quarter. Have a great night.

Operator

The call has concluded. Thank you for joining. You may now disconnect.