Forensic audits like this are reader-funded - no sponsors, no ads. Support OpenIntel →
Military Audit: Check Point

# V-MIL Domain Audit — Check Point Software Technologies Ltd.

**Audit Phase:** V-MIL
**Company:** Check Point Software Technologies Ltd. (NASDAQ: CHKP)
**Sector:** Cybersecurity / Information Technology
**Headquarters:** Tel Aviv, Israel
**Date of Audit:** 28 June 2026

---

## Direct Defence Contracting & Procurement
### Named IMOD and IDF Contracts

No named contract between Check Point Software Technologies and the Israeli Ministry of Defence (IMOD), the Israel Defence Forces, the Israel Prison Service, or the Israel Border Police has been identified in any publicly available source reviewed for this audit, including SEC annual filings, government tender records, investigative journalism, or NGO databases [^18][^19][^25]. Check Point's Form 20-F annual filings (FY2022–FY2024) disclose "Israeli government entities" as part of the company's customer base without disaggregating defence ministry procurement from civilian ministry procurement, and those filings were not directly accessible in this audit due to server access restrictions [^25]. The sole named, publicly documented Israeli government client in Check Point's own published materials is the **Israeli Ministry of Environmental Protection** — a civilian ministry — for which Check Point published a customer case study detailing deployment of SD-WAN, Security Gateways, the Check Point Portal, and Cloud Firewall [^13].

### Israel National Cyber Directorate Integration

An official announcement published on the Israeli government portal (gov.il) confirms that Check Point implemented the Israel National Cyber Directorate's (INCD) **"Cyber Defense Methodology for an Organization"** within its commercial product portfolio, incorporating a dedicated "Compliance blade" unveiled at a conference convened for governmental officials [^5]. The INCD operates within the Prime Minister's Office and is responsible for Israel's national cyber defence posture [^5]. No named IMOD or IDF contract is referenced in the INCD announcement, though the confirmation that Check Point products have been formally adopted within Israel's governmental cyber defence architecture is on the record at the highest national-level source available [^5].

### US Government and DoD Channel

Check Point's US government channel partner **Carahsoft** states publicly that "The U.S. Government has trusted Check Point to defend its networks for 25+ years" and explicitly that the company "support[s] our DoD and Intel customers" [^16]. No Foreign Military Sale (FMS) notification naming Check Point as a prime contractor for Israeli defence end-users has been identified in publicly accessible DSCA records.

### Foreign Military Deployment: Turkey

Turkish Defence Minister Yaşar Güler confirmed in a parliamentary response (November 2024) that the Turkish military General Staff and associated units had "stopped using Check Point firewall solutions as of June 2016," documenting prior operational deployment of Check Point products by a NATO member state's armed forces and establishing a precedent of military end-user adoption [^12].

### Defence Trade Event Participation

Check Point Fellow Dorit Dor appeared as a featured speaker at **DefenseTech Week 2025**, an event co-hosted by Israeli government bodies and platinum-sponsored by Rafael Advanced Defense Systems, Elbit Systems, and IAI, presenting in her capacity as "Check Point Fellow" [^9]. No confirmation has been found that Check Point appears as a listed company in the SIBAT (Israel Defence Export & Defence Cooperation Directorate) export directory.

### Controlling Principals: Military-Intelligence Backgrounds

Check Point's executive and founding cohort carries an exceptional density of IDF military-intelligence service that is directly material to the V-MIL analysis:

- **Nadav Zafrir** (CEO from 16 December 2024): Founder of the IDF Cyber Command and Commander of **Unit 8200** — Israel's primary signals intelligence and cyber warfare unit, functionally equivalent to NSA/GCHQ — retired at the rank of **Brigadier General** [^6][^7][^31][^32]. Zafrir has been profiled as a "decorated soldier turned cyber entrepreneur" [^23]. He co-founded Team8 cybersecurity venture company in 2014 and served as Check Point's Board Chairman from 2019 to December 2024 before assuming the CEO role [^6][^7]. Prior to this appointment, Zafrir commented publicly on the controversy over Unit 8200 reservists who refused deployment on ethical grounds, criticising their method of public disclosure [^22].

