The Dual-Listing Model: NASDAQ-TASE and the PANW Precedent
Two listing templates define Israeli cybersecurity on the public markets: Check Point (Israeli entity, NASDAQ primary) and Palo Alto Networks (Delaware entity, Nir Zuk's Unit 8200-to-Check Point founder lineage). Investor base, credibility, flexibility.
Public Markets · Israeli Cybersecurity · The Founder Diaspora · Updated July 2026
Two listing templates define the Israeli-founder cybersecurity industry on the public markets: the Check Point template — Israeli-domiciled entity, NASDAQ primary, optional TASE secondary — and the Palo Alto Networks template — Delaware entity, NYSE listing, Israeli founder lineage carried without any Israeli listing at all. Every Israeli cybersecurity IPO of the last thirty years has picked one of the two. The choice determines the investor base, the regulatory posture, and the strategic optionality for the next twenty years.
The Check Point Template — NASDAQ Primary, Israeli Domicile
Check Point Software (NASDAQ: CHKP) went public in June 1996. It was the first Israeli cybersecurity company to list on NASDAQ, and one of the first Israeli technology IPOs of the modern cycle. Founded in 1993 by Gil Shwed, Marius Nacht, and Shlomo Kramer — three Israeli engineers with Unit 8200 backgrounds and the founding patent on stateful firewall inspection — Check Point built the public-market case study every Israeli cybersecurity company since has priced against.
The corporate structure is the anchor. Check Point Software Technologies Ltd. is an Israeli company, incorporated under Israeli law, headquartered in Tel Aviv, taxed primarily in Israel. Its ordinary shares trade on NASDAQ under CHKP. It does not dual-list on the Tel Aviv Stock Exchange. The Israeli-domicile-plus-NASDAQ-primary structure is what the industry now calls "the Check Point template."
The template's advantage is jurisdictional clarity. The founders keep the operating base in Israel, the IP in Israel, the workforce in Israel, and the tax base in Israel — while accessing the deepest institutional investor pool in the world for pricing, secondary offerings, and M&A currency. The disadvantage is that Israeli retail investors and TASE-benchmarked institutional funds cannot buy the stock without foreign-market access.
The TASE Dual-Listing Regime
Israel amended its securities law in 2000 to allow dual-listing on the Tel Aviv Stock Exchange for Israeli companies already listed on a designated foreign exchange (NASDAQ, NYSE, LSE Main Market, and select others). The dual-listing regime lets an Israeli-domiciled company add TASE as a secondary listing without duplicative Israeli-standard financial reporting — the foreign-exchange filings are recognized.
Companies that took the dual-listing route include Nice Ltd. (NASDAQ: NICE / TASE), Tower Semiconductor (NASDAQ: TSEM / TASE), Elbit Systems (NASDAQ: ESLT / TASE), Nova Ltd. (NASDAQ: NVMI / TASE), and Camtek (NASDAQ: CAMT / TASE). Each adds TASE-benchmarked institutional demand — pension funds, kupot gemel, provident funds — to the NASDAQ investor base. Each pays the incremental cost of a second listing venue in exchange for a broader shareholder register.
The dual-listing pattern is more common in industrial-technology and semiconductor names than in pure cybersecurity. Check Point, CyberArk (NASDAQ: CYBR), and SentinelOne (NYSE: S) all stayed single-listed on their US venue. The reason is investor-base composition: US cybersecurity buyers — Wellington, Fidelity, T. Rowe, the specialist software funds — are the marginal price-setters, and dual-listing on TASE does not meaningfully change the demand curve for a US-market-priced cybersecurity name.
The PANW Precedent — Nir Zuk and the Delaware Founder Diaspora
Palo Alto Networks (NASDAQ: PANW) is not an Israeli company. It is a Delaware corporation headquartered in Santa Clara, California, listed on NASDAQ since July 2012. It carries no TASE presence. Its ordinary shares are not eligible for Israeli mutual funds under the local-listing rule.
But its founder is Israeli.
Nir Zuk founded Palo Alto Networks in 2005. His resume is the Israeli cybersecurity template compressed into one line: Unit 8200 (military intelligence, signals corps), Check Point (early engineer, worked on the stateful-inspection architecture that became the industry standard), OneSecure (co-founder; acquired by NetScreen), NetScreen (CTO; acquired by Juniper Networks for $4 billion in 2004). He left Juniper to found Palo Alto Networks the following year around the thesis that stateful firewalls — the technology he helped ship at Check Point — were structurally insufficient against modern application-layer threats.
