Radware - BDS-1000 Forensic Dossier

Key Findings

• Economic: Radware’s own SEC filings disclose a non-exclusive Israeli distribution relationship with Bynet Data Communications - a sibling company inside the Zisapel-family RAD-Bynet Group - with sales rising from $2.33 million (2022) to $5.7 million (2024), alongside property leases and procurement from other family-controlled RAD-Bynet entities.¹ Radware’s $42.5 million 2022 acquisition of DC Protection (SecurityDAM) was purchased directly from Yehuda Zisapel, father of CEO Roy Zisapel, and the target company was later reported under Israeli Tax Authority investigation for suspected tax evasion.²
• Political/ownership nexus: Radware sits inside the ~20-company RAD-Bynet Group, whose Bynet subsidiaries hold separately-attributed, documented contracts with COGAT, the Israeli Civil Administration in the Beit El settlement, West Bank checkpoints, the Israel Prison Service, and the Israel Police - but these contracts are held by Bynet entities, not by Radware Ltd. itself.³
• Founding-generation military ties: Co-founder Zohar Zisapel headed the Israeli Ministry of Defense’s Electronic Research Department and received the Israel Defense Prize in 1979; a current Radware security-team lead is a Unit 8200 alumnus.⁴
• Not found: No public evidence of direct Radware contracts with the IMOD, IDF, or Israeli security services, and no listing for Radware in the UN OHCHR settlement-business database, the UN Special Rapporteur’s corporate-complicity report, the PAX “Companies Arming Israel” report, or any named BDS Movement or Don’t Buy Into Occupation campaign.⁵⁶⁷

Target Profile

Key Facts:

• Organized under Israeli law in 1996; NASDAQ-listed since the late 1990s.⁸
• Operates two Tel Aviv “next-generation” cloud application-security centers (opened March 2023 and September 2025).¹⁶¹⁷
• Acquired DC Protection (formerly SecurityDAM), an Israeli DDoS-scrubbing firm, for up to $42.5 million in February 2022 from the CEO’s father, Yehuda Zisapel, the sole shareholder.²
• Bynet Data Communications, a RAD-Bynet Group affiliate, is Radware’s non-exclusive Israeli product distributor; disclosed sales to Bynet grew from $2.33M (2022) to $3.3M (2023) to $5.7M (2024).¹
• Not named in the UN OHCHR business-and-settlements database, the UN Special Rapporteur’s July 2025 “economy of genocide” report, or the PAX “Companies Arming Israel” report.⁵⁶⁷

Executive Summary

Radware Ltd. is an Israeli-founded, Tel Aviv-headquartered, NASDAQ-listed cybersecurity vendor whose commercial products - DDoS mitigation, web application firewalls, bot management, and application delivery controllers - are civilian, defensive, network-security software and cloud services.¹⁰ Across four independent domain audits (military, digital, economic, political), no public evidence was identified of Radware itself holding a direct contract with the Israeli Ministry of Defense, the IDF, Mossad, Shin Bet, the Israel Prison Service, or Israel Police, and Radware does not appear in any of the principal international accountability instruments reviewed - the UN OHCHR database of business enterprises linked to the occupation, the UN Special Rapporteur’s July 2025 report on corporate complicity, the PAX “Companies Arming Israel” report, or organized BDS/Don’t Buy Into Occupation campaign lists.⁵⁶⁷

The company’s documented Israel nexus is instead structural and ownership-based rather than contractual. Radware is one of four NASDAQ-listed companies (alongside Ceragon Networks, RADCOM, and Silicom) inside the roughly 20-company RAD-Bynet Group, a conglomerate founded and controlled by the Zisapel family.¹⁸ Sibling companies inside that group - principally Bynet Data Communications and Bynet Systems Applications - hold extensively documented, Who Profits-verified contracts with Israeli state security bodies: COGAT and the Israeli Civil Administration (headquartered in the Beit El settlement), West Bank military checkpoints, the Israel Prison Service (including facilities holding Palestinian detainees), the Israel Police body-camera program, the Ariel Sharon military training camp, and Ariel University in the Ariel settlement, plus a 2014 Ministry of Defense certificate of appreciation for support during a Gaza military operation.³ These are legally distinct entities from Radware Ltd., and no evidence surfaced in any audit places these specific contracts inside Radware’s own corporate structure or revenue.