- **Gil Shwed** (co-founder, Executive Chairman from December 2024): Served in IDF Intelligence Unit 8200 and developed Check Point's foundational firewall technology within the unit prior to the company's commercial launch in 1993 [^30][^24]. At Check Point's Q3 2023 earnings call (30 October 2023), Shwed disclosed that approximately **5% of Check Point's entire global headcount received IDF reserve military draft orders** following the October 7, 2023 attacks, while the company continued normal operations [^11].

- **Marius Nacht** (co-founder): Completed the IDF **Talpiot programme** — the IDF's elite military science and technology track — and retired as an IAF Captain [^1][^10].

- **Dorit Dor** (Check Point Fellow from 2025; former CPO/CTO): Enlisted to Unit 8200 in 1987, served as section head at the rank of **Major**, and received the **Israel National Defense Prize in 1993** [^8][^9]. She appears at DefenseTech Week 2025 representing Check Point alongside sponsors Rafael, Elbit, and IAI [^9].

- **Shlomo Kramer** (co-founder, departed c. 2004): Served in Unit 8200 before co-founding Imperva and Cato Networks; holds no current Check Point board or executive role [^1].

---

## Dual-Use Products & Tactical Variants
### Core Commercial Product Lines

Check Point's principal product lines — Quantum (network security gateways and firewalls), Harmony (endpoint and mobile security), CloudGuard (cloud security), and Infinity Global Services (managed security) — are software-first, commercially marketed platforms sold to enterprise and government customers alike [^1][^24]. No publicly documented ruggedised, MILSPEC-certified, or purpose-built tactical hardware variant of any Check Point product has been identified; Check Point produces no mil-spec hardware [^1].

### Dual-Use Deployment Pattern

The same commercial products that serve civilian enterprise customers are demonstrably deployed in government and military security roles without purpose-built military specifications, conforming to a classic commercial-off-the-shelf (COTS) dual-use profile. Carahsoft's explicit marketing to US Department of Defense and intelligence community clients — citing 25 years of US government trust — confirms the scope of this civilian-to-military dual-use deployment [^16]. The IC3 consortium (detailed in Section 4) further documents Check Point's commercial threat prevention platforms, access control, and forensic tooling being integrated into a national-level cyber defence centre under IAI leadership, constituting a defence-grade deployment context for products without military hardware certification [^3][^4].

### Export Classification

Check Point's encryption-capable cybersecurity software is subject to US Bureau of Industry and Security (BIS) export controls under **EAR Category 5 Part 2** (Information Security) [^25]. No specific publicly known export licence application, end-user certificate, or government export control review relating to Check Point's sales to Israeli defence or security end-users has been identified in public records [^25]. No public evidence identified of any government decision to grant, deny, suspend, or revoke an export licence for Check Point products to Israeli military end-users.

---

## Heavy Machinery, Construction & Infrastructure
Check Point Software Technologies is a software company with no publicly documented physical equipment sales, construction services, or machinery manufacturing. No public evidence identified of Check Point's equipment, vehicles, or machinery being used in construction, maintenance, or demolition activity within Israeli settlements, the separation barrier, military installations, or occupied territories. No public evidence identified of any Check Point contracts for construction, maintenance, servicing, or expansion of military checkpoints, detention facilities, military bases, the separation barrier, or settlement infrastructure. Check Point does not appear in the OHCHR database of business enterprises linked to settlement construction activity, as confirmed through the OpenSanctions live aggregation of that database [^17]. This section is structurally inapplicable to Check Point's software-only product profile; findings are uniformly negative across all sub-categories of this domain.

---

## Supply Chain Integration with Defence Primes
### IC3: Israeli Cyber Companies Consortium (IAI-Led)

Check Point is a confirmed **founding member** of the **Israeli Cyber Companies Consortium (IC3)**, formally led by **Israel Aerospace Industries (IAI)** — Israel's largest defence prime contractor, producing drones, missiles, and military aircraft — under formal endorsement of the Israeli Ministry of Economy [^2][^3][^4]. The IC3 was established to provide "holistic, end-to-end, cyber solutions at the national level" for governments worldwide, with IAI serving as operational lead [^2]. Founding membership alongside IAI constitutes the most structurally significant and directly documented relationship between Check Point and an Israeli defence prime contractor identified in this audit.

