Check Point History and Development Founded over 30 years ago by Gil Shwed, Check Point has continued its mission to secure the digital world for everyone, everywhere. From Firewall-1, the first stateful firewall to dynamic security innovations and to the emergence of the Check Point Platform powered by Artificial Intelligence (“AI”), Check Point has demonstrated its ability to defend against and prevent what is coming. Check Point secures organization’s AI transformation with unified security architecture of the Hybrid Mesh Networks, Workspace, Exposure Management and AI Security Platform. Through its Check Point Services product, Check Point provides comprehensive technical services to fulfill the cyber security needs of its global customers. Business Overview The Check Point Mission – Securing Our Customers’ AI Transformation We are constantly doing the hard work of getting our solutions ready to enable a secure AI transformation. Our solutions deliver leading protection across infrastructure, to make sure organizations are protected from AI-driven attacks. We continually modify and improve our security platform services by: • Regularly updating our security solutions to defend against the full spectrum of evolving threats. • Securing the entirely new AI-driven attack surfaces. Requiring purpose-built security capabilities. • Deeply integrating AI into our solutions to enable AI-first security teams. • Applying a comprehensive prevention-first approach to protect against the most sophisticated attacks. • Exploring and implementing novel AI security through ecosystem collaboration, and design partnership Check Point assists organizations in defending against AI-driven attacks, securing the new AI attack surfaces they are creating, and using AI to make security operations faster and simpler. To secure this transformation, organizations need a simpler and more unified approach to cybersecurity - one that protects networks, users, exposures, and AI systems as part of a single security strategy. This is the approach Check Point has established through the following four security pillars: 1. Hybrid Mesh Network Security Check Point provides a unified security and connectivity foundation across all environments - data centers, hybrid cloud, internet and perimeter gateways, and branch locations. 2. Workspace Security Check Point protects the workspace with unified, multi-layer security across devices, browsers, email, SaaS apps, and remote access, all managed from a single console. This enables seamless productivity with uncompromising protection - users stay safe, data stays secure, and business moves faster. 3. Exposure Management Check Point Exposure Management combines three core elements: First, threat intelligence powered by Check Point’s unique global telemetry. Second, smart vulnerability prioritization based on comprehensive internal and external asset discovery, with continuous detection of vulnerabilities and misconfigurations. Third, safe and actionable remediation, applying changes intelligently across existing security controls and reducing operational burden on security teams. 4. AI Security Our AI Security pillar combined with our prevention-first approach protects the full AI stack - from employee AI usage, to enterprise applications and agents, and the models, data, and infrastructure behind them. Together, these pillars provide a unified platform to secure our customers’ entire AI journey. 26 Our Strategy: A Platform Built on Four Pillars 1. Hybrid Mesh Network Security In the AI era, network security challenges are intensifying. Customer networks and applications are borderless and everywhere, expanding the attack surface, increasing the blast radius, and exposing gaps across fragmented security controls. We secure hybrid mesh environments through a unified, prevention-first foundation that spans data centers, hybrid cloud, branch, and Secure Access Service Edge (“SASE”), delivering leading security effectiveness as validated by NSS Labs. We provide consistent enforcement through a single AI-powered management and security control plane that delivers superior proactive prevention, hyperscale-grade security with an optimized user experience. Our security platform services include: • Check Point Firewall (Data Center, Perimeter, Branch): Our Gateways and firewalls provide comprehensive security beyond any Next Generation Firewall (“NGFW”) and are designed to manage the most complex security policy requirements and prevent the most sophisticated cyber-attacks. Our security gateways are powered by over 60 security services, including the industry’s complete range of security capabilities