Splunk - Political Audit

Corporate Communications & Public Stance

No standalone public statement from Splunk Inc. (as an independent company, prior to 18 March 2024) addressing the Israel-Palestine conflict was identified. No public evidence identified for a Splunk-specific corporate position on the conflict.

By contrast, Splunk published a dedicated public blog statement on the Russia-Ukraine war on 5 March 2022, “Cybersecurity and the Crisis in Ukraine,” addressing customer concerns about cyberattack risk and describing collaboration with CISA’s Joint Cyber Defense Collaborative ¹. This is the only conflict-specific public communications posture identified for Splunk as an independent entity.

Since Cisco completed its ~$28 billion all-cash acquisition of Splunk on 18 March 2024, Splunk’s public communications posture has been governed by parent Cisco ². Cisco CEO Chuck Robbins stated in October 2023 (“Cisco Beat,” internal/company channel) that Cisco teams “have been working day and night to ship our technology to Israel, to apply cybersecurity capabilities that we uniquely can apply at the request of the country, and to show how we can support our customers and partners and help them during this tough time” ³. A separate Cisco executive statement, dated 25 March 2025, characterized the Middle East conflict as “too hard, too painful, too divisive,” diverting focus from “our ability to drive Cisco business” ³. Cisco’s Chief People, Policy & Purpose Officer Francine Katsoudas announced on 25 March 2025 that “this topic cannot be discussed, cannot be debated in company or organization-wide meetings,” an active suppression of internal discussion of the Middle East conflict occurring after both the ICJ’s 19 July 2024 advisory opinion and the November 2024 ICC arrest warrants ⁴.

The contrast between Splunk’s proactive 2022 Ukraine blog post ¹ and the absence of any equivalent public-facing Splunk or Cisco statement addressing Palestinian civilian harm - with the only comparable Cisco statements on Israel-Gaza framed around operational/business continuity and support for “the country” rather than humanitarian concern ³ - constitutes a documented asymmetry in conflict-specific public communications. No public evidence identified of a Splunk or Cisco public statement on the 2020 Black Lives Matter/George Floyd period.

Operations in Occupied or Contested Territories

Splunk’s Direct Presence in Israel

Splunk Services Israel Ltd., a private Israeli company (registration no. 516040250), is registered and based in Netanya ⁵⁶. Independent Israeli corporate-registry mirrors corroborate the entity’s active status, which continues under Cisco ownership following the 18 March 2024 acquisition close ²⁵⁶. Splunk operated in Israel “for a number of years” prior to 2019 through integrator/reseller EMET Computing and was preparing to establish a local direct sales office as of January 2019 ⁷. As of that same reporting, Splunk worked with an estimated 200 clients in Israel, and a quoted Israeli military source stated that “the IDF maintains an extensive range of agreements with suppliers in the field of data extraction, including the Splunk Company, for the benefit of improving the operational effectiveness of the IDF” ⁷. Splunk also hosted an Israeli government customer session - “How Israel’s Ministry of Energy applies Machine Learning” - at its .conf19 user conference, with session materials publicly archived on Splunk’s own conference site ⁸.