### IC3 Latin America Contract (2017)

The IC3 consortium was awarded a contract described as "worth tens of millions of dollars" to establish a "strategic national-level cyber defence centre" in a Latin American country [^3][^15][^28]. Check Point's contractual role within this deployment was to supply "Next Generation Threat Prevention, Advanced Access Control and forensic lab tools, fused with real-time actionable intelligence at a national scale" [^4][^28]. Shephard Media's *Digital Battlespace* — a specialist defence technology publication — covered the IC3 contract announcement in the context of the LAAD 2017 defence exhibition, framing the contract as a defence industry event [^28]. The establishment of the national cyber centre under IC3 was also reported by iHLS, the Israeli homeland security news platform [^33]. Then-Check Point President **Amnon Bar-Lev** stated publicly: "We are very proud to be part of the IC3 coalition that enables customers to benefit from broader, integrated solutions" [^4]. Secondary reporting has associated this contract with a Honduras–Israel cybersecurity framework agreement; no primary Honduran government source confirming the country identity was identified in this audit.

### IAC3: Israeli Aviation Cyber Companies Consortium (IAI-Led)

In November 2018, Check Point co-founded the **Israeli Aviation Cyber Companies Consortium (IAC3)** alongside IAI, CyberArk, Karamba Security, ClearSky, and Cockpit Innovation (El Al's corporate venture arm), with explicit Israeli Ministry of Economy backing [^21][^26][^27]. The IAC3's stated scope is "comprehensive, end-to-end cybersecurity solutions for the commercial aviation industry," with IAI again serving as operational lead [^21][^26][^27]. The consortium was covered in the Israel Defense trade publication and the Asia Aviation trade press as an Israeli government–industry initiative [^26][^27].

### Nature and Limits of Prime Integration

In both the IC3 and IAC3 consortium contexts, Check Point supplies cybersecurity software systems — threat prevention platforms, access control systems, forensic tooling, and real-time intelligence aggregation — as a component of IAI-led national defence and critical infrastructure projects [^3][^4]. No specific joint development programme, technology transfer arrangement, or co-production agreement between Check Point and Israeli defence primes (Elbit Systems, Rafael Advanced Defense Systems, or IAI) beyond the IC3 and IAC3 consortium membership structures has been identified in publicly available records [^1].

---

## Logistical Sustainment & Base Services
No public evidence identified of Check Point holding contracts to provide catering, transport, fuel supply, waste management, facilities maintenance, telecommunications infrastructure, or similar logistical support services to IDF bases, military training facilities, detention centres, or security installations. No public evidence identified of service contracts with geographical scope in the West Bank, Golan Heights, East Jerusalem, or the Negev specifically. No public evidence identified of shipping, freight, or port service relationships relevant to Israeli military sustainment. This section is structurally inapplicable to Check Point's software product profile; findings are uniformly negative across all sub-categories of this domain.

---

## Munitions, Weapons Systems & Strategic Platforms
Check Point Software Technologies engages in no publicly documented lethal systems manufacturing, munitions production, or strategic platform development. No public evidence identified of Check Point acting as a prime contractor or sub-contractor for any lethal weapons system [^18][^19]. No public evidence identified of Check Point's involvement in Iron Dome, David's Sling, Arrow, combat aircraft systems, main battle tank programmes, or warship manufacturing [^18][^19]. No public evidence identified of Check Point supplying guidance electronics, fire-control systems, radar components, propulsion units, or warhead casings to any weapons platform. No public evidence identified of Check Point manufacturing or supplying munitions, propellant or energetic precursor materials, or armament components of any kind. Advocacy databases that focus on direct arms supply — including AFSC's "Companies Profiting from the Gaza Genocide" list and PAX's "The Companies Arming Israel and Their Financiers" — do not list Check Point, consistent with its software-only profile [^18][^19].

---

## Export Licensing, Regulatory & Legal History
### Export Controls

Check Point's cybersecurity products, including encryption-capable platforms, are subject to US Bureau of Industry and Security (BIS) export controls under **EAR Category 5 Part 2** (Information Security) [^25]. No named export licence application, end-user certificate, or government export control review specific to Check Point's sales to Israeli military or security end-users has been identified in any public record [^25]. No government decision to grant, deny, suspend, or revoke an export licence for Check Point products to Israeli military end-users in any jurisdiction has been publicly documented.

### Arms Embargo and Sanctions Compliance

No investigations, citations, or enforcement actions relating to Check Point's compliance with arms embargoes, export control regimes, or sanctions provisions affecting defence trade with Israel have been identified in public records reviewed for this audit [^25].

