Zscaler

Key Findings

• Economic: Zscaler acquired Israeli technology companies Trustdome (2021), Canonic (2023), and Avalor (2024); Avalor and Zscaler Israel remained listed as significant Israeli subsidiaries in September 2025.^{1, 2, 3}
• Political: Zscaler has offices in Ramat Gan and an Israeli R&D centre; We-Ankor publicly presents itself as a Zscaler partner in Israel, although the record does not establish current sales volume.^{4, 5, 6}
• Military: No public evidence identified of contracts, tenders, deployments, or named customers involving the IDF, Israeli Ministry of Defense, Israeli intelligence bodies, or other Israeli security agencies.^{4, 5, 7}
• Not found: No public evidence identified in the reviewed materials of Israeli surveillance, biometric, settlement, occupied-territory, or Israeli government-cloud deployments attributable to Zscaler.^{4, 5, 8}

Target Profile

Key Facts:

• Zscaler was incorporated in Delaware in September 2007 as SafeChannel, Inc., and renamed Zscaler, Inc. in August 2008.⁵
• FY2025 revenue was reported as $2.673 billion, with 7,923 worldwide employees as of 31 July 2025; Israel-specific revenue and employment were not disclosed.⁵
• Zscaler reports one reportable segment and describes its business as a cloud-security platform.⁵

Executive Summary

Zscaler is a U.S.-incorporated, publicly listed cloud-cybersecurity company with a documented corporate and research-and-development nexus to Israel. The strongest established economic evidence is its acquisition of Israeli companies: Trustdome Limited in 2021 for approximately $31.1 million, Canonic Security Technologies Ltd. in 2023 for $16.5 million, and Avalor Technologies Ltd. in 2024 for $256.7 million.^{1, 2, 3} Its filings identify Israel as an R&D-centre location and list Avalor Technologies LTD and Zscaler Israel LTD as significant Israeli subsidiaries.^{5, 10}

The documented political nexus is principally operational presence and commercial-market activity in Israel. Zscaler’s contact page lists Zscaler and Avalor offices at One Tower in Ramat Gan, on separate floors.⁴ We-Ankor describes itself as a Zscaler partner in Israel and as providing Zscaler secure-access and zero-trust network-access solutions; a 2025 republication describes it as Zscaler’s “leading partner in Israel,” but the underlying account referred to expansion planned for 2023 and does not establish current sales volume.^{6, 11}

The audits do not establish military or digital complicity. No public evidence identified of a Zscaler contract, deployment, procurement award, tender, named customer, or service agreement involving the IDF, Israeli Ministry of Defense, Israeli intelligence bodies, Israel Prison Service, Border Police, Project Nimbus, settlement authorities, or another Israeli security body.^{4, 5, 7} Zscaler’s U.S. Department of War Impact Level 5 authorization and Defense Innovation Unit record demonstrate U.S. defence-sector relevance, not an Israeli defence contract or Israeli end use.^{7, 12, 13}

No public evidence identified in the reviewed materials of Zscaler-owned Israeli data centres, Israeli sovereign-cloud participation, Israeli data-residency commitments, biometric or facial-recognition products, Israeli surveillance contracts, or AI supplied for Israeli military, intelligence, settlement, or autonomous-systems use.^{4, 5, 8} The company was not named in the reviewed 2023 and 2025 OHCHR settlement-business database updates or the specified UN Human Rights Council reports; these are document-scoped non-findings and do not establish universal absence of indirect activity or later evidence.^{14, 15, 16}

Under the fixed, human-vetted V6.5 methodology, the documented Israeli acquisitions, R&D footprint, subsidiaries, and partner channel produce the highest score in Economic, while the continuing Israel market presence produces a lower Political score. The resulting BRS is 602, placing Zscaler in Tier B (Severe Complicity). The zero military and digital scores are material findings: allegations in those domains were not verified by the audited record.

