Radware
Israeli cybersecurity company selling DDoS mitigation, web application firewalls and application delivery controllers. Incorporated in Israel in 1996, listed on NASDAQ, revenue of $301.9m in 2025 and 1,377 employees. Runs 65 cloud security centres worldwide, two of them in Tel Aviv. Radware Cloud DDoS Service is listed on the UK Government's G-Cloud 14 framework through the reseller Axians Networks Limited, and its DDoS technology also ships inside Check Point's Quantum DDoS Protector appliances.
Take Action
Apply pressure where it matters. Use these tools and personalise your message with evidence from this page.
- Ask Your Public Body to Rule It OutTemplate letters to the public bodies, universities and health services that buy Radware, asking whether it is in use on their systems and that contracts not be renewed. Sent to each individually, never jointly
- Report New IntelligenceSubmit procurement records, framework call-offs or purchase orders naming Radware, DefensePro, Alteon, AppWall or Cloud DDoS Protection through the encrypted form
- Share This ProfileYour organisation may be running Israeli DDoS protection without knowing it, bought through a reseller or bundled inside another vendor's appliance
- Strategic AnalysisIn-depth analysis and engagement strategy
Before taking action, review our Code of Conduct for professional standards and ethical guidelines.
Help Us Hold Radware Accountable
Your skills and knowledge can strengthen this campaign. Join our volunteer research team or share insider information securely.
Leverage Your Expertise
Do you work in this sector? We need professionals who understand procurement cycles, regulatory compliance, and corporate governance. Don't just boycott - lead!
Decision-Maker Directory
Key individuals with influence over corporate partnerships and procurement decisions. The contact details shown are published business addresses, listed for professional correspondence only. Write to the role, not the person, and keep correspondence courteous and factual. Repeated, abusive or personal contact is unlawful harassment and damages the case being made.
Material Risk Framing
Frame your message around business risks. These talking points resonate with corporate stakeholders and institutional investors.
Radware is an Israeli company in Tel Aviv, with research and development concentrated there and reduced Israeli corporate tax under the preferred-enterprise regime. On 19 July 2024 the ICJ found Israel's continued presence in the occupied Palestinian territory unlawful; on 16 September 2025 a UN Commission of Inquiry concluded that Israel is committing genocide against Palestinians in Gaza. In January 2026 Israel's tax authority opened an inquiry into DC Protection, the DDoS supplier Radware bought from its founding family. DC Protection calls it 'a professional dispute regarding the applicable tax rate', and Radware is not a subject of the investigation.
Radware has no consumer brand and sells through resellers, so its reputation is carried by its partners and its buyers. It markets its Israeli role rather than minimising it: its release of 15 August 2023 announced that the Israeli media site Rotter had expanded its Radware protection 'after a series of Tsunami attacks were waged against Israeli websites during a recent hacktivist campaign'.
2025 revenue was $301.9 million, up 10%, with GAAP net income of $20.3 million. Radware held $422.9 million in cash, deposits and marketable securities at mid-2026 and repurchased $48.2 million of its shares in the first half. EMEA, which includes the UK, grew 18% to $111.3 million in 2025 but fell 2% in the second quarter of 2026. Legal & General Group is among the largest institutional holders at 30 June 2026.
Radware ran 65 cloud security centres with 30 Tbps of mitigation capacity at 6 January 2026, double a year earlier; two are in Tel Aviv. It had 1,377 employees at December 2025, with research and development concentrated in Israel. Always-on scrubbing and network routing integration make replacement a project rather than a switch, and its technology also ships inside Check Point's Quantum DDoS Protector appliances.
Product Alternatives
Ethical replacements tagged by what matters to you: cost, quality, ethics, sustainability, or local sourcing. Make the switch today.
Assess each alternative on its own record
These are functional substitutes for Radware's products, not endorsements. Several of the largest providers have their own Israeli research operations or commercial ties, and some are profiled elsewhere on this site. Check the supplier you are moving to before you move.
DDoS Mitigation and Web Application Firewalls
Direct substitutes for Radware Cloud DDoS Protection, DefensePro and AppWall. All are available to UK buyers, and most are on Crown Commercial Service frameworks directly or through resellers.
