Key Findings
- Economic: CyberArk was founded, incorporated, and headquartered in Israel from 1999, and its 2025–2026 acquisition by Palo Alto Networks for approximately $25 billion - described in Israeli financial press as one of the largest technology exits in Israeli history - generated an estimated $2 billion (NIS 6.7 billion) in one-time capital-gains tax revenue for the Israeli Treasury.1, 2, 3
- Political/Governance: Founder and Executive Chairman Udi Mokady is a Unit 8200/military-intelligence alumnus, and senior executives including Global CIO/Chief Trust Officer Omer Grossman (25+ years in IDF cyber units, including Head of the IDF Cyber Defense Operations Center) and Israel GM Chen Bitan (IDF software unit, Mamram Academy) carry documented IDF backgrounds; CyberArk issued explicit public solidarity statements with Israel following 7 October 2023.4, 5, 6, 7
- Digital/Military consortium ties: CyberArk is a member of the government-facing Israeli Cyber Companies Consortium (IC3) and Israeli Aviation Cyber Companies Consortium (IAC3), both led or co-anchored by state-owned Israel Aerospace Industries, though no verified direct contract with the Israeli Ministry of Defense, IDF, or Israel Prison Service was identified.8, 9
- Not found: No public evidence identified of CyberArk supplying surveillance, biometric, weapons, or targeting technology; even BDS-aligned boycott trackers reviewing the company concluded that “no direct military or surveillance applications are publicly documented,” classifying CyberArk on economic/structural grounds rather than direct-supply evidence.10
Target Profile
| Field | Detail |
|---|---|
| Company Name | CyberArk Software Ltd. |
| Jurisdiction | Incorporated under Israeli law; SEC filer with US correspondence address in Newton, Massachusetts.11, 1 |
| Headquarters | Petah Tikva, Israel (founding and primary R&D headquarters); dual-headquarters structure with Newton, Massachusetts, US operational address.12, 11 |
| Sector | Cybersecurity software - identity security and privileged access management (PAM).13 |
| Ownership | Formerly independent, NASDAQ-listed (ticker: CYBR); acquired by Palo Alto Networks for ~$25 billion, transaction closed 11 February 2026; now a wholly-owned subsidiary, with Athens Strategies Ltd. as the Israeli merger vehicle. Pre-acquisition major holders included BlackRock, Vanguard, T. Rowe Price, ARK Invest, and founders Udi Mokady and Alon Cohen; Jerusalem Venture Partners (JVP) held ~46% at IPO.2, 14, 15, 16 |
| Key Executives / Governance | Udi (Ehud) Mokady, founder, CEO 2005–2023, Executive Chairman thereafter (Unit 8200/military-intelligence alumnus, 1986–1989); Alon N. Cohen, co-founder (reported Mamram service); Matt Cohen, CEO from 2023; Omer Grossman, Global CIO (Dec 2022–Sept 2025) then Chief Trust Officer/Head of CYBR Unit (25+ years IDF, incl. Head of IDF Cyber Defense Operations Center and Head of Mamram); Chen Bitan, Israel GM/Chief Cyber Transformation Officer (IDF software unit, ending as Department Manager, Mamram Academy); François Auque, board member since 2019, concurrent Director at Airbus Defence & Space SA; Gadi Tirosh, Lead Independent Director, former Managing Partner at JVP; Ron Gutler, director since 2014, former Chairman of NICE Systems.4, 17, 18, 5, 19, 20, 21 |
| Israeli-Nexus Summary | Israeli-founded, Israeli-headquartered identity-security vendor with founder/executive IDF-intelligence backgrounds, government-facing cyber-consortium memberships alongside Israel Aerospace Industries, and substantial economic contribution to the Israeli state via R&D investment and acquisition-linked tax revenue - but no verified direct military, surveillance, or weapons-supply relationship.8, 3, 10 |
Key Facts:
- ~1,200 Israel-based employees across Petah Tikva HQ and Beersheba R&D center as of 2025 reporting (~25% of pre-acquisition global workforce).22, 14
- Beersheba R&D center (inaugurated 2021) sits within the Gav-Yam Negev Tech Park, adjacent to the IDF’s C4I Corps Park and Israel’s National Cyber Directorate CERT centre.23, 24
- SEC 20-F filings disclose the company’s products may fall under the Israeli Defense Export Control Law, administered by the Ministry of Defense’s Defense Export Controls Agency (DECA).25, 1
- Post-acquisition, the combined Palo Alto Networks entity plans to adopt the “CYBR” ticker on the Tel Aviv Stock Exchange while retaining its Nasdaq listing.26
Executive Summary
CyberArk is an Israeli-founded, Israeli-headquartered identity-security and privileged-access-management (PAM) software company, incorporated in Israel in 1999 and listed on NASDAQ from 2014 until its acquisition by Palo Alto Networks closed on 11 February 2026.12, 11, 2 Its documented Israel/Palestine nexus is structural and personnel-based rather than product-based: the company’s founder and long-serving CEO, Udi Mokady, is a Unit 8200/military-intelligence alumnus, and several senior executives - including Global CIO-turned-Chief Trust Officer Omer Grossman and Israel GM Chen Bitan - held substantial IDF cyber-unit careers before joining CyberArk.4, 5, 6 The company itself, alongside state-owned Israel Aerospace Industries and other Israeli cybersecurity firms, is a founding member of two government-facing consortia - the Israeli Cyber Companies Consortium (IC3) and the Israeli Aviation Cyber Companies Consortium (IAC3) - oriented toward exporting national cyber-defense capability to third countries rather than toward IDF procurement.8, 9