### Legal Proceedings

Court proceedings identified in public records are limited to matters entirely unrelated to defence supply: (a) a trademark infringement action (Checkpoint Systems v. Check Point Software, D.N.J. 2000; 3d Cir. 2001); (b) patent litigation brought by Finjan Inc.; and (c) a 2024 SEC administrative proceeding concerning the adequacy of disclosures related to the 2020 SolarWinds supply-chain compromise [^25]. No court proceedings, judicial reviews, or legal challenges relating to Check Point's defence supply relationship with Israel, to export licensing decisions, or to the IC3 consortium arrangements have been identified.

### BDS Risk Factor Disclosure

Secondary source reporting indicates that Check Point disclosed the BDS movement as a material risk to its business in at least one annual 20-F report (reported as the 2018 annual report) [^1]. The verbatim text of that risk factor disclosure could not be confirmed from primary SEC filings in this audit due to access restrictions on SEC EDGAR [^25].

---

## Civil Society Scrutiny & Documented Investigations
### NGO and Advocacy Reports

**Corporate Occupation (November 2019):** Published an investigation documenting the Unit 8200 military backgrounds of Check Point's founders, the IC3 consortium partnership with IAI, and the company's receipt of Israeli government contracts, characterising Check Point as "profiting from the incubator provided by the Israeli state's repression of Palestinians" [^1]. The IC3–IAI structural relationship is identified as the primary concern, alongside the founders' intelligence-unit service records [^1].

**LGPS Divest / Palestine Solidarity Campaign (ongoing):** Check Point is listed on both the LGPS Divest and Palestine Solidarity Campaign advocacy platforms as a subject of concern [^20][^29]. Grounds cited include: (i) multiple founders and directors with cyber-intelligence service in IDF units; (ii) partnership with "drone manufacturer Israel Aerospace Industries (IAI)" via IC3; and (iii) broader benefit derived from "the Israeli state repression" incubator environment [^20][^29]. Attribution is made to a Corporate Watch report.

**AFSC "Companies Profiting from the Gaza Genocide" database (2024–ongoing):** Check Point is **not listed** among the companies in this database [^18].

**PAX "The Companies Arming Israel and Their Financiers" (June 2024):** Check Point is **not listed**; the PAX report focuses on hard-weapons manufacturers including Boeing, General Dynamics, Lockheed Martin, Leonardo, RTX, and Rolls-Royce [^19].

**UN OHCHR Settlement Database:** Check Point Software Technologies is **not listed** in the OHCHR database of business enterprises identified as involved in settlement activity in the Occupied Palestinian Territory, as confirmed through the OpenSanctions live aggregation of that database [^17].

### Conflict-Period Public Disclosures

Check Point published a blog post titled "The Iron Swords War — Cyber Perspectives from the First 10 Days of the War in Israel" (October 2023), describing the cyber threat environment following the October 7 attacks using Israeli national security framing and affirming the company's monitoring role [^14]. In the same period, at the Q3 2023 earnings call (30 October 2023), Gil Shwed disclosed that approximately 5% of Check Point's global headcount had received IDF reserve military draft orders following the attacks, while confirming normal business operations [^11].

### Turkey Political Context

Following the October 7, 2023 conflict, Check Point became a political target in Turkey, with parliamentary questions raised about its software in Turkish government systems and the Defence Minister's response confirming the company's prior military use and subsequent phase-out [^12]. This episode illustrates Check Point's exposure to geopolitical risk arising from its Israeli national identity as well as its history of military-sector deployment [^12].

### Boycott and Protest Activity

Check Point appears on BDS-affiliated boycott lists as an Israeli technology company, cited primarily on the grounds of Israeli national origin and founders' Unit 8200 backgrounds [^20][^29]. A documented in-person protest action was carried out by **AK Peace Action** in Alaska, described as "anti-apartheid protesters opposed Check Point Software," with an explicit call to "Cut ties to Israeli tech" [^35]. No institutional pension fund or sovereign wealth fund divestment decision specifically naming Check Point by name has been identified in public records reviewed for this audit.

