Channel investors, Content, Security Program Controls/Technologies

F5 Networks Acquires Shape Security for Online Fraud Protection Services

F5 Networks, an application performance and security specialist, has ponied up $1 billion in cash to buy privately-held Shape Security, a Santa Clara, California-based company that sells an online fraud protection platform to enterprise organizations.

The deal will accelerate F5’s software revenue growth, speed up its transition to a software- and software-as-a-service (SaaS)-driven business model and boost its software subscriptions count, the company said. In the short term, the strategic move will give F5’s application protection services a jolt and expand its ability to protect customers in a multi-cloud market. In the long-term, Shape’s artificial intelligence and machine learning capabilities will enable F5 to execute its plans to offer AI-enhanced services to its customers and scale and extend its overall portfolio.

The Seattle-based F5 will pay for deal, which is its second buyout this year, with cash on hand and $400 million in financing. The transaction is subject to regulatory approval and is expected to close in Q1 2020. Earlier this year, F5 paid $670 million to land NGINX, an open source application delivery provider.

Shape plans to retain its existing headquarters with co-founder and chief executive Derek Smith and the company's 375-person team joining F5, which has about 5,300 employees.

“When you combine F5 and NGINX’s expertise powering over half of the world’s applications across all types of environments, with Shape’s insight from mitigating 1 billion application attacks per day, you have a company that knows how to secure more applications – and more value – than any company in the industry. We believe that makes F5-NGINX-Shape absolutely essential to every digital organization in the world," F5 President and chief executive François Locoh-Donou wrote in a posted letter to employees.

Shape claims it mitigates more than 1 billion fake transactions daily and protects 150 million legitimate, human transactions a day. In particular, its platform defends against credential stuffing attacks, where cyber criminals use stolen passwords from third-party data breaches to take over other online accounts. Its enterprise-heavy customer lineup includes nine Fortune 50 customers, eight of the top 12 U.S. banks, five of the top 10 global airlines, and five of the top 10 credit card issuers. Shape recently reached a $1 billion valuation after raising $51 million in a Series F round in September.

“Since Shape’s inception, we observed a consistent pattern in customer after customer: the use of F5 technology to deliver and enable their applications,” Smith said in a statement. “Now, we look forward to the opportunity to deeply integrate into F5’s platform for application delivery and security — F5 provides the optimum traffic flow insertion point for Shape’s industry-leading online fraud and abuse prevention solutions.”

The deal is the biggest in F5’s 23-year history but represents more than a complementary acquisition, Locoh-Donou said. “By laying out our vision to become the leader in multi-cloud application services back in 2017, we have been taking deliberate and disciplined steps to realize our future identity. We know what it will take to win; and make no mistake, we are playing offense.”

D. Howard Kass

D. Howard Kass is a contributing editor to MSSP Alert. He brings a career in journalism and market research to the role. He has served as CRN News Editor, Dataquest Channel Analyst, and West Coast Senior Contributing Editor at Channelnomics. As the CEO of The Viewpoint Group, he led groundbreaking market research.