Economically, CyberArk’s nexus is more concrete. The company has invested in Israeli physical R&D infrastructure - its Petah Tikva headquarters and a Beersheba R&D center co-located with the government-sponsored CyberSpark ecosystem and the IDF’s C4I Corps Park - and benefits from Israeli “Preferred Technology Enterprise” tax incentives.12, 23, 25 The 2025–2026 Palo Alto Networks acquisition, valued at roughly $25 billion, is characterized in Israeli financial press as one of the largest technology exits in Israeli history and is estimated to have generated approximately $2 billion in one-time capital-gains tax revenue for the Israeli Treasury.2, 3 Politically, the company issued explicit public solidarity statements with Israel following the 7 October 2023 Hamas attack, acknowledged that “a small percentage” of its global team was called to military reserve duty, and used its India R&D center to help cover affected work.6, 7
What is not supported by the evidence is any direct, verified military-supply, surveillance, or weapons relationship. No public evidence was identified of a direct IMOD, IDF, Israel Prison Service, or Israel Border Police contract; no evidence of CyberArk marketing biometric, facial-recognition, or targeting technologies; and no evidence of CyberArk appearing in SIBAT defense-export directories or the OHCHR settlement-business database.27, 28, 29 Independent boycott-tracking organizations that reviewed the company reached the same conclusion, explicitly stating that “no direct military or surveillance applications are publicly documented” for CyberArk, and basing their inclusion on economic and structural (rather than direct-supply) grounds.10
The resulting BDS-1000 assessment - Military 0.00, Digital 5.50, Economic 9.00, Political 7.00, yielding a Blended Risk Score of 819 and Tier A (Extreme) - reflects this profile precisely: a company with zero verified military nexus but a strong, well-documented economic and political/governance nexus rooted in its Israeli incorporation, tax contribution, executive personnel pipeline from IDF cyber units, and explicit institutional solidarity posture.
Timeline of Relevant Events
| Date | Event |
|---|---|
| 1999 | CyberArk founded in Israel by Udi Mokady and Alon N. Cohen.12 |
| 2014 | CyberArk completes NASDAQ IPO; JVP holds ~46% at IPO.15, 16 |
| September 2016 | CyberArk’s Privileged Account Security Solution receives a US Army Certificate of Networthiness after DoD Unified Capabilities Approved Products List addition.30 |
| 2016 | Israeli Cyber Companies Consortium (IC3) established under Israel’s Ministry of Economy, led by state-owned IAI, with CyberArk among founding/listed members.8 |
| 27 March 2017 | IC3 reported to have secured a ~$50M contract to build a national cyber center in a Latin American country; CyberArk listed among consortium members without a named delivery role.31 |
| 31 January 2017 | Reseller Carahsoft lists CyberArk’s PAM solution on the US Army ITES-SW contract vehicle.30 |
| 2018–2020 | CyberArk-associated Israel Innovation Authority royalty payments recorded ($458K in 2018, $41K in 2019, $228K in 2020) tied to $5.54M in cumulative grants.32 |
| May–June 2021 | CyberArk inaugurates Beersheba R&D center at Gav-Yam Negev Tech Park, adjacent to the IDF C4I Corps Park; expanded December 2021.23, 33 |
| 12 May 2022 | CyberArk Ventures launched with $30M fund alongside Team8 Capital and YL Ventures.34 |
| 7–13 October 2023 | Following the Hamas attack, CEO Matt Cohen and CyberArk’s corporate blog/X account issue solidarity statements with Israel; company confirms reservist call-ups and India-center coverage plans.6, 7, 35 |
| November 2023 | Glasgow Caledonian University rolls out a £1.4M CyberArk MFA contract (via Computacenter), later the target of a student boycott campaign.36, 37 |
| 30 January 2024 | University of Aberdeen signs CyberArk cybersecurity contract, later contested by its Palestine Solidarity Society.38 |
| October 2024 | CyberArk completes ~$1.54B acquisition of Venafi from Thoma Bravo.39, 40 |
| 13 November 2024 | CyberArk and Wiz announce a technology-alliance partnership.41 |
| 25 November 2024 | Student campaign publicized calling on Glasgow Caledonian University to end its CyberArk contract, citing IDF-linked executive backgrounds.36 |
| November 2024 | Aberdeen Palestine Solidarity Society publicly objects to the university’s CyberArk contract.38 |
| 4 February 2025 | CyberArk and SentinelOne announce an integration partnership.42 |
| September 2025 | Omer Grossman moves to newly created Chief Trust Officer/Head of CYBR Unit role; Ariel Pisetzky becomes CIO.43 |
| 30 July 2025 | Palo Alto Networks announces agreement to acquire CyberArk for ~$25 billion.44 |
