Who Is Nir Zuk? The Palo Alto Networks Founder Who Invented Next-Gen Firewall

The Builders  |  Israeli Cyber

Updated July 3, 2026

Nir Zuk was an early Check Point engineer, then founded OneSecure — sold through NetScreen to Juniper for $4B — and in 2005 founded Palo Alto Networks. Now the world's largest cybersecurity company by market cap. Perpetual CTO. Palo Alto acquired CyberArk in February 2026 for $25B.

Zuk is the founder who called the firewall dead in 2004 — then built the company that redefined it. Next-Generation Firewall. Prisma Cloud. Cortex XDR. CyberArk inside Palo Alto Networks. Twenty years as CTO of one of the world's most-cited cybersecurity platforms, without ever taking a break from technical architecture.

Snapshot

Born	1971, Israel
Education	Tel Aviv University (computer science)
Military	IDF, Unit 8200
Estimated net worth	$1B+ (Forbes Israel 2025)
Built	Palo Alto Networks (Nasdaq: PANW, founder & CTO since 2005); OneSecure (founder, sold to NetScreen 2002; Juniper acquired NetScreen 2004 for $4B)
Prior role	Early Check Point engineer under Gil Shwed (1994–1999); principal architect on the stateful inspection commercialization
Public position	"The firewall is dead" — declared 2004, then built the company that redefined it
Palo Alto market cap	~$130B+ (July 2026)
Landmark deal	CyberArk acquisition, February 2026 — $25B, integrated identity-security pillar
Base	Silicon Valley / Israel

The Business Story

Zuk was born in Israel in 1971. He served in IDF Unit 8200. After the army he joined Check Point in 1994 — early enough to have worked directly on the commercialization of the stateful inspection firewall Gil Shwed, Marius Nacht, and Shlomo Kramer had invented. Zuk spent five years at Check Point as one of the principal engineers on the FireWall-1 codebase.

He left in 1999 to found OneSecure — an intrusion detection and prevention startup based in California with Israeli engineering. OneSecure was acquired by NetScreen Technologies in 2002 for approximately $45M. NetScreen was then acquired by Juniper Networks in 2004 for $4B — one of the largest security acquisitions of the era. Zuk spent time as CTO of security products at Juniper before leaving in 2005.

In 2005 he founded Palo Alto Networks. Santa Clara headquarters, Israeli engineering DNA. The thesis: the firewall Check Point had invented was obsolete against modern application-layer traffic. Zuk built the Next-Generation Firewall — inspection of application identity, user identity, and content in real time, rather than port-and-protocol filtering. He publicly declared "the firewall is dead" in 2004. Palo Alto Networks was the answer.

Palo Alto listed on the NYSE in July 2012 at a $5B valuation. By 2020 it had crossed $30B. By 2026 it is a ~$130B+ market cap company — the largest pure-play cybersecurity firm in the world by market capitalization. Zuk has served as CTO the entire time. He has never held the CEO title; Lane Bess, Mark McLaughlin, and Nikesh Arora have each run the company. Zuk architects.

Under Zuk's technical leadership, Palo Alto Networks has built three platforms: Strata (firewall), Prisma (cloud security), and Cortex (SOC / XDR / SIEM). Major acquisitions include Demisto (2019, ~$560M), Twistlock (2019, ~$410M), Expanse (2020, ~$800M), Bridgecrew (2021), Cider Security (2022), Talon (2023), Dig Security (2023), and — the largest — CyberArk in February 2026 for $25B, adding identity-security as the fourth platform pillar.

Why Zuk Matters in Israel

Palo Alto Networks is headquartered in California and treated by U.S. business press as an American company. It is Israeli-founded, with Israeli engineering leadership, and hundreds of Israeli engineers across Tel Aviv and Herzliya R&D centers. The CyberArk acquisition adds Petah Tikva-based CyberArk into the Palo Alto stack and creates the largest single Israeli-founded cybersecurity concentration outside Check Point. Zuk is the operator behind the dual-citation profile — American company, Israeli technical center.

