INDEX / DIRECTORY / CYBERPROOF / DIGITAL

CyberProof DIGITAL

DIGITAL INFRASTRUCTURE AUDIT UPDATED 2026-10-20
Digital Score 0.00 /10 C CyberProof - Complicity Index 592
Digital 0.00

Evidence-only forensic audit. Scoring happens downstream - see the main dossier for the composite assessment.

Forensic audits like this are reader-funded - no sponsors, no ads. Support OpenIntel →

CyberProof is a UST cybersecurity business with a current Tel Aviv office and a public operating model built around cloud-first managed security, partner integrations and its CyberProof Defense Center platform.1, 2 Current corporate pages were checked on 20 October 2026; where a page has no publication date, “current (2026)” below means that live snapshot. Findings distinguish CyberProof’s own corporate relationships from technology it deploys for customers and from anonymous customer case studies.

Enterprise Technology Stack & Vendor Relationships

Technology partners and origin checks. CyberProof’s current (2026) partner page lists SentinelOne, XM Cyber, Armis, Radiflow, Claroty, Wiz and Palo Alto Networks among its technology partners.3 The relationship depth varies. [pre-2020] CyberArk launched outside Tel Aviv in 1999, as recounted by CyberArk in 2024; CyberArk is explicitly named in CyberProof’s current (2026) IAM pre-integration list.4, 5 [pre-2020] Claroty’s 2017 announcement states that it moved its headquarters from Tel Aviv to New York; CyberProof currently (2026) names Claroty as an OT partner, and a current anonymized industrial-manufacturer case study documents Claroty sensors feeding telemetry through Claroty EMC and Microsoft Sentinel to CyberProof analysts.6, 7, 8 SentinelOne’s current (2026) company page describes Tel Aviv as one of its founding roots and a core R&D hub; CyberProof’s evidence establishes a current partner listing but not a specific deployment or license volume.3, 9

Source-support correction - 20 October 2026. The historical CyberArk statement in the preceding paragraph (“CyberArk launched outside Tel Aviv in 1999, as recounted by CyberArk in 2024”) is withdrawn as a verified finding. The former CyberArk anniversary source now resolves to generic landing content, and no independently retrievable primary source reviewed in this correction substantiated the exact combined attribution, date and “outside Tel Aviv” launch geography. CyberProof’s current IAM page independently continues to list CyberArk among products pre-integrated with its IDaaS platform; that retained relationship is the only proposition supported by 5.

CyberProof’s current (2026) materials show both a Wiz partner listing and an anonymized healthcare-technology deployment using Wiz with CyberProof-managed cloud security.3, 10 The case study establishes a customer deployment, not CyberProof’s own internal enterprise license. Palo Alto Networks is also on the current (2026) partner page; Palo Alto Networks’ current corporate FAQ says it is headquartered in California and incorporated in Delaware and identifies Nir Zuk among its founders, so this audit records the partnership without treating the company itself as Israel-domiciled solely because of founder background.3, 11

Historical Israel technology transactions. [pre-2020] In 2018, UST’s investment in Israel-based XM Cyber expressly included a strategic sales and integration agreement with CyberProof; XM Cyber is still present on CyberProof’s current partner page, confirming at least a current partner-list relationship, while the status of UST’s 2018 equity stake was not established in the consulted sources.12, 3 [pre-2020] Also in 2018, UST acquired Israel-based BISEC through CyberProof for about NIS 20 million; BISEC technology was to be offered through CyberProof, and the report described a CyberProof Tel Aviv development/service center.13 CyberProof’s current (2026) OT page lists Radiflow as an OT technology partner.6

Named-vendor checks and scale of dependency. No public evidence identified in the consulted CyberProof materials of a direct Check Point, NICE or Verint relationship. The current partner page did not show those names when checked in October 2026, while SentinelOne, Wiz and Palo Alto Networks were present.3 The evidence supports partner/integration and customer-deployment relationships, but does not disclose CyberProof’s complete internal software inventory or show that any Israeli-origin product is indispensable to CyberProof’s own corporate infrastructure. Current (2026) Wiz and Claroty case studies show material integration in particular customer environments; they do not establish group-wide CyberProof dependency.10, 7

Procurement and integrators. CyberProof has a 2024 strategic Google Cloud partnership around Chronicle/Google SecOps and a current (2026) Microsoft MXDR service integrating CDC with Microsoft Sentinel and Defender.14, 15 no public evidence identified that these integrators mandate an Israeli-origin product for CyberProof, or that their separate contracts with third parties transfer to CyberProof.

