Check Point Software Technologies Ltd. — BDS-1000 Dossier (V4)

Target Profile

Executive Summary

Check Point Software Technologies is a global cybersecurity company headquartered in Tel Aviv, Israel, with annual revenues of approximately USD 2.5 billion. The company develops and sells network security appliances, cloud security platforms, endpoint protection, and threat intelligence services to enterprise and government clients worldwide. This dossier assesses Check Point’s documented involvement across four domains relevant to Israel-Palestine: military, digital, economic, and political.

The strongest documented vector is V-ECON (Economic), where the company demonstrates deep capital integration into the Israeli economy through a major new 100,000 square meter Tel Aviv campus (NIS 500 million land purchase), significant R&D employment of approximately 2,000 personnel in Israel, and active acquisition of Israeli startups (nine Israeli-origin acquisitions since 2018). The company receives Israeli government R&D grants through the Israel Innovation Authority, tethering its IP and revenue to the Israeli state.

V-POL (Political) evidence centers on the company’s leadership composition — all three founders served in IDF Unit 8200, and CEO Nadav Zafrir is a former commander of Unit 8200 and founder of the IDF Cyber Command. Founder Gil Shwed received the 2018 Israel Prize for contributions explicitly linked to national security. Check Point published “Iron Swords War” blog posts framing the October 2023 conflict from an Israeli security perspective, with no equivalent statements on Palestinian civilian concerns.

V-DIG (Digital) evidence includes confirmed customer relationships with Israeli government entities (Ministry of Environmental Protection, Ramat-Gan Municipality as a Nimbus cloud project participant), membership in the Israeli Cyber Companies Consortium (IC3) led by Israel Aerospace Industries, and leadership backgrounds in Unit 8200. The company’s technologies include dual-use capabilities such as Deep Packet Inspection and Lawful Interception interfaces.

V-MIL (Military) evidence is the weakest domain. No named defense ministry contracts, no SIBAT registration, and no identified munitions or weapons systems involvement were found. The primary vector is indirect: membership in the IAI-led consortium and shared workforce pipelines with defense primes.

The resulting BRS score is 665 (Tier B — Severe), driven primarily by the V-ECON score of 9.20. Check Point is not listed on the UN OHCHR settlement database, and no institutional divestment campaigns specifically targeting the company were identified. The company has not issued public statements addressing Palestinian humanitarian concerns.

Timeline of Relevant Events

Corporate Overview

Corporate Structure: Check Point Software Technologies Ltd. is incorporated in Israel (Company ID 520042821) and listed on NASDAQ under ticker CHKP. It operates as the global parent company with no separate foreign holding entity. The company maintains its global headquarters in Tel Aviv, with US operations in San Carlos, California.

Leadership: The founding trio (Shwed, Nacht, Kramer) all served in Unit 8200. Gil Shwed serves as Executive Chairman and holds approximately 24.6% of shares. Nadav Zafrir, former Commander of Unit 8200 (2009–2013), became CEO in December 2024. Dorit Dor, Chief Technology Officer, is a Unit 8200 veteran and Israel National Defense Prize recipient. Jonathan Zanger, appointed CTO in July 2025, is a former Unit 8200 R&D lead.

Israeli Entities and Franchise Relationships: Check Point operates R&D facilities in Tel Aviv and Be’er Sheva (adjacent to the CyberSpark cluster). The company maintains a Turkish subsidiary (Check Point Yazılım Teknolojileri Pazarlama AŞ, established 2002) with Israeli nationals on its board. The company is constructing a major new campus in Tel Aviv in partnership with Israel Canada on state-owned land leased by the Israel Electric Corporation.

Acquisitions of Israeli Companies (2018–2025): Dome9 (2018), Protego (2019), ForceNock (2020), Odo Security (2020), Avanan (2021), Spectral (2022), Perimeter 81 (2023), Atmosec (2023), Cyberint (2024), Veriti (2024), Cyclops (2025), Cyata (2025), Rotate (2025), Deepchecks (2025).

