BDS-1000 Dossier: ExpressVPN (06-main-dossier.md)

Key Findings

• Economic: Kape Technologies acquired Webselenese Ltd. (an Israeli consumer-tech media company) for $149.1M, representing the largest single capital deployment by the ExpressVPN parent group into an Israeli-domiciled entity.¹²³
• R&D: ExpressVPN’s principal R&D centre is located in Tel Aviv with approximately 50 staff, making Israel the de facto engineering hub for the product.⁴⁵
• Political: Ultimate owner Teddy Sagi made a personal donation of NIS 1 million to an IDF soldiers’ support fund in November 2023, a documented wartime gesture by the controlling beneficial owner.⁶
• Not found: No military contracts, weapons procurement, or defence-industrial relationships identified; Military and Digital both score 0.00.

Target Profile

Executive Summary

ExpressVPN is a consumer and small-business VPN service founded in 2009 in the British Virgin Islands, acquired in September 2021 by Kape Technologies PLC for approximately $936 million.⁷⁸ The company provides privacy software with a global server network spanning 160 locations in 94 countries, including Israel.⁹ The acquisition placed ExpressVPN under the ownership of a corporate group whose lineage traces to Crossrider, an Israeli company founded in Tel Aviv in 2011, and whose ultimate beneficial owner is Teddy Sagi, an Israeli-Cypriot billionaire.⁴¹⁰¹¹

The strongest documented vectors connecting ExpressVPN to Israel-Palestine concerns are economic and structural rather than operational. Kape Technologies maintains a development centre in Tel Aviv (Azrieli Sarona Tower, approximately 50 staff) and acquired the Israeli-incorporated company Webselenese Ltd. in March 2021 for $149.1 million - Kape’s largest acquisition at that point - which operates the consumer review platforms vpnMentor and WizCase from a Tel Aviv office.¹²³ Kape’s Israeli subsidiaries generate taxable economic activity within Israel, as evidenced by Israeli corporate-tax prepayments recorded in Kape’s 2022 results.¹² The ultimate beneficial owner, Teddy Sagi, made personal donations to IDF-linked causes: a $3 million contribution to Friends of the IDF (FIDF) in 2016 (by Sagi’s parents) and a NIS 1 million personal donation in November 2023 to a fund providing transport for IDF soldiers on leave during the Gaza conflict.¹³⁶¹⁴

What is not supported by the evidence record: no public evidence identifies any military contract, defence procurement relationship, or dual-use technology supply between ExpressVPN, Kape Technologies, or Crossrider and the Israeli Ministry of Defense, IDF, or any Israeli intelligence agency.¹⁵¹⁶ No verified supply chain integration with Israeli defence primes (Elbit Systems, IAI, Rafael) was identified; a circulating claim that the MISP Galaxy surveillance-vendor database lists Crossrider clients as including Elbit and Rafael was not substantiated on direct inspection of the database.¹⁷ No operations were identified within Israeli settlements in the West Bank or other occupied territories.⁵ ExpressVPN and Kape are not named in the UN OHCHR settlements database, the BDS National Committee’s priority-targeting guide, or any Who Profits or Corporate Occupation profile.^18192021 The Military and Digital domains record zero evidence of military or digital-infrastructure involvement, reflecting the absence of documented supply relationships in those categories.

The resulting BRS 403 places ExpressVPN in Tier C (High), driven primarily by the Economic score of 5.89 - reflecting the scale of capital invested in Israeli-domiciled operating entities and the ongoing Israeli economic footprint - with a Political contribution of 2.78 reflecting documented leadership IDF backgrounds and personal owner philanthropy directed to military-welfare causes.

