INDEX / DIRECTORY / PROTON

Proton

Cybersecurity & VPN 69 CITED SOURCES UPDATED 2026-08-27
BDS-1000 Score 579 /1000 C Tier C - High
Military ↗ 0.00 Digital ↗ 6.50 Economic ↗ 3.30 Political ↗ 3.50

OpenIntel is reader-funded - no sponsors, no institutional money. Support OpenIntel →

Key Findings

  • Digital: Proton continues to market 14 VPN servers in Tel Aviv and Petah Tikva; reviewed public materials did not identify Israeli state, military, or security customers for those services, nor the local hosting counterparty behind them.123
  • Settlements: Proton also markets physical servers near Ramallah in the West Bank, while its Smart Routing documentation states that Palestine offerings include both Smart Routing and physical servers.456
  • Economic: Proton disclosed a historical DDoS-mitigation relationship with Radware, whose public materials identify Tel Aviv as its international headquarters, but the reviewed record does not verify whether that arrangement continued after 2018.78910
  • Not found: No public evidence identified of Israeli military or security contracts, settlement-linked contracts, or Proton being named in the reviewed OHCHR/UN settlement-activity materials.111213

Target Profile

FieldDetail
Company NameProton AG
JurisdictionSwitzerland1415
HeadquartersPlan-les-Ouates, Geneva, Switzerland1615
SectorPrivacy technology, encrypted communications, VPN, cloud storage, password management, and related internet services1615
OwnershipPrivate Swiss company; Proton states its primary shareholder is the Proton Foundation, with most remaining shares held by employees and the balance held by FONGIT and Proton users.141718
Key Executives / GovernanceAndy Yen (founder and CEO); Proton AG board members Rosemary Leith, Alisee de Tonnac, and Antonio Gambardella; Proton Foundation trustees Andy Yen, Antonio Gambardella, Carissa Veliz, Tim Berners-Lee, and Dingchao Lu; Jurgita Miseviciute listed as Head of Public Policy.191420
Israeli-Nexus SummaryThe reviewed record supports an Israel/Palestine nexus through Proton VPN service infrastructure and marketing in Israel and the West Bank, plus a historical Radware vendor relationship, but not through documented military, settlement-construction, or Israeli state contracting.1478910

Key Facts:

Executive Summary

Proton’s documented Israel/Palestine nexus in the reviewed audits is primarily digital and infrastructural rather than military. Proton is publicly presented as a Swiss privacy-technology company operated by Proton AG under Swiss law, with the Proton Foundation as primary shareholder and a mission framed around privacy, freedom, democracy, and the public good.16141517 In the reviewed record, the clearest present-tense nexus is Proton VPN’s marketing of service endpoints in Israel and the Palestinian Territories, not state contracting or security-sector integration.146

The strongest documented current evidence is Proton’s own public server-location pages. Proton VPN currently advertises 14 servers in Tel Aviv and Petah Tikva.1 It also advertises physical servers near Ramallah in the West Bank, and its Smart Routing documentation states that Palestine offerings include both Smart Routing and physical servers.45 The record therefore supports current service availability in Israel and in occupied Palestinian territory through Proton VPN. At the same time, the reviewed materials do not resolve the exact local hosting counterparties, ownership structure for every endpoint, or whether all listed nodes are Proton-owned hardware versus leased or hosted capacity.145622

A second documented nexus is historical vendor exposure. Proton stated in 2015, 2016, and again in 2018 that Radware was used in DDoS mitigation during sustained attacks on Proton Mail.789 Radware’s public company materials identify Tel Aviv as its international headquarters.10 This is the clearest disclosed Israel-linked vendor relationship in the record, but the audits explicitly do not verify whether the relationship continued after 2018, ended, or was replaced.78910

What the audits do not support is equally important. No public evidence identified of Israeli military or security contracts, Project Nimbus participation, Israeli sovereign-cloud work, offensive cyber offerings to Israeli state bodies, settlement construction activity, Israeli offices or subsidiaries, Israel-specific investment programs, or Proton being named in the reviewed OHCHR/UN settlement-activity materials.1523111213 The Political audit also treated an alleged Gaza-related donation as unresolved and excluded it because no independently verified underlying primary disbursement record was located.23 On that evidence-only basis, the final V4 profile is driven by Digital at 6.50, with secondary Economic and Political exposure and Military at 0.00, producing a BRS of 579 and Tier C (High).