Domain Summaries

V-MIL: Military

Mechanism of Involvement

Check Point’s military-domain involvement is indirect rather than direct. The company is not a defense contractor in the conventional sense — it does not manufacture weapons, munitions, or military hardware. However, several vectors connect it to the Israeli defense ecosystem:

1. Consortium Membership: Check Point is a confirmed member of the Israeli Cyber Companies Consortium (IC3), founded in 2016 and led by Israel Aerospace Industries (IAI). Other members include CyberArk, XM Cyber, Mellanox, and Cognyte²³.

2. Workforce Pipeline: Check Point hosts the Jerusalem College of Technology “Cyber Elite” programme alongside IAI/Elta and Rafael, indicating a shared workforce-pipeline arrangement with defense primes²⁴.

3. Leadership Backgrounds: The company’s founders and CEO are all Unit 8200 veterans. While Unit 8200 is an intelligence unit rather than a combat force, its personnel constitute part of Israel’s defense apparatus.

4. Government Cyber Coordination: Check Point was the first company to implement the Israeli National Cyber Directorate’s “Cyber Defense Methodology for an Organization” in its products, establishing direct coordination with a government defense and digital security agency²⁵.

5. Reserve Duty Disclosure: The company’s 20-F filings acknowledge that a significant portion of its Israeli workforce is subject to mandatory IDF reserve duty, and large-scale mobilization constitutes a disclosed operational risk¹²¹³.

Counter-Arguments and Evidence Limits

The company’s strongest defenses are:

• No Named Defense Contracts: No publicly disclosed contract between Check Point and the Israeli Ministry of Defence or IDF has been identified in corporate filings, press releases, or government tender records¹²¹³.

• Not on SIBAT Registry: No evidence was found of Check Point’s registration with SIBAT (Israel’s Defence Export & Defence Cooperation Directorate) among the 2,192 registered defense exporters²⁶.

• No Weapons Systems Involvement: Check Point does not manufacture lethal systems, munitions, or kinetic weapons platforms. Its products are enterprise and government-grade cybersecurity software.

• No Settlement Database Listing: Check Point is NOT listed on the UN OHCHR database of businesses involved in Israeli settlements²⁷.

• No Verified Direct Supply Chain: While Bynet Data Communications (which holds Civil Administration West Bank infrastructure tenders) offers a “CyberDome” solution integrating Check Point products, the geographic exposure belongs to Bynet, not directly to Check Point²⁸.

Named Entities and Evidence Map

V-DIG: Digital

Mechanism of Involvement

Check Point’s digital-domain involvement encompasses technology relationships with Israeli government entities and defense-adjacent digital infrastructure:

1. Government Customer Relationships: The Israeli Ministry of Environmental Protection is a confirmed Check Point customer, deploying Quantum SD-WAN and Infinity Portal¹². Ramat-Gan Municipality, described as a participant in Israel’s Nimbus cloud computing project, deployed Check Point’s Infinity Enterprise platform and CloudGuard Network Security to protect its migration to AWS²⁴.

2. Dual-Use Technology Characteristics: Check Point’s core technologies — stateful inspection firewalls, Deep Packet Inspection (DPI), SSL/TLS inspection, and SASE — are inherently dual-use. These capabilities can be used for network security or for traffic monitoring and content filtering. Check Point products support Lawful Interception (LI) interfaces compliant with CALEA (US) and ETSI standards³¹.

3. Leadership and Personnel Links: CEO Nadav Zafrir is a former Unit 8200 Commander. CTO Jonathan Zanger was previously CTO of Trigo, an Israeli computer-vision company building frictionless, cashierless checkout technology using overhead camera arrays and ML-based person tracking in retail environments²¹²².

4. Consortium Membership: IC3 membership links Check Point to the Israeli defense cyber ecosystem.

5. Acquisition Pattern: The company has acquired nine Israeli-origin cybersecurity startups since 2018, demonstrating active investment in the Israeli technology ecosystem.