including firewalling, intrusion prevention, application control, anti-malware, anti-phishing, DNS security, as well as sandboxing and file sanitization of email and web documents. All of our security gateways receive immediate threat data from our ThreatCloud AI global threat intelligence system, which leads to increased catch-rate of the most sophisticated threats. • Check Point Maestro Hyperscale Firewall: This security platform delivers on-demand scalability for requirements that range from 30 Gbps to over 1 Terabits-per-second of threat prevention. Organizations of any size can benefit from Maestro’s intelligent load balancing firewall cluster design. • Firewall Software R82.10 (security operating system & software): All of our security gateways and firewalls share the same underlying security operating system. Our latest threat prevention and security management release, launched in December 2025 delivers top-rated threat prevention, cloud services, and performance acceleration for Check Point firewalls. This operating system provides security controls and management that are a foundational and integral part of today’s security infrastructure. R82.10 delivers over 20 new capabilities for enterprise customers including: - Supporting Safe AI Adoption: R82.10 strengthens oversight of AI-driven activity by detecting unauthorized Generative AI (“GenAI”) tools, expanding visibility into AI applications such as ChatGPT, Claude, Gemini, among others, and monitoring model context protocol (“MCP) usage to protect AI-powered workflows. - Strengthening Hybrid Mesh Network Security: Organizations gain more consistent protection across distributed environments with centralized internet access management for SASE and firewalls, simplified gateway-to-SASE connectivity, and improved identity and device posture validation to support “Zero Trust” framework at scale. - Taking a Prevention-First Approach to Modern Threats: R82.10, introduces phishing protection that works without HTTPS inspection, adaptive IPS to reduce alert fatigue, and new Threat Prevention Insights to highlight misconfigurations and posture gaps before attackers can exploit them. - Eliminating Silos with a Unified Security Platform: R82.10 expands our open-garden architecture with more than 250 integrations. These integrations allow organizations to apply endpoint posture signals from their existing providers directly within Check Point policies, improving identity-based controls and Zero Trust enforcement. • Check Point Spark Firewall: This family of security gateways and firewalls designed for small and medium businesses (“SMBs”) feature advanced threat prevention performance up to 5 Gbps threat prevention. These firewalls are easy to deploy and manage, and they integrate communication and security into an “all in one” solution. Spark security gateways provide protection focused on SMBs as well as Enterprises branch offices. • AI Powered Security Management: Our AI-powered unified security management control plane – improves security and optimizes operations through an agentic and autonomous platform, and AI-powered Policy management. 27 2. Workspace Security – Where Humans Meet AI Workspace Security Challenges AI is now embedded across the entire modern workspace: spanning browsers, SaaS applications, email, collaboration tools, and endpoints. While this proliferation is driving productivity, it is also enabling faster, highly personalized attacks powered by AI. At the same time, organizations are relying on disjointed security tools that lack integrated protection across the user environment. Without dedicated workspace security, AI itself becomes the largest insider risk, amplifying the potential for data leakage, misuse, and social engineering. Modern workspace security must evolve to meet these threats. It needs to protect users as they interact with AI‑driven tools and applications, prevent sensitive data exposure, and block highly targeted, AI‑generated phishing attacks, particularly through email, before they can cause harm. The Check Point offering – Workspace Security We offer services to protect the workspace through the deployment of remote-access enabled, unified, multi-layer security across devices, browsers, email, SaaS apps. With a single console to manage all features and built-in 360° threat prevention, organizations can achieve seamless productivity with uncompromised protection. Through the deployment of our security platform with workspace-optimized features such as browsers security, endpoint security, email security, and SaaS security, users and employees stay safe, data stays secure, and business moves faster. Our