DDoS detection and mitigation specialist, headquartered in London and listed on the London Stock Exchange's AIM market (CNS), with operations in Edinburgh and Marlborough, Massachusetts.
The closest like-for-like British substitute for Radware's DDoS line, sold to service providers, hosting companies and enterprises. UK-listed, so shareholder engagement is available domestically.
Global edge network offering DDoS protection, web application firewall, bot management and CDN.
US-headquartered. The most common straight replacement for cloud DDoS scrubbing, with unmetered DDoS protection on all plans.
Enterprise DDoS protection, application security and edge delivery.
US-headquartered. Already used by UK public bodies, including an NHSX DDoS call-off placed through G-Cloud.
Application Delivery Controllers
Substitutes for Radware's Alteon load balancing and application delivery hardware and virtual appliances. Replacement here is a project rather than a switch, so plan it against a contract renewal.
BIG-IP application delivery controllers, load balancing and advanced WAF.
US-headquartered. The dominant ADC vendor and the most direct functional replacement for Alteon.
Commercial support and enterprise builds of HAProxy, the open-source load balancer, with an integrated WAF and bot management.
Open-source core, so there is no licence lock-in and the software can be run and audited in-house.
Cloud-native Protection Where You Already Host
If your workloads already sit with a hyperscaler, DDoS and WAF capability is available natively and needs no new supplier relationship.
Managed DDoS protection and web application firewall for workloads hosted on Amazon Web Services.
Shield Standard is included at no extra cost with AWS. Amazon has substantial Israeli operations, including under the Nimbus contract; assess separately.
DDoS defence and WAF policies for services behind Google Cloud load balancers.
Integrated with Google Cloud load balancing. Google has substantial Israeli operations, including under the Nimbus contract; assess separately.
Comparison Legend
Strategic Analysis
In-depth assessment of the company's position, vulnerabilities, and recommended approaches for effective engagement.
Lower severity, high vulnerability — momentum builders that fold quickly
Severity
5.0/10
(5 + 5) ÷ 2 = 5.0
Strategic Vulnerability
6.0/10
(6 + 6) ÷ 2 = 6.0
Learn about our methodology — companies are categorised based on severity (harm potential) vs strategic vulnerability (campaign leverage).
Why do these scores change?
Unlike static boycott lists, our targeting model is dynamic. This company's position on the matrix is re-evaluated continually as we verify new contracts, divestments, or policy changes. Your reporting directly impacts this score.
Radware keeps websites up when they are attacked: its appliances and 65 "scrubbing centres" absorb floods of junk traffic (distributed denial-of-service attacks) before a site goes down. It is an Israeli company, incorporated in Tel Aviv in 1996. It opened a second Tel Aviv centre on 2 September 2025, two weeks before a UN Commission of Inquiry found that Israeli authorities have committed and continue to commit acts of genocide against Palestinians in Gaza. Israel's continued presence in the occupied Palestinian territory was found unlawful by the International Court of Justice on 19 July 2024, and Radware's growth runs straight through it. In Britain its Cloud DDoS Service sits on a government purchasing framework that councils, universities and NHS bodies buy from, each purchase a separate, disclosable decision with an end date. Rivals sell the same thing.
Key Leverage Points
- Name the finding, not "ethical concerns". The International Court of Justice found on 19 July 2024 that Israel's continued presence in the occupied Palestinian territory is unlawful, and set out the consequences for economic dealings that entrench it. A UN Commission of Inquiry found on 16 September 2025 that Israeli authorities are committing acts of genocide against Palestinians in Gaza. The same Court had already found, on 26 January 2024, a real and imminent risk to the right of Palestinians in Gaza to be protected from acts of genocide, and ordered Israel to prevent them. Radware's products work. The case for ruling it out is those findings. Put them in the letter.
- Treat the framework listing as a decision point, not a fait accompli. Public bodies buy software through pre-agreed frameworks: an order against a fixed list, no fresh tender, and an expiry date on every call-off. In Britain that framework is G-Cloud 14, where Radware Cloud DDoS Service is listed through the reseller Axians Networks Limited. Each call-off is a separate, disclosable decision, and it expires. Ask when yours ends; substitutes exist (alternatives).
