Getxo Continues Controversial Direct Procurement of Israeli Cybersecurity Software

• The City Council of Getxo has renewed contracts for Check Point Software Technologies—an Israeli firm founded by veterans of the IDF's Unit 8200—five times since March 2025 without a public tender.
• The municipality has executed six such contracts totaling 39,460 euros over three years, making it the largest purchaser of Israeli software in the Basque region.
• Critics note that the software, which is used for digital security, is produced by a company whose founders and technology have historical ties to surveillance infrastructure in the West Bank and Gaza.

Procurement Practices

• The majority of these contracts are routed through S21Sec, a cybersecurity firm acquired by the French defense giant Thales in 2022.
• Getxo relies heavily on "minor contracts" under Article 118 of the Public Sector Contracts Law, which allows for direct awards under 15,000 euros without public competition.
• Evidence shows multiple municipal contracts valued just below the 15,000-euro threshold, effectively avoiding the transparency of public bidding.

Wider Regional Context

• The Basque regional police (Ertzaintza) and the Basque Cybersecurity Agency (Cyberzaintza) also maintain significant contractual relationships with S21Sec.
• Municipalities across the region, including Getxo, also procure tactical equipment, body armor, and weaponry from distributors linked to Israeli defense firms.
• These acquisitions persist despite a June 2025 Basque Parliament resolution, supported by the ruling PNV party, which formally condemned Israel's military actions in Gaza.