Workspace Security platform includes features such as: • Check Point Email Security: secures users’ email clients and gives protection for third-party providers such as Microsoft Office 365, Exchange, Google G, among others. • Check Point Endpoint Security: protects users’ PCs from ransomware, phishing, and malware, and minimizes breach impact with autonomous detection and response capability. • Check Point Mobile Security: protects employees’ mobile devices against malicious apps and network or operating systems attacks. • Check Point Browser Security: provides secure, fast, and private web browsing by inspecting all Secure Sockets Layer traffic directly on the endpoint. • Check Point XDR: provides extended detection, prevention, and response capabilities. Our strength and leadership in email security sets us apart. We are a recognized leader in the 2025 Gartner® Magic Quadrant™ for Email Security Platforms, reflecting both the maturity of our technology and the trust placed in us by the market. In 2025 alone, we added 20,000 new customers, underscoring our continued growth and relevance. We significantly elevate user protection through advanced AI capabilities, including GenAI‑driven security awareness training with personalized phishing simulations, as well as AI‑powered mailbox observations that proactively protect against malicious emails while reducing administrative overhead. In addition, we deliver a truly unified user experience, combined with a defense‑in‑depth approach to phishing, ensuring comprehensive protection across multiple layers rather than reliance on a single control. 28 3. AI Security- Securing the AI full stack AI is reshaping the cyber security threat landscape by introducing new risks as organizations rapidly implement AI applications, agents, and adopt the use of GenAI models. These risks include data leakage through the accidental inclusion of sensitive information in AI prompts or the uploading of sensitive data to GenAI or other tools, as well as AI threats such as jail breaking or model inversion and uncontrolled autonomy from agents acting beyond their scope. We established AI Security as a foundational pillar of our strategy in order to address these emerging and evolving threats. Our end-to-end AI security stack protects employee usage, enterprise applications and agents, and the models, data, and infrastructure that power them. • Check Point AI Workforce Security – delivers instant visibility into all sanctioned and shadow AI usage, preventing sensitive data exposure, and enabling safe productivity. • Check Point AI Agent Security – protects enterprise copilots, chatbots, and agentic systems from prompt injections, jailbreaks, and malicious output while applying real-time guardrails across AI interactions. • Check Point AI Red Teaming – provides continuous red-teaming, model robustness testing, and compliance readiness for the AI systems that increasingly drive business operations. Our platform is built from the ground up on security‑native AI models and prevention‑first intelligence, rather than retrofitted analytics. This foundation enables us to stop threats before they materialize, rather than reacting after the fact. 4. Threat Exposure Management – Stopping AI-Era Attacks Powered by the combined strengths of the recently acquired companies Cyberint Technologies Ltd. and Veriti Security Ltd., coupled with Check Point’s strong visibility, our Threat Exposure Management platform delivers real time situational awareness by unifying threat intelligence, dark web insights, attack surface visibility, exploitability context, and automated remediation. Using Gartner’s Continuous Threat Exposure Management (“CTEM”) framework, we correlate real‑world attacker behavior with enterprise assets to identify, prioritize, and remediate the exposures that matter most – before attackers can exploit them. Our security platforms are designed around three core elements: • Check Point Threat Intelligence - Leveraging Check Point’s extensive global visibility and decades of expertise, we map the attacker ecosystem – tracking active campaigns, exploited CVEs, and high‑risk IOCs, while learning from real‑world attacks. • Check Point Vulnerability Detection & Prioritization- Automatically discovering your attack surface, misconfigurations, and CVEs – across Check Point scanners and existing tools – we deliver a single, prioritized list of true risks enriched with intelligence and protection context. • Check Point Safe Remediation - Going beyond prioritization, we safely reconfigure existing security controls to close exposures and block threats with minimal operational friction. What Sets Us Apart • Strong intelligence depth, powered by Check Point’s leading visibility and advanced processing, delivering insights that matter. • End-to-end actionability, combining smart prioritization with automated, safe remediation – reducing mean time to remediate from days to hours and preparing organizations for an era of AI driven attacks. Overview of Check Point Services: Check Point offers its customers with end-to-end customized solutions to fortify defenses, optimize threat response, maximize their investment on products with advisory and professional services offering to elevate their cyber posture. 