Where Radware and the RAD-Bynet Group intersect commercially and financially, the connection is disclosed in Radware’s own SEC filings: Bynet Data Communications is Radware’s non-exclusive Israeli product distributor, with escalating sales through 2024; Radware leases property from and purchases services from Zisapel-controlled RAD-Bynet entities; and Radware’s 2022 acquisition of DC Protection was a $42.5 million related-party purchase from Yehuda Zisapel, the CEO’s father, a transaction later linked to an Israeli Tax Authority investigation into the seller for suspected tax evasion.¹² Radware also carries founding-generation military heritage: co-founder Zohar Zisapel led the IMOD’s Electronic Research Department and received Israel’s Defense Prize in 1979, and a current Radware security-team lead served in Unit 8200.⁴

Radware’s Israel-domiciled operations and “Preferred Enterprise” tax status, its concentration of R&D and cloud-scrubbing infrastructure in Tel Aviv, and its Zisapel-family governance concentration form the basis of its strong Economic score.¹⁹¹ Its digital and military footprints, by contrast, are thin: Radware’s product line is defensive cybersecurity software with no confirmed military, surveillance, or intelligence-agency end use, no confirmed participation in Project Nimbus, and subjection only to the generic Israeli dual-use export-control framework (DECA) applicable to any Israeli cyber vendor, with no specific licensing action on record.²⁰²¹ Politically, Radware’s public conduct after October 2023 was confined to commercial cyber-threat reporting framing Israel as an attack target, with no comparable pro-bono crisis assistance extended to Palestinian institutions of the kind Radware provided to Ukraine’s government in 2022.[^42] Taken together, these findings support the human-vetted FINAL V4 scores: a dominant Economic score of 9.00 driven by ownership, tax-residency, and related-party financial structure, moderate Political (2.69), and low Military (0.31) and Digital (1.07) scores reflecting the absence of confirmed direct military or digital-surveillance nexus - yielding a composite BRS of 613, Tier B (Severe).

Timeline of Relevant Events

Corporate Overview

Radware Ltd. is an independently NASDAQ-listed company inside the RAD-Bynet Group, a privately held Israeli technology conglomerate of roughly 20 companies founded by Yehuda and Zohar Zisapel in 1981–1982.¹⁸ The group is described by multiple sources as a loose family of independently operated companies under common Zisapel ownership rather than a conventional parent-subsidiary holding structure; Radware, Ceragon Networks, RADCOM, and Silicom are its four NASDAQ-listed members.¹⁸ RADCOM, a sister company, provides network-intelligence and lawful-intercept platforms (including the Xcipio mediation platform), but no evidence was found of technology-sharing between Radware and RAD Group’s lawful-intercept entities.²⁴

Radware’s own disclosed subsidiaries and acquisitions are civilian cybersecurity businesses: DC Protection/SecurityDAM (Israeli DDoS traffic-scrubbing, acquired 2022), Seculert (Israeli malware detection, acquired 2017), and ShieldSquare (Bangalore-based bot management, acquired 2019, non-Israeli).²⁸ Radware’s principal Israeli-nexus relationship is commercial rather than corporate: Bynet Data Communications, a RAD-Bynet affiliate rather than a Radware subsidiary, is Radware’s non-exclusive licensed distributor inside Israel, and Radware separately leases real property from, and purchases products and services from, RAD-Bynet companies controlled by the Zisapel family.¹ Who Profits’ RAD-Bynet corporate-family diagram places Radware inside this roughly 20-company structure but attributes documented occupation-related contracting - COGAT/Civil Administration work, checkpoint infrastructure, Israel Prison Service contracts, and the 2014 Ministry of Defense commendation - specifically to Bynet Systems Applications and Bynet Data Communications, not to Radware Ltd.³ No public evidence identified of a Radware franchise, office, warehouse, or retail presence in the West Bank, East Jerusalem, or the Golan Heights.¹

Domain Summaries

Military: Military

Mechanism of Involvement

No public evidence identified of direct contracts between Radware and the IMOD, IDF, Israel Prison Service, or Israel Border Police.⁵ Radware markets a “government solutions” cybersecurity line whose materials state that DDoS attacks on government organizations threaten “key military, national and local systems critical to national and public safety,” and its DefensePro product has been marketed as an intrusion-prevention/DoS-protection appliance since 2003 - dual-use in character but not a purpose-built military system.²⁵²² The documented military nexus runs through parent-group structure rather than Radware’s own contracting: RAD-Bynet subsidiaries provide services to COGAT, the Israeli Civil Administration (Beit El), military checkpoints, the Israel Prison Service, and the Israel Police body-camera project.³ Radware maintains an Israeli partner ecosystem of roughly 27 companies using its technology, including Safeway Security Solutions; Matrix IT, a defence-adjacent Israeli IT firm, separately appears in Who Profits, though no evidence links Radware products to Matrix IT’s defence-sector work.²⁶²⁷