Timeline of Relevant Events

Corporate Overview

ExpressVPN operates as a brand within the Kape Technologies group. The legal entity Express Technologies Ltd. is incorporated in the British Virgin Islands and was not founded in Israel.⁷²² ExpressVPN operated independently from 2009 until its September 2021 acquisition by Kape.⁷

Kape Technologies originated as Crossrider, an Israeli browser-extension and adtech platform founded in Tel Aviv in 2011, acquired by Teddy Sagi in December 2012 for approximately $37 million, listed on London’s AIM in 2014, and rebranded as Kape Technologies in 2018.⁴¹⁰²³ Crossrider’s platform was widely characterised in reporting as becoming “increasingly utilized by malware and adware developers” before the rebrand toward consumer privacy software.²³

Kape’s product portfolio includes ExpressVPN, CyberGhost VPN (Romanian-origin, acquired 2017), Private Internet Access (US-origin, acquired 2019), ZenMate, and Intego, alongside VPN review media properties.³⁰³¹

Israeli entities within the group:

• Kape Technologies R&D centre - Tel Aviv (Azrieli Sarona Tower, LABS 91-95), approximately 50 development staff.⁴⁵
• Webselenese Ltd. - Israeli company (registration 514414127), Tel Aviv, acquired March 2021 for $149.1 million; operates vpnMentor.com and WizCase.com; approximately 29 employees at acquisition.¹²³

Ownership chain: Express Technologies Ltd. (BVI) → Kape Technologies plc (formerly AIM-listed; delisted May 2023; now private) → Unikmind Holdings Ltd. (Isle of Man; incorporated BVI 20 March 2014; re-domiciled Isle of Man 15 January 2019) → Teddy Sagi (ultimate beneficial owner; Israeli-Cypriot national).^78322811

No Israeli state ownership was identified in any regulatory filing; no golden shares, government-linked shares, or sovereign-wealth-fund stakes were documented for Kape or ExpressVPN.¹¹

Domain Summaries

Military: Military

Mechanism of Involvement

No public evidence was identified of any contract, tender, framework agreement, or memorandum of understanding between ExpressVPN, Kape Technologies, or Crossrider and the Israeli Ministry of Defense, IDF, Israel Prison Service, Israel Border Police, or any other Israeli state security or intelligence body.¹⁵¹⁶ The acquisition of ExpressVPN by Kape was covered in Israeli and international business press as a consumer cybersecurity transaction with no defence, military, or IDF dimension recorded.^15333416 Israel Defense, an Israeli defence-sector outlet, covered the deal solely as commercial high-tech M&A and described Kape as a “supplier of cybersecurity and internet privacy software,” not a defence contractor.¹⁶

No public evidence was identified of ExpressVPN, Kape, or Crossrider appearing in SIBAT (Israel’s defence-export directorate) listings, Ministry of Defense procurement registries, or defence exhibitions (DSEI, Eurosatory).³⁵³⁶ No ruggedised, tactical, mil-spec, or defence-grade product variant was identified for any military or security end-user.³⁷ No munitions, weapons systems, strategic platforms, logistical sustainment contracts, or heavy-machinery operations were identified.³⁴³⁷

Personnel backgrounds - documented in civil-society and investigative reporting - constitute the primary military-adjacent finding: Koby Menachemi (Crossrider co-founder) is reported to have served as a developer in IDF Unit 8200 (signals intelligence); Ido Erlichman (Kape Group CEO 2016–2023) served as a captain in IDF Duvdevan (undercover counter-terrorism unit) and co-authored a book about that service; Liron Peer (head of accounting) is reported to have served three years in Unit 8200.³⁸³⁹⁴⁰ These are biographical facts about individuals’ prior military service; the MintPress News investigation framing these as a connection to ExpressVPN notes that the concern arises “primarily through personnel backgrounds and ownership, not direct military contracts.”³⁸

Owner philanthropy: Teddy Sagi’s documented personal donations to IDF-linked causes - $3 million to Friends of the IDF (2016, by his parents) and NIS 1 million to the “Returning Soldiers” initiative (November 2023) - are personal acts by the ultimate beneficial owner, not corporate acts of ExpressVPN or Kape.^4142614