- Ask the buyer, because nobody else will tell you. Radware does not name customers in its contract announcements: the multi-year deal announced in December 2025 named only "a top-ten SaaS and IT service management leader". Freedom of information requests are the whole pipeline. Ask by product name: Cloud DDoS Protection, Cloud Web Application Service, DefensePro, Alteon, AppWall.
- Ask about Check Point too, or you will get an honestly wrong answer. Check Point's Quantum DDoS Protector appliances are built on Radware's Attack Mitigation System. A body that has ruled out Radware by name may still be running its technology under another badge. Name that appliance in the question.
- Do not run this as a share-price campaign. Radware holds $422.9 million in cash, deposits and marketable securities and bought back $48.2 million of its own shares in the first half of 2026, so divestment will not squeeze it. Procurement is the constraint.
Evidence Summary
Radware Ltd was organised under the laws of the State of Israel in May 1996 and its principal executive offices are at 22 Raoul Wallenberg Street, Tel Aviv. It had 1,377 employees at December 2025, with research and development concentrated in Israel. It takes reduced Israeli corporate tax under the state's preferred-enterprise regime, a benefit its own annual report to the US financial regulator warns may be reduced or withdrawn. It opened a second cloud security centre in Tel Aviv on 2 September 2025, and by 6 January 2026 ran 65 centres with double the mitigation capacity of twelve months earlier, at 30 Tbps. Chief executive Roy Zisapel called the new centres "central to our growth strategy" (timeline).
Radware does not merely happen to be Israeli; it markets the fact. Its own announcement of 15 August 2023 records that the Israeli media site Rotter expanded its Radware protection and dropped its previous vendor "after a series of Tsunami attacks were waged against Israeli websites during a recent hacktivist campaign". Its published threat research is likewise organised around attacks on Israel and its financial, government and telecoms sectors. It presents the defence of Israeli organisations as a selling point (sources).
Radware Cloud DDoS Service is listed on G-Cloud 14 at £2,440.67 to £86,889.66 per instance per month. The listing names Axians Networks Limited as the supplier and Radware as "the organisation whose services are being resold". Radware (UK) Limited, company number 03903389, has traded from Reading since January 2000. EMEA, which includes the UK, produced $111.3 million of 2025 revenue and grew 18%, the group's fastest-growing region that year, though it fell 2% in the second quarter of 2026.
Engagement Strategy
There is no consumer to persuade here; the work is procurement, and the ask is substitution rather than deprivation. Buy the same protection from a supplier that does not run its research and development in Israel or take reduced Israeli corporate tax under the preferred-enterprise regime.
- Public bodies. Ask one question a records officer can answer. Does your council, university, NHS trust or department hold any contract for Radware products, bought directly, through a reseller, or bundled inside Check Point's Quantum DDoS Protector? If it does, ask that the call-off not be renewed (letter templates).
- The reseller. Axians Networks Limited is a British company and the named counterparty on the framework, answerable to UK buyers for what it resells.
- Shareholders. Legal & General Group is among the largest institutional holders, so pension savers can put the same question at its annual meeting.
Evidence & Sources
Verified sources including NGO reports, regulatory filings, and primary documents. Use these to substantiate your correspondence. Entries marked First-hand were reported directly to this site and are published without identifying the source.
Search of the UK Government's Digital Marketplace returns two live G-Cloud 14 cloud software services carrying the Radware name: Radware Cloud DDOS Service and Radware Cloud Web Application Service. Both are supplied by AXIANS NETWORKS LIMITED. G-Cloud is the Crown Commercial Service framework through which central government, local authorities, NHS bodies and universities buy cloud services by call-off without running a fresh tender, so each purchase is a separate, disclosable decision by a named public body.
Open sourceThe framework entry itself. Priced at £2,440.67 to £86,889.66 per instance per month. The listing names AXIANS NETWORKS LIMITED as the supplier and identifies Radware as 'the organisation whose services are being resold'. The service description covers behavioural detection of network-layer and application-layer DDoS, real-time signature creation, SSL DDoS protection, and always-on or on-demand deployment using GRE or BGP diversion to Radware's scrubbing centres.
