Audit Phase: V-DIG (Digital Forensics)
Target Company: eBay Inc. (NASDAQ: EBAY)
Prepared: 2026-05-01
Scope: Israeli-origin and Israeli-linked technology relationships, R&D footprint, vendor ecosystem, civil society and regulatory record.
Wiz’s 2022 public disclosure of the “AttachMe” Oracle Cloud vulnerability (CVE-2022-29149) explicitly acknowledges collaboration with “eBay’s pen testing team” in the coordinated disclosure process.9 This is a primary-source document hosted on Wiz’s own domain and constitutes the strongest confirmed evidence of an operational relationship between eBay and Wiz.
Wiz was founded by Assaf Rappaport, Ami Luttwak, Yinon Costica, and Roy Reznik — all alumni of the Israeli military intelligence directorate and previously of Adallom, which was acquired by Microsoft. This founding background is widely and consistently reported across Israeli and international technology press.925
Wiz operates an agentless cloud security scanning model requiring broad, privileged read access to a client’s cloud environment in order to enumerate vulnerabilities across workloads, data stores, and configurations. The operational nature of the AttachMe collaboration implies Wiz held or exercised access to eBay’s cloud environment for that engagement. A specific Wiz case study page naming eBay as a customer could not be independently confirmed from available evidence; the AttachMe acknowledgment remains the verified primary-source reference for this relationship. The relationship appears ongoing as of the training data cutoff.
CyberArk’s public developer documentation for its Identity platform contains a sample API response referencing an “Ebay web application” configuration.15 This is a primary-source document hosted on CyberArk’s own documentation domain. Developer documentation sample data can in some cases use well-known brand names as illustrative placeholders; however, the specificity of the API response structure and the named application reference leans toward authenticity rather than generic illustration. This evidence is characterised as suggestive but not conclusive absent a formal eBay procurement disclosure or CyberArk case study.
CyberArk is dual-headquartered in Petah Tikva, Israel, and Newton, Massachusetts. The company’s Israeli founding and principal R&D base are confirmed corporate facts. The scope and current status of any eBay deployment cannot be confirmed from available public evidence.
Check Point researchers publicly disclosed a critical stored cross-site scripting vulnerability in eBay’s platform, exploiting “JSFuck” obfuscation techniques, as reported by the Times of Israel.12 Check Point separately disclosed vulnerabilities in the Magento e-commerce platform during the period eBay owned Magento (2011–2018).13
Important qualification: Security researchers discovering and disclosing vulnerabilities in a platform does not constitute a commercial vendor-client relationship. No public evidence of eBay holding a commercial licence or enterprise subscription with Check Point was identified. The distinction between third-party vulnerability research disclosure and procurement is significant and is not bridged by any available evidence reviewed. No public evidence identified of a direct commercial procurement relationship between eBay and Check Point.
Check Point is headquartered in Tel Aviv, Israel; its founder Gil Shwed’s intelligence-unit background is widely documented in credible technology and business press.
No primary-source evidence of eBay directly deploying SentinelOne endpoint agents was identified. The available inference chain is indirect: Anvilogic’s solution guide lists SentinelOne as a supported integration partner,28 and eBay’s use of Anvilogic is referenced in that guide’s context — but presence on a vendor’s integration compatibility list does not confirm deployment by any given client. SentinelOne’s partnership with Wiz is a confirmed corporate relationship.25 No public evidence identified of eBay holding a direct contract or confirmed deployment of SentinelOne. SentinelOne’s Tel Aviv founding and Israeli R&D operations are confirmed corporate facts.
AppsFlyer’s own published customer case study explicitly identifies eBay as a client, describing eBay designating AppsFlyer as its “source of truth” for mobile attribution and the platform processing “billions of monthly events” for eBay.11 This is a primary-source document on AppsFlyer’s own domain and constitutes confirmed evidence of an active commercial relationship at the time of publication.
