HDI Sigorta scales secure digital insurance with F5 ADSP

Kazim CesurArchitecture and Infrastructure Director | HDI Sigorta

At HDI Sigorta, we insure customers across Turkey with a full portfolio of property, liability, business, transport, and health coverage, serving them through 15 regional offices and hundreds of agencies. We're part of the global Talanx Group, and we operate at a scale few competitors match: around 500,000 insurance policy transactions a day, carried by more than 100 million daily requests moving through our systems.

F5 has been part of our architecture since 2019, when we deployed F5 BIG-IP Local Traffic Manager, F5 BIG-IP DNS, and F5 BIG-IP Advanced WAF to deliver and secure our applications. We've since extended that foundation further along into the F5 Application Delivery and Security Platform (ADSP) journey. Today, F5 has effectively become a foundational layer in our architecture, supporting critical services with consistency, performance, and control.

APIs are the backbone of our business

Ours is one of the most tightly regulated insurance markets anywhere. Turkish law has long required customer data to stay in the country, which puts most public cloud services off the table for core workloads. So we run a hybrid architecture: two on-premises data centers in different cities plus a disaster recovery center, with the private cloud reserved for use cases such as our call center where strict data residency is required.

Within that architecture, APIs have become the backbone of our digital ecosystem, a business-critical layer driving speed, scalability, and connectivity. We now run more than 200 active APIs, connecting everything from our twice-weekly release pipeline to the government systems every Turkish insurance policy must verify against. Operating at this scale introduced new priorities: end-to-end visibility and the ability to identify unmanaged or shadow APIs.

Extending the platform, meeting the mandates

In 2025, we took the next step on our modernization roadmap and implemented F5 Distributed Cloud. We evaluated other vendors, but their solutions were hard to use or had capabilities that didn't meet our needs. We'd already used F5 solutions and knew their scalability and robustness. Our team knew how to manage F5 devices and software, and the new features of Distributed Cloud Services were easy to use. So we stayed with F5.

We phased the rollout deliberately. Distributed Cloud DNS came first: given the critical nature of our digital insurance services and the volume of transactions we process, we wanted to eliminate DNS as a potential single point of failure. F5 Distributed Cloud API Security followed, giving us discovery and control across our increasingly distributed API landscape. And the sovereignty line stays clean: SaaS-based services where regulations allow, with BIG-IP delivering the same protection on-premises for data that has to stay local.

Three times the capacity, no trade-offs

Thanks to F5 solutions, we've been able to triple our capacity in a year. Even with government integrations that can affect uptime in ways outside our control, we typically deliver services at or over 99% availability.

Speed matters as much as scale. Implementation time for F5 is measured in days, and when we scale, we can add a cluster in minutes. It just works—and for the critical processes in our core insurance system, losing time is losing money.

The past three years have brought significant digital transformation and infrastructure renewal, without service disruption. Next on the roadmap: moving toward an active/active architecture and expanding our use of AI. Our CIO, Hakan Şatır, puts it this way: "F5 solutions have enabled HDI Sigorta to establish a high-performance, resilient, and future-ready application delivery platform capable of supporting both today's scale and tomorrow's growth."

Read the full HDI Sigorta case study to dig deeper into how we deliver secure digital insurance at scale with F5.

About the Author

Kazim CesurArchitecture and Infrastructure Director | HDI Sigorta

More blogs by Kazim Cesur