Finvest
CLBT Security software · Digital forensics · Public sector · SaaS · Thesis updated July 19, 2026

Federal cloud opens Cellebrite’s next act

01 Running thesis

Cloud clearance meets AI ambition

Cellebrite is in a better spot than it was a year ago. The old U.S. federal slowdown appears to be over, and management says that business is heading back toward growth in the 20% range. The May 2026 FedRAMP High Authorization to Operate matters because it lets key U.S. agencies use Cellebrite cloud products for more sensitive work.

The bull case is simple: the company already sits inside thousands of law enforcement, defense, and intelligence customers. If those customers buy more cloud storage, AI search, case management, and device access tools, Cellebrite can grow without needing to win a large number of new customers. That land-and-expand pattern shows up in its 116% recurring revenue dollar-based net retention rate at the end of 2025.

The new swing factor is AI. Genesis had more than 500 registered users across over 15 countries eight weeks after launch, and management sized the Investigative AI opportunity at roughly $12.5 billion over four years. Management also said AI revenue over that span could approximate the company’s current total revenue, which is a big claim for a company that produced $475.7 million of revenue in 2025.

The bear case is not that Cellebrite lacks demand. It is that the stock already gives the company credit for a lot of success. Genesis still has to convert free or early users into paid usage at scale. Corellium adds a new market, but CFIUS approval remains pending. Margins also face a near-term drag from foreign exchange, mainly the stronger shekel against the dollar.

May 2026Q1 2026 strengthened the thesis. Cellebrite received FedRAMP High authorization, Genesis showed more than 500 registered users across over 15 countries, and management sized Investigative AI at roughly $12.5 billion over four years.
Mar 2026The 2025 Form 20-F confirmed strong execution, with revenue of $475.7 million, up 19% year over year. It also added more evidence of regulatory friction around encrypted device access.
Feb 2026Q4 2025 de-risked the core story as U.S. federal disruption moved behind the company and Inseyets reached 55% of the installed license base. The company also added Corellium and announced a move into drone forensics through SCG Canada.
Nov 2025Q3 2025 showed the U.S. federal flywheel starting to move again, helped by large agency expansions. Inseyets migration reached about 47%, and Guardian Investigate became a clearer early 2026 product catalyst.
Aug 2025Q2 2025 was mixed. Tom Hogan became full-time CEO and Corellium plus FedRAMP sponsorship improved the long-term story, but U.S. federal spending delays pushed the expected rebound into 2026.
May 2025Q1 2025 showed healthy product adoption, with Inseyets above 30% of the installed base and cloud offerings near 20% of ARR. Spending delays in U.S. federal and EMEA kept the near-term view more cautious.
Mar 2025The 2024 Form 20-F confirmed the base case, with 23% revenue growth and 25% ARR growth in fiscal 2024. It also confirmed that law enforcement and government agencies accounted for more than 90% of revenue in 2022, 2023, and 2024.
02 Business model

Software sold to agencies

Cellebrite sells software to public sector agencies and some private companies. Public sector work is the center of the business. The 2025 filing says Public Sector Customers accounted for more than 90% of total revenue, and no single organization made up more than 5% of 2025 revenue.

Most sales are subscriptions. Customers pay for term licenses, SaaS products, support, and maintenance. Total license subscription revenue represented 90% of 2025 revenue, up from 88% in 2024 and 86% in 2023. This makes revenue more repeatable than a pure hardware or services model.

The model works best when an agency starts with digital forensics and then adds tools for evidence storage, analytics, case management, advanced lawful access, and now AI. That is why Inseyets migration, Guardian adoption, Genesis conversion, and federal cloud approval are the key moving parts.

Where it can break is budget timing and permissions. Many buyers are government agencies, so spending can bunch around fiscal year ends or pause during program changes. Cellebrite also depends on staying legally able to access data from fast-changing phones and other devices.

03 Product portfolio

From phones to full cases

Cash cow

Inseyets

Inseyets is the core digital forensics suite used to collect and review evidence from phones, computers, cloud apps, vehicles, drones, and other sources. Management said 55% of the installed digital forensics license base had converted to Inseyets by Q4 2025.

Steady

Advanced lawful access

These tools help authorized users access locked devices under legal authority. They are valuable, but they also sit closest to regulatory and device-maker friction.