Open sourceActive private limited company, incorporated 4 January 2000, registered office 5th Floor, Thames Tower, Station Road, Reading, Berkshire RG1 1LX, SIC code for information technology consultancy activities. Accounts for the year ended 31 December 2025 are next due by 30 September 2026. This is the UK trading entity behind Radware's British business.
Open sourceRevenue of $82.3m, up 11% year on year, with GAAP net income from continuing operations of $3.9m, GAAP diluted EPS of $0.09 and non-GAAP diluted EPS of $0.30. Cloud annual recurring revenue passed $100m for the first time, reaching $103m, up 22%. Cash, deposits and marketable securities stood at $422.9m and share repurchases for the half year were $48.2m. By region: Americas $37.2m (up 24%), EMEA $27.3m (down 2%), APAC $17.8m (up 9%). The SkyHawk subsidiary has been classified as discontinued operations since the first quarter of 2026.
Open sourceThe Tel Aviv Income Tax Investigations Office opened an inquiry in January 2026 into DC Protection, formerly SecurityDAM, over the tax treatment of Radware's February 2022 purchase of the company from Yehuda Zisapel for $42.5m. DC Protection supplied Radware with DDoS mitigation technology. Investigators searched Rad Data Communications offices and seized documents. DC Protection disputes the allegations, saying 'this is a professional dispute regarding the applicable tax rate'. Radware itself is not a subject of the investigation.
Open sourceInstitutional ownership summary for RDWR on positions reported to 30 June 2026. Names Legal & General Group Plc among the largest holders, alongside Senvest Management, Morgan Stanley, Artisan Partners, Neuberger Berman and BlackRock. Legal & General is the principal UK institution on the register and the natural target for shareholder engagement from a UK base.
Open sourceFull-year 2025 revenue of $301.9m, up 10%, with GAAP net income of $20.3m, GAAP diluted EPS of $0.45 and non-GAAP diluted EPS of $1.15. Cash and investments of $460.6m. Cloud ARR $95.2m, up 23%; total ARR $251.0m, up 11%. Regional split: Americas $124.5m (up 6%), EMEA $111.3m (up 18%), APAC $66.1m (up 5%) - EMEA, which includes the UK, was the fastest-growing region of the year.
Open sourceRadware announces that its cloud security network now comprises 65 centres worldwide with 30 Tbps of attack mitigation capacity, double the 15 Tbps across more than 50 centres reported a year earlier. Centres added during 2025 were Bogota, Lima, Mumbai, Singapore and a second centre in Tel Aviv. DefensePro X is named as the mitigation backbone.
Open sourceRadware's own annual report to the SEC. Records that the company was organised in May 1996 under the laws of the State of Israel and that its principal executive offices are at 22 Raoul Wallenberg Street, Tel Aviv. It reports 2025 revenue of approximately $301.9m and operating income of $11.4m, against operating losses of $3.9m in 2024 and $31.7m in 2023. It states that the company benefits from Israeli tax incentives for preferred enterprises which 'may be terminated or reduced in the future', warns that 'political, economic and military instability in the Middle East or Israel may harm our business', and records that the estate of the late Yehuda Zisapel, with Nava Zisapel and Roy Zisapel, can exert significant influence over board elections and shareholder matters. It also discloses that a small number of original design manufacturers accounted for approximately 81% of 2025 direct product costs.
Open sourceA multi-year, multimillion-dollar DefensePro agreement with an unnamed 'top-ten SaaS and IT service management leader' which had faced repeated DDoS attacks ranging from 30 Gbps to over 600 Gbps. Radware does not name its customers in contract announcements, so public visibility of who buys its products depends almost entirely on the purchaser's own disclosure regime.
Open sourceThe Commission concludes on reasonable grounds that Israeli authorities and Israeli security forces have committed and continue to commit acts of genocide against Palestinians in the Gaza Strip, that they have and continue to have genocidal intent, and that the State of Israel bears responsibility for the failure to prevent genocide, the commission of genocide and the failure to punish genocide. The analysis covers Gaza over the period 7 October 2023 to 31 July 2025.
Open sourceRadware announces its second cloud security centre in Israel, in Tel Aviv, alongside one in Bogota, following earlier 2025 openings in India, Kenya and Peru. Roy Zisapel, president and chief executive, states that 'these investments are central to our growth strategy, delivering industry-leading cyber protection, reliability, and availability while keeping customer data and transactions local'. The announcement dates the company's Israeli infrastructure expansion precisely.