29 • Managed Services: Comprehensive support for Check Point and third-party systems, delivered with predefined Service Level Agreements (“SLAs”) for a fixed monthly fee. • Managed Detection and Response (“MDR/MPR”): A fully managed SecOps platform providing access to Check Point analysts, researchers, and incident response resources. • Incident Response Services: Structured services to address and mitigate security incidents efficiently. • Security Consulting Services Managed Services: Comprehensive support for Check Point and third-party systems, delivered with predefined Service Level Agreements (“SLAs”) for a fixed monthly fee. • Security Consulting Services: Expertise in threat exposure management, threat intelligence, and risk assessment. • Professional Services: End-to-end design, deployment, optimization, and operational support for Check Point solutions. • Training Services: Programs focused on security awareness and executive training to enhance organizational security maturity. • Flex Credits: Prepaid service credits offering one year of flexible access to a range of cyber security services. Check Point Technology Leadership in 2025 During 2025 we were endorsed by market analysts for our leadership position in 28 reports. Below are some of the highlight reviews: Gartner o Gartner® Magic Quadrant™ Leader for Hybrid Mesh Firewalls becoming the only vendor to be listed as a Leader for the 24th time, 2025 o Gartner® Magic Quadrant™ Challenger for Endpoint Protection Platforms, 2025 o Gartner® Magic Quadrant™ Leader for Email Security Platforms, 2025 Forrester o The Forrester Wave™: Enterprise Email Security, 2025 o The Forrester Wave™: Zero Trust Platform Providers, 2025 Frost & Sullivan o Frost & Sullivan® Radar Leader for Endpoint Security, 2025 o Frost & Sullivan® Radar Leader for Secure Access Service Edge, 2025 o Frost & Sullivan® Radar Leader for Managed Detection and Response (MDR), 2025 GigaOm o GigaOm® Radar Leader for CIEM Solutions V2.0 2025 o GigaOm® Radar Leader for Cloud Workload Security, 2025 o GigaOm® Radar Leader for Enterprise Firewall 2025 o GigaOm® Radar Leader for Extended Detection & Response (EDR) 2025 o GigaOm® Radar Leader for Zero Trust Network Access (ZTNA), 2025 o GigaOm® Radar Leader for Anti-Phishing, 2025 Miercom o For the fourth consecutive year, Check Point attained Secure Certification in Miercom Enterprise & Hybrid Mesh Firewall Benchmark Report 2025. Miercom lab tests showed 99.9% malware block rate against Zero+1 Day attacks, 99.7% of phishing attacks, and 98% intrusion prevention for high & critical threats. 30 Acquisition and other Corporate Information In February 2026, we acquired 100% of the share capital of Cyclops Security Ltd. a privately held Israeli company and a leader in Cyber Asset Attack Surface Management (“CAASM”). In February 2026, we acquired 100% of the share capital of Cyata Security Ltd. a privately held Israeli company specializing in discovering, understanding, and governing autonomous AI agents. In February 2026, we acquired the talent of Rotate Ltd., a privately held Israeli company to drive continued growth and momentum for Workspace solutions within the managed service providers (MSP) sector. In October 2025, we acquired 100% of the share capital of Lakera AI AG, a privately held Swiss company, a leading AI-native security platforms for Agentic AI applications. In June 2025, we acquired 100% of the share capital of Veriti Security Ltd., a privately held Israeli company and a provider of a fully automated, multi-vendor pre-emptive threat exposure and mitigation platform. In February 2025, we entered into a strategic partnership with Wiz Ltd. to address the growing challenges enterprises face securing hybrid cloud environments. This collaboration is intended to bridge the longstanding gap between cloud network security and Cloud Native Application Protection (“CNAPP”) through a deep technological integration and strategic business alliance, delivering an industry-leading unified, holistic security solution. In September 2024, we