Check Point Software Technologies Ltd. - BDS-1000 Dossier

Ticker: NASDAQ: CHKP | Sector: Cybersecurity / Information Technology | BRS Score: 708 - Tier B (Severe)

Key Findings

• Economic: Check Point is an Israeli-domiciled, Tel Aviv-headquartered parent company channeling substantial capital into Israel, including a ~NIS 800 million Tel Aviv campus project on land where the state-owned Israel Electric Corporation is the long-term lessee, participation in Israel Innovation Authority R&D grants carrying mandatory revenue royalties to the Israeli state, and a string of 2019–2026 acquisitions of Israeli startups.¹²³⁴⁵⁶
• Political: Check Point’s corporate blog adopted the IDF’s official “Iron Swords” war framing within days of the 7 October 2023 attacks, with no acknowledgment of Palestinian civilian harm in any identified communication - a stark asymmetry compared to the company’s explicit “Russian invasion of Ukraine” language a year earlier.⁷⁸⁹ Its founding and current leadership are drawn near-uniformly from Unit 8200 and the Talpiot programme, and it is a founding member of two IAI-led national cyber consortia.^1011121314
• Digital: Check Point sells dual-use commercial cybersecurity software (Quantum, Harmony, CloudGuard) via COTS channels including a US government/DoD partner and a confirmed Israeli civilian-ministry client, but no confirmed prime-contractor role in Israel’s Project Nimbus has been established.¹⁵¹⁶¹⁷
• Not found: No named IMOD, IDF, Shin Bet, or Israel Prison Service contract; no munitions, weapons-platform, or lethal-systems role; and no listing in the UN OHCHR settlement database or the Who Profits database.¹⁸¹⁹²⁰

Target Profile

Key Facts:

• FY2024 revenue approximately USD 2.49–2.57 billion; EMEA (which bundles Israel, undisaggregated) accounts for ~46% of revenue.²²²⁶
• Approximately 6,000–6,825 employees globally, with roughly 2,000 R&D personnel based in Israel.²²²
• Founded 1993 in Tel Aviv on firewall technology developed by Gil Shwed while serving in IDF Unit 8200.¹¹
• Not listed in the UN OHCHR settlement-business database, the Who Profits database, or the “Don’t Buy Into Occupation” 2024 list.¹⁸¹⁹²⁷

Executive Summary

Check Point Software Technologies is an Israeli-founded, Israeli-domiciled, NASDAQ-listed cybersecurity company whose relationship to the Israel/Palestine nexus is defined overwhelmingly by corporate origin, capital, and political-brand entanglement rather than by direct military supply. The company’s foundational technology was developed inside IDF Unit 8200, its founding and current executive cohort - Gil Shwed, Marius Nacht, Shlomo Kramer, Nadav Zafrir, Dorit Dor, and CTO Jonathan Zanger - carries an exceptional density of Israeli military-intelligence service, and the company operates as a flagship of the Israeli technology sector, appearing on Startup Nation Central, anchoring the CyberSpark campus in Beer-Sheva alongside the IDF’s C4I Directorate, and receiving Israel’s Israel Prize for its co-founder.^{11101224252829}

The strongest documented vectors are economic and political. Economically, Check Point channels substantial capital into Israel: a Tel Aviv campus expansion worth roughly NIS 800 million developed jointly with Israel Canada on land where the state-owned Israel Electric Corporation is the long-term lessee, participation in Israel Innovation Authority R&D grants that carry mandatory revenue royalties tying company IP and revenue to the Israeli state, roughly 2,000 Israel-based R&D staff, and a sustained pipeline of acquisitions of Israeli-founded startups (Cyberint, Veriti, Perimeter 81, Atmosec, Spectral, Avanan, ForceNock, Odo Security, Protego, Dome9, Cyclops, Cyata, Rotate, Deepchecks) through 2026.^12345630 Politically, the company’s corporate communications adopted the Israeli military’s own “Iron Swords” operation name for the Gaza war within eleven days of the 7 October 2023 attacks, documented cyberattacks exclusively from the perspective of Israeli targets, and contain no identified acknowledgment of Palestinian civilian casualties or humanitarian conditions in Gaza - an asymmetry made explicit by contrast with the company’s own February 2023 post explicitly naming a “Russian invasion of Ukraine” and Russian civilian harm.⁷⁸⁹ Check Point is also a founding member, alongside Israel Aerospace Industries, of the IC3 and IAC3 national cyber-defence consortia, and its products are formally integrated into the Israel National Cyber Directorate’s national methodology.¹³¹⁴¹⁷

