V-DIG Audit: Check Point

Enterprise Technology Stack & Vendor Relationships

Check Point Software Technologies Ltd is headquartered at 5 Ha’Solelim Street, Tel Aviv 6789705, Israel, with primary US operations in San Carlos, California ¹. The company files annual 20-F reports with the US SEC under CIK 1015922 ².

As of FY2024, Check Point’s portfolio is organized across four platform pillars: Quantum (network security and firewalls), Harmony (endpoint and SASE), CloudGuard (cloud security), and Infinity (AI-driven unified platform) ¹. FY2024 revenues were approximately USD 2.49 billion, with the majority derived from subscription and support revenue ¹.

Check Point holds AWS Advanced Technology Partner status and Google Cloud Partner status ¹. Cloud-delivered products including CloudGuard and Harmony run on AWS, Azure, and Google Cloud infrastructure rather than on proprietary Check Point data centers ¹. The company lists thousands of channel partners, MSSPs, and system integrators globally ¹.

In the UK public sector, Check Point appears on the UK Government Digital Marketplace (G-Cloud 14) under service listings for CloudGuard Cloud Security Posture Management via authorized reseller VE3 GLOBAL LTD ³. NHS Scotland is a confirmed Check Point customer for network security, cloud security, and workspace security ⁴⁵.

Within the Israeli government sector, the Israeli Ministry of Environmental Protection is a confirmed Check Point customer, deploying Quantum SD-WAN and Infinity Portal ⁶. This is the only named Israeli government client confirmed in Check Point’s public-facing materials ⁶.

Surveillance, Biometrics & Retail Technology

Jonathan Zanger was appointed CTO of Check Point in July 2025, having previously served as CTO of Trigo, an Israeli computer-vision company building frictionless, cashierless checkout technology using overhead camera arrays and machine-learning-based person tracking in retail environments ⁷⁸. Prior to Trigo, Zanger led R&D at Unit 8200 ⁷⁸. This personnel linkage constitutes a connection between Check Point and a retail biometric and computer-vision platform; however, no documented technology integration between Check Point’s product suite and Trigo’s platform has been identified ⁷⁸.

Check Point markets Keyless, a zero-trust passwordless access solution incorporating biometric data (device-based biometrics) as an access factor ⁹. The Keyless solution is a partner integration with Keyless, a London-based vendor, and is not an in-house biometric platform built by Check Point ⁹.

No public evidence identified of a direct commercial integration between Check Point’s security platform and BriefCam (Canon’s video analytics subsidiary). No public evidence identified of a direct commercial or integration agreement between Check Point and AnyVision/Oosto. No public evidence identified of Check Point deploying or reselling Israeli-origin predictive policing, social media monitoring, or workforce surveillance tools as a distinct product line.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Check Point does not operate a hyperscale public cloud. Its Israeli facilities house R&D and corporate operations, not co-location or hosting services for external clients ¹. Cloud-delivered Check Point products run on AWS, Azure, and Google Cloud infrastructure ¹.

Project Nimbus is a USD 1.2 billion Israeli government cloud contract awarded to Google Cloud and AWS in 2021, providing cloud infrastructure to Israeli government ministries and the IDF ¹⁰. Check Point is NOT named as a primary contractor or direct subcontractor in publicly available tender documentation or investigative reporting on Nimbus-related data hosting ¹⁰. The assertion that Check Point is “the security gatekeeper for Project Nimbus” is inferential and not confirmed by any named contract disclosure or procurement record ¹⁰. Wiz, not Check Point, is confirmed as winner of a major Israeli government cloud security tender in 2024 ¹¹. However, Check Point’s own published customer story documents that the Ramat-Gan Municipality — described as “a government authority and participant in Israel’s Nimbus cloud computing project” — deployed Check Point’s Infinity Enterprise platform and CloudGuard Network Security to protect its migration to AWS ¹². This confirms Check Point secures the cloud environment of a named Nimbus participant, though it does not establish Check Point as a prime contractor or security gatekeeper for the Nimbus programme itself.

