Paragon Solutions is an Israeli spyware company.[1] Paragon has tried to market itself as more responsible than other spyware vendors as competitors like NSO Group and Intellexa have been involved in scandals.[2]
History
Paragon was founded in 2019 by former commander of Unit 8200 Ehud Schneorson as well as Idan Nurick, Igor Bogudlov, Liad Avraham, and Ehud Barak.[3]
In July 2021, Forbes reported that Battery Ventures had invested between $5 and $10 million in Paragon.[3]
According to the Financial Times, after the discovery of Pegasus on the phones of associates of Jamal Khashoggi, "Paragon declined Israeli government requests to replace Pegasus with Graphite in the Saudi armoury."[4]
In 2023, US president Joe Biden signed Executive Order 14093 which was "seen by experts as targeting NSO, while carving out a space for companies like Paragon to continue selling similar spyware, but only to the closest of US allies."[4]
In 2024, RED Lattice, a US cybersecurity firm owned by AE Industrial Partners, reportedly acquired Paragon for over half a billion dollars.[5][6]
In 2025, WhatsApp claimed to have disrupted a campaign by Paragon targeting around 90 users, including journalists and members of civil society.[7][8][9]
Graphite
According to Citizen Lab, Graphite is a spyware tool sold by Paragon which allows "access to the instant messaging applications on a device, rather than taking complete control of everything on a phone."[1]
Customers
Italy
Targets of the Italian government have reportedly included Francesco Cancellato, the editor in chief of Fanpage.it, Luca Casarini, the founder of Mediterranea Saving Humans, Husam El Gomati, who has been a vocal critic of Italy and its dealings in Libya, and Father Mattia Ferrari, an Italian priest who had a close relationship with Pope Francis.[10][11][12][13]
In February 2025, Paragon reportedly cut ties with the Italian government after determining that the Italian government had broken "the terms of service and ethical framework it had agreed under its Paragon contract."[14][15]
In June 2025, an Italian parliamentary committee confirmed that the Italian government had used Graphite to hack the smartphones of activists advocating for immigrant rights, including Luca Casarini, Giuseppe Caccia, and David Yambio, while denying that Italy had hacked the smartphone of Francesco Cancellato.[16] Later the same month, Citizen Lab revealed that Ciro Pellegrino, a colleague of Cancellato and the head of the Naples bureau of Fanpage.it, had also been targeted using Graphite, though it was unclear who was behind the targeting.[17]
In 2024, a $2 million contract with US Immigration and Customs Enforcement (ICE) was reportedly paused and placed under compliance review, "to review and verify compliance with Executive Order 14093." According to Wired, experts said that "the level of seriousness with which the US government approaches the compliance review of the Paragon contract will influence international trust in the executive order."[21] In 2025, the Trump administration lifted the pause, allowing ICE to use Paragon's spyware tools.[22]
Other customers
Citizen Lab "identified a subset of suspected Paragon deployments, including in Australia, Canada, Cyprus, Denmark, Israel, and Singapore" and "surfaced potential links between Paragon Solutions and the Canadian Ontario Provincial Police."[1]