Timeline of Relevant Events

DateEvent
2014Proton states it was launched in Switzerland.16
2015-12-15Proton said it partnered with Radware for DDoS mitigation during attacks on Proton Mail.7
2016Proton said Proton Mail had been protected by Radware’s cloud DDoS services since November 2015.8
2018Proton again identified Radware among the vendors helping mitigate attacks, showing the relationship extended at least into 2018.9
2019-01Proton VPN announced the introduction of servers in Israel.24
2024-06-17Proton announced its transition toward a non-profit structure and identified the Proton Foundation as Proton AG’s primary shareholder.17
2025-01-31OpenForum Europe announced Proton had joined as a supporter, reflecting Proton’s public-policy engagement in Europe.25
2026-01-06Proton’s transparency report update stated that Proton VPN had received 53 orders in 2024 and 59 in 2025, all denied, and reiterated that only official Swiss channels are legally binding.23
Current reviewed materialsProton continues to advertise VPN endpoints in Israel and in the Palestinian Territories, including physical servers near Ramallah in the West Bank.1456

Corporate Overview

Proton is publicly presented as a Swiss privacy-technology company operating encrypted email, VPN, cloud storage, password management, wallet software, and related services.1615 Proton’s legal materials identify Proton AG as the operating company in Geneva, Switzerland, while foundation materials and ownership pages state that the Proton Foundation is the primary shareholder and can block changes of control that would threaten Proton’s stated mission.14151718

The reviewed materials identify Proton Financial AG as a wholly owned Swiss subsidiary operating Proton Wallet.21 Proton’s official transaction announcements also identify SimpleLogin and Standard Notes as group additions, but neither was presented by Proton as an Israeli company, and no Israeli acquisition was identified in the reviewed record.2627

Geographically, Proton describes itself as a global company with offices in Europe and Taipei, but no Israel office is disclosed on the reviewed team page.19 The Israel/Palestine nexus in the corporate record instead runs through VPN service-location offerings. Proton markets Israel endpoints in Tel Aviv and Petah Tikva and Palestinian Territories endpoints near Ramallah in the West Bank.14 Third-party network registry data tied to Proton AG’s ASN also lists prefixes labeled for Tel Aviv and Nablus, though that is third-party infrastructure evidence rather than a Proton-authored explanation of those specific prefixes.22

The audits do not identify Israeli-domiciled Proton operating entities, disclosed Israeli R&D centres, or co-development arrangements with Israeli universities or Israeli state bodies.19142627 They also do not identify Proton in the reviewed OHCHR and UN settlement-activity materials.111213

Domain Summaries

Military: Military

Mechanism of Involvement

The reviewed audits did not establish a military nexus for Proton. Proton’s public corporate materials describe a civilian privacy-services business and do not disclose defence, military, or Israeli state-security contracting activity.161914 No public evidence identified of Israeli Ministry of Defense, IDF, Israel Police, prison-service, or other security-body contracts, nor of tactical or military-specified product variants, export-licensed security sales, or base-service functions.1615123

The only Israel-linked operational relationship surfaced in the military audit was the historical Radware vendor relationship disclosed in Proton’s incident reporting.789 The audit did not connect that relationship to Israeli defence procurement, defence primes, or security-force end use.78910 Proton’s identified Israel-specific infrastructure in reviewed official materials was limited to VPN endpoints in Tel Aviv and Petah Tikva, with no evidence placing them in settlements or military installations.1

Counter-Arguments and Evidence Limits

Proton’s strongest defence on Military is straightforward: the reviewed record did not identify any public evidence of Israeli military or security contracts, defence-industry participation, weapons-related software, or settlement-construction involvement.1615111213 That negative record is reinforced by the absence of Proton from the reviewed OHCHR/UN settlement materials and from the reviewed civil-society materials discussed in the audits.111213

The main evidence limit is visibility. Proton is privately held, and the reviewed materials do not provide non-public customer lists, procurement records, or contract disclosures sufficient to rule out every undisclosed end user.141517 The audit therefore records absence of public evidence, not proof of universal absence in non-public records.

Named Entities and Evidence Map

Digital: Digital

Mechanism of Involvement

Digital is the dossier’s strongest domain because Proton’s documented nexus is first and foremost digital infrastructure and service delivery. Proton VPN currently advertises 14 servers in Tel Aviv and Petah Tikva.1 Proton’s current materials also show continued marketing of Israel-based endpoints after mid-2024 and after November 2024, supporting an ongoing Israel server offering in the reviewed period.16

A second digital link is Proton’s historical reliance on Radware for DDoS mitigation. Proton stated in 2015 that it partnered with Radware and stated in 2016 that Proton Mail had been protected by Radware’s cloud DDoS services since November 2015; Proton again referenced Radware in a 2018 attack-response post.789 Radware’s public materials identify Tel Aviv as its international headquarters.10 That makes Radware the clearest disclosed Israel-linked vendor relationship in the digital record, although current continuity is unverified.78910