acquired 100% of the share capital of Cyberint Technologies Ltd., a privately held Israeli company that specializes in comprehensive external risk management solutions, including the detection and takedown of impersonating website, phishing and social media accounts, as well as stolen credentials and leaked data associated with organizations. In October 2023, we acquired 100% of the share capital of rmsource Inc., a privately held US-based company and a provider of managed security, cloud and IT services, to expand Infinity Global Services with new managed security services across networks, cloud and security operations. In September 2023, we acquired 100% of the share capital of Perimeter 81 Ltd., a privately held Israeli company and a leading provider of Zero Trust Network Access (ZTNA) and Secure Service Edge (SSE) software. In September 2023, we acquired 100% of the share capital of Atmosec Ltd., a privately held Israeli company that specializes in the rapid discovery and disconnection of malicious SaaS applications, preventing risky third-party SaaS communications, and rectifying SaaS misconfigurations. In February 2022, we acquired 100% of the share capital of Spectral Cyber Technologies Ltd., a privately held Israeli company and key innovator in developer-first security tools designed by developers for developers, to extend our cloud solution. In September 2021, we acquired 100% of the share capital of Avanan, Inc., a privately-held US-based company providing cloud email security, and the developer of a patented application-programming interface (API) solution to stop email threats before arriving to the inbox (inline), for both internal and external emails using AI based engines. Further details regarding the material events in the development of our business since the beginning of 2023 are provided in “Item 5 – Operating and Financial Review and Prospects” under the caption “Overview”. We incorporated as a company under the laws of the State of Israel in 1993 under the name of “Check Point Software Technologies Ltd.” Our registered office and principal place of business is located at 5 Shlomo Kaplan Street Tel Aviv 6789159, Israel. The telephone number of our registered office is 972-3-753-4555. Our company’s website is www.checkpoint.com. The contents of our website are not incorporated by reference into this Annual Report. This Annual Report is available on our website at www.checkpoint.com. If you would like to receive a printed copy via mail, please contact our Investor Relations department at [email protected]. The SEC also maintains an Internet site that contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. The address of that website is www.sec.gov. Our agent for service of process in the United States is CT Corporation System, 818 West Seventh Street, Los Angeles, CA 90017 U.S.A.; Tel: 213-627-8252. 31 Revenues by Category of Activity The following table presents our revenues for the last three fiscal years by category of activity: Year Ended December 31, 2025 2024 2023 (in millions) Category of Activity: Products and licenses $ 548.2 $ 507.9 $ 497.4 Security subscriptions $ 1,219.0 $ 1,104.2 $ 981.2 Software updates and maintenance $ 958.2 $ 952.9 $ 936.1 Total revenues $ 2,725.4 $ 2,565.0 $ 2,414.7 For information regarding our revenue by geographic market, please refer to “Item 5 – Operating and Financial Review and Prospects” under the caption “Overview”. Sales and Marketing We primarily sell our products and services through a two-tier distribution model; distributors that sell to resellers and to service providers and Managed Security Service Providers (“MSSPs”), who sell to end-customers. We support our channel partners with a dedicated team of experienced sales professionals including account managers, channel managers and sales engineers. In 2024, we created a demand generation marketing organization focused on the development and conversion of prospect and customer marketing leads to high quality sales leads. In addition to corporate and demand generation marketing, Check Point marketing also includes marketing for products, partners, field promotions, digital promotions, and solutions-oriented thought leadership. In 2025, we continued to invest in sales and marketing resources. As of December 31, 2025, we had 3,066 employees and subcontractors in our sales and marketing organization, with a majority of them dedicated to presales and marketing support located in various jurisdictions. Support and Services We operate a worldwide technical services organization which provides a wide range of services including: (i) technical customer support programs and plans; (ii) professional