The nature of this relationship involves AppsFlyer processing device identifiers, IP addresses, user acquisition event data, and in-app engagement signals at scale. AppsFlyer is headquartered in Herzliya, Israel, and was founded by Oren Kaniel and Reshef Mann. The relationship’s currency as of mid-2026 cannot be confirmed from available evidence, though no public disclosure of termination was identified.
Forter’s own published resources page hosts a co-branded piece titled “Staying Ahead of Fraud and False Declines | eBay x Forter,”10 constituting primary-source confirmation of a commercial partnership. Forter’s platform analyses user interaction patterns — device orientation, typing cadence, navigation sequences, and device telemetry — to generate real-time transaction trust scores and approve or decline transactions at checkout.
Forter co-founders Michael Reitblat and Lior Ron are identified in Israeli technology trade press, including Euromoney, as veterans of Israeli military intelligence, with their Unit 8200 background referenced in multiple trade publications.25 This is widely reported but should be treated as press-reported rather than officially confirmed in primary corporate disclosures.
Forter’s cross-merchant identity network processes over $500 billion in annual transaction volume across its client base.26 eBay’s participation as a direct procurement partner contributes behavioural and transaction data to this shared network, meaning signals from eBay users are processed alongside data from Forter’s broader merchant client portfolio.
Taboola’s 30-year exclusive content partnership with Yahoo is a confirmed corporate transaction.18 To the extent eBay places advertising through Yahoo properties, this spend is delivered through Taboola’s infrastructure. eBay’s status as an advertiser on Taboola’s platform is consistent with publicly available information, though the specific “key customer” designation cited in some analyses requires independent verification against Taboola’s SEC investor filings. Taboola maintains significant R&D operations in Israel. Founder Adam Singolda’s IDF background is referenced in press coverage; the specific unit designation is not independently confirmed from available evidence.
An Emerj AI research roundtable discussion groups eBay, Riskified, and Comcast together in a fraud risk and prevention context.1617 This reflects participation in a shared industry forum rather than confirming a direct vendor-client procurement relationship between eBay and Riskified. Riskified’s subsequent partnership with HUMAN Security to prevent AI-driven shopping fraud is a confirmed 2025 development.27 No procurement evidence of a direct eBay–Riskified commercial contract was identified.
An ironSource Aura case study specific to eBay Kleinanzeigen was referenced in prior analysis but could not be independently confirmed from available evidence.19 Additionally, eBay Kleinanzeigen’s ownership status is materially affected by eBay’s classifieds portfolio divestiture programme; attributing any such relationship to eBay Inc. requires verification of the relevant ownership period. ironSource’s Israeli origins (founded in Tel Aviv) are confirmed; its 2022 merger with Unity Software is a confirmed corporate transaction.
No public evidence identified of eBay engaging Israeli cloud managed-service providers (such as 2bcloud or AllCloud) for major technology programmes. The available evidence for these relationships consists of general Israeli reseller directory listings, not eBay-specific engagement records.
No public evidence identified of eBay deploying facial recognition, gait analysis, biometric identification, or physical store surveillance technologies from any vendor, including Israeli-origin vendors such as Trigo, BriefCam, AnyVision/Oosto, or Trax. eBay operates as a digital marketplace without a physical retail estate, rendering loss-prevention biometrics inapplicable to its core operational model. No NGO reports, technology trade press investigations, or eBay corporate disclosures in available evidence address this category.
Forter’s transaction decisioning platform, deployed in eBay’s checkout flow,10 analyses behavioural interaction signals — including device telemetry, typing dynamics, navigation patterns, and session characteristics — to generate real-time user trust assessments. This constitutes confirmed deployment of behavioural analytics technology developed by an Israeli-founded company against eBay’s user population. Trade press characterises Forter’s methodology as behavioural biometric analysis.25
The scale of this deployment is significant: Forter processes transactions across a merchant network totalling over $500 billion in annual volume,26 and eBay’s checkout operation is a primary use case per joint marketing materials.10 User behavioural data contributed from eBay transactions is processed within Forter’s cross-merchant model training infrastructure.
