V-MIL Audit — Splunk Inc.

Audit Phase: V-MIL (Military Forensics) Target Company: Splunk Inc. (acquired by Cisco Systems, completed 18 March 2024) ¹² Audit Date: 2026-05-01 Research Basis: Training knowledge base (cutoff April 2026); all live web and URL retrieval returned null results during research. All factual claims are drawn exclusively from the research memo above. No new research has been performed.

Direct Defence Contracting & Procurement

No public evidence identified of any verified contract, tender award, framework agreement, or memorandum of understanding between Splunk and the Israeli Ministry of Defence (IMOD), the Israel Defence Forces (IDF), the Israel Prison Service, the Israel Border Police, or any other Israeli state security body.

Splunk’s publicly documented government contracting activity is concentrated in the United States federal sector. The company markets a dedicated Government and Public Sector product suite — including SIEM, security analytics, and observability tools — directed at US federal civilian and defence agencies, having achieved FedRAMP authorisation in 2019 ³⁴⁵. This US-government-facing portfolio is substantiated by corporate press releases and the company’s annual filings ⁶, but no equivalent Israeli government procurement relationship is documented in any public source.

No Splunk entry has been identified in the SIBAT (Israel Defence Export and Defence Cooperation Directorate) public export directories, Israeli defence exhibition catalogues (e.g., ISDEF, Eurosatory Israeli pavilion listings), or Israeli defence procurement registries ⁷. Splunk’s product classification as enterprise software places it outside the categories of defence materiel that ordinarily appear in such directories.

No corporate press releases, Israeli government announcements, or defence trade press reports detailing defence cooperation, joint ventures, or formal partnership agreements between Splunk and any Israeli defence entity have been identified in training data ¹²⁶.

Dual-Use Products & Tactical Variants

No public evidence identified that Splunk manufactures or markets ruggedised, tactical, mil-spec, or otherwise defence-grade hardware variants of its products. Splunk is a software platform company whose core products — Enterprise Security (SIEM), SOAR (security orchestration, automation and response), and Observability Cloud — are general-purpose enterprise tools available commercially to any qualifying organisation ⁸⁹.

Splunk does operate a dedicated Government and Public Sector product suite marketed to defence and intelligence customers ³⁴. In the United States, this suite has been deployed under FedRAMP and Department of Defense Impact Level authorisations and is known to serve US DoD and intelligence community agency clients ⁵. However, no Israeli-specific tactical, mil-spec, or contract-modified variant of any Splunk product has been identified in public sources.

Splunk software is predominantly delivered as cloud-hosted SaaS or on-premises enterprise software. Under the US Export Administration Regulations (EAR), such software may carry an ECCN classification of 5D002 (encryption software) or qualify as EAR99. No Israel-specific export licence applications, end-user certificates (EUCs), or government export control review decisions related to Splunk sales to Israeli defence or security end-users have been publicly documented ¹⁰.

The distinction between Splunk’s civilian commercial offering and any potential military application is not bridged by any purpose-built, military-specified, or contract-modified product publicly associated with Israeli state security bodies.

Heavy Machinery, Construction & Infrastructure

Not applicable by product category. Splunk does not manufacture heavy machinery, construction equipment, vehicles, physical infrastructure components, or any related materiel ⁶⁷.

No public evidence identified of any Splunk product or service being used in settlement construction, the separation barrier, military installations, or occupied territories in any physical infrastructure capacity. Splunk’s business activity is entirely in enterprise software and data analytics services; it has no documented operational or contractual presence in construction, engineering, or physical works of any kind related to the Israeli-Palestinian context or otherwise.

No public evidence identified of direct or indirect supply by Splunk to firms engaged in infrastructure construction in occupied territories.

Supply Chain Integration with Defence Primes

No public evidence identified of any verified supply relationship between Splunk and Israeli defence prime contractors, including Elbit Systems, Israel Aerospace Industries (IAI), Rafael Advanced Defense Systems, or Israel Military Industries (IMI/Elbit Land) ¹¹¹²¹³.

Splunk produces software and data analytics platforms, not the physical components — optical systems, electronic sub-assemblies, propulsion and guidance modules, armour, or structural materials — that characterise defence prime supply chains. Its product portfolio does not intersect with the component categories that appear in public supplier disclosures published by Elbit Systems, IAI, or Rafael in their annual reports and corporate filings ¹¹¹²¹³.

No public evidence identified of joint development programmes, co-production agreements, technology transfer arrangements, or licensed manufacturing agreements between Splunk and any Israeli defence prime. Neither Splunk’s pre-acquisition SEC filings ⁶⁷ nor Cisco’s post-acquisition disclosures ⁹ reference any such relationship.

Logistical Sustainment & Base Services

No public evidence identified of Splunk holding contracts to provide catering, transport, fuel, waste management, facilities maintenance, telecommunications infrastructure, or other support services to IDF bases, military training facilities, detention centres, or security installations.