| 11 February 2026 | Acquisition closes; CyberArk becomes a Palo Alto Networks subsidiary; ~700 employees (10% of global workforce) laid off the following day.2, 45 |
Corporate Overview
CyberArk Software Ltd. was incorporated under Israeli law in 1999, with Petah Tikva, Israel serving as its founding and primary R&D headquarters throughout its independent existence, alongside a secondary US operational/SEC-correspondence address in Newton, Massachusetts - a dual-headquarters structure common among Israeli technology firms listed on US exchanges.12, 11 A second major R&D site was inaugurated in Beersheba in 2021, within the government-sponsored Gav-Yam Negev Tech Park/CyberSpark ecosystem, in physical proximity to the IDF’s C4I Corps Park, Israel’s National Cyber Directorate CERT centre, and Ben-Gurion University, with which CyberArk maintains a formal research and internship partnership.23, 24, 33 No public evidence identified of CyberArk offices, dealerships, or operational facilities in the West Bank, East Jerusalem, the Golan Heights, or Israeli settlements.27, 46
CyberArk’s acquisition history includes Idaptive (US, 2020), Aapi.io and C3M (2022), Zilla Security (2024), and Venafi (US, 2024, ~$1.54B) - none identified as Israeli-origin targets.39, 40 The company also operated CyberArk Ventures, a $30 million corporate venture fund launched in 2022 alongside Team8 Capital, YL Ventures, Venrock, and Merlin Ventures.34 CyberArk itself was acquired by Palo Alto Networks for approximately $25 billion in a transaction that closed 11 February 2026, with Athens Strategies Ltd. - an Israeli wholly-owned Palo Alto Networks subsidiary - serving as the merger vehicle; CyberArk now operates as a subsidiary product line within Palo Alto Networks, reportedly branded “Idira.”2, 14, 47 The combined entity has stated plans to adopt the “CYBR” ticker on the Tel Aviv Stock Exchange while retaining its Nasdaq “PANW” listing, which would make it the largest company by market capitalization listed on the TASE.26
Domain Summaries
Military: Military
Mechanism of Involvement
No public evidence identified of a verified direct contract, tender award, or MOU between CyberArk and Israel’s Ministry of Defense (IMOD), the IDF, the Israel Prison Service, or the Israel Border Police.27 CyberArk is a founding/listed member of the IC3 consortium (established 2016 under Israel’s Ministry of Economy, led by state-owned IAI) and the IAC3 aviation-cybersecurity consortium, both of which are government-facing but civilian/economic-ministry-led rather than documented IMOD/IDF procurement relationships.8, 9 IC3’s documented export activity includes a March 2017 contract (reported value ~$50M) to build a national cyber center in a Latin American country, in which CyberArk was listed among consortium members without a named technical-delivery role.31 Outside Israel, CyberArk’s PAM solution obtained a US Army Certificate of Networthiness (2016) and was listed on the US Army’s ITES-SW procurement vehicle (2017) - US federal/Army certifications, not Israeli military ones.30 CyberArk’s own SEC 20-F filings disclose that its products are not currently subject to the Israeli Defense Export Control Law but would become so if used for defense purposes or classified dual-use.25
Counter-Arguments and Evidence Limits
No public evidence identified of a ruggedized/mil-spec CyberArk product variant; no verified component-supply relationship with Elbit Systems, IAI, Rafael, or IMI; no evidence of logistical/base-support services to IDF installations; no evidence of munitions, weapons-systems, or strategic-platform involvement; and no evidence of an Israeli, US, EU, or UK export-license action naming CyberArk.27 A search for Israel Prison Service technology contracts surfaced an award to a different company, not CyberArk.48 A 2026 securities class-action reported by The D&O Diary concerns a different company (Alarum Technologies) and does not implicate CyberArk.49 The PAX June 2024 report “The companies arming Israel and their financiers” contains no mention of CyberArk; the July 2025 Albanese UN report and Al-Haq’s Business and Human Rights materials likewise do not name the company.28, 50, 51
Named Entities and Evidence Map
Udi Mokady served in Israeli military intelligence (1986–1989) and, per CyberArk’s own 20-F, worked as general counsel at Tadiran Spectralink - described in industry directories as a producer of secure wireless communications for UAVs, guided weapons, and combat platforms - in a legal rather than engineering role, immediately before co-founding CyberArk.4, 52 Chen Bitan (Israel GM/Chief Cyber Transformation Officer) served in an IDF software-engineering unit, ending as Department Manager at the Mamram Academy.5 Omer Grossman (Global CIO 2022–2025, then Chief Trust Officer) spent 25+ years in the IDF, including as Head of the IDF Cyber Defense Operations Center and Head of Mamram, the IDF’s central cloud/computing service.43, 53 Board member François Auque concurrently serves as a Director at Airbus Defence & Space SA.20 A BDS-aligned tracking site cites CyberArk’s October 2023 solidarity statement and acknowledgment that “a few global team members were called to support [the] military effort,” while explicitly noting that “no direct military or surveillance applications are publicly documented” for the company.10 Following 7 October 2023, CEO Matt Cohen issued a public solidarity statement, and CyberArk’s FY2023-era SEC disclosures describe limited reservist call-ups among the workforce.6, 7