Surveillance, Biometrics & Retail Technology

Facial recognition and biometrics. CyberProof’s current (2026) IAM page states that its team implements advanced identity-verification technologies including biometrics, multi-factor authentication and risk-based authentication.4 The source does not identify facial recognition, gait analysis, Trigo, BriefCam, AnyVision/Oosto or Trax, and no public evidence identified of CyberProof deploying those technologies for retail surveillance, loss prevention or frictionless checkout in the consulted IAM and partner materials.4, 3

Predictive analytics and monitoring. CyberProof’s current (2026) OT service profiles assets, communications and processes to create behavioral baselines for cyber-anomaly detection, while its current partner ecosystem includes OT and endpoint-security products.6, 3 These materials concern network/asset cybersecurity. No public evidence identified of CyberProof providing predictive policing, sentiment analysis, social-media monitoring or workforce-surveillance systems in the consulted service and partner materials.6, 3

Third-party deployment. Current (2026) CyberProof customer materials document security telemetry reaching CyberProof through third-party products: Claroty telemetry is forwarded through Claroty EMC and Microsoft Sentinel, while an anonymized U.S. manufacturer uses an Armis integration across 60 facilities and more than 5,000 endpoints.7, 16 These are IT/OT security deployments, not evidence of facial-recognition or population-surveillance use. No public evidence identified that the surveillance technologies named above reach CyberProof indirectly through a bundled managed-service platform in the consulted customer-deployment records.16, 7

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Data centers and Israeli processing exposure. CyberProof currently (2026) lists a Tel Aviv office, and 2024 reporting described offices and security-operations centers in Israel, India, Spain, Singapore and the United States, with about 85 Israel-based employees at that time.2, 17 no public evidence identified that CyberProof owns, leases or co-locates its own data center in Israel in the consulted office, workforce and public-cloud materials; the public evidence establishes office/SOC operations instead.2, 17, 18

CyberProof’s 2022 service catalog says its SaaS-based SOC platform continuously collects and aggregates security-event logs and supports long-term cloud storage, while its current (2026) Microsoft MXDR service routes higher-value security-event data to Sentinel/Defender and lower-value data to searchable long-term cloud storage using Azure Data Explorer.19, 15 Neither source specifies that this data is stored in Israel. An undated UST case-study page consulted in 2026 states that an anonymous multinational chemical company selected CyberProof for a five-year next-generation SOC engagement with services delivered from Spain, Israel and India.20 That establishes Israeli service-delivery involvement for that engagement, but does not by itself establish Israeli data residency or the precise legal route for customer data. The consulted catalog and case-study material does not specify whether Israel-based delivery personnel access raw customer telemetry, derived alerts or only operational outputs, so the existence and extent of any customer-data exposure to Israeli jurisdiction could not be established from public evidence.19, 20

Government cloud contracts. UST, CyberProof’s parent, has a current (2026) G-Cloud 14 listing for Cloud & Application Security; the listing describes Microsoft/Google cloud infrastructure and provides a CyberProof sales link.18 This is evidence that the service is available through a UK public-sector framework, not evidence that any government entity bought it.

No public evidence identified of CyberProof participating in Project Nimbus or another Israeli government cloud program. The 2025 A/HRC/59/23 report describes Project Nimbus as a Google/Amazon contract and separately discusses Microsoft cloud support; it does not identify CyberProof.21 CyberProof’s Google Cloud partnership therefore does not establish Nimbus participation or an Israeli-state customer.14, 21

Data sovereignty and resilience for Israeli state bodies. No public evidence identified of CyberProof marketing or contracting a data-sovereignty, residency or resilience service specifically to an Israeli state institution or military body in the consulted service, cloud-partnership and catalog materials.15, 14, 19 The public materials establish general enterprise cloud-security and resilience capabilities, not a named Israeli-state engagement.15, 14, 19

Defence, Intelligence & Security Sector Technology Relationships

Military and intelligence contracts. CyberProof President Yuval Wollman’s current (2026) corporate biography states that he previously spent a decade in the Israeli public sector, ending as Director General of the Intelligence Ministry, and earlier served as an officer in IDF Unit 8200.22 These are historical biographical facts; they do not establish a current state role, direction or contract.

No public evidence identified of a verified CyberProof contract, service agreement or partnership with the Israeli Ministry of Defence, IDF, Israeli intelligence agencies, police or another Israeli security body. The 2025 OHCHR settlement-business database contains no text match for CyberProof or UST in the version consulted, and the 2025 A/HRC/59/23 report likewise contains no CyberProof or UST match.23, 21 Those absences are limited by each document’s scope and are not proof that no relationship exists.

