The Wassenaar Arrangement and Israel's Implementation Without Membership

The Wassenaar Arrangement is the 42-country multilateral regime that governs the international trade in conventional arms and dual-use goods and technologies. It is the framework that decides — at the international policy level — which categories of technology can move between which countries under what licensing conditions. Its rules run through the export-control regimes of every major producer of advanced technology on the planet.

Israel is not a member. It has never been a member. And it has, since roughly 2016, operated one of the most substantive unilateral implementations of the Wassenaar framework of any non-member state. The gap between Wassenaar membership and Wassenaar implementation is where Israeli cyber-export policy actually lives — and understanding it is the key to understanding why the November 2021 cut from 102 countries to 37 was possible under Israeli law without any legislative change.

What Is the Wassenaar Arrangement, and Which Countries Belong to It?

The Wassenaar Arrangement on Export Controls for Conventional Arms and Dual-Use Goods and Technologies was established on July 12, 1996, at a meeting in Wassenaar, Netherlands. Its stated purpose: "to contribute to regional and international security and stability, by promoting transparency and greater responsibility in transfers of conventional arms and dual-use goods and technologies, thus preventing destabilising accumulations."

The arrangement replaced the Coordinating Committee for Multilateral Export Controls (COCOM), the Cold War-era regime that had governed Western technology exports to the Soviet bloc. Where COCOM was structured to constrain a specific bloc of countries, Wassenaar was structured around transparency, national implementation, and periodic multilateral coordination — without a bloc-specific target.

The 42 members as of mid-2026: Argentina, Australia, Austria, Belgium, Bulgaria, Canada, Croatia, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, India, Ireland, Italy, Japan, Latvia, Lithuania, Luxembourg, Malta, Mexico, Netherlands, New Zealand, Norway, Poland, Portugal, Republic of Korea, Romania, Russian Federation, Slovakia, Slovenia, South Africa, Spain, Sweden, Switzerland, Turkey, Ukraine, United Kingdom, and United States. Russia's participation has been affected by post-2022 sanctions but formal membership has not been withdrawn.

Israel, China, Belarus, and Iran are not members. Each for different reasons. Israeli non-membership has never been a subject of active accession diplomacy — it reflects a mix of Israeli policy preferences and, historically, resistance from Arab members to Israeli inclusion in transparency regimes over defense exports.

How Does Wassenaar Actually Work, and What Are the Two Control Lists?

Wassenaar operates through two control lists, updated annually by member consensus at the plenary in Vienna:

The Munitions List — conventional arms and defense articles
The List of Dual-Use Goods and Technologies, itself divided into a Basic List, a Sensitive List, and a Very Sensitive List

Items on the lists are subject to national export licensing by member states. The arrangement itself does not impose penalties for member non-compliance and does not require a specific licensing decision — the "consensus rule" is that each member decides its own licensing outcomes, with transparency and information sharing on transfers and denials.

The Basic List covers dual-use items with legitimate commercial applications but potential military use. The Sensitive List covers items where destabilizing accumulations could occur. The Very Sensitive List covers items where transfers should be limited to specifically authorized end users — the closest thing Wassenaar has to a hard restriction.

Member states report semi-annually on their transfers of Wassenaar-controlled items. Denial notifications are shared among members — the "no-undercut" rule discourages a member from approving a transaction another member has denied. Compliance with the no-undercut rule is a matter of member good faith, not enforceable obligation.

Why Isn't Israel a Wassenaar Member, and What Does That Mean Operationally?

Israeli non-membership has three principal explanations:

Historical resistance. Multiple Arab states — several of which are Wassenaar members — have historically opposed Israeli inclusion in multilateral export-control regimes. The consensus-based accession rules require unanimity among existing members, which has functionally blocked Israeli accession without an active accession campaign that Israel has not pursued.

Israeli policy preference. Non-membership preserves Israeli licensing flexibility. Wassenaar's transparency and information-sharing obligations would require Israel to disclose defense export data to a multilateral forum that includes states with which Israel has hostile or fragile relations. The SIBAT annual disclosure — the principal public data on Israeli defense exports — is Israeli-controlled disclosure, not multilateral.