Digital: Digital
Mechanism of Involvement
CyberArk maintains formal technology-alliance partnerships with other Israeli-founded security firms - a November 2024 integration with cloud-security vendor Wiz (joining the Wiz Integration Network while Wiz joined CyberArk’s C3 Alliance) and a February 2025 integration with SentinelOne’s Singularity Endpoint platform.41, 42 CyberArk’s SaaS Identity Security Platform runs on AWS with data centers described as globally redundant; no specific confirmation was located that non-Israeli customer data is processed within Israeli AWS zones, and no public evidence identified of CyberArk as a named participant in Project Nimbus.54, 55, 56 CyberArk software reaches UK public-sector end users via third-party integrators: Computacenter’s £1.4M contract with Glasgow Caledonian University and a separate >£1.4M Student Loans Company contract procured via the UK government’s G-Cloud framework.36, 57
Counter-Arguments and Evidence Limits
No public evidence identified of CyberArk developing or deploying facial recognition, biometric identification, predictive-policing, or retail-surveillance technologies. No public evidence identified of CyberArk providing AI/ML or autonomous targeting/tracking systems to Israeli state or military bodies; the company’s stated product function is defensive identity and access security.13 No public evidence identified of a direct, named CyberArk contract with IMOD, IDF, or Israeli intelligence agencies for software licensing, hosting, or analytics. A CyberArk spokesperson told The National the company has “no direct interest in or corporate association” with the IDF, in response to the UK procurement criticism.58 CyberArk does not appear in the OHCHR settlement-business database (158 entities, September 2025 update), cross-checked against an OpenSanctions mirror.29, 59
Named Entities and Evidence Map
Co-founder Alon N. Cohen is reported in secondary sources to have served in Mamram, credited with informing CyberArk’s early architecture, though primary corroboration was not independently confirmed.13 Board member Ron Gutler, on the board since 2014, previously chaired NICE Systems Ltd., which CyberArk’s own 20-F describes as specializing in “voice recording, data security, and surveillance.”19 A dedicated boycott-tracking database classifies CyberArk as a lower-tier “Challenging Priority” target, citing its Israel-based tax contribution, October 2023 CEO statement, and enterprise lock-in against named competitors, while explicitly stating no direct military/surveillance applications are documented.10 The Glasgow Caledonian University Palestine Solidarity Society’s November 2024 boycott campaign named then-CIO Omer Grossman’s IDF service specifically; a CyberArk spokesperson also confirmed to The National that VP of cyber research Lavi Lazarovitz is an active-duty Israeli Air Force officer.36, 58 CyberArk’s Beersheba R&D footprint carries a $5.54M cumulative Israel Innovation Authority grant obligation with 3–5% royalty payments - a standard Israeli R&D-grant structure, not military-specific.32
Economic: Economic
Mechanism of Involvement
CyberArk was incorporated in Israel and maintained Petah Tikva as its founding global R&D and operational headquarters from 1999, later adding the Beersheba R&D center (2021) within the government-sponsored CyberSpark ecosystem.12, 23 Approximately 25% of the pre-acquisition global workforce (~1,000 of ~4,000, later cited as ~1,200 of a larger base) was Israel-based.14, 22 CyberArk benefited from Israeli “Preferred Technology Enterprise” and “Special Preferred Technology Enterprise” tax rates (12% / 6%) on qualifying IP income.1 The $25 billion Palo Alto Networks acquisition is estimated to have generated ~$2 billion (NIS 6.7 billion) in one-time Israeli capital-gains tax revenue.3 CyberArk’s SEC filings explicitly disclose that its products may be subject to the Israeli Defense Export Control Law administered by DECA.25, 1
Counter-Arguments and Evidence Limits
CyberArk is a software company with no physical goods, agricultural, or settlement-origin supply chain to document; no capital investments in the West Bank, Gaza, or Golan Heights are identified in public filings.27, 60 No Israel-specific revenue figure is disclosed (Israel is reported within aggregated EMEA regional figures, as the company’s home R&D base rather than an export market).61 No state ownership stake, government board appointees, or golden-share/charter provisions tying CyberArk to Israeli state policy objectives are identified in SEC filings.61, 11 Glasgow Caledonian’s Students’ Association passed a motion to end its CyberArk contract and a £1.44M contract was reported terminated following student activism; University of Aberdeen faced parallel but unresolved backlash.36, 38