Cisco (Parent Company) Military and Security Supply Relationships

Cisco is documented across multiple independent sources as a longstanding direct supplier to Israeli military, security and police bodies. In 2013 Cisco signed a $150 million communications-equipment contract with the Israeli military including a five-year option ⁹¹⁰. In 2017 Cisco won a roughly NIS 1 billion (~$250 million) Foreign Military Sales-funded tender to become the sole server provider to the Israeli military/security establishment, replacing HPE ¹¹¹². Cisco networking hardware underpins “David’s Citadel,” an underground military data center in the Negev/Naqab region completed circa 2020 at a reported cost of NIS 1.6 billion, integrating “hundreds of combat, intelligence, and command and control systems” ³¹². From March 2020, Cisco began deploying Unified Communications systems across Israeli military units, reportedly expected to reach hundreds of installations ¹¹¹². In October 2023, Cisco Israel supported development of “Israel Rises,” a digital platform for the IDF’s Home Front Command ¹²¹³. In November 2023, Cisco sold Webex communications capability to the Israeli military via reseller Bynet, described by BDS Movement as a “21st-century ‘war room’” tool ¹⁴. Israeli Ministry of Defense procurement records reviewed show approximately $2 million in Cisco server purchases across eight contracts between November 2023 and January 2024, spanning the period before the ICJ’s 19 July 2024 advisory opinion and continuing into the active Gaza conflict ³¹¹. Investigative reconstruction of Cisco’s Israel-specific revenue (not disclosed as a separate segment in Cisco’s own public filings) estimates Cisco Israel fiscal-year revenue of roughly $109M (H1 2023), $150M (H1 2024) and $115M (H1 2025), with Ministry of Defense-specific revenue of roughly $52M (2023), $98M (2024) and $42M (H1 2025); total FY2024 Israeli revenue is estimated at ~$283M, of which ~$111M is attributed as “conflict impact” revenue - a period spanning both the July 2024 ICJ opinion and, in the H1 2025 figures, the November 2024 ICC arrest warrants ³. Cisco infrastructure has also been alleged by civil-society and secondhand press reporting to potentially support Israeli military AI targeting and surveillance systems, including “The Gospel,” “Lavender,” “Where’s Daddy?” and “Blue Wolf” ¹³¹⁵, though these are third-party investigative/advocacy attributions rather than confirmed primary disclosures.

Settlement and Contested-Territory Footprint

Cisco’s “Klika”/Digital Hubs project (from 2018/2019, NIS 90 million) deployed technology hubs, of which by September 2023 seven were located in occupied territory: five in West Bank settlements (Modi’in Illit, Beitar Illit, Kiryat Arba, Itamar, Sha’ar Binyamin Industrial Zone) and two in the occupied Syrian Golan Heights ¹². Cisco entered a 2017 MOU with the Jerusalem Municipality for CCTV/communications “Smart City” infrastructure spanning East and West Jerusalem ¹¹¹². Israel Police purchases of Cisco equipment totaled roughly NIS 4,060,533 in 2020–2021, with additional 2022 purchases via reseller Matrix IT ¹¹¹². Cisco acquired four Israeli tech companies in the two years preceding its Lightspin Technologies deal, including the Tel Aviv-based cloud-security startup Lightspin itself (~$200–250M, announced April 2023, closed May 2024) ¹⁶. Cisco’s cumulative investment in Israeli firms is reported inconsistently across sources - figures ranging from “$2 billion” to “$7.2 billion” appear without a reconciled timeframe ¹⁰¹¹.

Formal Legal/Regulatory Status

Neither Cisco nor Splunk appears on the Wikipedia-compiled listing of companies named in the UN OHCHR “Database of Business Enterprises” (HRC resolutions 31/36/53/25), most recently updated September 2025 ¹⁷¹⁸. This is a material negative finding given the extent of civil-society documentation of Cisco’s military-supplier relationship: the OHCHR database is scoped to activities specified in the 2013 Fact-Finding Mission report (chiefly settlement construction, services and natural-resource exploitation), not general military-technology supply, which is a distinct legal category. No public evidence identified of Splunk or Cisco being explicitly named within the body of Special Rapporteur Francesca Albanese’s June/July 2025 report “From economy of occupation to economy of genocide” (A/HRC/59/23), which is confirmed to name Microsoft, Alphabet and Palantir among technology firms ¹⁹.

Post-Acquisition Restructuring in Israel

Cisco has conducted layoffs affecting its Israeli operations as part of broader post-acquisition and global restructuring, including reported job cuts in Israel tied to a wider 4,000-position reduction ²⁰²¹.