Timeline of Relevant Events

Corporate Overview

Zscaler, Inc. is a Delaware corporation with principal executive offices in San Jose, California, operating as a consolidated public-company group with wholly owned subsidiaries.⁵ Its disclosed business is cloud cybersecurity, including network security, access control, inspection, data-loss prevention, and zero-trust services rather than physical manufacturing, construction, or logistics.^{5, 12}

The audited Israeli corporate footprint includes an Israeli R&D centre, Zscaler Israel LTD, and Avalor Technologies LTD.^{5, 10} Zscaler’s contact page lists separate Zscaler and Avalor offices at One Tower, 21–23 Abba Hillel Silver Road, Ramat Gan; this establishes office-location evidence but not workforce, revenue, customer identity, data-processing activity, or operational scale.⁴

Trustdome, Canonic, and Avalor were acquired Israeli technology companies. The reviewed sources establish that Canonic and Avalor technologies were integrated into Zscaler’s cloud platform, but do not resolve whether Trustdome or Canonic remain separate legal or operating entities after acquisition.^{1, 3, 5, 10} STKI listed Internet-Bynet and We-Ankor as selected Israeli integrators/providers for Zscaler SASE, while the reviewed evidence does not identify an Israeli defence, settlement, or occupied-territory customer through those channels.^{6, 19}

Domain Summaries

Military: Military

Mechanism of Involvement

No public evidence identified of a Zscaler contract, tender award, framework agreement, memorandum, deployment, or named customer involving the Israeli Ministry of Defense, IDF, Israel Prison Service, Border Police, Israeli intelligence bodies, or another Israeli security body.^{4, 5, 7}

Zscaler’s March 2026 U.S. Department of War Impact Level 5 authorization describes a defence-oriented U.S. cybersecurity offering for users including warfighters, bases, coalition networks, and expeditionary environments.¹² The available product description concerns network security, access control, inspection, and data-loss prevention rather than targeting, fire control, weapons integration, kinetic effects, or a purpose-built Israeli tactical product.¹²

No public evidence identified of Zscaler supply-chain integration with Israeli defence primes; Israeli military-base sustainment or logistics services; physical-infrastructure work in occupied territory; or manufacture, integration, maintenance, or supply of Israeli weapons systems, munitions, strategic platforms, or critical weapons subsystems.^{5, 7, 19}

Counter-Arguments and Evidence Limits

Zscaler’s strongest defence is that the record establishes civilian cloud-security operations and Israeli R&D/acquisition activity, not Israeli defence work. U.S. defence authorization and DIU procurement pathways are not evidence of an Israeli contract, Israeli customer, or Israeli end use.^{12, 13}

The absence findings are bounded by accessible records and checked materials. They do not prove that no indirect use could exist, but no public evidence identified supports attribution of an Israeli military relationship to Zscaler.^{4, 5, 7}

Named Entities and Evidence Map

Digital: Digital

Mechanism of Involvement

Zscaler operates a cloud-security platform. Its Avalor acquisition was described as adding a security-data fabric, with Unified Vulnerability Management as an initial application; the available records do not describe biometric hardware, facial recognition, retail surveillance, autonomous weapons, military targeting, or Israeli state AI deployment.^{5, 18}

No public evidence identified of Zscaler biometric systems, retail-surveillance deployments, Israeli surveillance contracts, Israeli government-cloud participation, Israeli data-residency commitments, Israeli cloud-region capacity, Israeli data centres, or services supplied to Israeli military, intelligence, settlement, or autonomous-systems users.^{4, 5, 8}

Counter-Arguments and Evidence Limits

The strongest contrary interpretation is that Israeli R&D, acquired cybersecurity technology, and Ramat Gan offices may support Zscaler’s global product development. The audits do not establish the Israeli centre’s headcount, product allocation, customers, data-processing role, public-sector work, or deployment geography.^{4, 5}

The absence conclusion is limited to the reviewed filings, corporate records, regulatory and civil-society materials, and court and investigative searches. It does not exclude undisclosed reseller relationships or indirect deployments, but no public evidence identified supports a digital-complicity nexus.^{4, 5, 8}

Named Entities and Evidence Map

Economic: Economic

Mechanism of Involvement

Zscaler’s central documented nexus is sustained economic integration with Israel’s cybersecurity sector. It acquired Trustdome for approximately $31.1 million in 2021, Canonic for $16.5 million in 2023, and Avalor for $256.7 million in 2024.^{1, 2, 3} The company reported integrating Canonic and Avalor technologies into its cloud platform.^{3, 5}

