For additional background on today's announcement, I wanted to share a copy of the email I sent to our global staff announcing F5’s agreement to acquire Shape Security.
From: François Locoh-Donou
To: F5 Staff
Date: December 19, 2019
Subject: F5 to Acquire Shape Security
I could not be more pleased to announce that we have signed an agreement today to acquire Shape Security, a leader in providing application security against fraud and abuse.
Our long-standing belief that applications are the most valuable assets of any organization in the digital age has been the foundation of our strategy to become the leader in Multi-Cloud Application Services. When you combine F5 and NGINX’s expertise powering over half of the world’s applications across all types of environments, with Shape’s insight from mitigating 1 billion application attacks per day, you have a company that knows how to secure more applications – and more value – than any company in the industry. We believe that makes F5-NGINX-Shape absolutely essential to every digital organization in the world.
This defiant stance was borne out of F5’s pioneering approach to application security. The work we have done to protect the world’s largest enterprises, service providers, governments, and consumer brands from application-layer attacks is unparalleled. We are trusted by our customers the world over to deliver the most high-performing and secure digital experiences. And, unlike other companies, we protect their valuable applications across any environment – not tied to a single cloud, not tied to a single vendor’s stack, and not tied to hardware.
But as automation has increased, so too have the application-layer attacks on our customers. Cybercriminals are weaponizing attacks on an unprecedented scale, using automation in everything from cheap, global ‘botnets’ to launching highly sophisticated, targeted strikes. These exploits defraud organizations of billions of dollars with fake accounts, unauthorized fund transfers or chargebacks, credit application fraud, and stolen loyalty points or gift cards. Shape is currently protecting the top Global 2000 banks, retailers and travel companies from 1 billion of such automated attacks against applications a day, as well as protecting 150 million legitimate, human transactions a day with the applications that these companies rely on most to deliver their best customer experience. Shape’s code base includes some of the most sophisticated Artificial Intelligence (AI) and cloud-based analytics intellectual property in the business to detect, flag and mitigate unwanted and malicious online traffic, learn from previous attacks and prevent the next ones.
Bringing together F5 and NGINX’s application expertise across multi-cloud environments with Shape’s anti-fraud capabilities for web, mobile and APIs reinforces our ‘code to customer’ promise with a comprehensive, end-to-end application security offer. This has the potential to save customers billions of dollars lost to fraud, reputational damage and costly disruptions to digital transformations.
Over the longer term, through integrating our products with Shape’s large-scale telemetry and analytics capabilities, this acquisition also significantly advances our plans to offer AI-enhanced services to customers for better visibility, management and orchestration across their applications.
Equally important, Shape represents a major bet on expanding our capabilities. By bringing on board over 370 Shape employees led by Shape CEO Derek Smith, we are significantly expanding our expertise in the fields most critical to our next phase of growth: cloud, software and AI/Machine Learning competencies; as well as boosting our collective agility by learning from the customer-obsessed culture Shape has built over the last eight years.
And last, but by no means least, this approximately $1B transaction represents the biggest in our company history, and the second in under a year. That is no accident. By laying out our vision to become the leader in Multi-Cloud Application Services back in 2017, we have been taking deliberate and disciplined steps to realize our future identity. We know what it will take to win; and make no mistake, we are playing offense.
But an acquisition of this magnitude would simply not be possible without the dedicated teamwork and relentless pace you have set to drive F5’s transformation to date. We know from experience that acquisitions are not simple exercises in integration, but rather a belief system and a commitment – to do the work it takes to help unlock more value for a company like NGINX, and now Shape, than they could on their own. I count on this team to rise to the occasion again to make F5-NGINX-Shape the uniquely powerful combination I know it can be.
[Additional information pertaining to an F5 Company Meeting removed, along with minor edits]
Thank you,
François Locoh-Donou
CEO
About the Author
Related Blog Posts

F5 accelerates and secures AI inference at scale with NVIDIA Cloud Partner reference architecture
F5’s inclusion within the NVIDIA Cloud Partner (NCP) reference architecture enables secure, high-performance AI infrastructure that scales efficiently to support advanced AI workloads.
F5 Silverline Mitigates Record-Breaking DDoS Attacks
Malicious attacks are increasing in scale and complexity, threatening to overwhelm and breach the internal resources of businesses globally. Often, these attacks combine high-volume traffic with stealthy, low-and-slow, application-targeted attack techniques, powered by either automated botnets or human-driven tools.
F5 Silverline: Our Data Centers are your Data Centers
Customers count on F5 Silverline Managed Security Services to secure their digital assets, and in order for us to deliver a highly dependable service at global scale we host our infrastructure in the most reliable and well-connected locations in the world. And when F5 needs reliable and well-connected locations, we turn to Equinix, a leading provider of digital infrastructure.
Volterra and the Power of the Distributed Cloud (Video)
How can organizations fully harness the power of multi-cloud and edge computing? VPs Mark Weiner and James Feger join the DevCentral team for a video discussion on how F5 and Volterra can help.
Phishing Attacks Soar 220% During COVID-19 Peak as Cybercriminal Opportunism Intensifies
David Warburton, author of the F5 Labs 2020 Phishing and Fraud Report, describes how fraudsters are adapting to the pandemic and maps out the trends ahead in this video, with summary comments.
The Internet of (Increasingly Scary) Things
There is a lot of FUD (Fear, Uncertainty, and Doubt) that gets attached to any emerging technology trend, particularly when it involves vast legions of consumers eager to participate. And while it’s easy enough to shrug off the paranoia that bots...