INDEX / DIRECTORY / CYBERARK / V-DIG

Cyberark V-DIG

DIGITAL INFRASTRUCTURE AUDIT UPDATED 2026-06-11
V-DIG Score 0.16 /10 B Cyberark — BDS-1000 635
V-DIG 0.16

Evidence-only forensic audit. Scoring happens downstream — see the main dossier for the composite assessment.

CyberArk — V-DIG Audit

Enterprise Technology Stack & Vendor Relationships

CyberArk maintains documented integration partnerships with several Israeli-origin technology vendors operating in the enterprise cybersecurity space. The company announced a product-level integration with Wiz in 2023, enabling joint enterprise customers to achieve “Zero Standing Privileges” remediation and cloud-identity visibility through bidirectional API connections 1. CyberArk maintains a documented partnership with SentinelOne for endpoint security, enabling automated threat response between CyberArk Identity and SentinelOne Singularity XDR 1. The company also partners with NICE RPA for securing application credentials used by robotic process automation clients, and its partner network includes Check Point for securing privileged access to network firewall administration environments 1.

The Wiz integration represents a substantive commercial relationship, with joint customer-facing materials and a product integration sold through both companies’ sales channels 1. The NICE RPA and Check Point integrations address specific vertical use cases and are not core platform dependencies 1. No public evidence identified of CyberArk engaging systems integrators that mandated or deployed Israeli-origin technology as part of major technology programmes 2.

Surveillance, Biometrics & Retail Technology

No public evidence identified of CyberArk using or reselling Israeli-origin facial recognition, biometric identification, or behavioural analytics platforms including Trigo, BriefCam, AnyVision/Oosto, or Trax 2. CyberArk does market passwordless authentication using biometric factors such as fingerprint and facial recognition as part of its enterprise identity platform, and employs behavioural biometrics including typing patterns and access behaviour for identity assurance 3. These capabilities represent commercial enterprise products designed for workforce identity verification, not retail surveillance systems 2.

No public evidence identified of CyberArk using or reselling Israeli-origin predictive policing, sentiment analysis, social media monitoring, or workforce surveillance tools 2. No public evidence identified of confirmed biometric or facial recognition technologies reaching CyberArk indirectly via managed services or bundled platform suites 2.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

CyberArk’s SEC 20-F filings disclose that a substantial majority of the company’s long-lived assets are located in Israel, reflecting heavy concentration of R&D and engineering infrastructure 2. The company operates R&D facilities at its global headquarters in Petah Tikva, Israel and maintains a development presence at the Gav-Yam Negev High-Tech Park in Be’er Sheva 4. The Be’er Sheva facility was inaugurated in June 2021 with an initial 20 employees and was expanded in April 2022 to 720 square metres with a target of 100 employees 5. The Gav-Yam park is geographically adjacent to Ben-Gurion University and the IDF C4I Corps base 5.

No public evidence identified of CyberArk holding direct contracts or formal participation agreements with Israeli government cloud initiatives, specifically Project Nimbus or comparable state-backed digital infrastructure programmes 2. CyberArk is NOT confirmed as a subcontractor to Project Nimbus; AWS and Google are the prime contractors for that initiative 2. CyberArk’s product documentation explicitly lists “Palestinian Authority Territories” among jurisdictions for which access to certain SaaS products requires prior approval from the Israeli Ministry of Defense, attributed to Israeli export control regulations 6.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of verified contracts, partnerships, or service agreements between CyberArk and the Israeli Ministry of Defence, IDF, Shin Bet, Mossad, or National Cyber Directorate 2. Udi Mokady, co-founder and Executive Chairman of CyberArk, is documented as a graduate of Unit 8200, the IDF’s elite signals intelligence division 78. Omer Grossman, appointed as Global Chief Information Officer in 2022, served 25 years in the IDF, most recently as Head of IDF Cyber Defense Operations Center and previously as Head of Mamram, the IDF’s central computing unit 9. Following the October 7, 2023 Hamas attack, CyberArk’s CEO confirmed that a “small percentage” of employees were called to IDF reserve duty, and some employees volunteered; the company stated it was “incredibly proud” of team members 2.

CyberArk holds Networthiness certification from the U.S. Army and appears on the DoD Information Network Approved Products List, confirming certified vendor status for U.S. military IT environments 10. The company also maintains FedRAMP High, NIST 800-53, Common Criteria EAL 2+, and NIAP certifications 10.

AI, Algorithmic & Autonomous Systems

No public evidence identified of CyberArk providing AI or machine learning systems to Israeli state, military, or security bodies under specifically documented supply arrangements 2. In 2024, CyberArk introduced what it describes as “the first identity security solution purpose-built to protect AI agents with privilege controls,” applying privileged access management to AI agent workloads 3. This product is commercially marketed to enterprise customers and is not documented as a system supplied specifically to state, military, or intelligence bodies 2.