Dual-use technology provision. CyberProof’s 2022 service catalog and current (2026) OT page document general-purpose MDR, threat intelligence, DFIR, OT/ICS monitoring and cloud-security services, with CDC integrating customer SIEM, EDR and related security tools.19, 6 no public evidence identified that CyberProof’s general-purpose technology has been deployed by Israeli military, intelligence or law-enforcement bodies in Israel or the occupied territories. The XM Cyber relationship and current Radiflow OT partnership establish enterprise cybersecurity relationships, not Israeli-state customer identity.12, 6

Offensive cyber and digital weapons. No public evidence identified of CyberProof developing, selling or maintaining zero-day exploit packages, spyware or digital weapons for Israeli state actors in the consulted catalog and service materials.19 CyberProof’s 2022 public service catalog describes defensive monitoring, investigation, response, threat hunting and forensics; these capabilities do not by themselves establish offensive state-cyber provision.19

AI, Algorithmic & Autonomous Systems

AI/ML provision. CyberProof’s November 2025 Agentic AI launch describes AI agents for threat intelligence, threat hunting, detection engineering, security monitoring and exposure management with human validation of critical decisions.24 Its 2022 catalog also described SeeMo as a virtual analyst that enriches alerts, conducts investigations and executes digital playbooks.19 [pre-2020] The 2018 BISEC acquisition was reported as part of CyberProof’s machine-learning/AI security development and brought BISEC’s automated virtual cyber-expert technology into CyberProof’s offering.13

No public evidence identified of CyberProof providing AI or machine-learning systems to an Israeli state, military or security body in the consulted CyberProof AI materials and UN technology report.24, 21 no public evidence identified that CyberProof models were trained on civilian population data, intercepted communications or surveillance-derived datasets from Israel or the occupied territories in those consulted materials.24, 21

Autonomous systems and lethality. No public evidence identified of CyberProof providing autonomous target generation, fire-control, kill-chain automation or autonomous tracking systems to Israeli forces. A/HRC/59/23 discusses purpose-built military AI systems and other vendors, but does not identify CyberProof.21 CyberProof’s autonomous/agentic terminology in the cited material concerns enterprise cybersecurity investigation and response, whose designed output is digital-security operations rather than kinetic targeting.24

Technology Ecosystem & R&D Footprint

Israeli R&D and engineering footprint. [pre-2020] In 2018, CyberProof was reported to operate a Tel Aviv development and service center and to plan recruitment of dozens of developers and cyber experts in Israel.13 Continuity is supported by CyberProof’s current (2026) Tel Aviv office and CEO biography describing development using Israel-based talent, plus 2024 reporting of about 85 Israel-based employees and an Israeli SOC.2, 1, 17 CyberProof President Yuval Wollman’s current (2026) biography also says he leads UST Innovation Israel.22

Acquisitions and investments. [pre-2020] The documented Israel-linked transactions in the researched corpus are the 2018 BISEC acquisition through CyberProof and the 2018 UST investment in Israel-based XM Cyber tied to a CyberProof sales/integration agreement.13, 12 Current (2026) partner materials continue to list XM Cyber.3 no public evidence identified of another CyberProof acquisition of an Israeli-origin company or a CyberProof investment in an Israeli venture fund in the consulted transaction and current-partner sources.12, 13, 3

Patent, academic and principal-investment checks. No public evidence identified of a CyberProof patent-license or co-development arrangement with Technion, Hebrew University or Weizmann Institute in the consulted corporate, leadership and transaction materials.1, 22, 12, 13 no public evidence identified in the consulted leadership and transaction sources of a current CyberProof controlling principal’s personal equity stake in NSO, Cellebrite, Carbyne, Oosto, Wiz, Check Point, SentinelOne, Verint, NICE or another named surveillance/military-tech company.22, 12 The XM Cyber evidence is a UST corporate investment, not a personal investment by a CyberProof executive.12

Civil Society Scrutiny & Regulatory History

UN, NGO and academic scrutiny. The 2025 OHCHR settlement-business database is expressly limited to specified settlement-related activities and says the update covers only a portion of enterprises under review; no CyberProof or UST text match was found in the consulted document.23 A/HRC/59/23 discusses surveillance, cloud infrastructure, Project Nimbus and named technology companies but does not identify CyberProof or UST.21 An October 2026 targeted search of the Who Profits company database and associated web results did not identify a CyberProof-specific company record; the database itself covers companies Who Profits researches for occupation-related corporate involvement.25 These researched absences do not establish that no relationship exists outside those sources or mandates.

