Shape Security
Shape Security, founded in 2011 and acquired by F5 Networks in 2019 for ~$2B, provides AI-powered bot detection and mitigation technology for web and mobile applications, now operating as F5 Distributed Cloud Bot Defense and serving enterprise customers in e-commerce, financial services, gaming, and public sector.
- Company typePrivate
- Founded2011
- HeadquartersSanta Clara, United States
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What Shape Security does
Shape Security, founded in 2011 and headquartered in Santa Clara, California, developed real-time bot detection and mitigation technology for web and mobile applications. The company's core platform combined client-side telemetry, behavioral analysis, and platform-wide signal collection to distinguish between human users, trusted automation, and malicious bots, targeting use cases such as credential stuffing, account takeover, inventory hoarding, price scraping, and business logic abuse. Its primary customers were e-commerce platforms (designated as the primary segment), with additional deployment in banking and financial services, gaming, and the public sector.
Following its acquisition by F5 Networks (NASDAQ: FFIV) in 2019 for approximately $2 billion, Shape's technology was integrated into F5's broader application security portfolio and now operates as F5 Distributed Cloud Bot Defense. The product is delivered through F5's Distributed Cloud Platform (SaaS), natively integrated with BIG-IP via modules or iApps, and deployable across AWS, Azure, Google Cloud, hybrid, and on-premises environments. Adjacent add-on modules extend the platform into client-side defense (against Magecart-style attacks), mobile app protection, and data intelligence for threat analytics.
The go-to-market is enterprise-direct, leveraging F5's global sales force and technology alliances with CrowdStrike, Dell, NVIDIA, Red Hat, Equinix, NetApp, and Nutanix, plus integrations with leading SIEM platforms (Splunk, Devo, Azure Sentinel, Datadog, SolarWinds). Pricing is not publicly disclosed. Revenue is not separately reported as Shape operates as a product line within F5's security portfolio rather than a standalone reporting entity.
Shape Security firmographics
Firmographics- Name
- Shape Security
- Website
- https://shapesecurity.com
- Company type
- Private
- Founded year
- 2011
- Operating status
- Acquired
- Headcount range
- 51–100 employees
- Short description
- Shape Security, founded in 2011 and acquired by F5 Networks in 2019 for ~$2B, provides AI-powered bot detection and mitigation technology for web and mobile applications, now operating as F5 Distributed Cloud Bot Defense and serving enterprise customers in e-commerce, financial services, gaming, and public sector.
- Ownership category
- akta.pro rank
Shape Security industry classification
Industry- Product category
- Application Security / Bot Defense
- NAICS
- Computer Systems Design Services (541512), Computer Systems Design and Related Services (54151), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182), Security Systems Services (except Locksmiths) (561621), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)
- SIC
- Services-Computer Integrated Systems Design (7373), Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Spam, Fake Engagement & Content Abuse Prevention (HDADALAG)
- akta.pro secondary industry
- Secure Model Deployment & Runtime Protection (sandboxing, isolation) (HDAAAKAH)
Keywords
Where Shape Security is headquartered
LocationHeadquarters
- HQ city
- Santa Clara
- HQ country
- United States
- HQ region
- North America
Markets served
Shape Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations
Distribution channels5 records
Marketing channels7 records
Shape Security product offering
Product offeringCore offering
Shape Security (now part of F5) provides AI-powered bot defense and fraud prevention software for web and mobile applications. Its flagship product, F5 Distributed Cloud Bot Defense, uses real-time behavioral analysis, client-side telemetry, and platform-wide signals to classify traffic as human, trusted AI agent, or malicious automation, and applies real-time allow, block, rate-limit, or step-up enforcement. The solution integrates natively with the F5 Application Delivery and Security Platform, BIG-IP, and leading SIEM systems, and is sold as a SaaS, virtual, or on-premises deployment for enterprise customers.
Product overview
Shape Security (now part of F5) offers a unified multi-cloud security platform centered on the F5 Application Delivery and Security Platform (ADSP). The core product is F5 Distributed Cloud Bot Defense, which provides AI-powered bot and agent protection. This integrates with BIG-IP hardware and virtual editions for hybrid deployments. Additional add-on modules include F5 Distributed Cloud Client Side Defense for client-side protection, F5 Distributed Cloud Mobile App Shield for mobile app security, and F5 Data Intelligence for enhanced threat analytics. The platform supports multi-cloud and on-premises deployments with centralized visibility and control.
Differentiator
Problem solved
Functional benefit
Products and services
- F5 Distributed Cloud Bot Defense AI-powered bot protection solution that detects and stops malicious automation while allowing trusted users and approved AI agents to interact without friction. Uses real-time behavioral analysis, client-side intelligence, and platform-wide telemetry to distinguish between humans, trusted AI agents, and harmful automation for enterprise web, mobile, and API traffic.