The audits also record what is not publicly shown. Proton’s privacy policy publicly lists processors and processing locations in Macedonia, Taiwan, the United States, Singapore, the European Union, and the United Kingdom, and no Israeli-domiciled processor appears in that public list.15 No public evidence identified of Proton participating in Project Nimbus, Israeli government cloud initiatives, sovereign-cloud services for Israeli state bodies, or documented deployments by Israeli military, intelligence, or law-enforcement agencies.1523

Counter-Arguments and Evidence Limits

Proton’s strongest defence in Digital is that the reviewed evidence supports consumer privacy services and network access, not security-state integration. Public materials do not identify Israeli state or military customers, Israeli-domiciled processors, Project Nimbus participation, or offensive cyber offerings to Israeli authorities.15123 Proton’s transparency and law-enforcement pages also state that only official Swiss channels are legally binding and that Proton does not provide data directly to foreign authorities; Proton VPN’s transparency report says all listed 2024 and 2025 Proton VPN orders were denied.23

The main evidence limits are contractual opacity and infrastructure opacity. Public materials do not identify the exact Israeli colocation or datacenter counterparty behind the Israel nodes, and the reviewed source base is weighted toward Proton’s own disclosures rather than procurement records or internal architecture documents.123 The Radware relationship is also historical in the record; the audits explicitly do not verify whether it remained active after 2018.78910

Named Entities and Evidence Map

Economic: Economic

Mechanism of Involvement

The economic nexus rests on three documented elements. First, Proton disclosed a historical vendor relationship with Radware for DDoS mitigation, giving Proton a documented commercial relationship with an Israeli-linked company at least from late 2015 through 2018.78910 Second, Proton continues to market Israel as a reachable service market through VPN endpoints in Tel Aviv and Petah Tikva.1 Third, Proton markets Palestinian Territories servers and states that it offers physical servers near Ramallah in the West Bank, while Smart Routing documentation states that Palestine offerings include both Smart Routing and physical servers.456

This West Bank-facing service footprint matters because it is the clearest reviewed evidence of Proton-controlled infrastructure representation within occupied Palestinian territory.45 Third-party registry evidence tied to Proton AG’s ASN lists prefixes labeled PV-SL-HOSTED-Tel-Aviv and PV-SL-HOSTED-Nablus, which is consistent with Israel- and West Bank-facing infrastructure, though it remains third-party evidence rather than a Proton-authored contractual disclosure.22

At the same time, the reviewed economic record is limited. Proton’s public materials do not identify Israel-specific revenue, tax contributions, payroll, capital expenditure, disclosed local counterparties, or an Israel-domiciled operating entity.16191521 The audits also found no public evidence of physical-goods sourcing, Israeli sovereign-bond holdings, Israel-focused funds, Israel-specific lending or insurance activity, or Israeli operating-company acquisitions.212627

Counter-Arguments and Evidence Limits

Proton’s strongest defence in Economic is that the record shows service availability, not deep local entrenchment. No Israel office, warehouse, retail operation, or Israeli subsidiary was identified in the reviewed corporate materials, and Proton does not publicly disclose Israel-specific revenue, headcount, taxes, or capex.16191521 The reviewed record also does not identify Israeli investment vehicles, Israeli R&D centres, or Israeli acquisitions.142627

The key limits are material. Proton is privately held, and the audits note the absence of audited geographic revenue breakdowns, a full subsidiary map, and detailed infrastructure ownership disclosures.141718 For the Israel and West Bank endpoints, the reviewed materials do not fully resolve whether each node is Proton-owned hardware, leased capacity, or third-party hosted infrastructure, nor do they identify every local hosting counterparty.145622

Named Entities and Evidence Map

Political: Political

Mechanism of Involvement

Political is not driven by documented ideological alignment with an Israeli state project. Rather, it reflects Proton’s public-policy footprint combined with its operation and marketing of services in both Israel and the Palestinian Territories.1423252829 Proton’s public narrative is rights-oriented and global, emphasizing privacy, anti-censorship, democracy, and support for users affected by repression and war rather than a sustained Israel-Palestine campaign position.161423

Within that broader posture, the reviewed audits identify current product pages for both Israel and the Palestinian Territories. The Palestinian Territories page emphasizes censorship circumvention and privacy access; the Israel page emphasizes privacy, access, and streaming continuity through Israeli VPN servers.14 The audits treat these pages as product and access materials, not as evidence of diplomatic recognition or a formal geopolitical alignment.14

The policy-facing part of the record is real but general rather than Israel-specific. Proton publicly maintains policy and government-affairs capacity, submitted public filings to the FTC and NTIA on competition, privacy, and app-store governance, and joined OpenForum Europe as a supporter in January 2025.252829 None of those reviewed materials tie Proton’s lobbying or advocacy to Israel-Palestine policy.252829 The audit also excluded a public LinkedIn allegation of a Gaza-related donation because no independently verified primary disbursement record was located.23