Digitally, Check Point’s core products are dual-use commercial cybersecurity software sold on a COTS basis - the same Quantum, Harmony, and CloudGuard platforms serve civilian enterprise, US Department of Defense/intelligence, and Israeli civilian-ministry customers alike, marketed in the US via Carahsoft’s explicit “DoD and Intel” channel.¹⁵ The one confirmed Israeli government client documented in Check Point’s own materials is the civilian Ministry of Environmental Protection.¹⁶ No confirmed role as prime contractor or security “gatekeeper” for Israel’s Project Nimbus military-cloud programme has been established; that characterization is inferential, not documented.¹⁶

What is not supported by the evidentiary record is any direct military-supply nexus. No named IMOD, IDF, Shin Bet, Mossad, or Israel Prison Service contract has been identified in any source reviewed across all four domain audits. Check Point manufactures no munitions, weapons platforms, or mil-spec hardware, does not appear on AFSC’s or PAX’s arms-supply target lists, and is absent from both the UN OHCHR settlement-business database and the Who Profits database.²⁰¹⁸¹⁹ No equipment, construction, or logistics role in settlement infrastructure, checkpoints, or military bases has been found; this domain is structurally inapplicable to a software-only company.

This evidentiary profile - deep, structural economic and political entanglement with the Israeli state and its military-intelligence apparatus, paired with a dual-use but non-weaponized commercial technology stack and the absence of any confirmed direct military contract - produces a BRS of 708 (Tier B, Severe), driven by the Economic score of 9.20 and substantially reinforced by Political at 6.91, while Military remains near-zero at 0.12 and Digital sits at a moderate 3.57.

Timeline of Relevant Events

Corporate Overview

Check Point Software Technologies Ltd. is an Israeli-incorporated public company (Companies Registry ID 520042821) with no separate foreign parent, listed on NASDAQ under CHKP and filing 20-F annual reports with the US SEC (CIK 1015922).²¹²² Global headquarters and the bulk of R&D operations sit at 5 Ha’Solelim Street, Tel Aviv, with a second major hub in Be’er Sheva inside the CyberSpark cluster adjacent to Ben-Gurion University and the IDF’s C4I Directorate; a large US commercial base operates from San Carlos, California.²²²⁸ The company’s product architecture is organized into four platform pillars - Quantum (network/firewall), Harmony (endpoint/SASE), CloudGuard (cloud security), and Infinity (AI-driven unified platform/threat intelligence) - sold through thousands of global channel partners, MSSPs, and system integrators, and via a Turkish subsidiary (Check Point Yazılım Teknolojileri Pazarlama AŞ, established 2002, board composed of Israeli nationals) that has drawn political scrutiny in Turkey.²²³¹

The company has pursued an active acquisition strategy concentrated heavily in Israeli-founded startups - Dome9, Protego, Odo Security, ForceNock, Avanan, Spectral, Atmosec, Perimeter 81, Cyberint, Veriti, Cyclops, Cyata, Rotate, and Deepchecks - several founded by former Unit 8200 members and former Check Point employees, alongside one confirmed non-Israeli acquisition (Lakera, Zurich).⁵⁶³⁴³⁴ No formal joint co-development or IP-licensing agreement with Technion, Hebrew University, or the Weizmann Institute has been identified; the company’s documented academic tie is its endowed Institute at Tel Aviv University.³²

