Two listing templates define Israeli cybersecurity on the public markets: Check Point (Israeli entity, NASDAQ primary) and Palo Alto Networks (Delaware entity, Nir Zuk's Unit 8200-to-Check Point founder lineage). Investor base, credibility, flexibility.
Public Markets · Israeli Cybersecurity · The Founder Diaspora · Updated August 2026
Two listing templates define the Israeli-founder cybersecurity industry on the public markets: the Check Point template — Israeli-domiciled entity, NASDAQ primary, optional TASE secondary — and the Palo Alto Networks template — Delaware entity, US listing, Israeli founder lineage carried without any Israeli listing at all. Every Israeli cybersecurity IPO of the last thirty years has picked one of the two. The choice determines the investor base, the regulatory posture, and the strategic optionality for the next twenty years. The February 2026 close of Palo Alto Networks' $25 billion acquisition of CyberArk — and the subsequent PANW secondary listing on the TASE under the ticker CYBR — added a third structural option: the acquirer-listing precedent, where a US company that absorbs an Israeli target lists on the TASE to retain Israeli institutional demand.
The Check Point Template — NASDAQ Primary, Israeli Domicile
Check Point Software (NASDAQ: CHKP) went public in June 1996. It was the first Israeli cybersecurity company to list on NASDAQ. Founded in 1993 by Gil Shwed, Marius Nacht, and Shlomo Kramer — three Israeli engineers with Unit 8200 backgrounds and the founding patent on stateful firewall inspection — Check Point built the public-market case study every Israeli cybersecurity company since has priced against.
The corporate structure is the anchor. Check Point Software Technologies Ltd. is an Israeli company, incorporated under Israeli law, headquartered in Tel Aviv, taxed primarily in Israel. Its ordinary shares trade on NASDAQ under CHKP. It does not dual-list on the Tel Aviv Stock Exchange. The Israeli-domicile-plus-NASDAQ-primary structure is "the Check Point template."
The template's advantage is jurisdictional clarity. The founders keep the operating base, the IP, the workforce, and the tax base in Israel — while accessing the deepest institutional investor pool in the world. The disadvantage is that Israeli retail investors and TASE-benchmarked institutional funds cannot buy the stock without foreign-market access.
The TASE Dual-Listing Regime
Israel amended its securities law in 2000 to allow dual-listing on the Tel Aviv Stock Exchange for Israeli companies already listed on a designated foreign exchange (NASDAQ, NYSE, LSE Main Market, and select others). The dual-listing regime lets an Israeli-domiciled company add TASE as a secondary listing without duplicative Israeli-standard financial reporting — the foreign-exchange filings are recognized.
Companies that took the dual-listing route include Nice Ltd. (NASDAQ: NICE / TASE), Tower Semiconductor (NASDAQ: TSEM / TASE), Elbit Systems (NASDAQ: ESLT / TASE), Nova Ltd. (NASDAQ: NVMI / TASE), and Camtek (NASDAQ: CAMT / TASE). Each adds TASE-benchmarked institutional demand — pension funds, kupot gemel, provident funds — to the NASDAQ investor base.
The dual-listing pattern is more common in industrial-technology and semiconductor names than in pure cybersecurity. Check Point and SentinelOne (NYSE: S) stayed single-listed on their US venue. CyberArk was also single-listed on Nasdaq before its acquisition — but now trades on TASE via the Palo Alto Networks secondary listing (see below). The reason cybersecurity names historically avoided dual-listing: US cybersecurity buyers — Wellington, Fidelity, T. Rowe, the specialist software funds — are the marginal price-setters, and TASE does not meaningfully change the demand curve.
The January 2026 shift of the TASE from Sunday-Thursday to Monday-Friday trading may change this calculus. The calendar alignment removes the operational friction that deterred some issuers from dual-listing, and the push for MSCI Europe inclusion could bring new passive-fund demand to TASE-listed names.
The PANW Precedent — Nir Zuk and the Delaware Founder Diaspora
Palo Alto Networks (NASDAQ: PANW) is not an Israeli company. It is a Delaware corporation headquartered in Santa Clara, California. Its ordinary shares are listed on NASDAQ.
But its founder is Israeli.
Nir Zuk founded Palo Alto Networks in 2005. Unit 8200 (military intelligence), Check Point (early engineer, stateful-inspection architecture), OneSecure (co-founder; acquired by NetScreen), NetScreen (CTO; acquired by Juniper Networks for $4 billion in 2004). He left Juniper to found Palo Alto Networks around the thesis that stateful firewalls — the technology he helped ship at Check Point — were structurally insufficient against application-layer threats.
PANW is now a top-three global cybersecurity company by market capitalization, sitting above Check Point on every institutional buyer's ranking. The company's engineering base is significantly Israeli — Tel Aviv is one of its largest R&D centers, expanded through acquisitions of Demisto (2019, $560M), Twistlock (2019, $410M), PureSec (2019), Bridgecrew (2021, $200M), Talon Cyber Security (2023, $625M), and most consequentially, CyberArk ($25B, closed early 2026). But the corporate entity, the tax base, and the primary shareholder register are US-anchored.