Counter-Arguments and Evidence Limits

No purpose-built military variants, MIL-STD-810 tactical specifications, or Wassenaar Category 4/5 intrusion-software classifications were identified for any Radware product.⁵ No export-license applications, end-user certificates, or government export-control reviews for Radware sales to Israeli defence or security end-users were found. Radware does not appear on the US BIS Entity, Unverified, or Denied Persons Lists, is not named in the UN Special Rapporteur’s July 2025 report on corporate complicity, is not in the PAX “Companies Arming Israel” report, and is not a specifically targeted company in organized BDS campaign publications.⁶⁷ No institutional divestment decision specifically targeting Radware was identified. Under standard corporate-law principles, RAD-Bynet’s defence-adjacent activity is not attributable to Radware absent evidence of operational integration, and none was found.³

Named Entities and Evidence Map

Zohar Zisapel - Radware co-founder and chairman; former head of the IMOD Electronic Research Department; recipient of the 1979 Israel Defense Prize.⁴ Roy Zisapel - Radware President/CEO, son of Zohar Zisapel; no personal defence-board positions, FIDF donations, or defence-prime equity stakes identified.⁴ Sean Ramati - Radware Advanced Solution Security Team Lead; Unit 8200 network-operations team lead, 2015–2021.²⁸ RAD-Bynet Group - parent conglomerate; documented COGAT/Civil Administration, checkpoint, Israel Prison Service, and Israel Police contracts attributed to Bynet subsidiaries, not Radware.³

Digital: Digital

Mechanism of Involvement

Radware’s disclosed product portfolio - DDoS mitigation, WAF, bot management, application delivery - is confined to network- and application-layer cybersecurity, delivered from a Tel Aviv Security Operations Centre (expanded 2022) and a second Tel Aviv cloud-security center opened September 2025.²⁹¹⁷ The 2021 SecurityDAM/DC Protection acquisition added Israeli-based cloud DDoS-scrubbing infrastructure to Radware’s global network, meaning customer traffic data (scrubbing, WAF inspection, bot telemetry, ML training) is processed through Israeli jurisdiction and is legally accessible under Israeli law (including the INCD framework), without public disclosure of any access events.³⁰ As an Israeli-domiciled dual-use cyber producer, Radware is subject to oversight under Israel’s Defense Export Control Law, 5767-2007 (DECA), though no specific licence, denial, or enforcement action was identified.²⁰ Radware’s Israeli R&D also received historic Israel Innovation Authority grants ($162,000; no royalties yet paid as of December 2024), which carry conditions restricting transfer of IIA-supported know-how outside Israel.³¹

Counter-Arguments and Evidence Limits

No public evidence identified of Radware participating in Project Nimbus, Israel’s sovereign-cloud program contracted to AWS and Google Cloud, nor of Radware being named as a subcontractor or technology provider to it.²¹ No evidence was found of Radware using or reselling biometric or retail-surveillance technology (Trigo, BriefCam, AnyVision/Oosto, Trax), and Radware does not appear in Amnesty International’s “Automated Apartheid,” B’Tselem technology reporting, Al-Haq’s “Mapping Israeli Apartheid Technology,” AFSC Investigate, or the UN Special Rapporteur’s July 2025 report’s technology sections addressing AWS, Google Cloud, Microsoft, Palantir, NSO Group, and AnyVision.⁶ Radware’s Bot Manager performs behavioural analytics for cybersecurity purposes; no evidence was found of this capability being repurposed for workforce surveillance, predictive policing, or population monitoring. Radware’s product documentation shows no offensive cyber tools or digital weapons systems - its orientation is defensive.¹⁰

Named Entities and Evidence Map

RADCOM (RAD Group sister company) - provides network-intelligence and lawful-intercept platforms; no documented technology-sharing with Radware.²⁴ DC Protection/SecurityDAM - Israeli DDoS-scrubbing acquisition integrated into Radware’s cloud network.²³⁰ Israel Innovation Authority - historic grant relationship with royalty conditions.³¹