Check Point markets “sovereign cloud” security capabilities generically in product literature, consistent with CloudGuard posture-management and data-residency tooling ¹. No additional named contract with Israeli state institutions for digital sovereignty or infrastructure resilience beyond the Ministry of Environmental Protection customer story has been identified in public corporate disclosures ⁶¹.

Defence, Intelligence & Security Sector Technology Relationships

Leadership Military Backgrounds: Nadav Zafrir became CEO effective late 2024, having served as Commander of Unit 8200 from 2009 to 2013 and as co-founder of Team8 venture foundry ¹³¹⁴¹⁵. Gil Shwed serves as Executive Chairman and co-founder; he served in Israeli military intelligence (Unit 8200 equivalent) ¹⁶¹⁷. Jonathan Zanger, appointed CTO in July 2025, is a former Unit 8200 R&D lead ⁷⁸. Dorit Dor is a long-tenured Check Point executive, Unit 8200 veteran, and recipient of the Israel National Defense Prize ¹⁷. The founding trio of Gil Shwed, Marius Nacht, and Shlomo Kramer all served in Unit 8200 ¹⁶¹⁷.

Turkish Government Usage Controversy: Turkish Defense Minister Yaşar Güler confirmed on November 27, 2024, that the Turkish military stopped using Check Point firewall solutions as of June 2016 ¹⁸. However, Turkey’s Ministry of Treasury and Finance awarded a public tender in December 2019 for Check Point software licenses to local partner Trio Entegrasyon ¹⁸. The Turkish subsidiary, Check Point Yazılım Teknolojileri Pazarlama AŞ, was established in May 2002, and its board consists of Israeli nationals residing in Israel ¹⁸.

Government Sector Disclosure: Check Point’s 20-F annual filings disclose customers across government and critical infrastructure sectors globally, including Israeli government bodies, but do not itemize individual government contracts by agency ¹.

Dual-Use Technology Characteristics: Check Point’s core technologies—including stateful inspection firewalls, Deep Packet Inspection (DPI), SSL/TLS inspection, and SASE—are inherently dual-use ¹. These capabilities can be used for network security or for traffic monitoring and content filtering depending on operator configuration ¹. Check Point products support Lawful Interception (LI) interfaces compliant with CALEA (US) and ETSI standards ¹.

Contracts with Israeli Security Services: No public evidence identified of a named, documented contract between Check Point and the Israeli Ministry of Defence (IMOD), Israel Defence Forces, Shin Bet, Mossad, or the SIGINT National Unit beyond the Ministry of Environmental Protection customer story ⁶¹.

Offensive Cyber: No public evidence identified of Check Point developing, selling, or licensing offensive cyber capabilities, zero-day exploit tools, or digital weapons systems. Check Point Research (CPR) publicly documents offensive cyber tools including NSO Group’s Pegasus spyware; this research is defensive and intelligence-sharing in orientation ¹.

SEC Settlement: Check Point disclosed in 2024 that it was in settlement discussions with the US SEC in connection with the broader SolarWinds-related investigation into cybersecurity disclosure practices ¹⁹. This is a disclosure-adequacy inquiry into Check Point as a potentially affected party, not an export control or sanctions action related to technology sales to Israeli state entities ¹⁹.

AI, Algorithmic & Autonomous Systems

Check Point’s Infinity AI Copilot and AI-driven threat prevention capabilities are embedded in ThreatCloud AI, which processes threat indicators across the global Check Point install base ¹. These are marketed to enterprise and government customers ¹.

Check Point acquired Lakera (Zurich, Switzerland—not Israeli-origin) in 2024/2025 to add GenAI security guardrails capabilities including prompt-injection detection and LLM application security ²⁰. Lakera is confirmed as Swiss-founded and does not represent an Israeli-origin AI acquisition ²⁰.