Daniel Gericke matter: The one documented regulatory action involving ExpressVPN personnel in an export-control context concerns Daniel Gericke (former CIO) and his prior work on the UAE’s Project Raven programme, resolved with a US DOJ deferred prosecution agreement in September 2021. This concerns the UAE, not Israel, and alleges no wrongdoing by ExpressVPN or Kape as corporate entities.^25264344

Counter-Arguments and Evidence Limits

ExpressVPN and Kape’s strongest defence rests on the complete absence of any documented military supply relationship. The company is a consumer privacy-software provider whose products - standard VPN applications - have no documented tactical, mil-spec, or defence-grade variant.³⁷ No procurement record, corporate filing, or NGO investigation places any ExpressVPN or Kape product in an IDF supply chain.¹⁵³⁴ The MISP Galaxy claim of Crossrider supplying Elbit Systems and Rafael was not substantiated on direct database inspection.¹⁷

The personnel IDF-background concern is mitigated by the fact that these individuals’ military service predates their involvement with Kape/ExpressVPN by years or decades, and no primary-source corroboration was obtained for the Unit 8200 attribution for Menachemi specifically.⁴⁰⁴⁵ Erlichman’s Duvdevan service is documented in Calcalist/CTech reporting, but his role at Kape was as a commercial CEO, not in any military capacity.³⁹ Personal owner donations to IDF-welfare causes are legally permissible philanthropic acts by a private individual and do not constitute defence procurement.

The Daniel Gericke matter is legally and factually separate from any Israeli nexus; it concerns UAE intelligence operations and US export-control law, and ExpressVPN’s retention of Gericke - after its own review - has not resulted in any regulatory finding of corporate wrongdoing.⁴⁴

Named Entities and Evidence Map

Digital: Digital

Mechanism of Involvement

No public evidence was identified of ExpressVPN or Kape Technologies holding verified licensing, subscription, or direct integration relationships with any Israeli-origin enterprise technology vendor - including Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, Claroty, or Palo Alto Networks.³⁰ No Israeli-origin audit firm or security vendor is named in ExpressVPN’s published security audit disclosures (KPMG, PwC, Cure53).⁴⁶⁴⁷⁴⁸ ExpressVPN’s proprietary Lightway VPN protocol is developed entirely in-house and open-sourced; no Israeli-origin third-party technology contribution was identified.⁴⁹

ExpressVPN operates a global VPN server network spanning 160 locations in 94 countries; Israel is listed as an available VPN server location, meaning the company operates or leases VPN endpoint infrastructure within Israel for the purpose of providing Israeli IP addresses to subscribers.⁹ This is consistent with ExpressVPN’s standard colocation model; no Israeli-specific data-centre ownership or separately disclosed large-scale colocation agreement was identified.⁵⁰⁵¹ The identity of Israeli colocation providers for ExpressVPN’s Israeli nodes represents an unresolved evidence gap.⁵⁰

ExpressVPN’s TrustedServer architecture runs servers entirely on RAM with no hard-disk writes, limiting data-residency risk at any server location including Israeli nodes.⁵¹ No participation in Project Nimbus or any Israeli state-backed cloud programme was identified; publicly reported Project Nimbus contractors are Google and Amazon.³⁰ No use of Israeli-origin facial recognition, biometric identification, predictive policing, or workforce surveillance technologies was identified.³⁰ No provision of AI, machine learning, computer vision, or autonomous decision-support systems to Israeli state or military bodies was identified.³⁰

Kape Technologies maintains engineering and R&D personnel in Israel consistent with its founding history as Crossrider (Tel Aviv, 2012); job listings show ongoing Israeli engineering roles across 2022–2024 in software development and product functions.³⁰ No dedicated Israeli R&D facility focused on defence, intelligence tooling, or dual-use systems was publicly identified; the R&D focus is general consumer privacy software.³⁰

Counter-Arguments and Evidence Limits

ExpressVPN’s strongest digital-domain defence is the absence of any documented technology supply relationship with Israeli state or military bodies. The company’s security architecture (TrustedServer, RAM-only servers) and its published independent audit programme (KPMG, PwC, Cure53) represent a documented commitment to privacy and security standards that is materially inconsistent with surveillance-tool provision to state actors.^51464748 The VPN server node in Israel is a standard commercial colocation arrangement providing consumer privacy services, not a state infrastructure relationship.