US-Israel bilateral relationship. The substantive concerns Wassenaar addresses — transparency and no-undercut with the United States — are largely handled through the US-Israel bilateral defense-cooperation architecture rather than through a multilateral forum. The ITAR retransfer authorization layer, the Foreign Military Financing coordination, and the periodic US-Israel export-control consultations do the substantive work.

Operationally, non-membership means Israel is not bound by Wassenaar's consensus decisions on control-list updates, is not obligated to share denial notifications with other members, and is not committed to the no-undercut rule. Israel implements the Wassenaar substance where it aligns with Israeli interests; it does not implement where it does not.

How Does Israel Implement Wassenaar Without Being a Member?

Israel has, since roughly 2016, operated a substantive unilateral implementation of the Wassenaar dual-use framework. The mechanism is the Trade Levy Directorate inside the Ministry of Economy, which administers the Israeli Order for Free Export — the domestic regulation that lists controlled dual-use goods and defines the licensing regime.

The Israeli Order for Free Export tracks the Wassenaar Dual-Use List with high fidelity. When Wassenaar updates the list at the annual plenary, Israel typically updates the Order for Free Export within months. The Israeli approach is not to translate Wassenaar categories directly, but to implement the substance in Israeli regulatory language. The result is functional equivalence without formal alignment.

For defense articles, the Defense Export Controls Agency (DECA) inside the Ministry of Defense administers the Israeli Munitions List, which similarly tracks the Wassenaar Munitions List with modifications reflecting Israeli-specific categories and priorities. The 2007 Defense Export Control Law provides the statutory framework; Wassenaar provides the substantive template.

The dual-track Israeli implementation — Ministry of Economy for civilian dual-use, Ministry of Defense for defense articles — mirrors the substantive Wassenaar structure (Dual-Use List + Munitions List) without formal Wassenaar accession.

What Happened With the 2013 Intrusion Software Amendment?

At the December 2013 Wassenaar plenary, member states agreed to add intrusion software and IP network communications surveillance systems to the Dual-Use List. The amendment was aimed at commercial spyware exports — the same category of technology that would, seven years later, land NSO Group and Candiru on the US Entity List.

Wassenaar defined "intrusion software" as software specifically designed or modified to avoid detection by monitoring tools, or to defeat protective countermeasures, of a computer or network-capable device, and performing extraction of data or information, or modification of the standard execution path of a program or process to allow the execution of externally provided instructions. The definition was broad. Implementation across member states was uneven.

The United States implemented the intrusion software amendment through a proposed BIS rule in 2015 that drew widespread industry pushback for its scope. The rule was withdrawn, revised, and eventually implemented in narrower form. The European Union implemented through the EU Dual-Use Regulation with member-state variations.

Israel's implementation was unilateral and preceded the formal Wassenaar update in some respects. The MOD had operated a cyber-export licensing regime since the early 2010s. The 2013 Wassenaar amendment gave Israel a multilateral template to align with without changing its licensing authority or scope.

How Does the 2021 Cyber Tightening Connect to Wassenaar?

The November 2021 reduction from 102 countries to 37 operated within the Wassenaar substantive framework but outside its multilateral coordination. The Israeli MOD applied a Wassenaar-style dual-use control to intrusion software (the substance) with an Israeli-specific approved-country list (the mechanism).

Because Israel is not a Wassenaar member, the tightening did not require multilateral consultation, did not trigger denial-notification obligations to other members, and did not implicate the no-undercut rule. Israel could tighten unilaterally in response to the US Entity List additions without any Wassenaar procedural step.

The paradox: Israel implements Wassenaar substance more restrictively than many actual Wassenaar members on cyber-offensive tools, while remaining outside the multilateral framework that ostensibly governs the category.

How Does Wassenaar Relate to the Other Multilateral Export Control Regimes?