No public evidence identified of a specific AI/ML contract between Check Point and Israeli military or security bodies for target identification, object tracking, logistics optimisation, or autonomous decision-support. No public evidence identified of Check Point’s AI models being trained on civilian population data, intercepted communications, or surveillance-derived datasets from Israel or the occupied Palestinian territories. No public evidence identified of Check Point involvement in autonomous lethal systems.

Technology Ecosystem & R&D Footprint

Check Point’s primary R&D facility is in Tel Aviv, Israel, with additional Israeli operations including offices in Be’er Sheva, situated within Israel’s “Cyber Spark” cluster adjacent to Ben-Gurion University ¹. The company employs approximately 6,000 people globally, with the majority of engineering and R&D staff Israel-based ¹.

Acquisitions of Israeli-Origin Companies: The following acquisitions of Israeli-origin or Israel-founded companies are confirmed:

• Cyberint (Tel Aviv, 2024): Threat intelligence and external risk management platform; founded by Israeli intelligence veterans ²¹.
• Veriti (Israel, 2024): Founded by Adi Ikan and Oren Koren, both former Unit 8200 members and former Check Point employees ¹¹.
• Perimeter 81 (Tel Aviv, 2023, approximately USD 490 million): SASE and zero-trust network access; rebranded as Harmony SASE ²².
• Atmosec (Israel, 2023): SaaS security posture management; integrated into CloudGuard ²³.
• Spectral (Tel Aviv, 2022): Developer-first secrets detection and application security ²⁴.
• Avanan (Tel Aviv, 2021, approximately USD 300 million): Cloud email and collaboration security; core of Harmony Email ²⁴.
• ForceNock (Israel, 2020): Web application and API protection; integrated into CloudGuard WAF ²⁴.
• Odo Security (Israel, 2020): Zero-trust remote access; integrated into product lines ²⁴.
• Protego (Israel, 2019): Serverless security ²⁴.
• Dome9 (Israel, 2018): Cloud security posture management; became CloudGuard ²⁴.

No public evidence identified of formal co-development or IP licensing agreements between Check Point and Technion, Hebrew University, or Weizmann Institute in corporate filings or press releases reviewed.

Civil Society Scrutiny & Regulatory History

Check Point is NOT listed in the UN OHCHR Business and Human Rights database of businesses involved in Israeli settlement activity (158 companies as of 2025 update) ²⁵²⁶. The UN Special Rapporteur Francesca Albanese’s report (June 2025, “From economy of occupation to economy of genocide”) identifies 60-plus companies but Check Point is NOT specifically named in the sections available in search results ²⁷. No entry is found for Check Point in the Who Profits corporate database documenting settlement involvement ²⁸.

Palestine Solidarity Campaign (UK) lists Check Point as a boycott target, claiming partnership with Israeli arms companies including Israel Aerospace Industries (IAI) ²⁹. boycot-israel.org lists Check Point as a target of BDS-adjacent consumer and investor campaigns ³⁰. Earlier advocacy reports (Stop The Wall “Digital Walls” 2020, Corporate Watch 2012) reference Check Point in context of Israeli cybersecurity ecosystem but contain no specific verified contracts ²⁹.

No public evidence identified of a named, organized institutional divestment campaign specifically targeting Check Point as distinct from broader BDS lists on which it appears. KLP (Norwegian public pension fund) 2022 sustainability report documents exclusions from portfolio companies involved in settlement activity; Check Point is not specifically named as an excluded company in the report reviewed ¹⁸.

Regulatory & Legal Actions: SEC settlement discussions (2024) pertain to SolarWinds-related cybersecurity disclosure practices, not export control or sanctions related to technology sales to Israeli state entities ¹⁹. No export-control actions, sanctions-related investigations, or legal challenges specifically concerning Check Point’s technology sales to Israeli state entities have been identified in public records reviewed.

China Market Restriction: In 2024, Beijing directed Chinese state-linked entities to replace US and Israeli cybersecurity software, with Check Point named among affected vendors alongside VMware and Fortinet ³¹. This is a market-access and national-security measure by Chinese authorities, not an export-control or sanctions action against Check Point specifically ³¹.

End Notes