Domain Summaries

Military: Military

Mechanism of Involvement

No named contract between Check Point and the Israeli Ministry of Defence, IDF, Israel Prison Service, or Israel Border Police has been identified in any source reviewed.²² The company’s confirmed Israeli-government client is the civilian Ministry of Environmental Protection.¹⁶ At the national level, Check Point’s products were formally adopted into the Israel National Cyber Directorate’s cyber-defence methodology, and Check Point Fellow Dorit Dor spoke at DefenseTech Week 2025, an event platinum-sponsored by Rafael, Elbit, and IAI.¹⁷³⁵ Check Point’s US government channel partner Carahsoft markets the company explicitly to DoD and intelligence-community clients.¹⁵ Turkey’s military confirmed prior operational deployment of Check Point firewalls (until 2016), establishing a precedent of foreign military end-use.³¹ The most structurally significant military-adjacent relationship is Check Point’s founding membership, alongside defence prime Israel Aerospace Industries, in the IC3 and IAC3 national cyber-defence consortia, through which Check Point supplied threat-prevention, access-control, and forensic tooling to an IAI-led national cyber centre project.¹³¹⁴ The company’s founding and current leadership - Zafrir, Shwed, Nacht, Dor, Kramer - carry an exceptional density of Unit 8200/Talpiot military-intelligence service.^10111224

Counter-Arguments and Evidence Limits

Check Point is a software-only company producing no mil-spec hardware, munitions, or weapons platforms, and does not appear on advocacy arms-supply databases such as AFSC’s “Companies Profiting from the Gaza Genocide” list or PAX’s “The Companies Arming Israel.”²⁰ No IMOD/IDF prime or subcontract has been documented; the IC3/IAC3 relationship is consortium membership for cybersecurity software, not co-production of weapons systems, and no joint development or technology-transfer agreement with Elbit, Rafael, or IAI beyond consortium structure has been identified. No public evidence identified of any export-licence action specific to Israeli military end-users.

Named Entities and Evidence Map

IAI (IC3/IAC3 co-founder and lead)¹³¹⁴; Rafael and Elbit Systems (DefenseTech Week sponsors, not confirmed commercial counterparties)³⁵; Israel National Cyber Directorate¹⁷; Carahsoft (US DoD/Intel channel partner)¹⁵; Turkish Armed Forces (former end-user, ceased 2016)³¹; Nadav Zafrir (Unit 8200 Commander, CEO)¹⁰; Gil Shwed (Unit 8200, Executive Chairman)¹¹; Marius Nacht (Talpiot, IAF Captain)¹²; Dorit Dor (Unit 8200, Israel National Defense Prize 1993)²⁴; Shlomo Kramer (Unit 8200, no current role)³⁶.

Digital: Digital

Mechanism of Involvement

Check Point’s dual-use commercial platforms (Quantum, Harmony, CloudGuard, Infinity) run largely on AWS, Azure, and Google Cloud rather than proprietary infrastructure, and are sold to enterprise and government customers alike, including a confirmed Israeli civilian-ministry client and, via Carahsoft, US DoD and intelligence-community customers.²²¹⁵¹⁶ Check Point secures the cloud environment of the Ramat-Gan Municipality, described in the company’s own materials as “a government authority and participant in Israel’s Nimbus cloud computing project,” though this documents securing a Nimbus participant’s migration, not a prime or subcontractor role in Nimbus itself.³⁷ Products support Lawful Interception interfaces compliant with CALEA and ETSI standards, and the underlying DPI/SSL-inspection technology is inherently dual-use for either security or traffic-monitoring purposes.²² Leadership carries deep Unit 8200 lineage, including new CTO Jonathan Zanger, a former Unit 8200 R&D lead and CTO of Israeli computer-vision/retail-biometrics firm Trigo - though no product integration between Check Point and Trigo’s platform has been documented.²⁵

Counter-Arguments and Evidence Limits

Check Point is explicitly not named as a primary contractor or subcontractor in any publicly available Project Nimbus tender documentation or investigative reporting; the characterization of Check Point as Nimbus’s “security gatekeeper” is inferential and unconfirmed.¹⁶ Wiz, not Check Point, won Israel’s major 2024 government cloud-security tender.¹⁶ No public evidence identified of Check Point developing offensive cyber tools, zero-day exploit capabilities, or digital weapons; Check Point Research’s coverage of tools like NSO’s Pegasus is defensive/analytical, not offensive. No documented integration exists between Check Point and biometric/surveillance vendors BriefCam, AnyVision/Oosto, or predictive-policing platforms; its “Keyless” biometric access product is a third-party (London-based) integration, not an in-house platform. No AI/ML contract with Israeli military or security bodies, and no evidence its AI models train on surveillance-derived or intercepted-communications datasets, has been identified.