Boycott and divestment campaigns. No public evidence identified in the researched UN, Who Profits and target-specific web corpus of an organized boycott, divestment or sanctions campaign specifically targeting CyberProof for its technology provision.23, 21, 25 No documented CyberProof response to such a campaign was identified in that corpus.23, 21, 25

Regulatory and legal actions. No public evidence identified in the consulted regulatory/procurement and UN records of a regulatory inquiry, export-control action, sanctions investigation or legal challenge specifically concerning CyberProof technology sales or services to Israeli state entities.18, 23, 21 The UK G-Cloud listing is a procurement-framework offering and does not establish a public-sector purchase, award or regulatory finding.18

Settlement nexus and post-2024 continuation. CyberProof’s commercial operations and technology development in Israel continued after 19 July 2024, as shown by the 2024 Israel workforce/SOC reporting and subsequent November 2025 agentic-AI release, while partner and office pages remained live when checked in October 2026.17, 24, 2, 3 no public evidence identified that a CyberProof technology provision to an Israeli state body or settlement continued after 19 July 2024 or after November 2024, because no such underlying state/settlement provision was verified in the researched corpus.23, 25 This is an absence-of-evidence finding, not proof that no relationship exists.

Footnotes

  1. https://www.cyberproof.com/about-us/ ↩ ↩2 ↩3

  2. https://www.cyberproof.com/contact-us/ ↩ ↩2 ↩3 ↩4 ↩5

  3. https://www.cyberproof.com/partners/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12

  4. https://www.cyberproof.com/security-services/iam/ ↩ ↩2 ↩3

  5. Historical-claim withdrawal: https://www.cyberproof.com/security-services/iam/ is cited solely for CyberProof’s current IAM pre-integration relationship with CyberArk; it does not support CyberArk founding history or the withdrawn “outside Tel Aviv in 1999” statement. The former CyberArk anniversary source now resolves to generic landing content and is excluded from evidentiary use. ↩ ↩2

  6. https://www.cyberproof.com/security-services/ot-iot-security-monitoring/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  7. https://www.cyberproof.com/case-studies/claroty-manufacturing/ ↩ ↩2 ↩3 ↩4

  8. https://claroty.com/press-releases/claroty-establishes-global-headquarters-in-new-york ↩

  9. https://www.sentinelone.com/company/ ↩

  10. https://www.cyberproof.com/case-studies/healthcare-cspm-wiz/ ↩ ↩2

  11. https://www2.paloaltonetworks.com/cyberpedia/palo-alto-networks-global-identity-operations-faq ↩

  12. https://xmcyber.com/press-release/xm-cyber-closes-22-million-in-series-a-funding/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7

  13. https://www.calcalistech.com/articles/0%2C7340%2CL-3729236%2C00.html ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  14. https://www.cyberproof.com/blog/cyberproof-announces-strategic-partnership-with-google-cloud/ ↩ ↩2 ↩3 ↩4

  15. https://www.cyberproof.com/security-services/managed-xdr-for-microsoft/ ↩ ↩2 ↩3 ↩4

  16. https://www.cyberproof.com/case-studies/manufacturing/ ↩ ↩2

  17. https://www.calcalistech.com/ctechnews/article/h1nrv0odr ↩ ↩2 ↩3 ↩4

  18. https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/796718915977992 ↩ ↩2 ↩3 ↩4

  19. https://go.cyberproof.com/hubfs/CyberProof_Service%20Catalog_2022_01.pdf ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8

  20. https://www.ust.com/en/insights/ust-helps-global-chemical-company-enhance-it-ot-security-with-comprehensive-services-support ↩ ↩2

  21. https://documents.un.org/api/symbol/access?l=en&s=A/HRC/59/23&t=pdf ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10

  22. https://www.cyberproof.com/author/yuval-wollman/ ↩ ↩2 ↩3 ↩4

  23. https://documents.un.org/api/symbol/access?l=en&s=A/HRC/60/19&t=pdf ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  24. https://www.prnewswire.com/news-releases/cyberproof-launches-new-agentic-ai-capabilities-to-deliver-high-accuracy-human-augmented-security-operations-302618401.html ↩ ↩2 ↩3 ↩4 ↩5

  25. https://www.whoprofits.org/companies ↩ ↩2 ↩3 ↩4