No public evidence identified of any Splunk service delivery to installations in the West Bank, Golan Heights, East Jerusalem, or the Negev in a military context.

Not applicable by business type with respect to shipping, freight forwarding, or port handling: Splunk does not operate logistics, freight, or port services of any kind ⁶⁷.

Munitions, Weapons Systems & Strategic Platforms

No public evidence identified. Splunk is not a manufacturer of small arms, artillery, armoured vehicles, tactical drones, naval vessels, or any lethal platform ¹⁶.

No public evidence identified of Splunk supplying ammunition, explosive ordnance, chemical propellants, warhead components, or munitions precursor materials to any end-user anywhere.

No public evidence identified of any Splunk role in the manufacture, integration, maintenance, or component supply of Iron Dome, David’s Sling, Arrow missile defence, fighter aircraft (e.g., F-35 programme), main battle tanks, warships, or ballistic missile systems.

Splunk’s core enterprise platforms — Enterprise Security, SOAR, and Observability Cloud ⁸ — are general-purpose analytics and security operations tools with broad civilian application. No public evidence has been identified that any Splunk product is purpose-built to generate targeting decisions or weapons effects, or that it has been integrated as a critical sub-system into lethal or strategic weapons platforms for any Israeli end-user. The SIPRI Arms Transfers Database contains no record of Splunk as a supplying entity in this context ¹⁴.

Export Licensing, Regulatory & Legal History

No public evidence identified of any government decision — in any jurisdiction — to grant, deny, suspend, or revoke an export licence for Splunk products specifically to Israeli military or security end-users.

No public evidence identified of any investigation, citation, enforcement action, or administrative penalty related to Splunk’s compliance with arms embargoes, export control regimes, or sanctions affecting defence trade with Israel. Splunk does not appear in US Bureau of Industry and Security (BIS) Office of Export Enforcement actions or Office of Antiboycott Compliance records in connection with Israel in training data ¹⁰.

No public evidence identified of court proceedings, judicial reviews, or legal challenges brought against Splunk, or against any government authority regarding Splunk’s supply relationship with Israel, in any jurisdiction ⁶⁷.

Following Cisco’s completion of the Splunk acquisition in March 2024 ², Splunk’s products are now part of Cisco’s broader enterprise portfolio. Cisco’s own export compliance programme and regulatory standing are disclosed in its annual SEC filings ⁹, but no Israel-specific licence or enforcement matter relating to the Splunk product suite post-acquisition has been identified in public disclosures.

Civil Society Scrutiny & Documented Investigations

Who Profits Research Center: No verified entry for Splunk has been identified in the Who Profits database in training data. Who Profits focuses primarily on companies with physical presence, infrastructure, construction, or hardware supply ties to the Israeli occupation; Splunk does not appear in its confirmed company listings ¹⁵.

Amnesty International: Amnesty’s Technology and Human Rights Programme has investigated surveillance technology companies — notably NSO Group and others named in its Surveillance Giants and Big Brother’s Little Helpers reports. No Amnesty report specifically naming Splunk in the context of Israeli military or security supply has been identified ¹⁶.

Human Rights Watch: HRW’s technology and rights programme covers surveillance and data infrastructure. No HRW report specifically naming Splunk in connection with Israeli defence or security operations has been identified in training data ¹⁷.

AFSC Investigate Database: The AFSC Investigate platform profiles companies with ties to Israeli military operations. No verified Splunk-specific profile or confirmed finding has been identified in training data ¹⁸.

Corporate Occupation: No verified Splunk listing has been identified ¹⁵.

No Tech for Apartheid: This campaign — originating among Google and Amazon employees — has targeted specific cloud contracts, most prominently Google Project Nimbus and AWS’s involvement in Israeli government cloud infrastructure ¹⁹. No public campaign material specifically naming Splunk as a primary target has been identified in training data, though the campaign’s stated scope broadened following the October 2023 escalation and through 2024–2025. Whether Splunk or Cisco-Splunk has been added as a named target post-acquisition could not be confirmed from training data alone ¹⁹.

UN Human Rights Council Business Database (A/HRC/43/71): Splunk does not appear in the UN database of businesses identified as having activities in Israeli settlements ²⁰.

BDS Movement: No public evidence identified of organised boycott, divestment, or exclusion campaigns specifically targeting Splunk related to its defence sector activities or Israeli security ties. Splunk does not appear on the BDS Movement’s primary campaign target list ²¹.

Institutional Divestment: No institutional divestment decision — from any pension fund, sovereign wealth fund, or university endowment — citing Splunk specifically in the context of Israeli military supply or occupation-related activity has been identified in training data.

Corporate Response: No public evidence identified of Splunk issuing policy statements, making contract terminations, or making end-use monitoring commitments in response to civil society pressure regarding any defence supply chain relationship with Israel. No such pressure campaign directed specifically at Splunk has been publicly documented ¹²⁶.

End Notes