Economic: Economic

Mechanism of Involvement

Radware is Israeli-incorporated, Tel Aviv-headquartered, and holds “Preferred Enterprise” status under Israel’s Investment Incentive Law, a reduced-tax-rate regime conditioned on maintaining R&D and manufacturing activity in Israel.¹⁹¹ The company has made repeated Israel-based infrastructure investments - cloud-security centers opened in March 2023 and September 2025, the latter described by CEO Roy Zisapel as “central to our growth strategy” - while also maintaining R&D centers in Bangalore and Chennai, India, and a US headquarters in Mahwah, New Jersey.¹⁶¹⁷ Ownership and control are concentrated in the Zisapel family: the 20-F risk factors identify the estate of Yehuda Zisapel, Nava Zisapel, and CEO Roy Zisapel as potentially exerting significant board-election influence, atop broad institutional ownership (Vanguard, BlackRock, Senvest).¹¹¹ The single largest documented related-party transaction is the 2022 DC Protection acquisition: a $42.5 million payment to Yehuda Zisapel, the CEO’s father and the target’s sole shareholder, later reported under Israeli Tax Authority investigation for suspected tax evasion (characterized by DC Protection as “a professional dispute regarding the applicable tax rate”).² Separately, Radware itself concluded a December 2025 settlement with the Israeli Income Tax Authority concerning its 2019–2022 tax returns, described as not materially affecting its financial statements.¹

Counter-Arguments and Evidence Limits

Radware is a software/cloud-services vendor, not an agricultural, consumer-goods, or physical-import business; no evidence connects it to Israeli agricultural exporters, settlement-origin goods sourcing, or country-of-origin labeling controversies.³² Who Profits’ documented checkpoint- and Civil-Administration-related contracting is explicitly attributed to Bynet Systems Applications and Bynet Data Communications - legally distinct sibling entities - not to Radware Ltd., and Who Profits does not separately list Radware.³ No public evidence identified of a Radware physical footprint in the West Bank, East Jerusalem, or the Golan Heights. Radware does not appear in the OHCHR/OpenSanctions settlement-business database, the UN Special Rapporteur’s July 2025 report (which contains no occurrence of “Radware,” “Rad-Bynet,” “Bynet,” or “Zisapel”), the AFSC Investigate database, Norwegian KLP’s 2021/2025 exclusion lists, or Don’t Buy Into Occupation’s 2021–2025 reports.⁶⁷ Board biographical claims of an IDF role for director Israel Mazin derive from a secondary aggregator profile rather than a primary Radware filing, and should be treated as unverified.³³

Named Entities and Evidence Map

Yehuda Zisapel - RAD Group co-founder, CEO’s father, seller of DC Protection to Radware for $42.5 million; separately controlled the privately held RAD-Bynet Group whose Bynet subsidiary is Who Profits-documented in the occupied West Bank.²³ Roy Zisapel - CEO/President; concentrated family shareholding cited as a governance risk factor.¹ Vanguard Group, BlackRock, Senvest Management - largest disclosed institutional shareholders.¹¹ Yuval Cohen - Board Chairman since November 2023; managing partner of Fortissimo Capital (Israeli private equity); no defence- or settlement-specific portfolio holdings identified.¹²¹³ Israel Mazin - director; secondary-source bio lists a prior IDF “Principal” role, unverified against primary filings.³³

Political: Political

Mechanism of Involvement

Radware’s post-October 2023 public communications are confined almost entirely to commercial cyber-threat intelligence: its “Cyber Aggression Rises Following the October 2023 Israel-Hamas Conflict” advisory frames the war as a driver of hacktivism and politically motivated attacks on infrastructure, and its June 2025 Israel-Iran conflict reporting again frames Israel as the target of a 600–700% surge in cyberattacks, with no accompanying statement on Palestinian civilian harm, Gaza, or the West Bank.²³[^43] By contrast, Radware provided pro-bono Cloud DDoS Protection and Cloud WAF services to Ukraine’s SSSCIP beginning June 2022 as explicit free assistance during the Russian invasion; no equivalent free service to Palestinian civil-society organizations, UNRWA, Gaza hospitals, or Palestinian Authority institutions was identified during the 2023–2025 war.[^42] Radware’s 20-F filings independently corroborate the Bynet distributor relationship and confirm that sales to Bynet continued rising through fiscal year 2024 - after the July 2024 ICJ advisory opinion and into the period following the November 2024 ICC arrest warrants.¹ Radware carries no controlling shareholder under Israeli law, but Zisapel family members are deemed to hold a “personal interest” in related-party votes.¹