Counter-Arguments and Evidence Limits

Proton’s strongest defence in Political is that its public mission and advocacy are framed around digital rights, privacy, freedom, and democracy in general, not around Israel-Palestine or any Israeli state project.16141723 No public Proton statement on proton.me specifically addressing Israel-Palestine was identified in the reviewed materials.1623 No public evidence identified of corporate PAC activity, FEC donations, Lobbying Disclosure Act filings, official state-branding partnerships, or leadership ties to major Israel-Palestine pressure groups in the accessible record reviewed by the audits.1914252829

The evidence limits are important here too. Public-facing political posture is easier to observe than private internal decision-making, but the audit standard properly excludes unresolved social-media allegations without primary verification.23 The absence of Proton from the reviewed OHCHR/UN settlement materials and from the supplied BDS priority-target material is a document-scoped absence finding, not proof of universal absence from all outside debate.11121330

Named Entities and Evidence Map

BDS-1000 Score (V4)

DomainIMPV-Domain Score
Military0.000.000.000.00
Digital6.507.009.006.50
Economic3.307.009.003.30
Political3.507.009.003.50

The score profile is driven by Digital because Proton’s clearest documented nexus is digital service infrastructure and vendor exposure: Israel VPN endpoints remain publicly marketed, and a historical Radware relationship is documented in Proton’s own materials.178910 The resulting Tier C (High) reflects the evidence-only, vetted method: scale-free Impact multiplied through magnitude and proximity, with the strongest domain setting V_MAX while weaker or absent domains constrain the overall pattern rather than being inferred upward.

Methodology Note

End Notes

If you want, I can also tighten this to match a specific house style once the workspace is writable.

Footnotes

  1. https://protonvpn.com/vpn-servers/israel ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13 ↩14 ↩15 ↩16 ↩17 ↩18 ↩19 ↩20 ↩21

  2. https://proton.me/legal/transparency ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8

  3. https://proton.me/legal/law-enforcement ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8

  4. https://protonvpn.com/vpn-servers/palestinian-territories ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13 ↩14

  5. https://protonvpn.com/support/how-smart-routing-works ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8

  6. https://protonvpn.com/vpn-servers ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7

  7. https://proton.me/blog/ddos-protection-guide ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13 ↩14 ↩15

  8. https://proton.me/blog/a-brief-update-regarding-ongoing-ddos-incidents ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13 ↩14 ↩15

  9. https://proton.me/blog/apophis-squad-arrest ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13 ↩14 ↩15

  10. https://www.radware.com/locations/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13

  11. https://www.ohchr.org/sites/default/files/documents/hrbodies/hrcouncil/sessions-regular/session31/database-hrc3136/23-06-30-Update-israeli-settlement-opt-database-hrc3136.pdf ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  12. https://docs.un.org/A/HRC/59/23 ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  13. https://www.un.org/unispal/document/business-database-26sep25/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  14. https://proton.me/foundation ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13 ↩14 ↩15 ↩16 ↩17

  15. https://proton.me/legal/privacy ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13 ↩14 ↩15 ↩16 ↩17 ↩18 ↩19

  16. https://proton.me/about ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10 ↩11 ↩12 ↩13 ↩14 ↩15 ↩16

  17. https://proton.me/blog/proton-non-profit-foundation ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8

  18. https://protonvpn.com/support/who-owns-protonvpn ↩ ↩2 ↩3

  19. https://proton.me/about/team ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9 ↩10

  20. https://www.ibanet.org/conference/CONF2551/speaker-details/CONF2551_333014 ↩

  21. https://proton.me/wallet/terms ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7

  22. https://ipv4.bgp.he.net/AS208172 ↩ ↩2 ↩3 ↩4 ↩5

  23. https://proton.me/about/impact ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7

  24. https://protonvpn.com/blog/israel-vpn-servers ↩

  25. https://openforumeurope.org/proton-joins-ofe-as-a-supporter/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  26. https://proton.me/blog/proton-and-simplelogin-join-forces ↩ ↩2 ↩3 ↩4

  27. https://proton.me/blog/proton-standard-notes-join-forces ↩ ↩2 ↩3 ↩4

  28. https://downloads.regulations.gov/FTC-2021-0070-0030/attachment_1.pdf ↩ ↩2 ↩3 ↩4 ↩5

  29. https://downloads.regulations.gov/NTIA-2022-0001-0147/attachment_1.pdf ↩ ↩2 ↩3 ↩4 ↩5

  30. https://bdsmovement.net/sites/default/files/2024-12/Guide%20to%20BDS%20Boycott%20%26%20Pressure%20Corporate%20Priority%20Targeting-30%20Nov%202024-Submitted%20by%20BDS%20movement.pdf ↩