The Olam
Company / Offensive Cyber

NSO Group

Israeli offensive cyber company headquartered in Herzliya, founded in 2010, best known for the Pegasus spyware platform and for its placement on the US Commerce Department Entity List in November 2021.

NSO Group is an Israeli offensive cyber company headquartered in Herzliya. The firm was founded in 2010 by Shalev Hulio and Omri Lavie, with co-founder Niv Carmi departing shortly after. Its commercial product is sold exclusively to sovereign government clients — primarily intelligence services, law enforcement agencies, and military signals units — under end-use restrictions overseen by Israel's Defense Export Controls Agency (DECA).

NSO's flagship product is Pegasus, a zero-click mobile interception platform that targets iOS and Android devices. Pegasus has been the subject of investigative reporting by the Pegasus Project consortium, Citizen Lab at the University of Toronto, and Amnesty International's Security Lab.

In November 2021, the US Department of Commerce placed NSO Group on the Bureau of Industry and Security Entity List, citing the supply of spyware used to target journalists, activists, and government officials. The Entity List designation cut NSO off from US-origin technology and severely restricted its commercial trajectory. NSO has rotated through ownership structures involving Francisco Partners, Berkeley Research Group, and management-led recapitalizations.

NSO sits at the center of a broader Israeli offensive-cyber cohort that includes Cellebrite, Paragon, Candiru, Quadream, and Verint's offensive-tools spinouts. Many cohort founders trace their training to Unit 8200 and adjacent IDF signals-intelligence formations.

The company has become a permanent reference point in policy debates over commercial spyware regulation, export-controls reform, and the boundary between lawful intercept and human-rights abuse. NSO Group's regulatory status, client list, and ongoing litigation in US federal court — including the WhatsApp / Meta complaint — make it one of the most-cited single companies in the global commercial-spyware policy literature.

Related Olam Coverage

See also: Pegasus · Unit 8200 · Cellebrite · Zero-Day · DECA · Defense Export License · Dream