Named Entities and Evidence Map
Jerusalem Venture Partners (JVP) held ~46% of CyberArk at IPO; JVP founder Erel Margalit is a former Knesset member, though no evidence links JVP to defense-sector or settlement investment portfolios.16 At IPO, CyberArk donated employee stock options to Tmura (The Israeli Public Service Venture Fund), converting to ~$750,000 for Israeli nonprofits.62, 63 CyberArk’s CSR page lists ELIA (supporting visually impaired children in Israel) among charitable recipients.64 Founders Mokady (Unit 8200) and Cohen (reported Mamram service) anchor the company’s IDF-linked origin narrative documented across audits.17, 4
Political: Political
Mechanism of Involvement
Following 7 October 2023, CyberArk issued a public statement describing itself as “horrified by the atrocities” and CEO Matt Cohen stated a “small percentage” of the team was called to reserve duty, with some “bravely” volunteering.6 A corporate blog post, “Our Hearts Are Broken, but We Will Prevail,” called for support of “the people of Israel” (the original URL now redirects post-acquisition and could not be independently re-verified in full).35 CyberArk’s official X account posted a parallel solidarity statement.65 CyberArk’s FY2024 20-F foregrounds the Israel-Hamas and Israel-Iran conflicts and the Ukraine-Russia war as explicit business-risk factors, citing “heightened threat environment” and disruption risk.66 JP Morgan’s October 2023 analysis flagged CyberArk, alongside Check Point and SentinelOne, as among software firms “most exposed” to the Israel-Hamas war given significant Israel-based operations.67
Counter-Arguments and Evidence Limits
No public evidence identified of a comparable CyberArk statement on Russia/Ukraine, Black Lives Matter, or COVID-19, nor of the company explicitly marketing “military heritage” as a commercial selling point.13 No public evidence identified of CyberArk offices in the West Bank, East Jerusalem, or Golan Heights, or of the company’s inclusion on the OHCHR settlement-business database.27, 29 No public evidence identified of a CyberArk federal PAC, OpenSecrets lobbying profile, or donations to Friends of the IDF, JNF/KKL, or other settlement-linked organizations. Responding to procurement criticism, a CyberArk spokesperson stated the company has “no direct interest in or corporate association” with the IDF.58
Named Entities and Evidence Map
Founder Udi Mokady is documented as a Unit 8200 alumnus and is reported to be among individuals identified in a 2025 Drop Site News investigation of former Israeli intelligence personnel across major technology companies (secondary summarization; primary article not independently fetched).4, 68 Mokady also holds an Israeli-American Council (IAC) Council Member role and several unrelated advisory board seats.69 Omer Grossman is the executive most directly cited by outside campaigners (including the University of Aberdeen Palestine Solidarity Society) as evidence of institutional IDF ties, given his 25-year IDF career including leadership of the IDF Cyber Defense Operations Center and Mamram.38, 53 Lead Independent Director Gadi Tirosh (JVP Managing Partner 2005–2018) and director Ron Gutler (former NICE Systems Chairman) round out the board’s Israeli-tech-sector ties.19 Palo Alto Networks’ own Israeli-American founder Nir Zuk retired in August 2025; CEO Nikesh Arora stated the parent’s “commitment to Israel has not changed” - a relevant group-attribution consideration for the combined post-acquisition entity going forward, though no public evidence identified this session of Palo Alto Networks’ own independent Israel/defense contracting history.70
BDS-1000 Score (V4)
| Domain | I | M | P | V-Domain Score |
|---|---|---|---|---|
| Military | 0.00 | 0.00 | 0.00 | 0.00 |
| Digital | 5.50 | 7.00 | 9.00 | 5.50 |
| Economic | 9.00 | 8.50 | 9.00 | 9.00 |
| Political | 7.00 | 7.00 | 9.00 | 7.00 |
- V_MAX: 9.00 Avg_OTHERS: 4.17
- BRS Score: 819 Tier: A (Extreme)
The V_MAX of 9.00 is set by Economic, driven by CyberArk’s Israeli incorporation, deep and durable R&D investment (Petah Tikva HQ, Beersheba center), Preferred Technology Enterprise tax status, and the ~$2 billion capital-gains windfall to the Israeli Treasury generated by the Palo Alto Networks acquisition - combined with high proximity (P=9.0) reflecting the direct, unmediated nature of this fiscal and structural relationship. Political (7.00) and Digital (5.50) reflect substantial but comparatively less severe political/governance and digital-ecosystem nexus, while Military sits at a documented zero given the absence of any verified direct military-supply relationship. The Tier A (Extreme) classification follows from the scale-free method: Impact (activity type) × Magnitude (scale) × Proximity (directness) computed per domain from evidence-only findings across the four vetted audits, with the overall score combining the maximum domain score with the average of the remaining domains.