Counter-Arguments and Evidence Limits

• Not Nimbus Prime Contractor: Check Point is NOT named as a primary contractor or direct subcontractor in Project Nimbus (the USD 1.2 billion Israeli government cloud contract). Wiz, not Check Point, won a major Israeli government cloud security tender in 2024¹²⁶.

• No Offensive Cyber Capabilities: No public evidence identified of Check Point developing, selling, or licensing offensive cyber capabilities, zero-day exploit tools, or digital weapons systems. Check Point Research publicly documents offensive tools including NSO Group’s Pegasus spyware — this research is defensive and intelligence-sharing in orientation³¹.

• No Specific Government Defense Contracts: The 20-F filings disclose Israeli government entities among the customer base but do not disaggregate defence ministry contracts from civilian ministry contracts¹²¹³.

• No Surveillance Product Line: No public evidence identified of Check Point deploying or reselling Israeli-origin predictive policing, social media monitoring, or workforce surveillance tools as a distinct product line.

• Lakera Acquisition is Swiss: Check Point acquired Lakera (Zurich) in 2024/2025, which is Swiss-founded, not Israeli-origin¹⁸.

Named Entities and Evidence Map

V-ECON: Economic

Mechanism of Involvement

Check Point demonstrates the strongest documented involvement in the economic domain:

1. Direct Capital Investment in Israel: The company is constructing a 100,000 square meter campus in Tel Aviv in partnership with Israel Canada, representing a land purchase of approximately NIS 500 million. This forms part of a larger ~NIS 800 million December 2024 tender for the Kremenetski/Bitsaron site, on land where the state-owned Israel Electric Corporation is the long-term lessee — channelling capital into a transaction involving a strategic state-owned infrastructure entity⁴¹⁷.

2. R&D Employment: Check Point operates a significant R&D center in Israel employing approximately 2,000 research and development personnel, with announced plans to hire 500 additional employees for a new AI research center¹.

3. Israeli Government R&D Grants: Check Point has been named among large Israeli technology firms targeted by the Israel Innovation Authority’s R&D grant program. IIA grants carry mandatory revenue royalties (typically 3–5%), tethering recipient IP and revenue to the Israeli state⁶.

4. Active Acquisition Program: The company completed three acquisitions in 2025–2026 (Cyclops for $85 million, Cyata, Rotate) and acquired Deepchecks, an Israeli AI startup founded by a former IDF data science leader. Nine Israeli-origin acquisitions since 2018 demonstrate active capital deployment into Israeli-domiciled companies¹⁹²⁰.

5. Corporate Tax Residence: Check Point is an Israeli tax resident, meaning profits generated globally flow into Israel rather than being repatriated from a foreign operation.

Counter-Arguments and Evidence Limits

• Not on Settlement Database: Check Point is NOT listed in the UN OHCHR Business and Human Rights database of businesses involved in Israeli settlement activity (158 companies)¹¹³².

• Not on “Don’t Buy Into Occupation” List: The company is not listed in the 2024 DBIO company list³³.

• Not on Who Profits Database: No entry found for Check Point in the Who Profits corporate database documenting settlement involvement³³⁴.

• No Agricultural or Physical Goods: Check Point is a cybersecurity software company and does not source agricultural commodities or physical consumer goods from Israeli exporters.

• No Settlement-Origin Products: The company’s offerings consist of software and technology appliances rather than physical consumer goods requiring country-of-origin marking.

Named Entities and Evidence Map

V-POL: Political

Mechanism of Involvement

Check Point’s political-domain involvement centers on leadership backgrounds, public communications, and state recognition:

1. Leadership Military Backgrounds: All three founders (Shwed, Nacht, Kramer) served in Unit 8200. CEO Nadav Zafrir served as Commander of Unit 8200 from 2009 to 2013 and established the IDF Cyber Command before retiring as a Brigadier General³. CTO Dorit Dor served as a cyber espionage officer in IDF³.

2. State Recognition: Gil Shwed received the 2018 Israel Prize for High Technology and Innovation — Israel’s highest civilian honor — with the prize citation explicitly linking his commercial work to national security contributions¹⁵.

