Pioneers Insight Method Research Author
Anek Capital's Orel Levy's Cellebrite Thesis $CLBT
Back to Episodes

Anek Capital's Orel Levy's Cellebrite Thesis $CLBT

Summary

  • Orel Levy’s thesis is that Cellebrite ($CLBT) is a rare mission-critical software business still available at a reasonable valuation. Revenue has been growing around 20%, cash conversion exceeds 100%, stock compensation is comparatively restrained, and Levy estimates that roughly 90%-96% of growth comes from the installed base. The essential call is that delayed public-safety spending is “a matter of when, not if.”

  • The market overstates phone unlocking and understates Cellebrite’s broader “case to closure” platform. Inseyets extracts and analyzes structured, unstructured, and deleted data; Guardian transfers evidence while preserving chain of custody; Pathfinder helps investigators analyze events and build cases. Even when border-control officials receive already-unlocked phones, Levy says they still use Cellebrite—evidence that extraction is only the first step.

  • The current discount reflects several overlapping fears rather than a demonstrated collapse in the franchise. Investors face a soft Q2, delayed federal budgets, an interim CEO, a new CFO, possible withdrawal or reset of 2028 targets, and a narrative that Cellebrite cannot yet unlock the newest iPhone. Levy concedes it has not cracked that version yet, but calls this the recurring “cat and mouse game” and argues the largest R&D budget and accumulated expertise make eventual success likely.

  • Growth depends less on winning new logos than on penetrating departments Cellebrite already serves. Many agencies own the software in only a few offices or seats; the FBI’s need to move the Trump-shooter’s phone from Butler to Pittsburgh illustrates the deployment gap. Inseyets migrations carry roughly 25%-40% uplifts, while Guardian and Pathfinder remain only about 2%-5% penetrated and are growing approximately 100% and 50%, respectively.

  • Management turnover may be part of a sale-ready reset, although Levy repeatedly labels that view “100% speculation.” The longtime operator left after more than 15 years, executive chairman Tom is expected by Levy to become permanent CEO, and the new CFO came from New Relic and previously served as Model N’s CFO. True Wind’s ownership, remaining $30 incentive, personal capital invested by Adam, and Sun Corporation’s roughly half stake make Cellebrite look to Walker like a company “packaged to be sold.”

  • The valuation debate is between clean, compounding free cash flow and the certainty that 20% growth eventually slows. Walker’s bear math starts with roughly $3 billion of enterprise value, about $120 million of guided adjusted EBITDA, and approximately $30 million of stock compensation, leaving around $90 million pre-tax after SBC. Levy instead emphasizes an estimated 5% 2025 free-cash-flow yield rising toward 8% in 2026, no capitalized R&D, disciplined spending, and potential margin expansion.

  • Execution is the long-term risk Levy says keeps him awake—not Palantir, Axon, Apple, or AI. Palantir serves much larger deployments, while Axon’s evidence products focus more on monitoring officers than investigating outside actors; public-safety customers can use both. AI is probably neutral in the near term, though Levy thinks Cellebrite could ultimately benefit. Ethical restrictions are material: Cellebrite dropped customers in parts of Asia during 2021-2022, and Levy estimates prohibited-country exits explain 2%-4% of annual churn.

Deep dive

1. Cellebrite turned an accidental sale into a digital-forensics franchise

  • Founded around 2001, Cellebrite initially helped telecom customers transfer contacts and other data between phones. A sheriff’s office accidentally bought one of its products several years later, revealing a much larger public-safety use case.

  • Sun Corporation originally acquired Cellebrite for the telecom operation, not digital forensics. After selling the retail business around 2017 for what Levy recalls as roughly $20 million-$40 million, Cellebrite concentrated entirely on public safety and became, in his framing, the category’s market leader “by far.”

  • The bootstrapped heritage matters to Levy: Cellebrite never depended on repeated fundraising, monitors incremental spending closely, carries comparatively modest SBC, and reports cash conversion above 100%. He calls both the business and its earnings unusually high quality. Departments typically spend roughly $150 per case, while Levy estimates the resulting ROI at 10×-100× the cost.