Wassenaar is one of four principal multilateral export-control regimes. Each covers a distinct technology category with different membership, procedures, and control approaches:

Wassenaar Arrangement — conventional arms and dual-use goods (42 members)
Nuclear Suppliers Group (NSG) — nuclear-related dual-use materials, equipment, and technology (48 participating governments)
Missile Technology Control Regime (MTCR) — missile technology and related dual-use goods (35 members)
Australia Group — chemical and biological weapons-related dual-use (43 members plus the European Union)

Israel is a non-member of all four. And Israel implements substantive elements of all four unilaterally, through the Ministry of Economy and Ministry of Defense export-control regimes. The Ministry of Economy Trade Levy Directorate administers the civilian dual-use tracks aligned with all four regimes' substantive controls. DECA administers the defense-article tracks.

The pattern is consistent: unilateral implementation of multilateral substance, without formal accession. It gives Israel flexibility that formal accession would constrain, at the cost of exclusion from the multilateral coordination fora where actual export-control policy is negotiated.

Does Israeli Non-Membership Give Israeli Firms Any Advantage?

The flexibility argument runs in Israel's favor in narrow cases. Israeli firms can, in principle, ship items to destinations that Wassenaar members would deny under no-undercut obligations. In practice, the space for this is small — because the Israeli licensing regime tracks Wassenaar substance, and because Israeli firms face parallel US export-control exposure via EAR, ITAR, and the Foreign Direct Product Rule.

What Israeli non-membership does provide is administrative flexibility. Israel can tighten (or loosen) faster than multilateral consensus would allow. The 2021 cyber cut is the reference case. Israel cut in weeks; Wassenaar would have taken a year or more to reach consensus on an equivalent policy shift.

The disadvantage: exclusion from the coordination fora. Israeli policymakers do not sit at the table where Wassenaar categories are updated, where new control-list items are debated, and where enforcement coordination happens. Israel implements the outputs. It does not participate in the inputs.

What Could Change About Israeli Non-Membership Going Forward?

Three factors could shift the calculus:

Abraham Accords implications. With UAE and Bahrain now normalized, and with active dialogue involving Saudi Arabia, some of the historical political resistance to Israeli Wassenaar accession may soften. But moving from softened opposition to consensus accession is a substantial diplomatic effort that neither Israel nor its partners have prioritized.
US policy pressure. Post-2021, the United States has increasingly pushed Israel toward closer alignment with US-led export-control policy. Formal Wassenaar accession would be one path; deeper US-Israel bilateral coordination is another. The bilateral track has moved further.
China exposure dynamics. As US-China technology competition deepens, and as Wassenaar members increasingly coordinate policy toward China, Israeli non-membership may become a more visible gap. Israeli firms selling into China face parallel scrutiny from Washington that Wassenaar members handle through the multilateral framework.

None of these factors point to accession as likely in the short term. Israeli non-membership is the standing state, and the implementation-without-accession model has proven durable.

What Should Israeli Firms Understand About Wassenaar Even If Israel Isn't a Member?

Four practical points:

The Israeli Order for Free Export tracks Wassenaar substance. An Israeli firm classifying its product for dual-use licensing is effectively classifying against Wassenaar categories, even where the Israeli regulatory language differs.
Wassenaar members' licensing decisions affect Israeli commercial reality. An Israeli customer in a Wassenaar member country may face import-side restrictions on Israeli goods that reflect member-state Wassenaar obligations. Understanding member licensing practice is part of understanding Israeli export commercial exposure.
Wassenaar list updates preview Israeli list updates. When Wassenaar adds a new item at the annual plenary, Israeli firms in that category should expect the Trade Levy Directorate or DECA to add a substantively equivalent Israeli control within twelve months.
The Israeli implementation gap is a compliance asset in some cases. Where Wassenaar and Israeli implementation diverge — often for administrative reasons rather than substantive ones — Israeli firms can operate under the Israeli standard for Israeli-side compliance, while still needing to consider member-state receiver-side implications.

Wassenaar is the multilateral framework Israel is not in. It is also, quietly, the framework that shapes the substance of what Israel controls, when, and how. The implementation-without-accession model gives Israel administrative flexibility that has proven durable — even as the strategic environment around export-control policy shifts.

Related in Olam: