INDEX / DIRECTORY / RADWARE / V-DIG

Radware V-DIG

DIGITAL INFRASTRUCTURE AUDIT UPDATED 2026-06-02
V-DIG Score 5.11 /10 C Radware — BDS-1000 550
V-DIG 5.11

Evidence-only forensic audit. Scoring happens downstream — see the main dossier for the composite assessment.

V-DIG Audit: Radware

Enterprise Technology Stack & Vendor Relationships

Radware Ltd. is an Israeli-incorporated cybersecurity company, originally NASDAQ-listed under ticker RDWR, with principal executive offices in Tel Aviv at 22 Raoul Wallenberg Street 1. Core product lines include DDoS mitigation (DefensePro hardware, Cloud DDoS Protection), Web Application Firewall (AppWall/Cloud WAF), bot management (Bot Manager), and application delivery controllers (Alteon) 234. Radware operates a self-protection model using its own products internally, consistent with industry practice 234.

Strategic partnerships confirmed with Microsoft Azure (joined Microsoft Intelligent Security Association in 2021) 5, Amazon Web Services 6, and Google Cloud 7. These relationships provide cloud compute and network transit capacity for Radware’s cloud-delivered security services. Radware markets DDoS and application security services to public-sector customers including SLED and federal tiers via government solutions page 8. No specific Israeli government cloud certification (equivalent to FedRAMP) is confirmed in public sources. No public evidence identified that Radware holds internal licensing or subscription relationships with Check Point, Wiz, SentinelOne, CyberArk, Verint, Claroty, or comparable Israeli-origin cybersecurity vendors for enterprise use. Radware operates global channel partner and managed service provider (MSP) programme via technology alliance partner directory 567. No public evidence identified of systems integrators mandating or deploying Israeli-origin third-party technology as a component of Radware’s internal programmes.

Surveillance, Biometrics & Retail Technology

Radware’s disclosed product portfolio is confined to network-layer and application-layer cybersecurity: DDoS mitigation, WAF, bot management, and application delivery 234. No public evidence identified of Radware using, reselling, or integrating products from Trigo, BriefCam, AnyVision/Oosto, Trax, or comparable biometric or retail analytics vendors. No Radware entry found in Who Profits database under surveillance or biometric technology categories 9. UN OHCHR settlement database (2025 iteration) does not name Radware 10. UN A/HRC/59/23 (Albanese Special Rapporteur Report, July 2025) addressing surveillance/AI/cloud does not name Radware in §§36-43 10.

Radware’s Bot Manager performs behavioural analytics on web traffic and API call patterns to distinguish human from automated traffic for cybersecurity purposes 4. Operates via JavaScript injection collecting device fingerprints, behavioral signals, browser characteristics, and session metadata. No public evidence identified of this capability being repurposed for workforce surveillance, predictive policing, or population monitoring 4. No public evidence identified of Radware technologies reaching customers indirectly via third-party platform providers with Israeli-origin bundled components.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Radware operates a Security Operations Centre (SOC) in Tel Aviv, expanded in 2022 11. Second cloud security center opened in Tel Aviv in September 2025 1213. Global cloud scrubbing network includes Israeli nodes; SecurityDAM acquisition (2021) added Israeli-based cloud DDoS scrubbing infrastructure 1415.

Radware’s Israeli infrastructure simultaneously serves as primary engineering/R&D base and regional node in global cloud security network 11. Core commercial operations generate customer traffic data processed through Israeli jurisdiction: traffic scrubbing, WAF payload inspection, Bot Manager telemetry, threat intelligence aggregation, and ML model training 2341617. This data pipeline is legally accessible under Israeli law including INCD framework, without public disclosure of any access events.

No public evidence identified that Radware participates in Project Nimbus, the Israeli government sovereign cloud infrastructure programme contracted to AWS and Google Cloud 18. Radware is not identified as named subcontractor or technology provider in any public disclosure related to Project Nimbus. No public evidence identified of Radware providing services explicitly marketed as digital sovereignty or data residency for Israeli state institutions or military bodies beyond generic government-sector marketing 8.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of verified contracts between Radware and Israeli Ministry of Defence, IDF, Mossad, Shin Bet, or INCD. Radware’s 20-F risk factor disclosures contain no affirmative statement of military or intelligence customer relationships.