  • Digital forensics remains a “cat and mouse game”: Apple and Android vendors keep strengthening security, while Cellebrite continually funds new extraction methods. Levy argues its leading R&D budget, accumulated data, specialist employees, and trusted agency relationships are mutually reinforcing barriers.

2. Unlocking a phone is only the first step

  • Cellebrite’s workflow begins with accessing an iPhone or Android device, but the harder work follows: recovering deleted information, organizing structured and unstructured data, and reconstructing locations, relationships, and events. The attempted assassination of Donald Trump was cited as a visible example of the kind of investigation the platform supports.

  • Inseyets combines several legacy tools into the core extraction-and-analysis platform. Guardian then transfers evidence while preserving chain of custody, so the material remains admissible in court; Pathfinder helps investigators analyze events and construct the case.

  • The old alternative is strikingly primitive. Levy says some agents still pass evidence through USB drives or SanDisk devices, while Canadian investigators described flying to the United States, collecting evidence in person, and carrying it home. Guardian replaces that process with controlled digital sharing.

  • Walker’s Apple-and-Google challenge—what if they simply unlock phones for law enforcement?—does not eliminate the downstream work. Levy’s best counterexample is border control: phones are already open there, yet agents still rely on Cellebrite to extract, analyze, and preserve the data.

3. The stock traveled from de-SPAC orphan to crowded compounder and back

  • Cellebrite entered public markets through a SPAC and fell from $10 to roughly $4. Levy says investors missed the revenue “valley” created by shifting from perpetual licenses, recognized upfront, to subscriptions; the company then missed 2022 revenue expectations by around 40% and also disappointed on margins.

  • Investors additionally grouped Cellebrite with NSO and related controversies, while management—unaccustomed to public guidance—struggled to explain whether the company was a phone-unlocking “one-trick pony” or an emerging platform.

  • When ARR growth recovered toward roughly 20%-28% with attractive margins, sentiment reversed. The market began describing Cellebrite as a second Axon, and Axon’s 5% SPAC investment encouraged acquisition speculation as the shares climbed toward $25.

  • The latest reversal took the stock to roughly $14: Q1 was soft, Q2 guidance disappointed, federal spending became uncertain, the founder and CFO departed, and investors assumed that failure to unlock the newest iPhone meant market-share losses to Magnet. Levy says Cellebrite has not unlocked it yet, but rejects the claim that this invalidates the franchise.

4. Existing agencies, not new logos, carry the growth algorithm

  • Walker’s pushback is that Cellebrite already serves the FBI, NYPD, and other large agencies; thousands of smaller departments cannot individually match those budgets. Levy agrees the logo set is mature but says penetration inside each logo remains “very, very, very low.”

  • The Trump-shooter investigation provides the concrete deployment gap: the relevant Butler office lacked the needed Cellebrite capability, forcing officials to move the phone to Pittsburgh and take roughly four hours. Budget allocation—not the absence of an FBI contract—determined availability.

  • Migrating legacy users to Inseyets generally produces a 25%-40% uplift, depending on the customer. The remaining legacy products face an important shelf-life milestone next year, when customers must migrate to Inseyets; Levy describes the opportunity as another roughly 50% migration without specifying the denominator. Some agencies resist the price increase.

  • Levy’s rough bridge has 90%-96% of growth coming from the installed base: migrations, additional seats, 2%-4% annual pricing, and new modules. He expects around 20% growth for three to five years before deceleration, against digital-crime volumes he says management estimates are increasing approximately 30%.

5. Guardian, Pathfinder, and cloud make Cellebrite a platform

  • Guardian’s penetration is only around 3%-5%, yet Levy says it is growing about 100% and approaching 6% of the business. A previous limitation—sharing only with other Cellebrite products, not Magnet—has reportedly been resolved, removing one obstacle to adoption.

  • Pathfinder also remains roughly 2%-5% penetrated and has compounded around 50% over the past three years. Together, Guardian and Pathfinder contribute about one-quarter of company growth and move Cellebrite toward its stated ambition of managing investigations “from case to closure.”

