Security

Cellebrite beats Q3 and lifts EBITDA guidance as CFIUS weighs divesting Corellium

Revenue, ARR and free cash flow all beat targets, but the same US government buying faster than ever is still deciding whether Cellebrite must divest Corellium, the $170 million acquisition it closed without formal clearance.

Vincent JiangVincent Jiangtwo-minute read
Share
A Cellebrite UFED Physical Pro device on a wooden desk, its screen showing the main menu of phone extraction options
1 / 6Slide 1 of 6
A Cellebrite UFED Physical Pro, the field device police use to pull data off phones. The company's growth now comes from subscription software, but extraction tooling is still what its customers buy.

Cellebrite−10.08% — Cellebrite, down 10.08 percent today beat its own quarter and raised its profit outlook, and the stock fell 7.4% anyway 4. Shares of the digital-forensics company, whose software lets police and intelligence agencies extract and read phone data, traded at $11.76 on November 12, down 33.6% for the year 4. The market's attention is on a different line of the filing.

A Cellebrite extraction report screen listing an iPhone's device information and sections of recovered data, with messages and key evidence highlighted
What the software produces: a Cellebrite extraction report on an iPhone backup, sorted into messages, call history and a key evidence bucket. The Genesis AI product Cellebrite credits for its US growth is meant to read that material for investigators.Privateinvestigatorgreensboro, CC BY-SA 4.0

An 18% quarter and a higher profit outlook

Third-quarter revenue came in at $149.0 million, up 18% year over year, with subscription revenue of $134.9 million up 20% and annual recurring revenue of $528.5 million, also up 20% 1. Adjusted EBITDA was $53.6 million at a 36% margin, GAAP net income was $26.7 million, and free cash flow over the trailing twelve months reached $166.0 million, a 30.9% margin 1. The company raised its full-year adjusted EBITDA outlook to $163–166 million while reaffirming ARR guidance of $550–560 million 1.

Free cash flow lands in the fourth quarter: Q4 '25 alone brought in $82.9M

$0M$50M$100MQ4 '23Q2 '24Q4 '24Q2 '25Q4 '25Q2 '26$14.52M$60.75M$82.9M, more than Q2 and Q3 '25combined
Data
Free cash flow
Q3 '23$28.1M
Q4 '23$38.88M
Q1 '24$8.55M
Q2 '24$12.44M
Q3 '24$39.83M
Q4 '24$60.75M
Q1 '25$18.54M
Q2 '25$28.98M
Q3 '25$29.95M
Q4 '25$82.86M
Q1 '26$16.84M
Q2 '26$14.52M
Quarterly free cash flow in USD millions, from Cellebrite's SEC filings. The Q3 2026 quarter reported on 12 November 2026 is not yet in the filing series; trailing-twelve-month free cash flow was $166.0 million.6

Growth was led by another acceleration in US federal demand and by Genesis, the agentic AI product launched on June 10 and since opened to government and private customers in Australia, the UK and the EU 1. In one homicide case, Genesis surfaced a suspect's confession from two years of recorded jail calls that manual review had missed 3.

Q3 2026 revenue of $149M is the highest yet, 18% above a year earlier

$100M$120M$140M$160MQ4 '24Q1 '25Q2 '25Q3 '25Q4 '25Q1 '26Q2 '26Q3 '26$149.0M, up 18% year over year
Data
Revenue
Q4 '24$109.05M
Q1 '25$107.55M
Q2 '25$113.28M
Q3 '25$126.03M
Q4 '25$128.82M
Q1 '26$128.3M
Q2 '26$131.14M
Q3 '26$149.02M
Quarterly revenue in USD millions, from Cellebrite's SEC filings and the Q3 2026 results release.5,1

The part that carries the risk

Buried at the end of the release: the Corellium acquisition "continues to undergo review" by CFIUS, the US committee that screens foreign purchases of American technology, and Cellebrite is "seeking to address CFIUS' concerns in lieu of potential divestment," with no final decision and no way to predict one 1. Cellebrite, an Israeli company, closed the $170 million Corellium purchase in December 2025 on the basis of a national security agreement pending formal clearance 2. Corellium's technology now sits inside the Autumn release and the Genesis-era platform, and Corellium co-founder Chris Wade is Cellebrite's chief technology officer 123.

Customer and regulator, same government

The tension is structural. The same US government whose agencies are accelerating purchases, and whose Defense Department cybersecurity certification (CMMC Level 2) Cellebrite just cleared, removing a barrier to federal work, is the government deciding whether the company keeps Corellium at all 1. No dollar figure is attached to the divestment scenario, so shareholders own a beat-and-raise quarter with an unpriced tail. A mid-September plan to redomicile in the US, which the company says would broaden its investor pool through inclusion in key US stock indices, is itself still subject to shareholder and regulatory approvals 1.

The next CFIUS disclosure is the variable: the market has absorbed the quarter, and a divestment order would be new information no guidance covers.

Get Security by email, free

The breaches, flaws and security vendors AI is putting to the test. In our daily email, every weekday.

Loading CLBT

Reader comments

0 comments

    More in Security

    All in this topic →

    Security

    France blames Iran's Revolutionary Guards for 700-store sabotage and says they probed Schneider Electric gear

    The same French report says the attackers' infrastructure was probing Schneider Electric equipment at energy and water sites. For holders of the biggest listed industrial-control vendor, that is event risk on the installed base, and the week's price action does not reflect it.

    Security

    MongoDB patched a 9.5-severity flaw that crashes servers at failover; self-managed users must upgrade

    Atlas patches itself during maintenance, while self-managed customers must upgrade every replica-set member by hand across seven branches. That points the cost at MongoDB's legacy license base rather than the cloud growth behind BTIG's $417 Buy, ahead of the December 1 earnings.

    Security

    Datadog finds cloud flaws quadrupled this year, and the whole jump came in June

    Datadog's State of Cloud Security 2026, built on thousands of customers' cloud estates, shows the median cloud service went from four serious vulnerabilities to about 16, a level shift that landed in June and has barely moved since. That plateau is the demand-side backdrop to the 17 percent selloff in Datadog shares over one AI customer's cutback.

    Security

    Thai Airways says 60,529 passenger records exposed via Amadeus; Finnair 116,000; Amadeus gives no total

    Airlines are reissuing booking references and answering regulators while Madrid-listed Amadeus, the data controller, has put no number on the exposure. Its third-quarter revenue of €1.74 billion landed on November 6 with the incident unquantified.

    Security

    The stock Palo Alto Networks paid CyberArk with nearly doubled, $165 at closing to $326 now

    The annual report shows the real accounting price was $21.1 billion, paid in shares valued at $165.07 that now trade at $326.36. That lifts former CyberArk holders and dilutes Palo Alto shareholders straight into a Nov. 18 print that must justify $14.8 billion of goodwill.

    Security

    Gen Digital's antivirus core grew 5% while the 12% headline rode debt-funded MoneyLion

    The beat and the raise sit on MoneyLion, the debt-funded fintech that grows twice as fast as the Norton and LifeLock core at half its margin; with $8.19 billion of debt, the stock's story is the balance sheet, not the bookings.

    Get the newsletter

    The day's AI and market news, in your inbox every weekday.