Zscaler maintains an Israeli R&D centre and, as of September 2025, listed Avalor Technologies LTD and Zscaler Israel LTD as significant Israeli subsidiaries.^{5, 10} These facts establish Israeli acquisition spending, corporate integration, and operational presence. They do not establish Israel-specific revenue, employment, tax payments, profit flows, supplier relationships beyond acquired technology companies, or the local economic scale of the subsidiaries.^{5, 10}

No public evidence identified of Israeli physical-product manufacturing, component sourcing, warehouses, Israel-origin product labelling, Israeli critical-infrastructure designation, Israeli state ownership, sovereign-bond holdings, tax incentives, or quantified Israel-specific profit repatriation.^{5, 9}

Counter-Arguments and Evidence Limits

Zscaler may reasonably contend that its acquisitions and Israeli R&D are ordinary commercial activity within a global cybersecurity business, not evidence of state alignment, settlement activity, or defence supply. It reports financial results on a consolidated basis and does not disclose Israeli revenue, profit, taxes, payroll, or local employment; the audits therefore do not quantify the economic contribution.⁵

The record also does not establish Trustdome’s or Canonic’s present separate legal status. Their historical acquisition cannot be treated as evidence of an ongoing independent operating entity without further documentation.^{1, 3, 5, 10}

Named Entities and Evidence Map

Political: Political

Mechanism of Involvement

The audited political nexus consists of Israeli operational presence and commercial representation rather than documented advocacy or state partnership. Zscaler lists offices in Ramat Gan, maintains an Israeli R&D centre, and has Israeli-incorporated subsidiaries.^{4, 5, 10} We-Ankor publicly describes itself as a Zscaler partner in Israel providing Zscaler secure-access and zero-trust offerings.^{6, 11}

Zscaler and affiliates reported $110,000 in U.S. lobbying expenses for Q4 2023. The accessible filing does not identify Israel-, Palestine-, boycott-, or Middle East-specific lobbying, a foreign entity, or geopolitical advocacy organisation.¹⁷

No public evidence identified of an official Zscaler statement on Israel-Palestine, Gaza, 7 October, Israeli military operations, or Palestinian civilian harm; corporate donations, sponsorships, free services, or crisis resources directed to Israeli or Palestinian conflict-related bodies; formal Israeli state partnership; or operation, sales, contracts, or reseller locations in settlements, East Jerusalem, the West Bank, the Golan Heights, or other occupied territory.^{4, 5, 17}

Counter-Arguments and Evidence Limits

Zscaler’s strongest defence is that commercial presence in Israel is not equivalent to political endorsement or settlement involvement. No public evidence identified of an IDF, Ministry of Defense, Israeli-security-agency, Project Nimbus, settlement, or occupied-territory contract, and the company is not documented as having adopted an Israel-Palestine public stance.^{4, 5, 7}

The company’s absence from the reviewed OHCHR settlement-business database updates and specified UN reports is only document-scoped. These non-mentions do not establish absence from all procurement records, OHCHR materials, indirect deployments, or future operations.^{14, 15, 16}

Named Entities and Evidence Map

BDS-1000 Score

Method: V6.5.

• V_MAX: 7.00 Avg_OTHERS: 1.10
• BRS Score: 602 Tier: B (Severe Complicity)

V_MAX is driven by the documented acquisitions of Israeli cybersecurity companies, integration of their technology, Israeli subsidiaries, and an Israeli R&D footprint. Political reflects the continuing Israeli presence and partner channel, while Military and Digital remain zero because the audited record did not verify Israeli military, intelligence, surveillance, settlement, or occupied-territory deployments. The method is scale-free, evidence-only, and human-vetted.

Methodology Note

• This dossier relies only on the four supplied domain audits and their cited documentary sources.
• Scores assess documented activity rather than allegation volume or reputational inference.
• Impact measures activity type; M measures scale; P measures directness.
• Divested, exited, dissolved, or otherwise discontinued operations are mitigated where the record establishes them; unresolved legal status is not treated as proof of continuing activity.
• Entity attribution is limited to documented company relationships; there is no transitive attribution from Israeli incorporation, partners, investors, or general sector association.
• Settlement operations would be dual-counted in Economic and Political where documented. “No public evidence identified” is used where the audited checks found no supporting evidence.