What The Citizen Lab does

The Citizen Lab is an interdisciplinary research unit housed within the Munk School of Global Affairs & Public Policy at the University of Toronto, established in 2001 and operating with a team of approximately 40 researchers in Toronto, Ontario. The organization investigates novel digital threats to democracy, human rights, and global security by combining methodologies from law, computer science, cybersecurity, political science, and the social sciences. Its core technical capabilities include forensic device analysis to identify spyware infections and surveillance artifacts, network measurement and traffic analysis to uncover surveillance campaigns and censorship systems, and telecom interconnect ecosystem analysis probing SS7 and telecommunications signaling vulnerabilities exploited by commercial surveillance vendors. Its outputs are research publications, security vulnerability disclosures (with a 45-day coordinated disclosure timeline), expert analysis, and policy submissions across eight focus areas: App Security & Privacy, Artificial Intelligence, Censorship, Digital Transnational Repression, Disinformation, Law & Policy, Mass Surveillance, and Targeted Surveillance.

The organization's business model is explicitly non-commercial. As an academic research unit, The Citizen Lab does not sell products or services; all research findings, reports, and tools are made publicly available at no cost through its website, email newsletter, social media, GitHub repositories, and direct media engagement. Operating funding derives from the University of Toronto's institutional support and, by inference, competitive research grants from philanthropic and governmental sources, though specific funding details are not publicly disclosed. The lab has no equity investors, no ticker symbol, and no commercial pricing model. Distribution relies on open-access digital publication, direct engagement with policymakers through legislative testimony and policy submissions, and amplification through investigative media partners such as OCCRP and major outlets including the Financial Times, New York Times, Guardian, Globe and Mail, and Forbes.

Its primary stakeholders are civil society organizations and human rights defenders who face targeted surveillance, policymakers and government bodies requiring expert guidance on technology policy, investigative journalists and media organizations reporting on surveillance and digital security threats, and the broader cybersecurity research community. Notable recent work includes forensic exposure of Pegasus spyware targeting European Parliament members, forensic analysis of Cellebrite misuse by Russian authorities against activists, and formal policy submissions analyzing Canadian surveillance legislation (Bill C-22). The organization has no recurring revenue customers in a commercial sense, no headcount growth signals, and no pending M&A, venture financing, or expansion transactions; its strategic posture is sustained institutional research, expert testimony, and public-interest disclosure.

Name

The Citizen Lab

Legal name

The Citizen Lab

Website

https://citizenlab.ca

Company type

Private

Operating status

Operating

Headcount range

11–50 employees

Short description

The Citizen Lab is an interdisciplinary research unit at the University of Toronto's Munk School that investigates digital threats to democracy and human rights through forensic device analysis, network measurement, and telecom security research, serving civil society, policymakers, journalists, and the cybersecurity community with publicly available findings.

Ownership category

akta.pro rank

Product category

Digital Rights Research

NAICS

Research and Development in the Social Sciences and Humanities (541720), International Affairs (92812)

SIC

Services-Commercial Physical & Biological Research (8731), Services-Testing Laboratories (8734)

akta.pro primary industry

Media Freedom, Access to Information & Digital Rights (BPADAGAE)

akta.pro secondary industry

Identity Threat Detection & Response (ITDR) (HDAEAJAH)

Keywords

• Digital rights research
• Cybersecurity investigations
• Surveillance research
• Spyware investigations
• Human rights technology

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Others

Distribution channels3 records

Marketing channels6 records

Core offering

The Citizen Lab is an interdisciplinary academic research unit at the Munk School of Global Affairs & Public Policy, University of Toronto. It conducts investigations into digital threats to democracy, human rights, and global security, producing open-access research reports, security vulnerability disclosures, expert testimony, and policy recommendations on topics such as commercial spyware, telecommunications surveillance, censorship, disinformation, and digital transnational repression.

Product overview

The Citizen Lab is an academic research unit at the University of Toronto's Munk School of Global Affairs & Public Policy, not a commercial product company. It conducts interdisciplinary research investigating threats to democracy, human rights, and global security in the digital ecosystem. Its primary outputs are research reports, expert analysis, vulnerability disclosures, and policy recommendations rather than commercial software products. The organization publishes investigations into spyware (Pegasus, Cellebrite), telecommunications surveillance, censorship, disinformation, and digital transnational repression. It also maintains a GitHub repository for publicly reported vulnerability disclosures and provides resources through its Tools & Resources section.

Differentiator

Problem solved

Functional benefit

Products and services

• Research Publications
• Security Vulnerability Disclosures
• Tools & Resources

Quantifiable outcome

• Exposed Pegasus spyware targeting of European Parliament members, journalists, and human rights defenders worldwide
• +1 more outcomes

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Privacy International: Privacy International investigates state and corporate surveillance practices and litigates/publishes on surveillance law, with comparable focus areas to Citizen Lab on mass surveillance and intelligence oversight.
• Electronic Frontier Foundation (EFF): EFF is a leading digital rights civil society organization producing technical research, policy advocacy, and security guidance for at-risk users; it overlaps directly with Citizen Lab on surveillance, censorship, and digital rights law and policy.
• Open Observatory of Network Interference (OONI): OONI is a non-profit that performs global network measurement of censorship and traffic manipulation, directly comparable to Citizen Lab's network measurement and traffic analysis methodology on censorship systems.
• Access Now: Access Now runs a Digital Security Helpline and policy advocacy for internet freedom, sharing Citizen Lab's civil society and human rights defender audience and focus on digital transnational repression and shutdowns.
• Center for Democracy & Technology (CDT): CDT is a policy-focused nonprofit that produces technical and legal analysis on surveillance, encryption, and AI policy; comparable to Citizen Lab's policy submissions and legislative engagement.
• Stanford Internet Observatory (SIO): SIO was an academic center at Stanford studying disinformation, platform governance, and internet policy; comparable in being an academic research unit producing evidence that informs policy and platform decisions.
• Amnesty International Security Lab: Amnesty's Security Lab conducts forensic spyware investigations and threat research on civil society targets using comparable methodology (e.g., the Pegasus Project) and overlapping source network, making it the closest direct peer in targeted-surveillance research.

Broad incumbents

• Human Rights Watch: Human Rights Watch is a broader human rights organization with a Digital Rights division that investigates surveillance abuses against civil society; overlaps with Citizen Lab's target customers and policy goals but operates at much wider thematic scope.
• Lookout (Mobile Threat Intelligence): Lookout publishes mobile threat intelligence on nation-state spyware and stalkerware, sharing Citizen Lab's mobile forensic subject matter but operating as a commercial cybersecurity vendor serving enterprise customers.
• Jigsaw (Google): Jigsaw is Alphabet's technology incubator that builds tools against disinformation, censorship, and targeted attacks (e.g., Project Shield, Outline VPN); overlaps with Citizen Lab's civil society focus and several past affiliations (Scott-Railton) but operates as a commercial tech unit.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/citizenlab
• GitHubgithub.com/citizenlab
• YouTubeyoutube.com/channel/UCf5Aunw7xvt3lAFrLhiCA5w
• LinkedInlinkedin.com/company/the-citizen-lab
• Instagraminstagram.com/thecitizenlab

Revenue estimate

Valuation estimate

Number of profiles

Profiles10 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about The Citizen Lab