Open sourceThe International Court of Justice found Israel's continued presence in the occupied Palestinian territory unlawful and set out the obligations of states and the consequences for economic and trade dealings that entrench it. This is the framework within which an Israeli-incorporated company operating and employing at scale in Israel is assessed on this site.
Open sourceCheck Point's own blog states: 'In partnership with Radware, Check Point has integrated DDoS security into its Infinity Platform to provide unprecedented visibility and protection.' Check Point's Quantum DDoS Protector appliances are built on Radware's Attack Mitigation System. A buyer that has ruled out Radware by name may still be running Radware technology under another vendor's badge.
Open sourceInternational Court of Justice found a real and imminent risk to the right of Palestinians in Gaza to be protected from acts of genocide, and ordered Israel to prevent them. The Court made no finding on the merits of the genocide claim; the order's significance for suppliers is that it puts them on notice of a duty of prevention.
Open sourceRadware's own announcement that the Israeli media business Rotter expanded its use of Radware Cloud Application Protection Services to include Cloud Web DDoS Protection, replacing its existing security vendor, 'after a series of Tsunami attacks were waged against Israeli websites during a recent hacktivist campaign'. Primary evidence, from the company itself, that Radware supplies Israeli organisations and markets that role.
Open sourceUpdates & Milestones
- Cloud ARR passes $100 million
Second-quarter 2026 revenue of $82.3 million, up 11%, with cloud annual recurring revenue of $103 million and cash and investments of $422.9 million. Radware repurchased $48.2 million of its own shares in the first half of 2026. EMEA revenue fell 2% year on year.
- Record year reported
Full-year 2025 revenue of $301.9 million, up 10%, with GAAP net income of $20.3 million. EMEA, which includes the UK, grew 18% to $111.3 million and was the company's fastest-growing region.
- Cloud capacity doubled to 30 Tbps across 65 centres
Radware announces that its cloud security network has grown to 65 centres with 30 Tbps of mitigation capacity, double the 15 Tbps across more than 50 centres a year earlier. Two of the 65 are in Tel Aviv.
- Multi-year DefensePro contract with an unnamed SaaS provider
Radware announces a multi-year, multimillion-dollar DefensePro agreement with an unnamed 'top-ten SaaS and IT service management leader'. As with almost all its contract announcements, the customer is not named, so public visibility depends on the buyer's own disclosure.
- UN Commission of Inquiry finds genocide
The UN Independent International Commission of Inquiry concludes on reasonable grounds that Israeli authorities and Israeli security forces have committed and continue to commit genocide against Palestinians in Gaza, and that the State of Israel bears responsibility for it.
- Second Tel Aviv cloud security centre opens
Radware opens its second cloud security centre in Israel, in Tel Aviv, alongside a new centre in Bogota. Roy Zisapel describes the investments as 'central to our growth strategy'. Israeli infrastructure is expanded while the war on Gaza continues.
- ICJ finds the occupation unlawful
The International Court of Justice finds Israel's continued presence in the occupied Palestinian territory unlawful and sets out the consequences for states and for economic dealings that entrench it.
- Markets its defence of Israeli websites
Radware announces that the Israeli media business Rotter has expanded its Radware protection and replaced its previous security vendor 'after a series of Tsunami attacks were waged against Israeli websites during a recent hacktivist campaign'. The company presents its role protecting Israeli organisations as a selling point rather than a fact to be managed.
- Buys its DDoS technology supplier from the founding family for $42.5m
Radware acquires DC Protection, formerly SecurityDAM, from Yehuda Zisapel, father of chief executive Roy Zisapel, for $42.5 million. DC Protection supplied Radware with DDoS attack protection technology. The Israeli Tax Authority opened an investigation into the tax treatment of the transaction in January 2026; DC Protection says the matter is 'a professional dispute regarding the applicable tax rate', and Radware is not a subject of that investigation.
- Incorporated in Israel
Radware Ltd is organised as a corporation under the laws of the State of Israel and begins operations the following year. Its principal executive offices have remained in Tel Aviv ever since, and it takes reduced Israeli corporate tax under the state's preferred-enterprise regime.