3. Public Communications on Conflict: Following October 2023, Check Point published the “Iron Swords War — Cyber Perspectives” blog series, cataloging offensive cyber activity by Hamas-aligned actors and providing defensive guidance to Israeli organizations. No equivalent guidance or public statements were issued concerning Palestinian civilian digital infrastructure or humanitarian concerns¹¹²⁷.

4. Asymmetric Response to Conflicts: The company published “The Russian-Ukrainian War, One Year Later” in February 2023 and reduced commercial operations in Russia following the 2022 invasion. No analogous commercial or operational adjustments related to Israeli government entities were documented for the October 2023 conflict¹⁸¹¹.

5. Conference Sponsorship: Check Point is an anchor sponsor of the CyberTech conference series, organized in partnership with the Israel Export Institute, a government-backed trade body. Israeli prime ministers, defense ministers, and intelligence chiefs have participated as keynote speakers³¹.

6. Reserve Duty Framing: The company’s 20-F filings disclose Israeli employee reserve duty obligations as a workforce continuity risk, treating this solely as an operational factor without ethical or humanitarian framing¹³.

Counter-Arguments and Evidence Limits

• No Physical Presence in Occupied Territories: Check Point’s headquarters and R&D facilities are in Tel Aviv and Ra’anana, within internationally recognized Israeli territory. No offices, retail outlets, or subsidiaries were identified in West Bank settlements or East Jerusalem⁴¹³.

• No Verified Philanthropy to Military Organizations: No verified personal philanthropy to military-welfare organizations by Shwed, Zafrir, or Nacht was identified in available IRS 990 filings, Charity Commission records, or press releases¹⁹.

• No Official BDS Targeting: No public evidence identified of Check Point appearing on official BDS Movement campaign targeting lists; fringe boycott databases include Check Point, but the official BDS Movement page does not³³⁹.

• Human Rights Policy Exists: The company publishes a Human Rights and Labor Policy as part of its ESG documentation¹⁰.

• No Verified Lobbying on Israel Issues: Registered lobbying activity appears oriented toward commercial cybersecurity policy rather than Israel-specific geopolitical advocacy³¹.

Named Entities and Evidence Map

BDS-1000 Score (V4)

• V_MAX: 9.20 (V-ECON)
• Sum_OTHERS: 7.23
• BRS Score: 665
• Tier: B (Severe)

The V_MAX of 9.20 is driven by V-ECON, reflecting Check Point’s deep capital integration into the Israeli economy through major real estate investment (NIS 500 million campus), substantial R&D employment (~2,000 personnel), active acquisition of Israeli startups (nine since 2018), and participation in Israeli government R&D grant programs that tether company IP and revenue to the Israeli state. The Tier B classification reflects severe economic and political involvement, though direct military contracting remains unverified.

Methodology Note

• Evidence-Only Framework: All scores and findings are derived exclusively from the four domain audits (V-MIL, V-DIG, V-ECON, V-POL). No additional sources were consulted beyond the audit end notes.

• Scale-Free Impact Calculation: V = I × (M × P) / 10, where I = activity type/impact, M = scale/magnitude, P = directness/proximity. This produces a scale-free composite score per domain.

• V4 Scoring: Domain scores are calculated independently; V_MAX represents the highest single domain score; BRS aggregates all domain scores.

• Temporal Rule: Companies that have divested or exited operations in Israel receive mitigated scores. No such exits were documented for Check Point.

• Entity Attribution: The methodology applies only to the named company — no transitive guilt to subsidiaries, partners, or customers unless specific evidence links the primary entity.

• Settlement Operations: When operations are located in or serve Israeli settlements, this dual-counts across V-ECON and V-POL. Check Point’s operations are in Tel Aviv (internationally recognized Israeli territory), not settlements.

• “No Public Evidence Identified”: Used where comprehensive checks found no documentation supporting a claim. This is not a positive finding of absence but a statement of audit scope.

End Notes