Methodology Note
- Scoring is evidence-only, drawn exclusively from the four domain audits (Military, Digital, Economic, Political) underlying this dossier; no claim appears here that is not traceable to those audits.
- Each domain score is scale-free: Impact (I) reflects the type of activity, Magnitude (M) reflects its scale, and Proximity (P) reflects its directness to the Israeli state/military nexus.
- Temporal rule: divested, exited, or superseded operations are mitigated in scoring rather than treated as ongoing exposure; this dossier notes the February 2026 Palo Alto Networks acquisition as a material corporate-status change.
- Entity attribution follows a no-transitive-guilt standard: consortium co-membership (e.g., IC3, IAC3) and executive personnel backgrounds are documented as such, not conflated with direct contractual military supply.
- “No public evidence identified” is used throughout wherever the underlying audits’ checks (OHCHR database, Who Profits, PAX, Al-Haq, Albanese report, SIBAT directories, court records) found nothing.
- Where an operation would independently qualify under both Economic and Political (e.g., settlement or state-fiscal entanglement), dual-counting is permitted per methodology; here, no settlement-specific Economic/Political dual-count applies, as CyberArk’s economic and political nexus is domestic-Israel-based rather than settlement-based.
Counter-Arguments
CyberArk’s strongest documented defence rests on four points established across the audits. First, on the military dimension, the evidence is unambiguous: no verified direct contract, tender, or MOU with IMOD, the IDF, the Israel Prison Service, or the Israel Border Police was identified anywhere in the record, and even the most critical BDS-aligned tracker reviewing the company concluded “no direct military or surveillance applications are publicly documented,” basing its listing on economic/structural rather than direct-supply grounds.10, 27 Second, CyberArk’s core product - privileged access and identity-security software - is general-purpose enterprise IT infrastructure, not a weapons, targeting, biometric, or surveillance system; no public evidence identified of any tactical, mil-spec, or ruggedized product variant, and its US federal certifications (Army Certificate of Networthiness, FedRAMP, NIAP) are standard commercial-government security credentials rather than evidence of an Israeli military relationship.30, 71 Third, major human-rights and BDS-movement investigative bodies - the PAX “companies arming Israel” report, the UN Special Rapporteur’s “economy of genocide” report, Al-Haq’s Business and Human Rights materials, and the OHCHR settlement-business database - do not name CyberArk at all, a significant absence given the depth of those investigations into Israel-linked corporate activity.28, 50, 51, 29 Fourth, when directly challenged over UK public-sector procurement, CyberArk stated it has “no direct interest in or corporate association” with the IDF, and its consortium memberships (IC3, IAC3) are structured under Israel’s civilian Ministry of Economy rather than the Ministry of Defense, oriented toward third-country cyber-defense exports rather than Israeli military end-use.58, 8 These findings do not erase the company’s substantial economic and personnel-based nexus documented above, but they materially bound the scope of the allegation: this is a company with deep fiscal and governance ties to the Israeli state and a leadership pipeline drawn from IDF cyber units, not a documented military supplier.