SalesPredict, acquired by eBay in 2016, developed predictive analytics for buyer behaviour modelling.8 This capability was integrated into eBay’s Structured Data organisation post-acquisition and constitutes an internally developed analytical function rather than an ongoing third-party vendor relationship. The algorithms remain embedded in eBay’s platform as intellectual property.
No public evidence identified of eBay deploying Israeli-origin predictive monitoring, social media surveillance, or workforce monitoring tools.
eBay’s User Privacy Notice explicitly lists Israel as a jurisdiction to which user data may be transferred.20 This is a primary-source disclosure in eBay’s own published policy documentation. The legal basis, mechanism, and volume of such transfers are not specified in the notice itself. Plausible processing vectors include vendor relationships with AppsFlyer (Herzliya)11 and Forter (Tel Aviv)10 as well as, historically, internal processing at the Netanya R&D centre.
AWS operates the il-central-1 region in Israel (launched 2023) and Google Cloud operates the me-west1 Israel region (launched 2023), both established in the context of Project Nimbus infrastructure requirements. No public evidence identified that eBay routes workloads specifically to either of these Israeli cloud regions. eBay is a confirmed multi-cloud customer of both AWS and Google Cloud Platform, but workload-level routing to Israeli regions is not publicly disclosed in any eBay filing or technical disclosure reviewed.
No public evidence identified of eBay having any direct participation in Project Nimbus or any contract with the Israeli government’s cloud programme. eBay is not identified as a Project Nimbus contractor, sub-contractor, or named participant in any public source reviewed, including the SEC proxy filings of the two primary Project Nimbus contractors.2223
eBay’s status as a paying cloud customer of AWS and GCP — the Project Nimbus primary contractors — is a commercially ordinary relationship shared by a large fraction of the global enterprise market. The proxy statements disclosing Project Nimbus worker protests were filed by Alphabet and Amazon and address their direct government contract obligations, not those of their commercial customers.2223
No public evidence identified of eBay providing or contracting services specifically oriented toward Israeli state data sovereignty, national infrastructure resilience, or government-designated cloud frameworks.
No public evidence identified of any contract, partnership, or service agreement between eBay and the Israeli Ministry of Defence, the Israel Defense Forces, the Shin Bet, or Israeli foreign intelligence services.
The Gemini-phase analysis characterised Corrigon’s computer vision capabilities and SalesPredict’s predictive modelling as “dual-use” technologies given their potential applicability to surveillance or intelligence functions.678 These are internal eBay capabilities resulting from commercial acquisitions made for e-commerce purposes. No public evidence identified of these technologies being transferred, licensed, or deployed for military, intelligence, or law-enforcement applications in Israel, occupied Palestinian territories, or any other jurisdiction.
The dual-use characterisation, while technically accurate in the abstract sense that computer vision and predictive analytics have non-commercial applications, is an inference and not a documented deployment fact.
No public evidence identified of eBay developing, selling, licensing, or contributing to offensive cyber capabilities, digital weapons systems, or signals intelligence infrastructure.
No public evidence identified of eBay providing artificial intelligence, machine learning models, computer vision systems, or autonomous decision-making tools to any Israeli state, military, or security body.
eBay’s internal AI and ML capabilities developed at the Netanya R&D centre — including catalogue structuring, image-based product matching (Corrigon), buyer behaviour prediction (SalesPredict), and recommendation systems — are oriented entirely toward commercial e-commerce functions.1678 No public reporting identifies any Israeli state entity as a customer or user of these systems.
No public evidence identified of eBay’s AI models being trained on or provided access to civilian population data, intercepted communications, or surveillance-derived datasets from Israel or occupied territories. eBay’s AI training datasets are drawn from commercial marketplace activity (listings, search queries, transaction outcomes, buyer feedback).
