M&A Tracker

Controversial Firms Cellebrite and Corellium Announce $200 Million Acquisition Deal

Cellebrite and Corellium, whose names have been mentioned in spyware stories, are joining forces to provide advanced investigative solutions.

2025 cybersecurity M&A

Israel-based forensic investigation solutions provider Cellebrite announced on Thursday an agreement to acquire US-based virtualization software firm Corellium in a $200 million deal.

Cellebrite provides governments and other organizations with tools that enable the extraction and analysis of data from mobile devices and computers. Corellium has developed device virtualization solutions for mobile security research, mobile app testing, and IoT device modeling.

By joining forces, the two companies aim to provide customers in the public safety, intelligence, defense and private sectors with advanced solutions for the identification of mobile vulnerabilities and exploits, tools for visualizing and interacting with virtual devices as if they were real, enhanced DevSecOps solutions, and mobile pen testing.

Cellebrite has agreed to acquire Corellium for $170 million in cash, with $20 million converted to equity at closing. Cellebrite is also prepared to pay up to an additional $30 million in cash over the next two years if certain performance milestones are achieved. 

Both companies have been at the center of controversy in recent years. Cellebrite’s mobile forensic tools have made headlines for the exploitation of zero-day vulnerabilities as part of spyware campaigns. 

Corellium was sued by Apple in 2019 for copyright infringement over its product replicating the iOS mobile operating system. A US appeals court sided with Corellium in May 2023 and by the end of the same year the two companies reached a confidential settlement. 

Advertisement. Scroll to continue reading.

Documents shared by Apple as part of the lawsuit showed that Corellium engaged with some controversial companies such as spyware maker NSO Group.

Related: Proofpoint to Acquire Hornetsecurity in Reported $1 Billion Deal

Related: Cybersecurity M&A Roundup: 31 Deals Announced in April 2025

Related: Palo Alto Networks to Acquire AI Security Firm Protect AI

Related Content

Vulnerabilities

Microsoft responds to backlash over its threats of legal action against researchers who publicly disclose zero-day vulnerabilities.

M&A Tracker

The acquisition enables Akamai to expand its Zero Trust portfolio to add protection directly into the browser.

Artificial Intelligence

The acquisition strengthens Cisco’s push into identity-centric security for AI and machine access.

Cyberwarfare

Iran-linked hacking groups are turning to high-volume, low-impact cyberattacks, and AI is providing a boost.

Mobile & Wireless

Targeting six iOS vulnerabilities and leading to full device compromise, the exploit chain is meant for surveillance.

Privacy

Meta does not plan on fixing the vulnerability because it involves the use of a modified client application.

Cloud Security

Google has completed its $32 billion acquisition of the cloud security giant, which will maintain its brand.

M&A Tracker

The deal awaits final shareholder and regulatory approvals and is expected to be completed in the second half of 2026.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version