Build38

Build38 offers a mobile application security platform that integrates AI-powered threat intelligence with robust app-shielding technology to protect applications from known and unknown attacks. The company was established in 2018 as a spin-off from Giesecke+Devrient. The name Build38 reflects the concept of security being "built" into apps and the founding team of 8 individuals across 3 countries. It was founded by a team of cybersecurity and software security experts, including Dr. Christian Schläger (CEO), Pedro Hernández (CRO), Joaquín Fernández (COO), Marc Obrador (CTO), and Torsten Leibner (VP Markets & Regulation). Schläger has a background in information security, holding key roles at Giesecke+Devrient, Allianz Group, Swiss Life, and Ernst & Young before co-founding Build38.

Headquartered in Munich, Germany, with additional offices in Barcelona, Spain, and Singapore, Build38 provides its security solutions to a global market. The company's business model is centered on its subscription-based Software-as-a-Service (SaaS) platform, with contract values ranging from €20,000 to €500,000. In January 2026, it was announced that OneSpan entered into a definitive agreement to acquire Build38. Prior to the acquisition agreement, Build38 had raised over €16 million in funding through multiple rounds, with key investors including Tikehau Capital, eCAPITAL Entrepreneurial Partners, Caixa Capital Risc, and Giesecke+Devrient Ventures.

The core of Build38’s offering is the Trusted Application Kit (T.A.K.), a software development kit (SDK) designed to be integrated into Android and iOS mobile apps during the development phase. The platform operates on a multi-layered security framework that provides in-app self-protection, AI-driven active hardening, and cloud-based threat intelligence. Key features include protection against debugging, rooting/jailbreaking, app cloning, code tampering, and man-in-the-middle attacks. The platform also offers a centralized dashboard called ThreatBoard for real-time monitoring, threat visualization, and granular log filtering. Build38 serves a diverse client base across industries such as banking, automotive, digital identity, public transportation, and healthcare, helping them comply with regulations like PCI, eIDAS, and GDPR. Clients include major organizations like a top-ten global bank, Verimi, Netcetera, and Chang'an Auto.

Keywords: mobile application security, AI threat intelligence, app shielding, in-app protection, runtime application self-protection, RASP, mobile security, cybersecurity, Trusted Application Kit, T.A.K, app hardening, threat detection, Giesecke+Devrient, OneSpan, financial services security, automotive security, digital identity protection, mobile banking security, eHealth security, SoftPOS, API protection, Android security, iOS security, mobile endpoint protection, anti-tampering, anti-debugging, code obfuscation