The evidence gap regarding Israeli colocation providers for ExpressVPN’s Israeli VPN nodes is a limitation of public-source research; it does not constitute positive evidence of a state relationship.⁵⁰ Similarly, Kape’s Israeli R&D presence, while documented, is focused on consumer privacy software with no identified dual-use or defence research component.³⁰

Named Entities and Evidence Map

Economic: Economic

Mechanism of Involvement

ExpressVPN is a digital VPN software and subscription-services business with no physical-goods supply chain; the categories of Israeli agricultural and physical-goods exporters relevant to consumer-goods targets are inapplicable.⁷ The economic nexus operates through three documented channels:

Channel 1 - Israeli-domiciled operating entities. Kape Technologies maintains a research-and-development centre in Tel Aviv (Azrieli Sarona Tower) reported at approximately 50 development staff.⁴⁵ In March 2021, Kape acquired Webselenese Ltd. (Israeli company registration 514414127, Tel Aviv) for $149.1 million - $116.6 million in cash and $32.5 million in new shares - the largest acquisition in Kape’s history at that point.¹²³ Webselenese employed approximately 29 people in its Tel Aviv office at acquisition and operates the consumer review platforms vpnMentor.com and WizCase.com.²³ Because these review platforms recommend VPN products that are Kape-owned (including ExpressVPN), the structure routes affiliate/customer-acquisition revenue through an Israeli-incorporated subsidiary; this vertical integration and the resulting conflict of interest have been documented by independent security researchers and trade press.⁵²⁵³⁵⁴

Channel 2 - Israeli tax contribution. Kape’s 2022 annual results recorded tax paid of $6.3 million (2021: $3.3 million), with the increase attributed mainly to Israeli tax prepayments by group subsidiaries, indicating that Israeli-domiciled subsidiaries within the Kape group generate taxable economic activity within Israel.¹²

Channel 3 - Owner philanthropy directed to Israeli military-welfare causes. In 2016, the parents of Teddy Sagi donated $3 million to Friends of the IDF (FIDF) at a Los Angeles gala.¹³ In November 2023, Teddy Sagi personally donated NIS 1 million to the “Returning Soldiers” initiative associated with singer Omer Adam, funding taxi transport for IDF soldiers returning home on leave during the Gaza conflict; the donation is dated 19 November 2023 and confirmed as a personal donation by Sagi.⁵⁵⁶ These are donations by named individuals; the 2016 gift is attributed to Sagi’s parents, not to Sagi personally.

No evidence was identified of ExpressVPN, Kape, or Unikmind holding Israeli sovereign bonds, Israeli-domiciled equities, or Israel-focused investment funds as disclosed portfolio assets.⁵⁶ No evidence of Israeli government grants, Israel Innovation Authority funding, or preferential tax status (e.g. “Approved Enterprise”) was identified.⁵⁶

Counter-Arguments and Evidence Limits

ExpressVPN and Kape’s economic defence rests on several grounds. ExpressVPN itself was not founded in Israel and has no Israeli founding heritage; it operated independently from 2009 until its 2021 acquisition.⁷²² The economic nexus runs through the parent group (Kape) rather than the ExpressVPN brand specifically. The Webselenese acquisition, while substantial ($149.1 million), is a commercial investment in a consumer media and affiliate-marketing business - not a defence, security, or dual-use technology company.¹²³ The conflict of interest arising from Kape-owned review platforms recommending Kape-owned VPN products is a consumer-protection and market-integrity concern, not a military or settlement nexus.