Footnotes
-
https://www.sec.gov/Archives/edgar/data/1598110/000117891320000737/cybr20f2019.htm ↩ ↩2 ↩3 ↩4 ↩5
-
https://www.timesofisrael.com/in-second-biggest-exit-in-israeli-history-palo-alto-buys-cyberark-for-25-billion/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6
-
https://en.globes.co.il/en/article-cyberark-deal-worth-2b-to-israeli-state-coffers-1001517665 ↩ ↩2 ↩3 ↩4
-
https://palestiniangenocide.org/boycott/companies/cyberark/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6
-
https://www.cyberark.com/resources/blog/our-hearts-are-broken-but-we-will-prevail ↩ ↩2 ↩3 ↩4
-
https://nocamels.com/2020/01/israel-mellanox-cybersecurity-consortium-israel-aerospace-industries/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6
-
https://asianaviation.com/israels-technology-companies-join-forces-for-the-aviation-industry-ministry-of-the-economy-iai-and-leading-cyber-companies-announce-consortium-to-develop-cyber-security-solutions-for-commercial-avia/ ↩ ↩2 ↩3
-
https://palestiniangenocide.org/boycott/companies/cyberark ↩ ↩2 ↩3 ↩4 ↩5 ↩6
-
https://www.sec.gov/Archives/edgar/data/1598110/000117891325000811/zk2532806.htm ↩ ↩2 ↩3 ↩4 ↩5
-
https://www.cyberark.com/company/office-locations/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6
-
https://en.globes.co.il/en/article-700-cyberark-employees-to-lose-jobs-after-25b-exit-1001535229 ↩ ↩2 ↩3 ↩4
-
https://www.timesofisrael.com/israels-cyberark-inks-deal-to-buy-us-startup-for-up-to-175-million/ ↩ ↩2
-
https://en.wikipedia.org/wiki/Jerusalem_Venture_Partners ↩ ↩2 ↩3
-
https://www.dropsitenews.com/p/israel-technology-palo-alto-networks-microsoft-unit-8200 ↩ ↩2
-
https://www.sec.gov/Archives/edgar/data/1598110/000117891320000737/cybr20f2019.htm ↩
-
https://www.cyberark.com/press/cyberark-appoints-omer-grossman-global-chief-information-officer/ ↩ ↩2 ↩3
-
https://www.businesswire.com/news/home/20250915200906/en/CyberArk-Names-Omer-Grossman-Chief-Trust-Officer-and-Head-of-CYBR-Unit-Appoints-Ariel-Pisetzky-as-CIO ↩ ↩2
-
https://www.paloaltonetworks.com/company/press/2026/palo-alto-networks-completes-acquisition-of-cyberark-to-secure-the-ai-era ↩
-
https://en.globes.co.il/en/article-700-cyberark-employees-to-lose-jobs-after-25b-exit-1001535229 ↩ ↩2
-
https://www.timesofisrael.com/cyberark-inaugurates-new-cybersecurity-rd-center-in-beersheba/ ↩ ↩2 ↩3 ↩4 ↩5
-
https://www.globalsecuritymag.com/Ben-Gurion-University-of-the-Negev,20210603,112409.html ↩ ↩2
-
https://www.sec.gov/Archives/edgar/data/1598110/000117891325000811/zk2532806.htm ↩ ↩2 ↩3 ↩4
-
https://www.paloaltonetworks.com/company/press/2026/palo-alto-networks-completes-acquisition-of-cyberark-to-secure-the-ai-era ↩ ↩2
-
https://www.ohchr.org/en/business/bhr-database ; https://www.opensanctions.org/datasets/ps_ohchr_settlement ; https://www.whoprofits.org/companies/all ; https://dontbuyintooccupation.org/wp-content/uploads/2024/11/2024_DBIO-IV_Company-list.pdf ; https://investigate.afsc.org/all-companies?page=0 ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7
-
https://paxforpeace.nl/wp-content/uploads/sites/2/2024/06/The-Companies-Arming-Israel-and-Their-Financiers-June-2024.pdf ↩ ↩2 ↩3
-
https://www.opensanctions.org/datasets/ps_ohchr_settlement ↩ ↩2 ↩3 ↩4
-
https://executivebiz.com/2017/01/carahsoft-adds-cyberark-privileged-account-security-platform-to-army-it-enterprise-contract/ ; https://www.businesswire.com/news/home/20170130005114/en/CyberArk-Now-Available-on-U.S.-Army-ITES-Software-Contract ↩ ↩2 ↩3 ↩4
-
https://www.defesanet.com.br/e_laad2017/noticia/25255/ic3-israeli-cyber-companies-consortium-to-establish-a-national-cyber-center-in-brazil/ ; https://www.israeldefense.co.il/en/node/29005 ; https://www.israeldefense.co.il/en/node/32212 ↩ ↩2
-
https://www.sec.gov/Archives/edgar/data/761238/000117891321000830/R57.htm ↩ ↩2
-
https://americansforbgu.org/cyberark-opens-rd-center-beer-sheva-tech-park/ ↩ ↩2
-