Named Entities and Evidence Map

Israeli Ministry of Environmental Protection (confirmed civilian client)¹⁶; Ramat-Gan Municipality (Nimbus participant secured by Check Point)³⁷; Carahsoft (DoD/Intel channel)¹⁵; Israel National Cyber Directorate¹⁷; Jonathan Zanger (CTO, ex-Unit 8200/Trigo)²⁵; AWS, Google Cloud, Microsoft Azure (infrastructure partners, not military-specific)²².

Economic: Economic

Mechanism of Involvement

Check Point is Israeli-incorporated, Israeli-tax-resident, and headquartered in Tel Aviv, with no separate foreign parent.²²²¹ It is building a 100,000 sq m Tel Aviv campus with Israel Canada in a transaction worth roughly NIS 800 million, on land where the state-owned Israel Electric Corporation is the long-term lessee - directly channeling capital into a transaction involving strategic state infrastructure.¹ The company participates in the Israel Innovation Authority’s R&D grant programme for large technology firms, which carries mandatory revenue royalties (typically 3–5%) tethering IP and revenue to the Israeli state.² It employs roughly 2,000 R&D personnel in Israel with plans for 500 more at a new AI research centre, and has completed a sustained string of Israeli-startup acquisitions (Cyclops, Cyata, Rotate, Deepchecks, and predecessors) representing continuous capital deployment into the Israeli technology ecosystem.³⁴³⁸ Co-founder and Executive Chairman Gil Shwed holds ~24.6% of shares and received the Israel Prize in 2018.¹⁸²³²⁹ Revenue is not disaggregated by country; Israel is bundled within EMEA (~46% of $2.57bn total revenue).²⁶

Counter-Arguments and Evidence Limits

No public evidence identified of state ownership stakes, government board appointees, golden shares, or charter provisions tying Check Point’s operations to Israeli state policy objectives. No public evidence identified of Israeli agricultural or settlement-goods supply-chain relationships - the domain’s product-labeling and sourcing sub-categories are structurally inapplicable to a software company. Check Point is not listed in the UN OHCHR settlement-business database, the “Don’t Buy Into Occupation” 2024 list, or the Who Profits database.¹⁸²⁷¹⁹

Named Entities and Evidence Map

Israel Canada (campus co-developer)¹; Israel Electric Corporation (state-owned lessee of campus land)¹; Israel Innovation Authority (R&D grants/royalties)²; Gil Shwed (24.6% shareholder, Israel Prize 2018)¹⁸²³²⁹; Cyberint, Veriti, Cyclops, Cyata, Rotate, Deepchecks (acquired Israeli startups)⁵³⁴.

Political: Political

Mechanism of Involvement

Check Point’s corporate blog adopted the IDF’s “Iron Swords” operation framing eleven days after 7 October 2023, presenting the conflict exclusively from an Israeli-security perspective with no reference to Palestinian civilian casualties or humanitarian conditions - a pattern repeated in a second 30 October 2023 post.⁷⁸ On the same day, CEO Gil Shwed called the October 7 attacks “a very terrible terror attack” and disclosed that ~5% of Check Point’s global headcount received IDF reserve call-up orders, while operations continued “uninterrupted.”³³ This contrasts with Check Point’s February 2023 post on Ukraine, which explicitly named a “Russian invasion” and acknowledged Ukrainian civilian harm - framing with no Gaza-conflict equivalent identified.⁹ Check Point’s 2018 annual filing acknowledged BDS-related boycott activity as a material business risk.³⁹ The company is a founding member of the IAI-led IC3 and IAC3 consortia, is integrated into the Israel National Cyber Directorate’s national methodology, anchors the CyberSpark Beer-Sheva campus beside the IDF’s C4I Directorate, sponsors the government-backed Cybertech Global Tel Aviv conference, funds the Check Point Institute for Information Security at Tel Aviv University, and saw co-founder Gil Shwed awarded the Israel Prize in 2018.^{13141728403229} It is listed as a boycott target by the Palestine Solidarity Campaign (UK), LGPS Divest, Corporate Occupation.org, OpenIntel.uk, and boycot-israel.org.^4142434445