No public evidence identified. eBay has no publicly documented defence technology, weapons systems, or autonomous lethal systems business.
eBay established an R&D presence in Israel following its 2005 acquisition of Shopping.com, an Israeli-founded price-comparison platform acquired for approximately $635 million.[^9-ref] The resulting centre, located in Netanya, operated for approximately two decades and at peak scale employed between 300 and 350 personnel focused on machine learning, natural language processing, recommendation systems, information retrieval, and computer vision.12
In approximately May 2025, eBay announced the closure of the Netanya centre with full cessation of operations targeted for Q1 2026, involving the termination of over 200 employees.12345 The official eBay rationale cited global operational footprint assessment and optimisation of support for strategic objectives.3 The centre was described by eBay as having remained “integral” to its operations prior to the closure decision.24
Multiple Israeli and international outlets — including Globes and Israel Hayom — noted the timing of eBay’s withdrawal relative to the escalation of the conflict in Gaza from late 2023 onward.424 eBay has not publicly cited geopolitical factors as a rationale for the closure.
Shopping.com (2005): Acquired for approximately $635 million; established eBay’s Israeli R&D presence. Israeli-founded price comparison platform.30
The Gift Project (2011): Israeli social commerce startup acquired by eBay for a reported approximately $20 million. Technology was integrated into eBay’s social gifting features. The company operated social graph-based gifting recommendations.
SalesPredict (2016): Israeli predictive analytics company co-founded by Kira Radinsky and Yaron Zakai-Or, acquired by eBay and integrated into the Structured Data organisation for buyer behaviour modelling.8 Confirmed by Forrester analysis of the acquisition.
Corrigon Ltd. (2016): Israeli computer vision and visual search company acquired by eBay for a reported approximately $30 million.67 Technology deployed for image-based product matching and catalogue enrichment, primarily operated from the Netanya centre.67
The algorithms and intellectual property generated by all four acquisitions remain embedded in eBay’s production platform as of available evidence; whether specific models developed at Netanya remain in active production post-closure or have been deprecated is not publicly documented.
The algorithmic IP developed at Netanya — including Corrigon’s visual search models and SalesPredict’s predictive frameworks — is not physically tied to the Israeli office. Transfer of knowledge and codebase to eBay’s remaining engineering centres (San Jose, Portland, Shanghai, and others) is a routine element of such transitions but has not been publicly documented in detail by eBay.15
No public evidence identified of significant patent licensing agreements or co-development arrangements between eBay and Israeli research institutions including the Technion, Hebrew University of Jerusalem, or the Weizmann Institute of Science.
eBay published an operational update specifically addressing seller protections for shipments to and from Israel, acknowledging service disruptions in the context of regional conflict.21 This is a customer-facing operational response rather than a strategic technology relationship, but evidences eBay’s continued commercial engagement with Israeli marketplace participants during the conflict period.
No public evidence identified of a dedicated investigation by a technology-focused NGO (Amnesty Tech, Access Now, Human Rights Watch Technology and Rights programme), academic institution, or United Nations body specifically examining eBay’s technology relationships with the Israeli state, Israeli defence sector, or Israeli surveillance industry. Available sources reviewed in this category consist of news reports and advocacy-oriented outlets rather than independent investigative research.
The Safa News Agency, a Palestinian news outlet, published a report framing eBay’s Netanya closure in the context of “Gaza atrocities.”24 This source is advocacy-oriented and presents no independent methodology or original primary research beyond the news fact of the closure itself.
No public evidence identified of an organised BDS (Boycott, Divestment and Sanctions) campaign specifically targeting eBay on the basis of its Israeli technology relationships or procurement relationships with Israeli-origin vendors. eBay’s seller protection update regarding Israeli shipments21 generated some online commentary, but no formalised campaign meeting the threshold of an organised civil society action was identified in available evidence. eBay is not prominently named in published BDS campaign target lists reviewed in training data.
