What Memento Labs does

Memento Labs Srl is a Milan-based, privately held Italian surveillance technology company (VAT 03924730967) that develops and licenses commercial spyware and exploit tooling exclusively to government customers — specifically law enforcement agencies and intelligence agencies worldwide. The company is the rebranded successor to Hacking Team, which was acquired in 2019, and has inherited a specialized offensive-security engineering capability developed over more than a decade. Its product portfolio includes Dante, a Windows-based spyware platform with sandbox-escape, remote code execution, file theft, command execution, and keylogging capabilities that is being discontinued by end of 2025; LeetAgent, a spyware deployed in the 2025 Operation ForumTroll campaign targeting Russian institutions via a Chrome zero-day exploit (CVE-2025-2783); and a new generation of mobile spyware and exploits currently under development.

The company operates on a B2B government licensing model, selling directly via enterprise field sales and through intermediary/broker channels to fewer than 100 vetted government customers globally. Pricing is not publicly disclosed and contracts are quote-based. With 11-50 employees and a single product vertical (offensive cyber tooling for state use), Memento Labs is a boutique vendor whose commercial success is contingent on maintaining trust with a narrow set of government buyers while navigating an increasingly restrictive regulatory environment around commercial spyware proliferation, including the UK/France-led Pall Mall Process. The company is currently executing a strategic platform transition from Windows desktop surveillance to mobile-first offensive tooling.

Name

Memento Labs

Legal name

Memento Labs Srl

Website

https://mem3nt0.com

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

11–50 employees

Short description

Memento Labs is a Milan-based Italian surveillance technology company (successor to Hacking Team, acquired 2019) that develops commercial spyware and exploits for fewer than 100 government law enforcement and intelligence agency customers worldwide, currently pivoting from Windows to mobile platforms.

Ownership category

akta.pro rank

Headquarters

HQ city

Milan

HQ country

Italy

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Operations

Revenue model

1. Surveillance Technology Licensing: Licenses commercial spyware and exploit technology to government customers including LEAs and intelligence agencies. Revenue derived from government contracts and licensing arrangements with fewer than 100 confirmed customers.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels2 records

Core offering

Memento Labs develops and licenses proprietary commercial spyware and exploit technologies for government law enforcement agencies (LEAs) and intelligence agencies. The company engineers advanced surveillance tools including Windows-based spyware (Dante) and mobile spyware/exploits, enabling targeted intelligence gathering, file theft, command execution, keylogging, and sandbox escape capabilities for investigating organized crime, terrorism, human trafficking, financial fraud, and other digital threats.

Product overview

Memento Labs is a Milan-based surveillance technology company (formerly Hacking Team, acquired in 2019) offering proprietary IP intelligence technologies for law enforcement agencies (LEAs) and intelligence agencies. The company provides a portfolio of commercial spyware products including Dante (Windows-based spyware now being discontinued by end of 2025) and LeetAgent (deployed in Operation ForumTroll campaigns), while currently shifting focus to mobile spyware and exploits development. With fewer than 100 government customers, their technology enables investigative capabilities against organized crime, terrorism, human trafficking, financial fraud, and digital threats.

Differentiator

Problem solved

Functional benefit

Named customers3 records

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Two partnerships are on record, tiered minor.

• South African IntermediaryminorChannel Partner/ Reseller/ DistributorA South African intermediary was identified as selling Memento Labs' Dante spyware as part of the global spyware market's intermediary network.
• Third-party Exploit BrokersminorChannel Partner/ Reseller/ DistributorThird-party firms act as exploit brokers helping Israeli firms and others sell spyware to various nations, including circumventing diplomatic restrictions. Part of broader intermediary ecosystem that obscures supply chains.

Scale indicators2 records

Recent moves6 records

Expansion highlights4 records

Direct peers

• FinFisher (Gamma Group): UK/German-headquartered vendor of FinSpy commercial surveillance software sold to governments for lawful intercept. Direct competitor in the same spyware-as-a-service category.
• QuaDream: Israel-based commercial spyware vendor (Reign) selling mobile surveillance to government agencies before winding down operations. Closely parallel to Memento Labs in mobile-first positioning and government-only customer model.
• DSIRF: Austrian/German-linked commercial spyware vendor (Subzero) selling zero-day-enabled surveillance to government customers. Closely comparable in scale, customer profile, and European regulatory exposure.
• Paragon Solutions: Israeli commercial spyware vendor (Graphite) targeting government intelligence and law enforcement clients. Closely comparable technology positioning and customer profile to Memento Labs.
• Variston: Spain-based exploit broker and surveillance technology vendor. Participates in the same intermediary ecosystem that routes offensive cyber capabilities to governments worldwide.
• NSO Group: Israeli vendor of Pegasus spyware, the most prominent commercial surveillance tool sold exclusively to government LEAs and intelligence agencies. Directly comparable to Memento Labs in customer base, technology category, and regulatory exposure.
• Intellexa Alliance (Cytrox): Greece-headquartered commercial spyware alliance including Cytrox (Predator spyware). Competes head-to-head with Memento Labs for government offensive cyber contracts and shares the same intermediary-driven distribution model.
• Candiru: Israeli spyware vendor selling DevilsTongue and related surveillance tools to government customers. Same product category, same vertical customer base, and similarly subject to regulatory scrutiny and sanctions risk.

Broad incumbents

• Positive Technologies: Russian cybersecurity firm with offensive research and exploitation offerings alongside broader defensive security products. Comparable offensive-surveillance capabilities, but with a wider portfolio spanning enterprise security testing.

Emerging players

• Wintego: Israel-based exploit broker and surveillance capability vendor operating in the same intermediary ecosystem as Memento Labs. Smaller and less productized, but participates in the same supply chain for delivering offensive tooling to governments.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights5 records

Customer concentration

• LinkedInlinkedin.com/company/mem3nt0

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Memento Labs