Counter-Arguments and Evidence Limits

Check Point is not listed in the UN OHCHR settlement-business database, and no OECD National Contact Point complaint or international tribunal finding against the company has been identified.¹⁸ No branch, reseller, or service contract within West Bank settlements or East Jerusalem has been documented; CyberSpark and the Tel Aviv headquarters sit within pre-1967 Israel.²⁸ No primary-source BDS Movement listing naming Check Point as a primary boycott target on bdsmovement.net or the USCPR list was identified; civil-society targeting is drawn instead from secondary and campaign-affiliated sources. No public evidence identified of HR disciplinary action against employees for pro-Palestinian speech, and the domain’s platform-content and retail-labeling sub-categories are structurally inapplicable to a B2B cybersecurity firm.

Named Entities and Evidence Map

Israel National Cyber Directorate¹⁷; IAI (IC3/IAC3)¹³¹⁴; CyberSpark/Beer-Sheva (IDF C4I co-location)²⁸; Cybertech Global Tel Aviv⁴⁰; Tel Aviv University/CPIIS³²; Palestine Solidarity Campaign, LGPS Divest, Corporate Occupation.org, OpenIntel.uk, boycot-israel.org (civil-society listings)^4142434445; Gil Shwed (Israel Prize 2018)²⁹.

BDS-1000 Score (V4)

• V_MAX: 9.20 Sum_OTHERS: 10.60
• BRS Score: 708 Tier: B (Severe)

V_MAX is set by Economic (9.20), reflecting the depth and directness of Check Point’s structural capital ties to the Israeli state - sovereign-adjacent land transactions, royalty-bearing state R&D grants, and sustained acquisition of Israeli-founded firms - combined with a substantial Political contribution (6.91) from documented war-framing asymmetry and dense founder/state-institution entanglement. The comparatively low Military (0.12) and moderate Digital (3.57) scores, driven by the absence of any confirmed weapons or named defence-ministry contract, pull the composite down from Economic’s ceiling but do not offset it, yielding a BRS of 708 and a Tier B (Severe) classification under the scale-free scoring method.

Methodology Note

• All findings trace exclusively to the four domain audits (Military, Digital, Economic, Political) synthesized for this dossier; no claim is introduced from outside that evidentiary record.
• Scoring is scale-free: Impact (I) reflects the type of activity found (e.g., capital transfer vs. weapons supply), Magnitude (M) reflects its documented scale, and Proximity (P) reflects directness to the Israeli state/military apparatus; these combine per domain into the V-Domain Score.
• Temporal rule: divested, discontinued, or historically-ceased relationships (e.g., Turkish military’s 2016 cessation of Check Point firewall use) are carried with that context rather than treated as current exposure.
• Entity-attribution rule: no transitive guilt is applied - consortium membership (IC3/IAC3) and channel-partner relationships (Carahsoft) are attributed to Check Point only as documented, not extended to the full activities of co-members or partners.
• Settlement-adjacent or dual-purpose operations, where documented, are dual-counted across Economic and Political per methodology; no settlement-construction or settlement-goods activity was found for Check Point, so this dual-count did not apply here.
• Wherever the underlying audits found nothing, this dossier states “No public evidence identified” rather than inferring a claim; unresolved or inferential characterizations (e.g., the Nimbus “security gatekeeper” label) are flagged as such and not presented as established fact.

End Notes