What Palo Alto Networks Does Today

Palo Alto Networks (Nasdaq: PANW) is the world's largest pure-play cybersecurity company by market capitalization — approximately $130B+ as of July 2026, revenue north of $10B run-rate, roughly 15,000 employees. Four platforms: Strata (network security), Prisma (cloud security), Cortex (SOC / detection & response), and — post-CyberArk close in February 2026 — an integrated identity-security pillar under the CyberArk brand. Headquartered in Santa Clara. Israeli engineering operations in Tel Aviv and Herzliya.

Zuk's Key Holdings

• Founder stake in Palo Alto Networks (Nasdaq: PANW)
• Continues as CTO with day-to-day technical architecture responsibility
• Personal investments in Israeli cybersecurity early-stage — reported active investor in Israeli seed and Series A cyber rounds
• Notable public voice on category evolution — RSA, Black Hat, and Palo Alto Ignite appearances

Zuk's Legacy

Zuk invented a category — Next-Generation Firewall — inside the shadow of the category he had helped commercialize at Check Point. Then he built the company on top of it. Twenty years as CTO of a $130B market cap platform without ever taking the CEO title. The rare technical founder who kept the architecture role and let three different CEOs run the business. The technical arc from Check Point to OneSecure to Palo Alto Networks is the through-line of Israeli network security across three decades.

Why Zuk Matters Now

The CyberArk acquisition — closed February 11, 2026 for $25B — is the largest cybersecurity acquisition Palo Alto Networks has ever done and the second-largest Israeli-related cyber deal on record (after Google–Wiz). Zuk's task through 2027 is to integrate CyberArk's identity-security platform into the Cortex / Prisma stack while preserving CyberArk's institutional customer base. The integration will determine whether Palo Alto Networks becomes the four-pillar platform Zuk has architected, or whether identity-security remains a distinct business under a Palo Alto brand umbrella. The 2026–2027 chapter is the test.

FAQ

Who is Nir Zuk?
Nir Zuk (born 1971, Israel) is an Israeli software engineer and entrepreneur — the founder and Chief Technology Officer of Palo Alto Networks, the world's largest pure-play cybersecurity company by market capitalization. He is credited with inventing the Next-Generation Firewall category.

Who founded Palo Alto Networks?
Nir Zuk founded Palo Alto Networks in 2005 in Santa Clara, California. He has served as Chief Technology Officer continuously since the company's founding.

Was Nir Zuk at Check Point?
Yes. Zuk was an early engineer at Check Point Software Technologies from 1994 to 1999, working on the commercialization of the stateful inspection firewall architecture invented by Gil Shwed, Marius Nacht, and Shlomo Kramer.

What did Zuk do between Check Point and Palo Alto?
He founded OneSecure in 1999 — an intrusion detection and prevention startup. OneSecure was acquired by NetScreen Technologies in 2002, and NetScreen was subsequently acquired by Juniper Networks in 2004 for approximately $4B. Zuk served briefly as Juniper CTO of security products before leaving in 2005 to found Palo Alto Networks.

Did Palo Alto Networks buy CyberArk?
Yes. Palo Alto Networks announced the acquisition of CyberArk in 2025 and closed the transaction on February 11, 2026, for $25 billion — one of the largest cybersecurity acquisitions in history. CyberArk is being integrated as the identity-security pillar of the Palo Alto platform, with a planned secondary listing on the TASE under CYBR.

What is Nir Zuk's net worth?
Estimated at $1 billion or more (Forbes Israel 2025), primarily from his founder stake in Palo Alto Networks.

More from The Builders

• Gil Shwed: The Firewall Inventor Who Built Israeli Cyber
• Shlomo Kramer: The Three-Unicorn Cyber Founder
• Marius Nacht: Check Point Co-Founder, aMoon Architect
• Udi Mokady: The CyberArk Founder
• Assaf Rappaport: The Wiz Co-Founder Behind Israel's Largest Exit Ever
• Eyal Waldman: Mellanox and the $6.9B Nvidia Exit

---

The Olam Editorial Team | The Builders / הבונים