https://www.businesswire.com/news/home/20220512005151/en/CyberArk-Ventures-Launches-with-%2430-Million-Fund-to-Fuel-Innovative-Cybersecurity-Technologies ↩ ↩2
-
https://www.cyberark.com/resources/blog/our-hearts-are-broken-but-we-will-prevail ↩ ↩2
-
https://thetab.com/2024/11/25/students-at-glasgow-caledonian-launch-boycott-of-unis-multi-factor-authentication-system ↩ ↩2 ↩3 ↩4 ↩5
-
https://www.gcustudents.co.uk/thestudentvoice/gcu-should-not-renew-the-contract-with-cyberark ↩
-
https://www.gaudie.co.uk/wpress/index.php/news/2024/11/20/uoa-faces-backlash-over-cyber-ssecurity-contract-with-idf-linked-firm ↩ ↩2 ↩3 ↩4
-
https://www.cyberark.com/press/cyberark-completes-acquisition-of-machine-identity-management-leader-venafi/ ↩ ↩2
-
https://www.cyberark.com/press/cyberark-signs-definitive-agreement-to-acquire-machine-identity-management-leader-venafi-from-thoma-bravo/ ↩ ↩2
-
https://www.calcalistech.com/ctechnews/article/rkxojfmmjl ↩ ↩2
-
https://www.sentinelone.com/press/cyberark-and-sentinelone-team-up-to-enable-step-change-in-endpoint-and-identity-security/ ↩ ↩2
-
https://www.businesswire.com/news/home/20250915200906/en/CyberArk-Names-Omer-Grossman-Chief-Trust-Officer-and-Head-of-CYBR-Unit-Appoints-Ariel-Pisetzky-as-CIO ↩ ↩2
-
https://www.paloaltonetworks.com/company/press/2025/palo-alto-networks-announces-agreement-to-acquire-cyberark - the-identity-security-leader ↩
-
https://en.globes.co.il/en/article-700-cyberark-employees-to-lose-jobs-after-25b-exit-1001535229 ↩
-
https://dontbuyintooccupation.org/wp-content/uploads/2024/11/2024_DBIO-IV_Company-list.pdf ↩
-
https://www.sec.gov/Archives/edgar/data/1327567/000119312525224204/d99065d424b3.htm ↩
-
https://nocamels.com/2024/10/security-firm-wins-prison-service-contract-for-electronic-monitoring/ ↩
-
https://www.dandodiary.com/2026/08/articles/securities-litigation/cybersecurity-vulnerabilities-lead-to-securities-suit-against-israeli-company/ ↩
-
https://www.ohchr.org/en/documents/country-reports/ahrc5923-economy-occupation-economy-genocide-report-special-rapporteur ↩ ↩2
-
http://www.asdsource.com/source_detail/1814/tadiran_spectralink_ltd_-_elisra_group_communications_and_data_links_division.htm ↩
-
https://www.cyberark.com/press/cyberark-appoints-omer-grossman-global-chief-information-officer/ ↩ ↩2
-
https://aws.amazon.com/marketplace/pp/prodview-qu4udrwhy2moo ↩
-
https://aws.amazon.com/blogs/apn/cyberark-launches-saas-identity-security-platform-on-aws-with-support-from-aws-saas-factory ↩
-
https://aws.amazon.com/marketplace/pp/prodview-qu4udrwhy2moo ; https://aws.amazon.com/blogs/apn/cyberark-launches-saas-identity-security-platform-on-aws-with-support-from-aws-saas-factory ↩
-
https://www.inkl.com/news/student-loans-company-slammed-over-public-contract-with-idf-linked-firm ↩
-
https://www.inkl.com/news/student-loans-company-slammed-over-public-contract-with-idf-linked-firm ↩ ↩2 ↩3 ↩4
-
https://www.ohchr.org/en/press-releases/2025/09/un-human-rights-office-updates-database-businesses-involved-israeli ; https://www.ohchr.org/en/business/bhr-database ; https://www.opensanctions.org/datasets/ps_ohchr_settlement ↩
-
https://www.sec.gov/Archives/edgar/data/1598110/000117891325000811/zk2532806.htm ↩ ↩2
-
https://www.linkedin.com/posts/yadin-kaufmann-b208327_very-grateful-to-udi-mokady-and-his-colleagues-activity-7398050426966753280-WCcK ↩
-
https://www.sec.gov/Archives/edgar/data/1598110/000117891325000811/zk2532806.htm ↩
-
https://seekingalpha.com/news/4019170-check-point-cyberark-sentinelone ↩
-
https://www.dropsitenews.com/p/israel-technology-palo-alto-networks-microsoft-unit-8200 ↩
-
https://www.timesofisrael.com/liveblog_entry/palo-alto-ceo-says-firm-still-committed-to-investing-in-israel-even-after-us-israeli-founder-left/ ↩
-
https://www.fedramp.gov/marketplace/products/FR2001619337/ ; https://www.cyberark.com/solutions/government/ ; https://www.cyberark.com/press/cyberark-establishes-public-sector-advisory-board/ ↩











