A Letter to F5 Employees from CEO François Locoh-Donou Announcing Shape Security Acquisition

François Locoh-Donou 缩略图
François Locoh-Donou
Published December 19, 2019

For additional background on today's announcement, I wanted to share a copy of the email I sent to our global staff announcing F5’s agreement to acquire Shape Security.

From: François Locoh-Donou 
To: F5 Staff 
Date: December 19, 2019 
Subject: F5 to Acquire Shape Security 

I could not be more pleased to announce that we have signed an agreement today to acquire Shape Security, a leader in providing application security against fraud and abuse.

Our long-standing belief that applications are the most valuable assets of any organization in the digital age has been the foundation of our strategy to become the leader in Multi-Cloud Application Services. When you combine F5 and NGINX’s expertise powering over half of the world’s applications across all types of environments, with Shape’s insight from mitigating 1 billion application attacks per day, you have a company that knows how to secure more applications – and more value – than any company in the industry. We believe that makes F5-NGINX-Shape absolutely essential to every digital organization in the world.

This defiant stance was borne out of F5’s pioneering approach to application security. The work we have done to protect the world’s largest enterprises, service providers, governments, and consumer brands from application-layer attacks is unparalleled. We are trusted by our customers the world over to deliver the most high-performing and secure digital experiences. And, unlike other companies, we protect their valuable applications across any environment – not tied to a single cloud, not tied to a single vendor’s stack, and not tied to hardware.  

But as automation has increased, so too have the application-layer attacks on our customers. Cybercriminals are weaponizing attacks on an unprecedented scale, using automation in everything from cheap, global ‘botnets’ to launching highly sophisticated, targeted strikes. These exploits defraud organizations of billions of dollars with fake accounts, unauthorized fund transfers or chargebacks, credit application fraud, and stolen loyalty points or gift cards. Shape is currently protecting the top Global 2000 banks, retailers and travel companies from 1 billion of such automated attacks against applications a day, as well as protecting 150 million legitimate, human transactions a day with the applications that these companies rely on most to deliver their best customer experience. Shape’s code base includes some of the most sophisticated Artificial Intelligence (AI) and cloud-based analytics intellectual property in the business to detect, flag and mitigate unwanted and malicious online traffic, learn from previous attacks and prevent the next ones.   

Bringing together F5 and NGINX’s application expertise across multi-cloud environments with Shape’s anti-fraud capabilities for web, mobile and APIs reinforces our ‘code to customer’ promise with a comprehensive, end-to-end application security offer. This has the potential to save customers billions of dollars lost to fraud, reputational damage and costly disruptions to digital transformations. 

Over the longer term, through integrating our products with Shape’s large-scale telemetry and analytics capabilities, this acquisition also significantly advances our plans to offer AI-enhanced services to customers for better visibility, management and orchestration across their applications.   

Equally important, Shape represents a major bet on expanding our capabilities. By bringing on board over 370 Shape employees led by Shape CEO Derek Smith, we are significantly expanding our expertise in the fields most critical to our next phase of growth: cloud, software and AI/Machine Learning competencies; as well as boosting our collective agility by learning from the customer-obsessed culture Shape has built over the last eight years.

And last, but by no means least, this approximately $1B transaction represents the biggest in our company history, and the second in under a year. That is no accident. By laying out our vision to become the leader in Multi-Cloud Application Services back in 2017, we have been taking deliberate and disciplined steps to realize our future identity. We know what it will take to win; and make no mistake, we are playing offense. 

But an acquisition of this magnitude would simply not be possible without the dedicated teamwork and relentless pace you have set to drive F5’s transformation to date. We know from experience that acquisitions are not simple exercises in integration, but rather a belief system and a commitment – to do the work it takes to help unlock more value for a company like NGINX, and now Shape, than they could on their own. I count on this team to rise to the occasion again to make F5-NGINX-Shape the uniquely powerful combination I know it can be.  

[Additional information pertaining to an F5 Company Meeting removed, along with minor edits]

Thank you, 

François Locoh-Donou