services in implementing, upgrading and optimizing Check Point products, such as design planning and security implementation; and (iii) certification and educational training on Check Point products. Our technical assistance centers in the United States, Israel, Canada, Japan, India, China, and Australia offer support worldwide, 24-hour service, seven days per week. As of December 31, 2025, we had 1,168 employees and subcontractors in our technical services organization. Research and Product Development We believe that our future success will depend upon our ability to enhance our existing products, and to develop, acquire and introduce new products to address the increasingly sophisticated needs of our customers. As of December 31, 2025, we had 2,154 employees and subcontractors dedicated to research and development activities and quality assurance. Competition Information concerning competition is provided in “Item 3 – Key Information” under the caption “Risk Factors – Risks Related to Our Business and Our Market – We may not be able to successfully compete, which could adversely affect our business and results of operations”. Environmental, Social and Governance (“ESG”) Since our inception, Check Point’s mission has been to make the world a safer place. As a global cyber security provider, the Company views our long-term success as inherently linked to the success of our key stakeholders, and as such, ESG considerations are integrated into our business strategy and operations. 32 Social Standards: • Community – Check Point supports charitable giving and employee volunteering programs across the regions in which we operate. Our community engagement and giving policies are governed by the Corporate Responsibility Policy and the Social Investment and Volunteering Statement. • Human Resources – Human capital is a core asset of our Company. We are committed to promoting an engaging, supportive, and inclusive work environment, free from discrimination and harassment, where our employees can grow and learn together. Our human resources commitments, programs, and policies are governed and implemented through our Social Engagement Policy, Human Rights and Labor Policy, Training and Employee Development Policy, and Modern Slavery and Forced Labor Statement. In 2025, we continued to invest in the personal and professional development of our workforce, while ensuring that all voices, opinions, and outlooks are heard and fairly addressed. • Supply Chain – We uphold high social and human rights standards across our supply chain, with the goal of ensuring that the working conditions are safe and that all business operations are conducted ethically. Key suppliers and business partners are asked to comply with the standards of business, labor, environmental, and ethical conduct set out in our Supply Chain and Business Partner Code of Conduct, which is aligned with the Responsible Business Alliance (“RBA”) Code of Conduct guidelines. These standards are further supported by our Supply Chain s Policy. Environmental Standards: As a global company, we seek to promote a responsible relationship with the environment. It is our belief that our impact on the environment is predominately related to our products, services, and operations. Our Environmental Policy establishes the framework for compliance with environmental laws and regulations, as well as for identifying, assessing, and managing relevant climate change-related risks and opportunities to our business. Governance Standards: II. Corporate Governance – Relevant ESG governance considerations are integrated into our wider corporate governance structure, alongside our commitment to operating according to standards of responsible business conduct, ethical principles, and a strong corporate governance structure, ensuring that we maintain full accountability, integrity, and transparency in our business practices. Our corporate governance framework is upheld by our Corporate Governance Guidelines, which assist the director and committee members in fulfilling their oversight responsibilities. III. ESG Governance – The Nominating, Sustainability, and Corporate Governance Committee of the board is responsible for overseeing our ESG program, including oversight of relevant risks, policies, and programs, conducts ongoing management of ESG matters. IV. Ethics – Check Point maintains a comprehensive ethical compliance framework that is applicable to directors, officers, employees, and relevant third parties. Relevant policies and guidelines that guide our company’s ethics include: the Code of Ethics and Business Conduct, which establishes clear standards of behavior