No public evidence identified of CyberArk AI models being trained on civilian population data, intercepted communications, biometric registries, or surveillance-derived datasets from Israel or the occupied territories 2. No public evidence identified of CyberArk providing autonomous targeting systems, weapons control interfaces, or lethal autonomous systems as part of its documented product or research portfolio 2.

Technology Ecosystem & R&D Footprint

CyberArk maintains primary R&D operations at its global headquarters in Petah Tikva, Israel 4. A second development presence was established in Be’er Sheva at Gav-Yam Negev High-Tech Park, inaugurated June 2021 with initial 20 employees and expanded in April 2022 to 720 square metres targeting 100 employees 45. The Gav-Yam park is geographically adjacent to Ben-Gurion University and the IDF C4I Corps base 5.

The company has pursued an acquisition strategy focused on U.S.-based technology companies: Conjur in 2017 for DevOps secrets management, Idaptive in 2020 for cloud identity, and Venafi in 2024 for machine identity management 2. No acquisitions of Israeli-origin technology companies have been identified 2.

In July 2025, CyberArk shareholders approved acquisition by Palo Alto Networks at approximately $25 billion valuation, with the transaction completed in February 2026 11. This acquisition is described as the second-largest Israeli technology exit in history and is estimated to generate approximately $2 billion (NIS 6.7 billion) in Israeli tax revenue 11. Palo Alto Networks was founded by Nir Zuk, documented as a Unit 8200 alumnus 8.

Civil Society Scrutiny & Regulatory History

CyberArk is NOT listed in the UN OHCHR Business and Human Rights database of business enterprises involved in settlement activity 12. The company is NOT listed in the Don’t Buy Into Occupation coalition reports identifying companies with settlement ties 13. CyberArk is NOT listed in the Who Profits database of companies involved in settlement activity 2.

Glasgow Caledonian University signed a contract with CyberArk in October 2023 for MFA licensing and services via reseller Computacenter, valued at £1,436,210.32 1415. The GCU Students’ Association conducted a BDS campaign citing CyberArk’s Israeli corporate origins, documented IDF ties of founders and executives including Udi Mokady’s Unit 8200 background and Omer Grossman’s 25-year IDF service, and the CEO’s statement supporting employees called to reserve duty 2. GCU Students’ Association voted in October 2024 to end the relationship with CyberArk, and the contract was subsequently terminated 2. University of Aberdeen signed a CyberArk contract in January 2024 and faced backlash from the Palestine Solidarity Society citing IDF ties 16.

No regulatory inquiries, export control enforcement actions, sanctions-related investigations, or legal challenges specifically directed at CyberArk’s technology sales to Israeli state or military entities have been identified 2. CyberArk’s SaaS documentation references Israeli export control compliance as the basis for restricting access from Palestinian Authority territories, representing a compliance disclosure rather than an enforcement action 6.

End Notes

Footnotes

  1. https://www.cyberark.com/press/cyberark-and-wiz-team-up-to-provide-complete-visibility-and-control-for-cloud-created-identities/ ↩ ↩2 ↩3 ↩4 ↩5

  2. https://www.gcustudents.co.uk/thestudentvoice/gcu-to-end-relationship-and-contract-with-cyberark ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13 ↩14 ↩15 ↩16 ↩17 ↩18 ↩19 ↩20

  3. https://www.cyberark.com/press/cyberark-introduces-first-identity-security-solution-purpose-built-to-protect-ai-agents-with-privilege-controls/ ↩ ↩2

  4. https://nocamels.com/2021/06/cyberark-beer-sheva-rd-center/ ↩ ↩2 ↩3

  5. https://www.jpost.com/business-and-innovation/tech-and-start-ups/article-1036897 ↩ ↩2 ↩3 ↩4

  6. https://docs.cyberark.com/remote-access-on-prem/latest/en/content/resources/frontmatter/cc_restrictedaccess.htm ↩ ↩2

  7. https://en.wikipedia.org/wiki/Udi_Mokady ↩

  8. https://www.dropsitenews.com/p/israel-technology-palo-alto-networks-microsoft-unit-8200 ↩ ↩2

  9. https://www.cyberark.com/press/cyberark-appoints-omer-grossman-global-chief-information-officer ↩

  10. https://www.cyberark.com/press/cyberark-earns-u-s-department-of-defense-uc-apl-certification ↩ ↩2

  11. https://en.globes.co.il/en/article-cyberark-deal-worth-2b-to-israeli-state-coffers-1001517665 ↩ ↩2

  12. https://www.ohchr.org/en/business/bhr-database ↩

  13. https://dbuyintooccupation.org/ ↩

  14. https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=OCT489663 ↩

  15. https://www.publiccontractsscotland.gov.uk/search/show/search_view.aspx?ID=OCT489663 ↩

  16. https://www.gaudie.co.uk/wpress/index.php/news/2024/11/20/uoa-faces-backlash-over-cyber-ssecurity-contract-with-idf-linked-firm ↩