Internal Governance, Content & Retail Policies

Employee Relations (Cisco, Parent, Post-Acquisition)

At least 32 Cisco employees are reported to have lost 288 family members in Gaza since October 2023 ⁴. Cisco employees organized “Bridge to Humanity” (B2H), described as the company’s largest pro-Palestine employee community, and built “WatermelonBot,” a tool that gathered over 1,770 signatures (roughly 2% of Cisco’s employee base) in June–July 2024 supporting divestment from Israel; Cisco subsequently terminated the bot ⁴²². On 25 March 2025, hours after the announced ban on internal discussion of the Middle East conflict, a pro-Palestine employee was terminated; Cisco stated the termination was for comments that “contribute[d] to a harmful work environment” and was “unrelated” to the employee’s political viewpoint ⁴. One week later, Cisco deleted the B2H chat room and its associated educational website ⁴. In December 2024, B2H members filed discrimination complaints with the EEOC, the California Labor Commissioner, and the NLRB, alleging suppression of political expression and workplace harassment ¹¹⁴. A roughly 30-page “Open Letter From Concerned Cisconians,” demanding Cisco sever its Israel business ties, circulated via BDS Movement channels in December 2024 ²³. In October 2025, a Jewish Cisco employee publicly resigned via an open letter titled “My labor will not contribute to Genocide and Apartheid of Palestinians,” citing Cisco’s Israel ties and collaboration with US immigration enforcement ²⁴. No public evidence identified of any Splunk-specific (pre-18 March 2024 acquisition) employee action, petition, or HR controversy regarding Israel-Palestine.

Platform, Editorial & Retail Policy

Splunk is enterprise data/security software with no consumer content-moderation, app-store, or editorial-platform function. No public evidence identified of algorithmic moderation, content suppression, or editorial-stance controversies concerning Splunk specifically. Splunk is likewise a software/SaaS vendor with no physical retail storefronts, dealership networks, or product country-of-origin labeling practices comparable to a consumer-goods company. No public evidence identified of labeling, sourcing, or product-categorization controversies involving Splunk and the region or settlements.

Brand Heritage & State Partnerships

Splunk hosted an Israeli government (Ministry of Energy) case study at its own .conf19 user conference in 2019, publicly archived on Splunk’s conference site - an institutional tie to an Israeli state ministry in the civilian/energy sector ⁸. Splunk maintains an active, Splunk-branded “Israel Splunk User Group” as a regional community and marketing channel ²⁵. At the parent-company level, Cisco CEO Chuck Robbins has publicly framed Cisco’s Israel relationship in state-partnership terms, describing Cisco as partnering “with countries around the world, from the US…to Israel…to Saudi Arabia to improve GDP, job growth, healthcare, education, inclusion, and more” ²⁶. Robbins separately described, in October 2023, shipping “technology to Israel…at the request of the country” ³ - language that frames the relationship as a government-request/state-partnership activity rather than standard commercial sales. No public evidence identified of Splunk or Cisco hosting Israeli government officials at corporate headquarters, receiving Israeli state honors, or sponsoring “Brand Israel”-type cultural or public-relations campaigns.

Lobbying, Advocacy, Financing & Logistics

OpenSecrets’ organizational profile for Splunk Inc. records no reported federal lobbying activity and no outside spending for the 2022 election cycle ²⁷. No public evidence identified of Splunk-specific PAC donations, leadership roles in geopolitical advocacy organizations, or lobbying specifically tied to Israel/Palestine policy or trade legislation. Splunk separately operates a corporate philanthropic giving program, Splunk Pledge, with published nonprofit-eligibility criteria ²⁸²⁹; no evidence was identified within the sources reviewed that this program directs funding toward Israel-specific advocacy or military-welfare beneficiaries.

At the parent-company level, Cisco Israel supported development of the “Israel Rises” digital platform for the IDF’s Home Front Command in October 2023 ¹²¹³. An internal November 2023 Cisco security-rollout document reportedly stated that “one of the asks for Israel War relief/support is to get Umbrella and/or SSE presence working in the country,” and an internal Cisco presentation from the same period was headlined “Never let a good crisis go to waste” ³ - both explicit internal characterizations of crisis-period resource mobilization directed at Israel. No public evidence identified of Splunk-specific (pre-acquisition) crisis asset mobilization, free-service donations, or logistics support directed at Israeli state, military, or NGO entities during the conflict.

