Company Description
F5, Inc. (NASDAQ: FFIV) is a technology company focused on delivering and securing applications and APIs across complex digital environments. According to company disclosures, F5 describes itself as a global leader that "delivers and secures every app" and has built the F5 Application Delivery and Security Platform (ADSP) to support applications and APIs on‑premises, in the cloud, at the edge, and across hybrid, multicloud infrastructures. The company was incorporated in 1996 and is based in Seattle, Washington.
Core platform: F5 Application Delivery and Security Platform (ADSP)
F5 positions ADSP as its premier platform for application delivery and security. Across multiple releases and announcements, F5 states that ADSP provides a unified foundation for application delivery, API protection, and security in hybrid and multicloud environments. The platform underpins offerings such as BIG-IP, F5 Distributed Cloud Services, and NGINX-based services, and is used to help enterprises improve performance, security, and operational efficiency for modern and AI-driven applications.
F5’s communications emphasize that ADSP is designed to:
- Deliver and secure applications and APIs anywhere, including on‑premises data centers, public clouds, edge locations, and hybrid or multicloud setups.
- Provide unified visibility and control across heterogeneous environments, including BIG-IP, NGINX, and Distributed Cloud Services.
- Support high‑performance data movement and security for AI workloads and modern application architectures.
Application delivery: BIG-IP and cloud-native services
F5 highlights BIG-IP as a core delivery and security engine within ADSP. With the BIG-IP v21.0 release, the company describes a "purpose-built delivery engine for application workloads" that aims to reduce operational friction, accelerate data movement, and improve performance and resiliency across hybrid and multicloud environments. BIG-IP v21.0 is characterized by F5 as its most secure BIG-IP release to date, with enhancements for AI data delivery, S3 data workflows, and modernized control plane performance.
In addition to BIG-IP, F5 has introduced F5 NGINXaaS for Google Cloud, described as a fully managed, cloud‑native application delivery‑as‑a‑service solution developed with Google Cloud. According to F5, this service consolidates load balancing, security, and observability into a unified solution, unifying Layer 4 and Layer 7 load balancing, and integrating with Google Cloud’s observability tools. The company states that NGINXaaS is intended to help enterprises address the challenges of delivering modern and containerized applications, including AI‑enabled workloads.
Security and AI-focused offerings
F5’s disclosures place strong emphasis on security, particularly in the context of modern applications, APIs, and AI systems. The company describes multiple security-focused capabilities within ADSP and related services:
- F5 AI Guardrails: Presented as a model‑agnostic runtime security layer that protects AI models, apps, and agents across clouds and deployment environments. F5 states that AI Guardrails enforces policies in real time, helps prevent sensitive data leakage, and defends against adversarial threats such as prompt injection and jailbreak attacks, while providing observability and auditability of AI inputs and outputs.
- F5 AI Red Team: Described as a scalable, automated adversarial testing solution that simulates a wide range of AI threat vectors. According to F5, AI Red Team uses an AI vulnerability database and feeds findings back into AI Guardrails policies, creating a continuous feedback loop for AI security.
- API security and discovery: In updates to F5 Distributed Cloud Services, F5 highlights expanded API discovery and visibility, including support for BIG-IP, NGINX (both NGINX OSS and NGINX Plus), and additional proxies and gateways. The company notes that these capabilities help visualize hidden endpoints, sensitive data flows, and inconsistent controls, and broaden API testing coverage for vulnerabilities listed in the OWASP API Top 10.
- Bot Defense: F5 describes enhancements to its Distributed Cloud Bot Defense, including tighter integration with managed offerings, native routing in the console, and more granular policy controls and investigation filters to address automated threats.
AI data delivery and post‑quantum security
F5’s communications indicate a strategic focus on AI data delivery and emerging cryptographic requirements. In collaboration with NetApp, F5 describes joint solutions that support high‑performance AI data delivery for AI/ML workflows built on NetApp S3 storage architectures, using F5 ADSP for advanced load balancing, traffic prioritization, and analytics. The company also highlights support for post‑quantum cryptography (PQC) scenarios, including hybrid key agreement and NIST‑approved algorithms for quantum‑resistant secured communications in BIG-IP.