The PANW-TASE Secondary Listing: A New Structural Option
When Palo Alto Networks completed its $25 billion acquisition of CyberArk in early 2026, it did something no other major US acquirer of an Israeli company had done: it listed on the Tel Aviv Stock Exchange under the ticker CYBR — a secondary listing designed to retain Israeli institutional demand that had previously held CyberArk directly.
This created a third structural option beyond the Check Point and PANW templates. A US-domiciled acquirer of an Israeli target can now list on the TASE to capture the Israeli pension, provident, and institutional capital that would otherwise exit the name on acquisition. The PANW-TASE listing is a precedent that may attract additional US acquirers of Israeli companies to do the same — particularly if the MSCI Europe inclusion campaign succeeds and TASE-listed names gain new passive-flow demand.
Investor-Base Breadth
The Check Point template accesses the NASDAQ institutional base and, if dual-listed on TASE, Israeli pension and provident capital. The PANW template accesses the same NASDAQ base plus US-corporate governance signaling, US federal procurement eligibility, and US index inclusion (S&P 500, Russell) that triggers passive-flow demand at scale. PANW is in the S&P 500. Check Point is not. The passive-flow differential across a decade of index inclusion is meaningful.
For a cybersecurity company selling into the US federal market — DoD, DHS, intelligence community — the Delaware entity is more than optics. It is contract eligibility.
Institutional Credibility Positioning
The Israeli-domicile template carries specific institutional credibility. Check Point is priced as an Israeli company — it reports in dollars but carries Israeli sovereign risk in its multiple. During the 2023-2024 October 7 window, Israeli-domiciled tech names traded at compressed multiples relative to US-domiciled peers. PANW did not carry the same discount.
The Delaware template carries different credibility. PANW is priced as a US cybersecurity company that happens to have significant Israeli R&D. The US-corporate wrapper insulates the multiple from sovereign-risk pricing during Israeli crises. The trade-off: the company loses the Israeli-technology brand equity that Check Point wears explicitly.
The Founder Choice, 2026
Israeli cybersecurity founders in 2026 face the same choice Gil Shwed faced in 1996 and Nir Zuk faced in 2005. The pattern is now clearer — and the data set is larger.
The largest Israeli cybersecurity outcomes of the past two years: Wiz's $32 billion Google acquisition (Assaf Rappaport, Ami Luttwak — Israeli founders, Delaware entity, headquartered in New York), CyberArk's $25 billion sale to Palo Alto Networks (Israeli-domiciled, Nasdaq-listed), and Palo Alto Networks' hundred-billion-plus market cap (Israeli founder, Delaware entity). The Check Point template scales. The PANW template scales further. Both work.
The variable that pushes the choice: founders who built inside the US venture ecosystem and sold to US enterprise buyers tend toward PANW. Founders who kept gravity in Tel Aviv and grew inside the Israeli institutional network tend toward Check Point. Neither is default.
Post-October 7 Rebalance
The 2023-2024 window changed one variable. Israeli sovereign risk became repriceable. Israeli-domiciled tech names traded at temporary discounts. Delaware-wrapped Israeli-founder companies did not. For roughly six quarters, the PANW template looked meaningfully better on a risk-adjusted basis.
The window has narrowed. Israeli-domiciled multiples have compressed the discount. Check Point's multiple has recovered most of the October 7 gap. The structural bet has resumed: the listing template matters less than the technology, the customers, and the execution.
Frequently Asked Questions
Is Check Point Software dual-listed on NASDAQ and TASE?
No. Check Point (NASDAQ: CHKP) trades only on NASDAQ. It is an Israeli-domiciled company headquartered in Tel Aviv but does not dual-list on the TASE.
What is the NASDAQ-TASE dual-listing regime?
Israel's 2000 securities law amendment allows Israeli companies listed on designated foreign exchanges to add TASE as a secondary listing without duplicative reporting. Companies using the regime include Nice, Tower Semiconductor, Elbit, Nova, and Camtek.
Did Palo Alto Networks list on the TASE?
Yes. Following its $25 billion acquisition of CyberArk (closed early 2026), Palo Alto Networks added a secondary listing on the TASE under the ticker CYBR. This was the first time a major US acquirer of an Israeli company listed on the TASE to retain Israeli institutional demand — a structural precedent.
Who founded Palo Alto Networks?
Nir Zuk, an Israeli cybersecurity engineer (Unit 8200, Check Point, NetScreen). Palo Alto Networks is incorporated in Delaware, headquartered in Santa Clara, listed on NASDAQ under PANW.
Was CyberArk acquired?
Yes. Palo Alto Networks acquired CyberArk for approximately $25 billion, closed early 2026. CyberArk was previously an Israeli-domiciled, Nasdaq-listed company headquartered in Petah Tikva. It was one of the largest Israeli technology exits in history.
What is the difference between the Check Point template and the PANW template?
Check Point template: Israeli entity, NASDAQ primary, optional TASE secondary. PANW template: Delaware entity, US listing, no Israeli listing (until the TASE secondary listing precedent). Check Point preserves Israeli brand equity and tax structure. PANW captures S&P 500 inclusion, federal procurement eligibility, and sovereign-risk insulation.
Part of Olam's Israeli Cybersecurity Cohort coverage. See also: Check Point · CyberArk · Palo Alto Networks · Wiz · Tel Aviv Stock Exchange · Israeli Companies on Nasdaq