Paragon Solutions
Last updated: Jul 31, 2026
Paragon Solutions is an Israeli digital-intelligence company whose Graphite platform is associated with covert access to data on targeted smartphones and encrypted-messaging applications. It has an active public-facing U.S. website and LinkedIn presence, but public reporting places the business in an acquired-asset category after AE Industrial Partners reportedly bought it in 2024, leaving ownership, controls, and current operating structure important diligence questions.
Visit WebsiteCompany Overview
Paragon Solutions develops offensive cyber and digital-intelligence capabilities for government and law-enforcement customers. Its best-known product, Graphite, is described by Citizen Lab and reputable reporting as spyware that can compromise targeted mobile devices and provide access to information in applications including WhatsApp, Signal, and Facebook Messenger. Public evidence is not sufficient to establish the current exploit chain, supported device versions, persistence model, or the full scope of data collection, so claims that it can access any phone or all encrypted communications should not be treated as verified product specifications. The technical value nevertheless lies in difficult vulnerability research, mobile-platform exploitation, covert deployment, command-and-control infrastructure, and operational tooling for turning endpoint access into investigative intelligence.
The business appears to be a specialized business-to-government supplier rather than a broad enterprise cybersecurity vendor. Paragon's official U.S. website describes cyber and forensic capabilities, digital-data analysis, cyber-workforce training, and critical-infrastructure threat mitigation, while its LinkedIn page categorizes the company under public safety and reports a 501-1,000 employee range with a Tel Aviv headquarters. Those sources establish an active public-facing operating identity, but they do not provide audited revenue, recurring-revenue mix, customer concentration, renewal rates, margins, or a reliable breakdown between the Israeli parent, the U.S. entity, and any post-acquisition operating units. A reported one-year, $2 million U.S. Immigration and Customs Enforcement contract is evidence of government procurement, not proof of durable commercial traction.
Paragon's attempted differentiation has been governance and customer selectivity: public reporting describes a strategy of selling to selected government or law-enforcement customers and presenting the company as more responsible than vendors such as NSO Group and Intellexa. That positioning is commercially relevant because government buyers face legal, diplomatic, and reputational exposure when spyware is misused. It has not resolved the core diligence issue. Citizen Lab reported forensic evidence linking Graphite to devices of civil-society members, and the Associated Press reported that journalists in Europe were targeted in a campaign involving Paragon spyware. Paragon and Italian authorities gave differing public accounts of the termination of their relationship. These events mean an ethics framework should not be treated as equivalent to independently audited controls, enforceable end-user restrictions, transparent incident response, or reliable customer-remediation rights.
The reported 2024 acquisition by AE Industrial Partners, through its REDLattice orbit, changes the investment interpretation from venture-backed startup discovery to asset, governance, export-control, and integration diligence. The transaction value and exact post-acquisition structure are reported inconsistently and are not asserted as settled facts here. The asset remains strategically relevant because mobile endpoint access can support authorized counterterrorism, organized-crime, intelligence, and serious-crime investigations, while the same capabilities create exceptional civil-liberties, democratic-accountability, proliferation, and counterintelligence risks. A serious review should obtain current ownership records, licensing and export approvals, customer-use restrictions, vulnerability and incident reporting, independent oversight evidence, platform-support data, and proof that compliance controls can constrain sales and operations in practice.
Dual-Use Assessment
Graphite's core capability has substantive commercial and defense/security applicability: mobile exploitation, covert device access, and digital-intelligence workflows can support authorized investigations and national-security collection. The same capability can enable unlawful surveillance, and public forensic findings involving civil-society targets make the abuse and governance risk material rather than hypothetical.
Strategic Fit Assessment
Paragon is not an independent startup priority signal after the reported 2024 acquisition. Its technology is strategically material, but opaque ownership, uncertain post-acquisition structure, government-customer concentration, severe human-rights exposure, and export and procurement sensitivity make asset governance and controlled diligence more appropriate than an independent diligence thesis. This flag is a database classification, not an investment recommendation.
