Paragon Solutions
Last updated: Apr 27, 2026
Paragon Solutions is an Israeli cyber intelligence company founded in 2019 and acquired by RED Lattice in 2024, specializing in lawful investigative spyware tools for government agencies.
Visit WebsiteCompany Overview
Paragon Solutions, founded in 2019 by Idan Nurick and former Unit 8200 commander Ehud Barak, develops advanced cyber intelligence capabilities marketed to government and law enforcement agencies. The company's flagship product, Graphite, is a sophisticated spyware tool designed to access instant messaging applications, device data, and communications on targeted phones with technical sophistication comparable to NSO Group's Pegasus but with smaller operational scale.
The company explicitly positions itself as the "responsible" alternative to NSO Group and other spyware vendors, emphasizing ethical frameworks and customer vetting. In July 2021, Battery Ventures invested $5–10 million in a Series A round. The company achieved substantial traction with US government agencies including the Drug Enforcement Administration, US Immigration and Customs Enforcement, and other federal entities. Internationally, documented deployments span Australia, Canada, Cyprus, Denmark, Israel, Singapore, and Italy.
Paragon's market positioning reflects fundamental tensions in the cyber intelligence sector. The company declined Israeli government requests to supply Saudi Arabia following the Khashoggi scandal, signaling willingness to impose governance constraints. However, extensive documentation from Citizen Lab, WhatsApp, and Italian parliamentary investigations reveals systemic misuse: targeting of journalists (Francesco Cancellato, Fanpage.it), civil society activists (Luca Casarini, Mediterranea Saving Humans), immigration advocates, and political opposition networks. In February 2025, Paragon unilaterally terminated its Italian government contract, citing breach of ethical frameworks.
In 2024, RED Lattice (owned by AE Industrial Partners) acquired Paragon for over $500 million, consolidating spyware capabilities within a US-controlled security firm. The acquisition reflected strategic intent to consolidate cyber-intelligence tools under US government oversight. Following President Trump's January 2025 inauguration, executive order restrictions were reversed, and ICE resumed operational use of Graphite with expanded scope and minimal compliance constraints. As of April 2026, ICE formal confirmation of Graphite deployment represents normalization of spyware use against domestic law enforcement and surveillance targets.
The company remains highly controversial: human rights organizations, foreign governments (Italy), and US congressional oversight bodies have raised concerns about misuse patterns and regulatory capture. Market maturity and consolidation reflect normalization of commercial spyware as government-standard tooling, not startup innovation.
Dual-Use Assessment
Graphite is a commercial spyware platform with dual technical capacity: lawful law-enforcement and national-security investigative use, balanced against documented human rights misuse, press suppression, and targeting of civil society. Dual-use assessment is high-risk: technical capability is unambiguous, but governance track record reveals systemic pattern of customer misuse and inadequate enforcement of ethical frameworks.
Strategic Fit Assessment
Company was acquired by RED Lattice in 2024 for over $500 million; no longer an independent strategically relevant entity. Strategic acquisition consolidated spyware tooling under US-controlled holding company.
Strategic Value to U.S.-Israel Alliance
RED Lattice subsidiary consolidating commercial spyware capability within US government-aligned structure. Market consolidation reflects policy normalization of spyware as government-standard cyber-intelligence tool rather than specialized boutique technology. Strategic value is subordinate to controlling parent.
Key Technologies
- Graphite spyware platform
- Device compromise and remote access
- Instant messaging interception
- Phone-based surveillance tooling
- Command and control infrastructure
- Device persistence mechanisms
- Covert data exfiltration systems
Use Cases & Applications
- US federal law enforcement investigations (ICE, DEA)
- International government cyber intelligence operations
- Lawful communications interception under judicial authorization
- Organized crime and narcotics investigation
- Counter-terrorism operations
- Border security and immigration enforcement
- Intelligence agency operations
Sources and verification
This profile is based on public-source research, Claw & Talon curation, and editorial judgment. Inclusion does not imply endorsement, partnership, investment, or a recommendation to transact. Readers should still confirm current status, customers, funding, and product claims before relying on this profile.
Public sources
The links below are visible public references used for source discipline around company identity, status, funding, customer, acquisition, public-company, or other material claims where available.
- Official website Primary public reference for company identity, positioning, and current web presence.
- Profile update timestamp Last updated in the Claw & Talon database on Apr 27, 2026.
Investor Lens
What this entry is
Acquired asset
Why it may matter
Paragon Solutions may matter as a Cybersecurity entry with not currently an investable standalone company for Israeli technology research.
How an independent investor should read this
Not currently an investable standalone company. Read this profile as a starting point for independent verification, not as a recommendation or suitability assessment.
Evidence to verify
- Verify current status
- Verify technical claims
- Verify regulatory/export-control issues
Main investor questions
- Is this entry a benchmark, buyer, ecosystem node, acquired asset, or strategic reference rather than a live startup opportunity?
- What does this reference clarify about buyers, sector structure, public-market context, or strategic demand?
- Does the dual-use claim map to actual commercial and government/defense/resilience buyer evidence?
- What evidence would change the thesis or show that the profile is stale?
What not to infer
- Inclusion does not imply endorsement.
- Inclusion does not imply allocation availability or current fundraising.
- Scores do not indicate investment suitability or expected returns.
- Strategic importance does not automatically imply venture return potential.
Diligence questions
- What evidence verifies Paragon Solutions's current customer traction, deployment status, and revenue concentration?
- Which technical claims are independently demonstrable today, and which remain roadmap or pilot-stage assertions?
- Where does the product create real defense, intelligence, critical-infrastructure, or emergency-response value beyond ordinary commercial adoption?
- How does the platform integrate into existing SOC, cloud, identity, or compliance workflows without adding operational burden?
- Is the company a live venture opportunity, a mature strategic reference, an acquired asset, or primarily a market-mapping entry?
Related sector
See the Cybersecurity sector page for market context, related subcategories, and other Israeli companies in this part of the database.
Related companies
Need a diligence readout?
Use the profile and related checklists as a starting point. If the decision needs more context, request a company screen, founder-call prep, diligence memo, or sector readout.