PANW is now a top-three global cybersecurity company by market capitalization, sitting above Check Point on every institutional buyer's ranking. The company's operating and engineering base is significantly Israeli — Tel Aviv is one of Palo Alto Networks' largest R&D centers globally, expanded through the acquisitions of Demisto (2019, $560 million), Twistlock (2019, $410 million), PureSec (2019), Bridgecrew (2021, $200 million), and Talon Cyber Security (2023, $625 million). But the corporate entity, the tax base, the executive suite, and the primary shareholder register are all US-anchored.
The PANW precedent is what every Israeli cybersecurity founder now compares Check Point against. The comparison is not about the technology. It is about the listing structure and everything downstream.
Investor-Base Breadth
The Check Point template gives the founder access to the NASDAQ institutional base and, if dual-listed on TASE, to Israeli pension and provident capital. The total addressable capital pool is deep but tilted heavily to US institutional money.
The PANW precedent gives the founder access to the same NASDAQ base — plus the US-corporate governance signaling that reads directly to US federal procurement buyers, US institutional benchmarks that include US-domiciled cybersecurity companies specifically, and the US index inclusion mechanics (S&P 500, Russell) that trigger passive-flow demand at scale. PANW is in the S&P 500. Check Point is not. The passive-flow differential across a decade of index inclusion is meaningful.
For a cybersecurity company selling into the US federal market — DoD, DHS, intelligence community — the Delaware entity is more than optics. It is contract eligibility.
Institutional Credibility Positioning
The Israeli-domicile template carries a specific institutional credibility. Check Point is priced by the market as an Israeli company. It reports in dollars but carries Israeli sovereign risk in its multiple. During the 2023–2024 October 7 window, Israeli-domiciled tech names traded at compressed multiples relative to US-domiciled peers with similar Israeli engineering exposure. PANW did not carry the same discount.
The Delaware template carries a different credibility. PANW is priced by the market as a US cybersecurity company that happens to have significant Israeli R&D. The US-corporate wrapper insulates the multiple from sovereign-risk pricing during Israeli crises. The trade-off is that the company loses the Israeli-technology brand equity that Check Point wears explicitly.
Neither is right or wrong. They price different things.
Operational Flexibility
The Check Point template constrains the founder to Israeli corporate law, Israeli labor law, Israeli tax rulings, and the specific set of exit paths available to Israeli-domiciled public companies. Cross-border M&A as an acquirer is manageable but adds complexity around the Israeli-side approvals.
The PANW template gives the founder the full flexibility of Delaware corporate law and the US M&A market. Palo Alto Networks has acquired more than twenty Israeli cybersecurity companies since 2019 — from Demisto through Talon — with the Delaware-parent wrapper handling the transactions inside the US corporate M&A envelope. Check Point acquires far less. The listing structure is not the only reason, but it is not zero.
The Founder Choice, 2026
Israeli cybersecurity founders in 2026 face the same choice Gil Shwed faced in 1996 and Nir Zuk faced in 2005. The pool of candidates has grown. The pattern is now clearer.
Companies that stay Israeli-domiciled and NASDAQ-listed: Check Point, CyberArk, SentinelOne. Companies that go Delaware and skip the Israeli listing entirely: Palo Alto Networks (Zuk), Zscaler (Jay Chaudhry — not Israeli-founder, included for structural comparison), and the recent Wiz path before its $32 billion Google acquisition (Assaf Rappaport, Ami Luttwak — Israeli founders, Delaware entity, headquartered in New York before the sale).
The pattern that emerges: the largest Israeli cybersecurity outcomes of the last five years — Wiz's $32 billion Google sale, Palo Alto Networks' hundred-billion-plus market capitalization, SentinelOne's IPO valuation — split roughly evenly between the two templates. The Check Point template scales. The PANW template scales further. Both work.
The variable that pushes the choice one way or the other is the founder's US institutional footprint. Founders who built companies inside the US venture ecosystem, took US board members early, and sold primarily to US enterprise buyers tend toward the PANW template. Founders who kept the operating gravity in Tel Aviv, took Israeli board representation, and grew inside the Israeli institutional network tend toward the Check Point template. Both templates are defensible. Neither is default.