Bynet Data Communications (RAD Group affiliate, not Radware subsidiary) has documented defense contracts with Israeli Ministry of Defense, IDF, COGAT, Israel Police, and Israel Prison Service (2014-2023), including server integration for Cisco Systems, biometric projects for Civil Administration in Beit El settlement, checkpoint infrastructure, body cameras for Israel Police (NIS 35M project), and services to Israel Prison Service 9. RADCOM Ltd. (RAD Group company) provides network intelligence and lawful intercept platforms 1920. Xcipio mediation platform for lawful intercept capabilities was originally developed by RADCOM 21. Radware operates as independent subsidiary within RAD Group; no documented technology sharing with RAD Group lawful intercept entities.

As Israeli-domiciled company producing cybersecurity products with dual-use characteristics, Radware is subject to oversight by Israel’s DECA under Defense Export Control Law, 5767-2007 22. Radware’s 20-F risk disclosures confirm DECA compliance obligations and Israeli export control framework applicability. No specific DECA export licence, denial, or enforcement action involving Radware products identified in public records.

Radware’s DDoS mitigation and WAF products have inherent dual-use characteristics: they can protect networks that encompass military or government entities if those entities hold commercial subscriptions. No public report, official source, or researcher documentation specifically confirms deployment of Radware products by Israeli military or intelligence bodies in surveillance, offensive, or classified-network capacity. No public evidence identified. Radware’s product portfolio is defensive in orientation: mitigation of inbound network attacks, web application protection, and bot filtering. No zero-day exploit tools, offensive cyber capabilities, or digital weapons systems in product documentation.

AI, Algorithmic & Autonomous Systems

Radware employs machine learning within DDoS protection and bot management products for traffic classification, behavioural baselining, and attack signature generation 24. No public evidence identified of Radware providing AI, ML models, computer vision systems, or autonomous decision-support tools to Israeli state, military, or security bodies under specific contract.

ML models for DDoS detection, bot classification, and WAF anomaly detection are developed and trained using traffic patterns from Radware’s global customer base 1617. This training process involves storage and processing of traffic-derived datasets in Israeli-jurisdiction R&D facilities. No public evidence identified. Radware’s AI applications are confined to network traffic analysis and cybersecurity automation.

Technology Ecosystem & R&D Footprint

Primary global R&D operations located in Tel Aviv and Herzliya, Israel, confirmed in 20-F annual reports as principal engineering and product development base. Active R&D focus: DDoS mitigation algorithms, WAF rule engines, bot-detection ML models, application delivery controller software, and cloud security orchestration. Active Israeli R&D output through 2023-2025 confirmed by product releases including DefensePro X, Kubernetes WAF, and Cloud Native Protector.

SecurityDAM (2021): Acquired Israeli cloud DDoS scrubbing company for $30M plus up to $12.5M contingent payments; was sole provider of scrubbing center services in Israel since 2014 1415. Seculert (2017): Acquired Israeli cloud-based malware detection startup. ShieldSquare (2019): Acquired Bangalore bot management company (non-Israeli).

Radware received $162,000 in Israel Innovation Authority (IIA) grants in prior years; company is subject to paying 3% of relevant revenues as royalties until grant is repaid 23. No royalties paid as of December 31, 2024 23. IIA Section 19B grant conditions constrain transfer of IIA-supported know-how outside Israel without prior approval.

Yehuda Zisapel: Co-founder of Radware and Chairman; died March 2024 at age 82; beneficial ownership approximately 4.56% as of March 2024 2425. Roy Zisapel: Co-founder, President and CEO; son of Yehuda Zisapel; holds 1,736,689 ordinary shares directly 26. Yuval Cohen: Current Chairman of Board, independent director 27. Zohar Zisapel: Co-founder of RAD Group; died May 2023; served in IDF Unit 81 (signals intelligence) and became its youngest commander 2829.

RAD Group is a privately held Israeli technology conglomerate founded by Yehuda and Zohar Zisapel in 1981-1982, encompassing 20+ independent companies in networking/telecommunications 30. Portfolio companies include RADCOM (network intelligence/lawful intercept), Ceragon (wireless backhaul), Silicom (server networking adapters), CEVA (semiconductor IP), RAD Data Communications (defense-grade data communications hardware), and Telrad Networks 30. Concurrent Yehuda Zisapel directorships at RAD Group portfolio companies confirmed in SEC filings. Radware is not listed in UN OHCHR settlement database of 158 business enterprises involved in settlement activity 10.

Radware holds patents in network security, DDoS mitigation, and application delivery filed through Israeli legal entity. No public evidence identified of patent co-development arrangements with Israeli academic institutions (Technion, Hebrew University, Weizmann Institute).