The Israeli R&D presence (~50 staff) and Webselenese (~29 staff) together represent a modest operational footprint within a global technology group; the proportion of Kape’s total workforce in Israel is not publicly disclosed and may be relatively small.⁴²³ The Israeli tax contributions documented are advance corporate-tax payments on subsidiary earnings - a standard consequence of operating in a high-tax jurisdiction - and do not represent preferential treatment or state-linked economic benefit.

Teddy Sagi’s personal donations to IDF-welfare causes are private philanthropic acts by a named individual; they are not corporate acts of ExpressVPN or Kape, and the 2016 FIDF donation is attributed to Sagi’s parents, not to Sagi personally.^1355614

Named Entities and Evidence Map

Political: Political

Mechanism of Involvement

No public evidence was identified of any named, dated corporate statement by ExpressVPN or Kape Technologies addressing the 7 October 2023 Hamas attack, subsequent Israeli military operations in Gaza, or the Israel-Palestine conflict as a geopolitical matter.⁵⁷ ExpressVPN’s “Rights Center” addresses censorship circumvention and surveillance in general terms, carries Ukrainian-language guidance for conflict zones, and references support for Ukrainian refugees, but contains no content specific to Israel, Gaza, Palestine, or documented Gaza internet blackouts.⁵⁷ Following Russia’s February 2022 invasion of Ukraine, ExpressVPN published a named blog interview (6 April 2023) featuring a partnership with a pro-bono legal platform for Ukrainian refugees; no comparable statement, free-service commitment, or NGO partnership relating to Gaza or Palestinian digital-rights organisations was identified.⁵⁸

Operations in occupied territories: No evidence was identified of ExpressVPN or Kape operating server infrastructure, offices, or service contracts within Israeli settlements in the West Bank or other internationally recognised occupied territories. Kape’s documented Israeli operational footprint is at Azrieli Sarona Tower, Tel Aviv - within the internationally recognised State of Israel.⁵⁵⁹ No evidence was identified of ExpressVPN or Kape in the UN OHCHR settlements database (which listed 158 enterprises in its September 2025 update), the Who Profits database, or the Corporate Occupation database.¹⁸¹⁹

Leadership IDF backgrounds: Ido Erlichman’s service as a captain in IDF Duvdevan and his co-authorship of a book about that service are documented in Calcalist/CTech reporting.³⁹ Koby Menachemi’s reported IDF Unit 8200 service appears in secondary and activist sources and was not independently corroborated at primary-source level.⁴⁰⁴⁵ No primary-source corroboration (e.g. first-party interview or named filing) of Menachemi’s specific unit affiliation was identified.

Owner philanthropy: Teddy Sagi’s personal donations to IDF-linked causes are documented above under Economic and are recorded here as political-nexus items: NIS 1 million to the “Returning Soldiers” initiative (November 2023) and $3 million to IDF scholarship programmes (2019, at an event at LABS Azrieli Sarona, Tel Aviv, with FIDF and Association for the Wellbeing of Israeli Soldiers among involved bodies).⁶¹⁴

Consumer boycott campaigns: The Boycat app/blog, the Masjid Al-Aqsa boycott page, and the independent is-boycott.com tracker all flag ExpressVPN on ownership and IDF-donation grounds.⁴⁰³¹⁶⁰ Critically, ExpressVPN and Kape are not named in the BDS National Committee’s “Guide to BDS Boycott & Pressure Corporate Priority Targeting” (December 2024) - whose targets include Chevron, Intel, Dell, Siemens, HP, Microsoft, Carrefour, AXA, Reebok, Disney+, SodaStream, and RE/MAX - nor on the BNC’s “What to Boycott” page.²⁰²¹

Corporate governance: Kape was taken private in May 2023, eliminating prior AIM disclosure obligations; no golden shares, state shareholdings, or government equity stakes were identified in any regulatory filing.¹¹ No lobbying registrations in US (LDA/FARA), UK, or EU transparency registers relating to Israel-Palestine policy or BDS legislation were identified for ExpressVPN or Kape.⁶⁰