No public evidence identified of regulatory inquiries, export control proceedings, or sanctions-related investigations involving eBay’s technology sales, services, or data transfers in connection with Israeli state entities or occupied territories.
eBay’s most significant regulatory exposure in the technology domain during the review period concerns its 2014 data breach and related consumer data protection obligations in multiple jurisdictions; this matter is unrelated to Israeli state technology relationships. eBay’s SEC filings document ongoing litigation and regulatory matters, none of which, as of available filings, relate to Israeli state technology contracting.30
eBay’s User Privacy Notice discloses Israel as a data transfer destination.20 EU General Data Protection Regulation (GDPR) adequacy status for Israel was in effect during the relevant period, providing a legal basis for EEA-to-Israel data transfers. The interaction between GDPR transfer obligations and eBay’s vendor relationships with AppsFlyer and Forter — both Israeli-headquartered entities processing significant volumes of eBay user data — is a compliance consideration but no regulatory action on this basis has been publicly identified.
https://www.ecommercebytes.com/2025/05/31/ebay-to-close-cutting-edge-rd-center-in-israel/ ↩↩↩↩
https://www.israelhayom.com/2025/05/28/ebay-to-exit-israel-terminating-200-workers/ ↩↩
https://www.calcalistech.com/ctechnews/article/hywdt44mxx ↩↩
https://en.globes.co.il/en/article-israel-layoffs-reflect-ebays-global-decline-1001483440 ↩↩
https://www.valueaddedresource.net/ebay-to-shutter-israel-operations-by-2026/ ↩↩
https://www.timesofisrael.com/ebay-buys-israels-corrigon-to-boost-buyer-experience/ ↩↩↩↩
https://siliconangle.com/2016/10/06/ebay-hops-on-the-computer-vision-bandwagon-with-corrigon-acquisition/ ↩↩↩↩
https://www.forrester.com/blogs/16-07-19-ma_in_the_predictive_marketing_space_ebay_acquires_salespredict_in_an_unexpected_but_perfectly_logica/ ↩↩↩↩
https://www.wiz.io/blog/attachme-oracle-cloud-vulnerability-allows-unauthorized-cross-tenant-volume-access ↩↩
https://resources.forter.com/digital-hub/staying-ahead-ebay-forter ↩↩↩↩
https://www.timesofisrael.com/checkpoint-announces-serious-ebay-security-flaw/ ↩
https://www.checkpoint.com/kr/press-releases/media-alert-check-point-discovers-massive-vulnerability-in-magento-ecommerce-platform/ ↩
https://www.cyberark.com/press/cyberark-and-sentinelone-team-up-to-enable-step-change-in-endpoint-and-identity-security/ ↩
https://docs.cyberark.com/identity/latest/en/content/developer/user-management/manage-apps-for-users.htm ↩
https://emerj.com/new-challenges-in-fraud-risk-and-prevention-for-retail-and-ecommerce-leaders-from-riskified-ebay-comcast/ ↩
https://en.globes.co.il/en/article-riskified-tackles-credit-card-fraud-1001251299 ↩
https://www.taboola.com/press-releases/taboola-and-yahoo-close-deal/ ↩
https://unity.com/blog/overview-of-on-device-advertising-trends ↩
https://www.ebay.com/help/policies/member-behaviour-policies/user-privacy-notice-privacy-policy?id=4260 ↩↩
https://export.ebay.com/en/resources/important-updates/updates-on-seller-protection-for-shipments-tofrom-israel/ ↩↩
https://www.sec.gov/Archives/edgar/data/1652044/000130817925000511/goog012701-def14a.htm ↩↩
https://www.sec.gov/Archives/edgar/data/1018724/000110465923044708/tm233694d2_def14a.htm ↩↩
https://en.safa.news/post/4567/eBay-Shuts-Down-Operations-in-Israel-Amid-Gaza-Atrocities ↩↩↩
https://www.euromoney.com/article/27bjsstsqxhkmh1y5f4mg/fintech/israel-fintechs-from-start-up-to-scale-up/ ↩↩↩↩
https://www.prnewswire.com/news-releases/forters-new-partnership-brings-its-trust-platform-to-chewy-302390526.html ↩↩
https://www.pymnts.com/fraud-prevention/2025/riskified-and-human-partner-to-prevent-fraud-by-ai-shopping-agents/ ↩
https://www.anvilogic.com/solution-guide-detect ↩
https://www.wiz.io/blog/wiz-and-sentinelone-announce-exclusive-partnership-to-deliver-end-to-end-security ↩
https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001065088&type=10-K ↩↩