### Corporate Response to Civil Society Pressure

Check Point has issued no public statement, policy change, contract termination, or end-use monitoring commitment in response to civil society pressure regarding its defence supply chain or its IC3–IAI structural relationship, based on all publicly available materials reviewed [^1][^20][^29]. Check Point's ESG report (2023) addresses cybersecurity's role in "making the world safer" but contains no reference to the occupation, settlement activity, or civil society criticism of the company's supply chain relationships [^34].

---

## End Notes

[^1]: https://corporateoccupation.org/2019/11/25/check-point-software-ex-israeli-military-spooks-profiting-from-the-cyber-security-industry/

[^2]: https://www.businesswire.com/news/home/20220118005269/en/Checkmarx-Joins-Israeli-Cyber-Companies-Consortium-IC3-Led-by-IAI-to-Provide-Industry-leading-AppSec-Capabilities-to-National-Cyber-Defense-Organizations

[^3]: https://www.israeldefense.co.il/en/node/29005

[^4]: https://www.defesanet.com.br/en/e_laad2017/noticia/25255/IC3---Israeli-Cyber-Companies-Consortium-to-establish-a-National-Cyber-Center-in-Brazil/

[^5]: https://www.gov.il/en/departments/news/checkpoint

[^6]: https://www.stocktitan.net/news/CHKP/gil-shwed-takes-on-the-role-of-executive-chairman-of-the-board-of-145x96trwek7.html

[^7]: https://www.bloomberg.com/news/articles/2024-07-24/israel-cybersecurity-giant-check-point-names-nadav-zafrir-as-ceo

[^8]: https://en.wikipedia.org/wiki/Dorit_Dor

[^9]: https://2025.defensetech-week.com/speaker/dr-dorit-dor/

[^10]: https://www.amoon.fund/marius-nacht/

[^11]: https://finance.yahoo.com/news/check-point-software-technologies-ltd-124947162.html

[^12]: https://nordicmonitor.com/2025/03/cybersecurity-company-check-point-becomes-a-political-target-in-turkey-amid-israeli-hamas-conflict/

[^13]: https://www.checkpoint.com/customer-stories/israeli-ministry-of-environmental-protection/

[^14]: https://blog.checkpoint.com/security/the-iron-swords-war-cyber-perspectives-from-the-first-10-days-of-the-war-in-israel/

[^15]: https://www.timesofisrael.com/israel-cyber-consortium-lands-multi-million-dollar-latin-america-deal/

[^16]: https://www.carahsoft.com/check-point

[^17]: https://www.opensanctions.org/datasets/ps_ohchr_settlement/

[^18]: https://afsc.org/gaza-genocide-companies

[^19]: https://paxforpeace.nl/publications/the-companies-arming-israel-and-their-financiers/

[^20]: https://lgpsdivest.org/psc-company/check-point-software-tech/

[^21]: https://www.timesofisrael.com/israeli-firms-ministry-set-up-consortium-to-tackle-aviation-cyberthreats/

[^22]: https://team8.vc/former-unit-8200-commander-lashes-out-at-reservists-public-criticism/

[^23]: https://www.calcalistech.com/ctech/articles/0,7340,L-3866605,00.html

[^24]: https://94040.substack.com/p/check-point-an-israeli-cybersecurity

[^25]: https://www.sec.gov/Archives/edgar/data/0001015922/000117891325000867/zk2532836.htm

[^26]: https://www.israeldefense.co.il/en/node/36374

[^27]: https://asianaviation.com/israels-technology-companies-join-forces-for-the-aviation-industry-ministry-of-economy-iai-and-leading-cyber-companies-announce-consortium-to-develop-cyber-security-solutions-for-commercial-avia/

[^28]: https://www.shephardmedia.com/news/digital-battlespace/ic3-announces-cyber-centre-deal/

[^29]: https://palestinecampaign.org/psc-company/check-point-software-tech/

[^30]: https://en.wikipedia.org/wiki/Gil_Shwed

[^31]: https://www.timesofisrael.com/israels-check-point-names-nadav-zafrir-as-new-ceo/

[^32]: https://www.calcalistech.com/ctechnews/article/bywtlrroa

[^33]: https://i-hls.com/archives/75750

[^34]: https://www.checkpoint.com/downloads/company/check-point-esg-2023-report.pdf

[^35]: https://www.facebook.com/akpeaceaction/posts/cut-ties-to-Israeli-tech-anti-apartheid-protesters-opposed-check-point-software-/1147638627391491/ ```