Counter-Arguments and Evidence Limits

ExpressVPN and Kape’s strongest political-domain defence rests on the absence of any corporate act - as opposed to individual personnel backgrounds or owner philanthropy - that engages with the Israel-Palestine conflict. No corporate statement, policy position, advocacy action, or governance instrument relating to the conflict was identified.⁵⁷ The company’s comparative responsiveness (Ukraine vs. Gaza) reflects editorial and operational decisions but does not constitute a positive act of political alignment with the Israeli state.

The IDF-background concerns regarding Erlichman and Menachemi are biographical facts about individuals’ prior military service that predates their commercial roles at Kape/ExpressVPN by years or decades; Erlichman’s service was documented in commercial press (Calcalist/CTech) rather than in a context suggesting ongoing military affiliation.³⁹⁴⁰ No primary-source corroboration was obtained for Menachemi’s specific unit affiliation.⁴⁰⁴⁵

Teddy Sagi’s personal donations to IDF-welfare causes are private philanthropic acts by a named individual; they are not corporate acts of ExpressVPN or Kape.⁶¹⁴ The November 2023 donation was made during an active conflict and was framed as supporting soldiers on leave; the absence of any stated political objective distinguishes it from advocacy lobbying.

The fact that ExpressVPN and Kape are not named in the BDS National Committee’s priority-targeting guide - which covers major multinationals including Intel, Microsoft, HP, and Siemens - is a material exculpatory finding: it indicates that the BNC’s own research has not identified a sufficient nexus to place the company among its campaign targets.²⁰²¹

Named Entities and Evidence Map

BDS-1000 Score (V4)

• V_MAX: 5.89 Sum_OTHERS: 2.78
• BRS Score: 403 Tier: C (High)

Score interpretation: V_MAX of 5.89 is driven by the Economic domain, reflecting the $149.1 million acquisition of an Israeli-incorporated operating company (Webselenese Ltd.), the Tel Aviv R&D centre (~50 staff), and Israeli subsidiary tax contributions - representing documented capital investment and economic activity within Israel. Political contributes 2.78, reflecting documented leadership IDF backgrounds and personal owner philanthropy directed to military-welfare causes. Military and Digital both score 0.00, reflecting the absence of any documented military supply relationship or digital-infrastructure provision to Israeli state or military bodies. The BRS 403 places ExpressVPN in Tier C (High), one tier below the highest tier.

Method: Scale-free Impact × (Magnitude × Proximity) scoring; evidence-only from the four domain audits; human-vetted scores; no fabricated, divested, or wrong-entity attributions included.

Methodology Note

• Evidence-only standard: Every factual claim in this dossier traces to the four domain audits (Military, Digital, Economic, Political). Where audits found nothing, this dossier states “No public evidence identified.” Where audits recorded claims as unverified, unresolved, or attributed to secondary/activist sources, those caveats are carried faithfully.
• Scale-free Impact scoring: Impact (I) measures activity type - the nature of the involvement rather than its scale. Magnitude (M) measures scale - the size, volume, or extent. Proximity (P) measures directness - how close the entity is to the end recipient or harmful activity. V-Domain = I × (M × P).
• Temporal rule: Divested or exited operations are discounted. No divested operations were identified for ExpressVPN/Kape in the audit period.
• Entity attribution: No transitive guilt. ExpressVPN’s score reflects documented ExpressVPN-specific and Kape-group-level evidence; personal donations by Teddy Sagi are attributed to him as a named individual, not to the corporate entities.
• Settlement operations: Where a settlement operation generates both economic activity and political engagement, it is counted in both Economic and Political. No settlement operations were identified for ExpressVPN/Kape.
• “No public evidence identified”: This formulation is used wherever audit checks found nothing, distinguishing a null finding from an affirmative claim of absence. It is not a proof of non-existence.

End Notes