For AI workloads, F5 states that BIG-IP v21.0 introduces AI data delivery enhancements such as S3 data storage integrations for secure ingestion, retrieval for retrieval‑augmented generation (RAG) and embeddings, and policy‑driven model artifact distribution with observability. The company also notes support for Model Context Protocol (MCP) to facilitate communication between AI models, applications, and data sources.
Cloud-native operations and networking
Within F5 Distributed Cloud Services, the company describes operational improvements for cloud‑native environments, including a modernized service discovery framework for Kubernetes and Consul environments, with mapping of discovered services to tenants and the application of role‑based access control. F5 also notes networking enhancements in Distributed Cloud Network Connect, including expanded routing intelligence, support for external connectors and BGP routing policies, and secure tunnels to SD‑WAN routers and third‑party networking devices.
Partner ecosystem and integrations
F5 has announced an ADSP Partner Program aimed at building an ecosystem of technology partners that integrate with the F5 platform. The company identifies two tiers in this program—Member Partners and Select Partners—and notes that initial Select Partners include AppViewX, CrowdStrike, DigiCert, Kasm Technologies, Keyfactor, MazeBolt, and OPSWAT. According to F5, these partnerships are intended to provide validated, interoperable solutions that extend ADSP capabilities in areas such as certificate and key management, endpoint and edge security, DDoS testing, virtual desktops, and file‑borne threat protection.
F5 has also disclosed a strategic alliance with CrowdStrike to embed the CrowdStrike Falcon Sensor and OverWatch Threat Hunting into F5 BIG-IP. The companies describe this as extending AI‑driven detection and response to the network perimeter where application and API traffic is handled, with F5 noting that many customers are already using Falcon for BIG-IP.
Cybersecurity incident and response
In an 8‑K filing, F5 reported that it learned on August 9, 2025, of unauthorized access by a highly sophisticated nation‑state threat actor to certain company systems. The company states that it activated incident response processes, engaged external cybersecurity experts, and believes its containment actions have been successful, with no evidence of new unauthorized activity since containment efforts began. F5 reports that the threat actor maintained persistent access to certain systems, including the BIG-IP product development environment and an engineering knowledge management platform, and exfiltrated certain files containing portions of BIG-IP source code and information about undisclosed vulnerabilities under development.
F5 states that it has no evidence of modification to its software supply chain, including source code and build and release pipelines, and that this assessment has been validated by independent cybersecurity research firms. The company also reports no evidence of access to or exfiltration of data from its CRM, financial, support case management, or iHealth systems, and no evidence of access to NGINX source code or F5 Distributed Cloud Services or Silverline systems. As of the filing date, F5 states that the incident had not had a material impact on operations and that it was evaluating potential impacts on financial condition or results of operations.
Corporate governance and leadership updates
F5’s recent 8‑K filings include information on board and leadership changes. The company reports that its Board determined that the current Chief Executive Officer and President would assume the additional role of Chair of the Board following the next Annual Meeting of Shareholders, succeeding the long‑serving Chair, who plans to retire from the Board after nearly three decades as a director. F5 also discloses the resignation of a director who subsequently took an executive role as Chief Technology Operations Officer, with responsibilities described as leading enterprise‑wide strategy and execution to build and operate the company with security at its core.
Capital markets presence
F5’s common stock trades on the NASDAQ under the ticker symbol FFIV. The company regularly announces plans to report quarterly financial results and to participate in technology and investor conferences, and it uses press releases and webcasts to communicate with investors and analysts. F5’s filings and press releases emphasize its focus on application delivery, security, AI‑related capabilities, and partnerships as core elements of its ongoing strategy.
Historical context
F5 notes that it was incorporated in 1996 and went public in 1999. Over time, the company has evolved from its roots in application delivery controllers to a broader platform approach centered on ADSP, BIG-IP, NGINX, and Distributed Cloud Services. Its public communications consistently frame its mission around enabling fast, available, and secure digital experiences for organizations operating across hybrid and multicloud environments.