  • These modules address different buyers inside the same agency. Digital-forensics technicians already know Cellebrite, while investigative units assembling evidence for judges often do not; selling to that second constituency requires education and a go-to-market motion the company historically underfunded.

  • Cellebrite’s cloud offering is approaching 20% of the business and, according to Levy, growing 100%-150% annually. Adoption is nevertheless slow because public safety trails mainstream software users by perhaps 15 years, which is why roughly 250 Cellebrite employees teach customers how to use the products.

6. Federal timing and new management turn Q2 into a clearing event

  • Agencies delayed purchases amid DOGE-related uncertainty and broader federal-budget questions. FedRAMP sponsorship and the federal ramp remained uncertain; the shares rose 4% after a related positive development before falling 3% the next day—reinforcing Levy’s sense that this remains a “show-me story.”

  • The founder-like longtime CEO left after more than 15 years. Levy says the executive explained that building Cellebrite from zero to roughly $400 million-$450 million required substantial personal sacrifice, and that scaling toward the guided $1 billion demanded a different operator.

  • Levy expects executive chairman Tom to become permanent CEO, noting his experience running software businesses, working at SAP and HP, serving at Vista, and leading Kony through its sale to Temenos. The new CFO came from New Relic and previously served as Model N’s CFO.

  • Guidance could still be cut by perhaps $10 million-$25 million of ARR, and management might reset 2028 targets. Yet Levy sees Q2 as potentially cleansing: the weak quarter, FedRAMP uncertainty, and new CFO’s guidance philosophy become known, while deferred federal demand may shift into late 2025 or accelerate 2026.

7. The ownership and management reset suggest a possible transaction

  • Walker sees “catnip” in the setup: a CFO associated with New Relic, a private-equity-oriented chairman moving toward the CEO role, and True Wind’s final 1.5 million earnout lockups approaching expiration around August 2026. Adam also has an incentive tied to a $30 stock price.

  • Levy calls a sale within one or two years “100% speculation,” but sees a “classic PE playbook”: approximately 20% growth, recurring revenue, strong cash generation, and contribution margins around 25%-35%. Recent layoffs could protect the 20% EBITDA-margin floor even if ARR guidance falls.

  • Possible buyers, again entirely speculatively, include Vista, Motorola, Axon, or IBM. Motorola strikes Levy as especially logical because it wants more recurring, application-based revenue and commonly acquires companies valued between roughly $1 billion and $4 billion-$5 billion.

  • Sun Corporation still owns roughly half of Cellebrite, creating both an overhang and an event path. Levy says several activists are pressing Sun to monetize the stake; one campaign even produced a song lamenting that another year had passed without shareholder value.

8. Clean cash flow supports the valuation, but execution and ethics remain real risks

  • Walker’s bear case begins at approximately $3 billion of enterprise value and $120 million of guided adjusted EBITDA. Subtract roughly $30 million of genuine stock compensation, leaving around $90 million of pre-tax earnings before taxes are considered; the multiple looks demanding, especially because no company compounds at 20% forever.

  • Levy answers with free cash flow: an estimated 5% yield for 2025 and roughly 8% for 2026, with no capitalized R&D obscuring economics. Unlike software businesses that insist SBC “is not a real expense,” Cellebrite’s accounting is clean enough that both analysts on the Tora call described its adjusted EBITDA as exceptionally clean.

  • The roughly $120 million Corellium purchase illustrates the capital-allocation case: Cellebrite had partnered with it for seven or eight years, serves overlapping customers, retained its founder, and paid about 5× for a mission-critical company Levy says was growing 50%-80%.

  • Execution under the new team is Levy’s largest enduring concern. He calls AI probably neutral in the near term: agencies are only beginning cloud migration and Cellebrite has invested in AI since 2015-2016. He thinks any meaningful benefit may take three to five years, while conceding he “may be mistaken” about the pace.

  • Ethical controls are unavoidable for technology that could be misused against dissidents. Cellebrite dropped many customers in its Asia segment during 2021-2022, maintains an ethics committee, and Levy estimates restricted-country exits represent 2%-4% of annual churn. The private-sector business, about 10% of the company and growing 20%-25%, also carries higher project-driven churn and is not Cellebrite’s market-leading segment.