and conduct; Anti-Corruption, Bribery, and Money Laundering Policy; Insider Trading Policy; Privacy Policy; Responsible AI Policy; and Whistleblower Procedure. As a global cyber security company, information security and data protection are critical to our operations, supported by a global security framework aligned with recognized industry standards and best practices, including for governance of responsible artificial intelligence principles. Our annual ESG Report, which provides additional information on our ESG strategy, initiatives, and metrics, is available on our website at https://www.checkpoint.com/about-us/esg/. The ESG Report and the contents of the Company’s website are not incorporated by reference into this Annual Report. Proprietary Rights Check Point relies on a combination of copyright and trademark laws, trade secrets, confidentiality procedures and contractual provisions to protect its proprietary rights. Check Point relies on trade secrets and copyright laws to protect its software, documentation, and other written materials. Further, Check Point generally enters into confidentiality agreements with employees, consultants, customers and potential customers, and limits access and distribution of materials and information that the company considers proprietary. Check Point and its subsidiaries have 158 issued patents in the U.S. and in other regions and 16 pending patent applications worldwide. Our efforts to protect our patent rights and other proprietary rights may not be adequate and our competitors may independently develop technology that is similar. Additional details are provided in “Item 3 – Key Information” under the caption “Risk Factors – Risks Related to Our Business and Our Market – We may not be able to successfully protect our intellectual property rights”. 33 Effect of Government Regulation on our Business Information concerning regulation is provided in “Item 5 – Operating and Financial Review and Prospects” under the caption “Taxes on income” and in “Item 10 – Additional Information” under the caption “Israeli taxation, foreign exchange regulation and investment programs”. Organizational Structure We are organized under the laws of the State of Israel. We wholly own the subsidiaries listed below, directly or through other subsidiaries, unless otherwise specified in the footnotes below: NAME OF SUBSIDIARY COUNTRY OF INCORPORATION Check Point Software Technologies, Inc. United States of America (Delaware) Check Point Software (Canada) Technologies Inc. Canada Check Point Software Technologies (Japan) Ltd. Japan Check Point Software Technologies (Netherlands) B.V. Netherlands Check Point Holding (Singapore) PTE Ltd. Singapore Check Point Holding (Singapore) PTE Ltd. – Rep office Indonesia (1) Singapore Check Point Holding (Singapore) PTE Ltd. –US, NY Branch (2) Singapore Israel Check Point Software Technologies Ltd. China (3) China Check Point Holding AB (4) Sweden Check Point Software Technologies South Africa PTY. Ltd South Africa Check Point Software (Kenya) Limited Kenya Check Point Software Technologies B.V Nigeria Ltd. (5) Nigeria Check Point Serverless Security Ltd. (6) Israel Check Point Email Security Ltd. (7) Israel Avanan, Inc. United States of America (Delaware) Zone Labs, L.L.C. (8) United States of America (California) Check Point Software Technologies (Sweden) AB. (9) Sweden Check Point Software Technologies (Sweden) AB. – Dubai Branch (10) Sweden Lakera AI AG Switzerland Lakera Inc. (11) United States of America (Delaware) Veriti Security Ltd. (6) Israel Veriti Security Inc. (12) United States of America (Delaware) Cyata Security Ltd. Israel Cyata Security, Inc. (13) United States of America (Delaware) Cyclops Security Ltd. Israel Cyclops Security Inc. (14) United States of America (Delaware) Cyberint Singapore Pte Ltd. (15) Singapore Cyberint Inc. (15) United States (Delaware) (1) Representative office of Check Point Holding (Singapore) PTE Ltd. (2) Branch of Check Point Holding (Singapore) PTE Ltd. (3) Representative office of Check Point Software Technologies Ltd. (4) Subsidiary of Check Point Holding (Singapore) PTE Ltd. (former name: Protect Data AB) (5) Subsidiary of Check Point Holding (Singapore) PTE Ltd. and Check Point Yazilim Teknolojileri Pazarlama A.S. (6) Under intercompany merger process into Check Point Software Technologies Ltd. (7) Subsidiary of Avanan, Inc. (8) Subsidiary of Check Point Software Technologies Inc. (9) Subsidiary of Check Point Holding AB (10) Branch of Check Point Software Technologies (Sweden) AB. (11) Subsidiary of Lakera AI AG (12) Subsidiary of Veriti Security Ltd. (13) Subsidiary of Cyata Security Ltd. (14) Subsidiary of Cyclops Security Ltd. (15) Under intercompany merger or dissolution process. 