The main use case of the solution is to block bot attacks for web users.
Pros
"The most valuable feature of the solution is the ease of configuration."
Cons
"I want the solution's custom exclusion rules to be more granular."
The Shape technology platform, covered by 50+ patents, stops automated fraud and other attacks on web and mobile applications, including credential stuffing, account takeover, scraping, and unauthorized aggregation. Shape is one of the largest processors of login traffic in the world, protects more than 1.3 billion user accounts, and prevented more than $1 billion in fraud losses last year.
Shape solutions leverage artificial intelligence and machine learning, among other technologies, to accurately determine in real-time if an application request is from a fraudulent source, and if so, effectively mitigate. As soon as new countermeasures are deployed, 5%-10% of attackers will typically attempt to retool and start a new attack. Shape solutions adapt and maintain full efficacy even as attackers evolve.
The world's leading banks, airlines, retailers, hotel chains, and federal agencies rely on Shape as their primary line of defense against sophisticated cybercrime.
Shape Solutions:
Shape Recognize: Identify returning, known users of your website and reduce authentication friction for these users. This enables organizations using Recognize a persistent and secure login experience where good users face less login challenges while still increasing online safety.
Shape AI Fraud Engine (SAFE): SAFE connects context across different browsers and devices used by the same user, as well as observations from across Shape’s entire network. This allows Shape's AI engine to drive down fraud each month as its engine consumes more data.
F5 Device ID+: A real-time and precise device identifier using advanced signal collection and machine learning to assign a unique fingerprint to each device visiting your site. Simple deployment with immediate results for security, networking, and fraud. Better understand the unique devices visiting your applications.
Shape Enterprise Defense: Invisibly protect every application from attack, fraud, and abuse. Defending the world's largest companies, Shape knows whether a request is bot or human driven and if the intent is malicious or benign. This allows Shape to prevent fraud in real-time; manage aggregated and partner access to applications and provide new data for better customer insights.
Shape was recognized by Cybercrime Magazine as one of the Hot 150 Cybersecurity companies in 2019 and CB Insights 2019 AI 100 most promising artificial intelligence startups across the globe.
F5 Shape Security was previously known as Shape Security.
Wells Fargo, Loblaw, JetBlue, Zoosk
The main use case of the solution is to block bot attacks for web users.
The most valuable feature of the solution is the ease of configuration. You just enable it, and it automatically blocks bot attacks. You don't have to do some complex configurations. It uses custom JavaScript to detect if you are a user or a bot.
There could be some improvement in the options to make custom exclusion rules to be more granular. Sometimes, the solution blocks something that you don't want to be blocked. The solution should allow exclusions based on the solution’s categories wherein it categorizes the traffic.
I want the solution's custom exclusion rules to be more granular. When the solution blocks something, there should be no need to contact the support to tweak the system, but to have more granular exclusions. Users should be able to prevent some traffic from being blocked based on the F5 Shape Security category.
I have been using F5 Shape Security for one year.
F5 Shape Security is a stable solution.
The solution's technical support is not bad because there is an internal dedicated team for support.
The solution's initial setup is easy. If the solution is on-premises, it uses JavaScript in your web applications. You just enable the solution, like a check mark, for the cloud version.
The solution provides a good return on investment because you could integrate it into the cloud, on-prem devices, or web applications.
The solution is moderately priced.
The solution is deployed on the F5 cloud. The solution's real-time analytics help you see what has been blocked. It helps to see whether the attack category was an automation attack or a fake browser. F5 Shape Security has a normal dashboard. We are doing F5 Shape Security migrations for 30 customers.
F5 Shape Security uses Javascript. For a lot of competitors, the Javascript can be reverse-engineered by attackers to bypass the protection. F5 Shape Security has machine learning authentication of the Java script. If you had hacked it, the encryption would have been changed. It's really hard for attackers to reverse engineer the F5 Shape Security JavaScript.
Overall, I rate the solution a nine out of ten.