Growth engine

Guardian Forensics and Guardian Collaborate

Guardian products help store, share, review, and manage digital evidence. They push Cellebrite from device extraction into the larger workflow around a case.

Option

Guardian Investigate

Guardian Investigate is an AI-powered system of record for case management. It is now generally available and is part of management’s larger Investigative AI plan.

Option

Genesis

Genesis is Cellebrite’s agentic AI product for faster data insight. Early interest is strong, with more than 500 registered users across over 15 countries ahead of broad monetization.

Option

Corellium

Corellium adds Arm-based virtualization software for mobile security research, app testing, and vulnerability work. Cellebrite closed the deal in December 2025, but CFIUS approval remains pending.

Option

SCG Canada drone forensics

SCG Canada gives Cellebrite tools to extract, decode, and view evidence from common drones. The acquisition closed on March 1, 2026.

04 Business segments

Subscription carries the mix

Total subscription90%growing fast
Other non-recurring4%modest
Professional services6%flat

The structured mix uses fiscal 2025 revenue lines from the 2025 Form 20-F because the available filing section discloses revenue by type. Geography is still important: management describes the Americas as the largest region, followed by EMEA and Asia Pacific, with U.S. federal growth rebounding and EMEA up 25% year over year in Q1.

05 Risk factors

What could still go wrong

Genesis does not convert

High impact · Medium odds

Genesis has early usage, but the hard part is paid adoption. Management’s AI target is large enough that even a modest miss could reset investor expectations. If free trials do not become paid seats, the AI story becomes more promise than revenue.

We watchWatch paid Genesis customers, AI ARR disclosure, usage conversion after general availability, and any change to the $12.5 billion Investigative AI target.

Corellium review adds limits

Medium impact · Medium odds

Cellebrite closed Corellium in December 2025, but management later clarified that CFIUS approval was still pending. CFIUS is the U.S. review process for foreign investment in sensitive businesses. Restrictions could limit how Cellebrite integrates or sells Corellium into certain defense and intelligence accounts.

We watchWatch for a CFIUS approval announcement, mitigation terms, divestiture language, or limits on government customer access.

Device access gets harder

High impact · Medium odds

Cellebrite’s value depends on keeping pace with new phone hardware, operating systems, encryption, and app changes. Regulators and device makers can also push back on tools that access locked or protected data. The 2025 filing points to UK demands for Apple to provide back door access as an example of rising friction around encrypted data.

We watchWatch Apple and Android security changes, court rulings on lawful access, export license changes, and customer reports of lower extraction success.

Government budgets stall again

Medium impact · Medium odds

Cellebrite sells mainly to government agencies. That creates trust and stickiness, but it also creates timing risk. A program delay, shutdown, procurement review, or budget shift can slow orders even when demand is healthy.

We watchWatch U.S. federal growth commentary, large agency renewals, second-half seasonality, and management’s guidance for federal demand.

Shekel strength pinches margins

Medium impact · Medium odds

Cellebrite reports in dollars, but a meaningful part of its costs are in Israeli shekels. A stronger shekel raises dollar-reported expenses and can compress adjusted EBITDA margins. Management has called this a near-term headwind rather than a structural break.

We watchWatch adjusted EBITDA margin, dollar to shekel moves, hedging commentary, and whether margin compression extends beyond 2026.
06 Quick answers

In one breath

What does Cellebrite actually do?

Cellebrite sells software that helps authorized users collect, decode, manage, and analyze digital evidence. Its main customers are law enforcement, defense, intelligence, and other public sector agencies.

Why does FedRAMP matter for Cellebrite?

FedRAMP is a U.S. government cloud security approval. Cellebrite received FedRAMP High authorization in May 2026, which should make it easier for federal agencies to buy and use its cloud products for sensitive data.

Is Cellebrite an AI company now?

AI is becoming a bigger part of the story, especially through Genesis and Guardian Investigate. The current business is still mainly digital forensics and investigation software, so AI needs to prove it can add real paid revenue.

What is the biggest risk for CLBT stock?

The biggest risk is execution versus expectations. The company has good growth, strong cash flow, and a large public sector base, but the stock needs Genesis, federal cloud demand, and acquisitions to work well.