Post-October 7 Rebalance
The 2023–2024 window changed one variable in the calculation. Israeli sovereign risk became a repriceable factor in institutional portfolios. Israeli-domiciled tech names traded at temporary discounts. Delaware-wrapped Israeli-founder companies did not. For roughly six quarters, the PANW template looked meaningfully better on a risk-adjusted basis.
The window is now narrowing. Israeli-domiciled multiples have compressed the discount as the geopolitical envelope stabilized. Check Point's multiple has recovered most of the October 7 gap. CyberArk's multiple never fully de-rated. SentinelOne remained inside its normal range.
The structural bet has resumed: the listing template matters less than the technology, the customers, and the execution. The founder who picks correctly on those three will build a durable business under either template. The founder who picks incorrectly will fail under either.
Nir Zuk picked Delaware. Gil Shwed picked NASDAQ-Israel. Both templates built industry-defining businesses. The next Israeli cybersecurity founder to IPO — and there are several in the 2026–2028 pipeline — will pick one of the two. The choice will be visible on the first S-1 or F-1 filing. The consequences will play out over the following twenty years.
Frequently Asked Questions
Is Check Point Software dual-listed on NASDAQ and TASE?
No. Check Point Software Technologies (NASDAQ: CHKP) is listed only on NASDAQ. It is an Israeli-domiciled company headquartered in Tel Aviv but its ordinary shares trade solely on NASDAQ. This structure — Israeli entity, NASDAQ primary, no TASE secondary — is the anchor case for what Israeli cybersecurity founders call "the Check Point template."
What is the NASDAQ-TASE dual-listing regime?
Israel amended its securities law in 2000 to allow Israeli-domiciled companies already listed on a designated foreign exchange (including NASDAQ, NYSE, and LSE Main Market) to add the Tel Aviv Stock Exchange as a secondary listing without duplicative Israeli-standard financial reporting. Companies using the regime include Nice, Tower Semiconductor, Elbit Systems, Nova, and Camtek.
Who founded Palo Alto Networks?
Palo Alto Networks was founded in 2005 by Nir Zuk, an Israeli cybersecurity engineer with a Unit 8200 background. Zuk was previously an early engineer at Check Point Software, co-founded OneSecure (acquired by NetScreen), and served as CTO of NetScreen (acquired by Juniper Networks in 2004). Palo Alto Networks is incorporated in Delaware, headquartered in Santa Clara, and listed on NASDAQ under PANW.
Is Palo Alto Networks an Israeli company?
No, not in corporate terms. Palo Alto Networks is a Delaware corporation headquartered in Santa Clara, California. Its founder Nir Zuk is Israeli, and its Tel Aviv R&D center is one of the largest in the company — expanded through the acquisitions of Demisto, Twistlock, PureSec, Bridgecrew, and Talon Cyber Security. But the corporate entity, tax base, and primary shareholder register are all US-anchored.
What is the difference between the Check Point template and the PANW template?
The Check Point template is Israeli-domiciled entity with NASDAQ primary listing (optional TASE secondary). The PANW template is Delaware entity with NASDAQ listing and no Israeli listing at all. The Check Point template preserves Israeli-technology brand equity and Israeli tax structure. The PANW template captures US index inclusion, US federal procurement eligibility, and insulation from Israeli sovereign-risk pricing during regional crises.
Which Israeli cybersecurity companies dual-list on TASE?
Israeli cybersecurity companies broadly do not dual-list on TASE. Check Point, CyberArk, and SentinelOne are all single-listed on their US venue. Dual-listing on TASE is more common among Israeli semiconductor and industrial-technology names, including Nice, Tower Semiconductor, Elbit Systems, Nova, and Camtek.
What is Nir Zuk's background?
Nir Zuk served in the Israeli Defense Forces' Unit 8200 signals-intelligence corps. He joined Check Point Software as an early engineer, where he worked on the stateful-inspection firewall architecture that became the industry standard. He then co-founded OneSecure (acquired by NetScreen), served as CTO of NetScreen (acquired by Juniper Networks for $4 billion in 2004), and founded Palo Alto Networks in 2005.
Part of Olam's Israeli Cybersecurity Cohort coverage. See the pillar: The Israeli Cyber Cohort.