Counter-Arguments and Evidence Limits

Radware does not appear in the OHCHR settlement-business database (158 enterprises, September 2025 update), in Al-Haq’s November 2025 “Don’t Buy into Occupation V” report (treated as a partial-confidence negative given a non-machine-searchable PDF), or in the UN Special Rapporteur’s July 2025 named-company list, which instead names Google, Amazon, Microsoft, Palantir, Lockheed Martin, and roughly 45 others.⁶ No public evidence identified of an OECD National Contact Point complaint, court filing, or formal regulatory action against Radware regarding occupied-territory operations; its only disclosed regulatory matter is the ordinary 2019–2022 tax-years settlement with the Israeli Income Tax Authority.¹ No public evidence identified of federal lobbying registrations, PAC/FEC filings, or leadership roles by Radware executives in AIPAC, ADL, or CFI; no evidence of corporate donations to FIDF, JNF/KKL, or settlement organizations. The Zisapel family’s RAD Foundation funds education and technology programs, including a Technion nanoelectronics center, with no evidence of grants directed to military-welfare or settlement causes.[^45] Radware appears only on crowdsourced, national-origin-based boycott listings (e.g., boycottisraeli.biz), not in any formally organized BDS Movement or named campaign.[^46] Reviewers explicitly ruled out a naming-similarity false positive with Rada Electronic Industries, an unrelated Nasdaq-listed Israeli defense-radar company.[^47]

Named Entities and Evidence Map

Roy Zisapel - CEO; no public statements on the Israel-Palestine conflict identified. Yuval Cohen - Chairman since November 2023; Fortissimo Capital managing partner; also chairs Kornit Digital and Cellcom Israel boards and sits on Stratasys’ board, with no defence- or settlement-specific holdings identified.¹²¹³ RAD Foundation - Zisapel-family philanthropic vehicle funding Technion and youth technology education.[^45] Ukraine SSSCIP - recipient of pro-bono Radware cybersecurity services, cited as a comparator to the absence of equivalent Palestinian-side assistance.[^42]

BDS-1000 Score (V4)

• V_MAX: 9.00 Sum_OTHERS: 4.07
• BRS Score: 613 Tier: B (Severe)

The composite score is driven almost entirely by Economic (9.00), which reflects Radware’s Israeli incorporation, tax-preferred residency, concentrated Zisapel-family ownership and control, and a documented related-party acquisition and ongoing intra-group distributor relationship with a RAD-Bynet Group entity - not by any confirmed direct military or digital-surveillance contract, both of which score low (0.31 and 1.07 respectively). Political (2.69) reflects a documented but comparatively modest asymmetry in crisis-response conduct and continuing intra-group commercial ties through the post-ICJ/ICC period. Per the BRS methodology, the tier is set by the maximum domain score (V_MAX) discounted by the sum of the other three domains; the resulting BRS of 613 places Radware in Tier B (Severe) - a scale-free, evidence-only, human-vetted score in which Impact reflects activity type, Magnitude reflects scale, and Proximity reflects directness of the documented nexus.

Methodology Note

• Scores are derived exclusively from evidence compiled in the four domain audits (Military, Digital, Economic, Political); no claim in this dossier originates outside those audits.
• Each domain score is scale-free: Impact (I) reflects the category of activity involved, Magnitude (M) reflects its documented scale, and Proximity (P) reflects how directly the entity itself (versus a parent, sibling, or affiliate) is implicated.
• A temporal-mitigation rule applies: divested, discontinued, or non-recurring exposures are discounted relative to ongoing, escalating relationships (e.g., the Bynet distributor relationship, which rose through FY2024, was scored as ongoing rather than divested).
• Entity attribution follows a no-transitive-guilt standard: RAD-Bynet/Bynet subsidiaries’ documented occupation-related contracts are not imputed to Radware Ltd. absent evidence of operational integration, consistent with the audits’ own findings.
• Where a documented relationship spans both economic and political dimensions (e.g., settlement-adjacent commercial activity within the parent group), the underlying facts are considered under both Economic and Political rather than double-counted as a single score.
• “No public evidence identified” is used verbatim throughout, consistent with the source audits, wherever a documented check (watchlist, database, filing, or report) found nothing implicating Radware.

End Notes

Sources cited by the underlying Political domain audit without a recoverable URL in the reviewed excerpt (Ukraine SSSCIP pro-bono services; June 2025 Israel-Iran threat-surge reporting; RAD Foundation/Technion nanoelectronics donation; boycottisraeli.biz listing; Rada Electronic Industries name-disambiguation): these claims are carried in the body as documented findings of the Political audit; their original source URLs were not present in the audit text supplied for this dossier and are flagged here rather than fabricated.[^42][^43][^45][^46][^47]