Civil Society Scrutiny & Regulatory History

Comprehensive review of civil society databases returns no published investigation specifically targeting Radware. Who Profits: RAD Group (Bynet) is listed with detailed defense contract entries; Radware itself is not separately listed 9. UN OHCHR Settlement Database (2025): Radware is not listed among 158 business enterprises 10. UN A/HRC/59/23 (§§36-43): Addresses AWS, Google Cloud, Microsoft (Project Nimbus), Palantir, NSO Group, AnyVision; does not name Radware. Amnesty International “Automated Apartheid” (2023): Does not name Radware. B’Tselem technology reports: Do not name Radware. Al-Haq “Mapping Israeli Apartheid Technology” (2023): Does not name Radware. AFSC Investigate: No Radware entry found. Business and Human Rights Resource Centre: No documented human rights allegations specifically targeting Radware.

Radware appears on “palestiniangenocide.org” boycott target database as Israeli cybersecurity company 31. No Radware entry found in Don’t Buy Into Occupation 2024/2025 company lists (focused on settlement-related financial institutions). BDS Movement official target list: No Radware entry found in identified public records.

No regulatory inquiries, export control enforcement actions, or sanctions-related investigations involving Radware’s technology sales identified in public sources. Radware’s 20-F risk disclosures note generic exposure to Israeli export control law and U.S. export control compliance requirements. No OECD National Contact Point complaints against Radware identified 32.

No public evidence identified.

End Notes

Footnotes

  1. https://www.radware.com/locations ↩

  2. https://www.radware.com/products/cloud-ddos-protection/ ↩ ↩2 ↩3 ↩4 ↩5

  3. https://www.radware.com/products/defensepro/ ↩ ↩2 ↩3 ↩4

  4. https://www.radware.com/products/bot-manager/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7

  5. https://www.radware.com/news-events/press-releases/2021/radware-joins-misa/ ↩ ↩2

  6. https://www.radware.com/partners/technology-partners/aws/ ↩ ↩2

  7. https://www.radware.com/partners/technology-partners/google-cloud/ ↩ ↩2

  8. https://www.radware.com/solutions/government/ ↩ ↩2

  9. https://www.whoprofits.org/companies/company/6526 ↩ ↩2 ↩3

  10. https://www.ohchr.org/en/business/bhr-database ↩ ↩2 ↩3 ↩4

  11. https://www.radware.com/news-events/press-releases/2022/radware-tel-aviv-soc-expansion/ ↩ ↩2

  12. https://www.stocktitan.net/news/RDWR/radware-introduces-two-new-next-gen-cloud-application-security-wmidd1nvbjmd.html ↩

  13. https://www.telecompaper.com/news/radware-introduces-cloud-application-security-centre-in-israel—1456631 ↩

  14. https://www.crn.com/news/security/radware-buys-securitydam-for-30m-to-thwart-ddos-attacks ↩ ↩2

  15. https://en.globes.co.il/en/article-radware-buys-israeli-cybersecurity-co-securitydam-1001402922 ↩ ↩2

  16. https://www.radware.com/security/ddos-threats/2023-global-threat-analysis-report/ ↩ ↩2

  17. https://www.radware.com/security/ddos-threats/ ↩ ↩2

  18. https://en.wikipedia.org/wiki/Project_Nimbus ↩

  19. https://www.radcom.com/solution/5g-network-intelligence/ ↩

  20. https://www.radcom.com/solutions/lawful-intercept/ ↩

  21. https://www.ss8.com/privacy-protections-and-lawful-intelligence ↩

  22. https://mod.gov.il/en/departments/defense-exports-control-agency-deca ↩

  23. https://content-archive.fast-edgar.com/20251216/AN2ZRQ2CZM2RIZTZ2A242ZY2BLH3ZZ22ZV72/R30.htm ↩ ↩2

  24. https://en.wikipedia.org/wiki/Yehuda_Zisapel ↩

  25. https://www.sec.gov/ix?doc=%2FArchives%2Fedgar%2Fdata%2F1094366%2F000117891324001040%2Fzk2431148.htm ↩

  26. https://www.stocktitan.net/sec-filings/RDWR/form-3-radware-ltd-initial-statement-of-beneficial-ownership-1f3ebf775ad7.html ↩

  27. https://www.marketscreener.com/quote/stock/RADWARE-LTD-10644/company-governance ↩

  28. https://en.wikipedia.org/wiki/Zohar_Zisapel ↩

  29. https://grokipedia.com/page/Zohar_Zisapel ↩

  30. https://grokipedia.com/page/RAD_Group ↩ ↩2

  31. https://palestiniangenocide.org/boycott/companies ↩

  32. https://www.oecd.org/en/networks/national-contact-points-for-responsible-business-conduct/database.html ↩