Strategic Value to U.S.-Israel Alliance
The asset provides access to a scarce and strategically sensitive capability: mobile endpoint intelligence against modern messaging applications. That capability may matter to national-security and serious-crime investigations, and its U.S.-linked ownership context may affect export licensing, government access, and oversight. Strategic value is offset by exploit burn rates, platform-provider countermeasures, proliferation risk, constitutional and diplomatic exposure, and the difficulty of independently verifying customer restrictions or remediation practices.
Key Technologies
- Graphite mobile spyware and endpoint-access platform
- Mobile operating-system vulnerability research and exploit development
- Zero-click or low-interaction mobile compromise techniques
- Access to data in encrypted-messaging applications after endpoint compromise
- Covert command-and-control and target-management infrastructure
- Remote collection and exfiltration of mobile device data
- Digital forensics and government operational-support tooling
Use Cases & Applications
- Court-authorized organized-crime investigations
- Counterterrorism and national-security intelligence collection
- Law-enforcement access to communications and device data on targeted smartphones
- Investigation of narcotics, trafficking, and transnational criminal networks
- Digital-forensic analysis of suspected device compromise
- Government cyber and intelligence workforce training
- Critical-infrastructure threat analysis and mitigation
- Compliance-controlled support for public-safety or intelligence operations
Sources and verification
This profile is based on public-source research, Claw & Talon curation, and editorial judgment. Inclusion does not imply endorsement, partnership, investment, or a recommendation to transact. Readers should still confirm current status, customers, funding, and product claims before relying on this profile. The editorial policy explains how profiles are researched, where automated drafting is used, and how corrections work.
This record lists 6 public references used for company identity, status, positioning, or material-claim review.
Public sources
The links below are visible public references used for source discipline around company identity, status, funding, customer, acquisition, public-company, or other material claims where available.
- paragonsolutions.io Public source used for profile verification.
- LinkedIn company page Public source used for profile verification.
- citizenlab.ca Public source used for profile verification.
- apnews.com Public source used for profile verification.
- aeroequity.com Public source used for profile verification.
- wired.com Public source used for profile verification.
- Profile update timestamp Last updated in the Claw & Talon database on Jul 31, 2026.
Investor Lens
What this entry is
Acquired asset
Why it may matter
Paragon Solutions may matter as a Cybersecurity entry with not currently an investable standalone company for Israeli technology research.
How an independent investor should read this
Not currently an investable standalone company. Read this profile as a starting point for independent verification, not as a recommendation or suitability assessment.
Evidence to verify
- Verify current status
- Verify technical claims
- Verify regulatory/export-control issues
Main investor questions
- Is this entry a benchmark, buyer, ecosystem node, acquired asset, or strategic reference rather than a live startup opportunity?
- What does this reference clarify about buyers, sector structure, public-market context, or strategic demand?
- Does the dual-use claim map to actual commercial and government/defense/resilience buyer evidence?
- What evidence would change the thesis or show that the profile is stale?
What not to infer
- Inclusion does not imply endorsement.
- Inclusion does not imply allocation availability or current fundraising.
- Scores do not indicate investment suitability or expected returns.
- Strategic importance does not automatically imply venture return potential.
Diligence questions
- What evidence verifies Paragon Solutions's current customer traction, deployment status, and revenue concentration?
- Which technical claims are independently demonstrable today, and which remain roadmap or pilot-stage assertions?
- Where does the product create real defense, intelligence, critical-infrastructure, or emergency-response value beyond ordinary commercial adoption?
- How does the platform integrate into existing SOC, cloud, identity, or compliance workflows without adding operational burden?
- Is the company a live venture opportunity, a mature strategic reference, an acquired asset, or primarily a market-mapping entry?
Related sector
See the Cybersecurity sector page for market context, related subcategories, and other Israeli companies in this part of the database.
Related companies
Need a diligence readout?
Use the profile and related checklists as a starting point. If the decision needs more context, request a company screen, founder-call prep, diligence memo, or sector readout.