34 Check Point Software Technologies (Netherlands) B.V. acts as a holding company. It wholly owns all or substantially all of the share capital of the principal operating subsidiaries listed below, unless otherwise indicated in the footnotes below: NAME OF SUBSIDIARY COUNTRY OF INCORPORATION Check Point Software Technologies S.A. Argentina Check Point Software Technologies (Australia) PTY Limited Australia Check Point Software Technologies (Austria) GmbH Austria Check Point Software Technologies Belarus LLC (1) Belarus Check Point Software Technologies (Belgium) Belgium Check Point Software Technologies (Brazil) LTDA Brazil Check Point Software Technologies (Hong Kong) Ltd. (Guangzhou office) (2) China Hong Kong SAR Check Point Software Technologies (Hong Kong) Ltd. (Shanghai office) (2) China Check Point Software Technologies (Czech Republic) s.r.o. Czech Republic Check Point Software Technologies (Denmark) ApS Denmark Check Point Software Technologies (Finland) Oy Finland Check Point Software Technologies Eurl France Check Point Software Technologies GmbH Germany Check Point Software Technologies (Greece) SA Greece Check Point Software Technologies (Hungary) Ltd. Hungary Check Point Software Technologies (Hong Kong) Limited Hong Kong Check Point Software Technologies India Private Limited India Check Point Software Technologies (Italia) S.r.l Italy Check Point Software Technologies Mexico S.A. de C.V. Mexico Check Point Software Technologies (Beijing) Co., Ltd. China Check Point Software Technologies (New Zealand) Limited New Zealand Check Point Software Technologies Norway A.S. Norway Check Point Software Technologies (Philippines) Inc. Philippines Check Point Software Technologies (Poland) Sp.z.o.o. Poland CPST (Portugal), Sociedade Unipessoal Lda. Portugal Check Point Software Technologies (RMN) SRL Romania Check Point Software Technologies (Russia) OOO Russia Check Point Software Technologies (Korea) Ltd. South Korea Check Point Software Technologies (Spain), S.A. Spain Check Point Software Technologies (Switzerland) AG Switzerland Check Point Software Technologies (Taiwan) Ltd. Taiwan Check Point Yazilim Teknolojileri Pazarlama A.S. Turkey Check Point Software Technologies (UK) Ltd. United Kingdom (1) Under dissolution process (2) Representative office of Check Point Software Technologies (Hong Kong) Ltd. 35 Property, Plants and Equipment As of December 31, 2025, we own our headquarters located in Tel Aviv, Israel and we lease offices in various locations throughout the world. The breakdown in the various geographies (excluding external data centers) is as follows: Location Space (square feet) Israel 380,784 *) Americas 110,427 Europe, Middle East and Africa 70,643 Asia Pacific 81,359 *) We acquired ownership of our international headquarters located in Tel Aviv, Israel pursuant to a pre-paid 49 year long-term lease on the land with the City of Tel Aviv – Jaffa. No additional payments are due under such long-term lease. Our international headquarters building contains approximately 332,000 square feet of office space. In addition, we lease approximately 48,000 square feet of additional space substantially all in Tel Aviv, Israel and around. In March 2025, we submitted a tender bid, together with Israel Canada (T.R.) Ltd., an Israeli company publicly traded on the Tel Aviv Stock Exchange (“Israel Canada”), for the long-term prepaid lease of a land lot in Tel Aviv, Israel, which is adjacent to our headquarters in Tel Aviv. The tender was conducted by the Tel Aviv-Jaffa Municipality and the Israel Electric Company Ltd., and in June 2025 our joint bid with Israel Canada for NIS 818 million (approximately $241 million) plus Israeli VAT, was approved as the winning bid. Our portion of the aggregate purchase price payable pursuant to the bid was NIS 500 million, plus Israeli VAT (total net payment including unrecoverable taxes was approximately $160 million). We intend to develop the commercial portion of the land lot, a piece of land within walking distance from the Company’s current headquarters in Tel Aviv and connected by a park, to address our expansion plans for the coming years. We expect significant investment to be associated with developing and building the commercial portion of the land. We currently expect the construction of the campus to be completed in 2032. Principal Capital Expenditures and Divestitures For more information regarding our principal capital expenditures currently in progress, see “Item 5 – Operating and Financial Review and Prospects” under the caption “Liquidity and Capital Resources”.