- F5 Distributed Cloud Client Side Defense Add-on module that protects against client-side attacks and Magecart-style threats by monitoring and defending the browser-side execution of web applications.
- F5 Distributed Cloud Mobile App Shield Mobile application security solution that protects against reverse engineering, tampering, and runtime attacks on iOS and Android apps.
- F5 Data Intelligence Data intelligence platform that integrates with bot defense to provide enhanced threat analysis, telemetry, and insights across the application security stack.
Quantifiable outcome
- 97% of malicious traffic blocked using security automation
- +1 more outcomes
Companies that use Shape Security
Customer profileSegments4 records
Ideal customer profiles4 records
Shape Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration11 records
AI capability3 records
Feature6 records
Shape Security partnerships and signals
Strategic signalRecent moves6 records
Expansion highlights5 records
Shape Security competitors and assessment
Company assessmentBroad incumbents
- Akamai Bot Manager: Akamai Bot Manager delivers bot detection and mitigation as part of Akamai's broader application security and CDN portfolio, targeting the same enterprise e-commerce and financial services use cases Shape addresses.
- Cloudflare Bot Management: Cloudflare offers bot management as part of its broader WAAP and edge security platform, competing with Shape through bundled, network-scale detection at the CDN edge for both web and API traffic.
- Fastly (Signal Sciences + Next-Gen WAF): Fastly offers bot management and WAF capabilities through its edge cloud platform, competing with Shape on application-layer attack protection for web and API workloads.
- Imperva Bot Management: Imperva (now part of Thales) provides bot management and application security as part of its broader WAAP platform, directly competing with Shape in credential stuffing and account takeover protection.
Direct peers
- Kasada: Kasada is a bot management specialist focused on stopping automated attacks against login, checkout, and API endpoints, competing head-to-head with Shape in the same customer segments and use cases.
- DataDome: DataDome is a leading pure-play bot management and online fraud protection platform that competes directly with Shape Security's core product, targeting the same e-commerce, ticketing, and account-takeover use cases with AI-driven detection.
- Cequence Security: Cequence Security provides API protection and bot management through its Unified API Protection platform, directly competing with Shape's API and mobile surface coverage for enterprise customers.
- Radware Bot Manager: Radware provides bot management as part of its application security portfolio, addressing credential abuse, scraping, and account takeover use cases overlapping with Shape's core offering.
- HUMAN Security (formerly PerimeterX): HUMAN Security provides bot mitigation, account takeover prevention, and fraud defense for web and mobile applications, overlapping directly with Shape's behavioral bot defense offering across retail, financial services, and digital media customers.
Emerging players
- Reblaze: Reblaze is a cloud-native web application and API protection platform with bot mitigation capabilities, competing with Shape in mid-market and enterprise web security deployments.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
Shape Security social profiles
Digital presenceShape Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Shape Security leadership team
Management profileNumber of profiles
Profiles1 record
Shape Security funding detail
Funding detailFunding overview
Funding rounds6 records
Investors22 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Shape Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Shape Security
What does Shape Security do?
Shape Security (now part of F5) provides AI-powered bot defense and fraud prevention software for web and mobile applications. Its flagship product, F5 Distributed Cloud Bot Defense, uses real-time behavioral analysis, client-side telemetry, and platform-wide signals to classify traffic as human, trusted AI agent, or malicious automation, and applies real-time allow, block, rate-limit, or step-up enforcement. The solution integrates natively with the F5 Application Delivery and Security Platform, BIG-IP, and leading SIEM systems, and is sold as a SaaS, virtual, or on-premises deployment for enterprise customers.
Is Shape Security a public or private company?
Shape Security is a private company. It is classified as corporate owned and is currently acquired.
When was Shape Security founded?
Shape Security was founded in 2011. It employs 51 to 100 people.
Where is Shape Security based?
Shape Security is headquartered in Santa Clara, United States, in the North America region.
Who are Shape Security's main competitors?
Broad incumbents on record are Akamai Bot Manager, Cloudflare Bot Management, Fastly (Signal Sciences + Next-Gen WAF) and Imperva Bot Management. Direct peers are Kasada, DataDome, Cequence Security, Radware Bot Manager and HUMAN Security (formerly PerimeterX). Reblaze is listed as an emerging player.
Does Shape Security have an API?
Yes. Shape Security exposes a public API. Developer documentation is at clouddocs.f5.com/api.
What industry is Shape Security in?
Shape Security's product category is Application Security / Bot Defense. Its primary akta.pro industry code is HDADALAG, Spam, Fake Engagement & Content Abuse Prevention, with a secondary code of HDAAAKAH, Secure Model Deployment & Runtime Protection (sandboxing, isolation). Its NAICS code is 541512 and its SIC code is 7373.