Corporate Structure & Primary Mission

Splunk Inc. was a NASDAQ-listed (SPLK) commercial data-analytics, observability and security software company that ceased to be an independent public company on 18 March 2024, upon completion of Cisco’s approximately $28 billion all-cash acquisition at $157 per share ². Splunk Services Israel Ltd. is a standard private Israeli subsidiary, corroborated as active via Israeli corporate-registry mirrors ⁵⁶; SEC Exhibit 21 subsidiary schedules for fiscal years 2022 and 2023 were identified as filed with the SEC but could not be independently retrieved for direct-text confirmation in this review ³⁰³¹. No public evidence identified of any state-held golden share or charter provision tying Splunk’s or Cisco’s primary corporate mission to a specific state’s geopolitical goals. Splunk announced a 7% workforce reduction following the Cisco acquisition announcement ³², and Cisco has since conducted further restructuring, including reported layoffs affecting its Israeli operations ²⁰²¹.

Executive & Leadership Footprint

Splunk was co-founded in 2003 by Michael Baum, Rob Das, and Erik Swan. No public evidence identified of personal donations, family-foundation grants, or board roles by Baum, Das, or Swan directed at Israeli advocacy groups, parastatal organizations, or military-welfare funds.

Gary Steele, Splunk’s CEO from April 2022 through the Cisco acquisition, is on record discussing cyber-threat implications of the Russia-Ukraine conflict and China-Taiwan tensions in a business/cybersecurity-risk framing. No public evidence identified of a Steele statement specifically addressing the Israel-Gaza conflict. Splunk’s board included Richard P. Wallace and David Tunnell, appointed October 2022 ³³, and Graham Smith (Chairman) alongside technology executive Sri Viswanath, appointed March 2019 ³⁴. No public evidence identified connecting any named Splunk board member to Israeli defense firms, settlement-linked organizations, or pro-Israel/anti-BDS advocacy bodies.

Cisco’s Chief People, Policy & Purpose Officer Francine Katsoudas is the named executive who announced the 25 March 2025 internal restriction on discussion of the Middle East conflict ⁴. Cisco faced shareholder resolutions opposing its Israel business ties - a “Holy Land Principles” proposal and a “Heartland Initiative” human-rights/peacebuilding proposal - which a pro-Israel advocacy group states did not pass at a Cisco shareholder vote ²⁶. No public evidence identified of Cisco CEO Chuck Robbins holding board seats or advisory roles at AIPAC, FIDF, CFI, or other pro-Israel/anti-BDS advocacy organizations.

Separately, BDS Movement’s campaign materials name Splunk directly as a Cisco-owned product subject to boycott action, including in its “Dump Cisco Day of Action” call and its February 2025 Cisco Company Complicity Profile, which lists Splunk among Cisco’s related entities ³⁵¹⁴¹⁵. This contrasts with AFSC’s “Companies Profiting from the Gaza Genocide” page and Who Profits’ Cisco Systems profile, both of which document Cisco’s Israel-military ties in detail but do not list Splunk among Cisco’s Israeli subsidiaries - Who Profits instead names “Cisco International Israel Limited,” “Cisco Systems Israel Ltd.,” and “Lightspin Technologies Ltd.” ¹²³⁶. Civil-society organizations, via the Business & Human Rights Resource Centre, publicly called on Cisco to divest from Israeli military operations in March 2025, citing allegations that Cisco hardware powers surveillance and AI-targeting systems tracking Palestinians ¹³; Cisco’s formal response in April 2025 cited its “longstanding commitment to respecting human rights,” alignment with the UN Guiding Principles on Business and Human Rights, an indirect/channel-partner sales model, U.S. export-control compliance, and internal employee “listening sessions,” without directly confirming or denying the specific allegations ³⁷. A UK university-based BDS campaign also published a dedicated Cisco complicity dossier in November 2024 ³⁸.

End Notes