Sold by: F5, Inc.
F5 Distributed Cloud Bot Defense stops bots using signals and AI to achieve unparalleled long-term efficacy with near zero false positives.
4.5
Overview
Today's bots solve CAPTCHAs faster than humans and use AI to thwart defense mechanisms in real time.
These sophisticated bots:
- execute credential stuffing attacks that test thousands of stolen credentials per minute and perform account takeovers
- bypass multifactor authentication through phishing proxies
- hoard inventory for resale at higher prices, frustrating real customers
- scrape content, causing loss of competitive data and application performance degradation
- brute force crack gift card numbers to siphon off balances
- validate stolen credit card data through application logins, racking up chargeback fees and fines for the impacted enterprise
- and create fake accounts for the pursuit of fraud
How do you block bad bots without frustrating users? F5 Distributed Cloud Bot Defense accurately identifies malicious bots through deep signal collection and behavioral analysis by human experts and AI. It not only distinguishes bad bots from legitimate traffic with a near-zero false positive rate, but it also uses machine learning to detect and block rapid attacker retooling. Advanced code obfuscation adds further protection by preventing reverse engineering of F5 detection methods.
Secure your apps without adding user friction. Learn more about F5 Distributed Cloud Bot Defense: https://www.f5.com/products/distributed-cloud-services/bot-defense
Product Overview https://community.f5.com/t5/technical-articles/f5-distributed-cloud-bot-defense-protecting-aws-cloudfront/ta-p/303203
Contact F5 Sales for discounted Private Offer pricing at:
Americas: F5DistCloudAmericas_Sales@f5.com EMEA: F5DistCloudEMEA_Sales@f5.com APCJ: F5DistCloudAPCJ_Sales@f5.com Bot Defense starting price point is $60,000K/year, with the option to add additional services. Note that packages may vary based on Distributed Cloud services purchased.
Highlights
- Highest efficacy real-time bot mitigation with flexible deployment options on AWS CloudFront, AWS AMIs, and other 3rd-party platforms
- Rapid response to bot retooling to stay ahead of the most advanced sophisticated bots
- Effective against all the OWASP Automated Threats
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
F5 XC SaaS | F5 Distributed Cloud Bot Defense | $5,000.00 |
Dimensions summary
F5 Distributed Cloud Bot Defense is a specialized SaaS security solution that protects digital applications from automated bot attacks and fraud. The dimension "F5 XC SaaS" in the pricing table represents the core bot defense service offering, which includes advanced bot detection, mitigation capabilities, and real-time threat analytics. The pricing is structured on a monthly or annual consumption model through AWS Marketplace, enabling customers to scale their bot protection based on their usage needs.
Top-of-mind questions for buyers like you
How is F5 Distributed Cloud Bot Defense priced on AWS Marketplace?
F5 Distributed Cloud Bot Defense follows a consumption-based pricing model with a monthly or annual rate charged through AWS Marketplace. The pricing includes core bot detection and mitigation capabilities.
What features are included in the base pricing shown on AWS Marketplace?
The base pricing includes essential bot defense capabilities such as automated bot detection, machine learning-based analysis, and real-time threat monitoring. Customers get access to F5's global threat intelligence network and basic reporting features, while advanced features may require additional licensing or configuration.
How can I determine the total cost for my organization's bot defense needs?
Total costs depend on factors such as the number of applications protected, request volume, and specific security requirements. F5 provides consultation through their sales team to help estimate costs based on your organization's unique traffic patterns and security needs, and can provide detailed pricing scenarios for your specific use case.
Vendor refund policy
no refunds
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
North America: 1-888-882-0367, Outside North America: +800 11275 435,
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By F5, Inc.
By Fortinet Inc.
By Cyber Security Cloud Inc.
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Bot Detection Mechanism
Advanced AI and signal-based detection system using deep behavioral analysis to identify malicious bot traffic
Machine Learning Adaptation
Real-time machine learning capabilities to detect and block rapidly evolving bot attack techniques
Code Obfuscation Protection
Advanced code obfuscation techniques preventing reverse engineering of detection methods
Multi-Platform Deployment
Flexible deployment across multiple platforms including AWS CloudFront, AWS AMIs, and third-party systems
Threat Coverage
Comprehensive protection against OWASP Automated Threats including credential stuffing, inventory hoarding, and account takeover attempts
Web Application Threat Protection
Comprehensive ruleset covering OWASP Top 10 web application threats including SQL Injection, Cross Site Scripting, and Known Exploits
Security Signature Updates
Regular threat information updates from FortiGuard Labs to maintain current protection signatures
Malicious Traffic Detection
Protection against malicious bots and common vulnerabilities and exposures (CVE)
Configurable Security Response
Flexible configuration options to log, alert, and block detected web application threats
Attack Vector Coverage
Comprehensive security rules targeting multiple web application attack vectors including general and known exploits
Web Application Threat Protection
Comprehensive ruleset targeting OWASP Top 10 Web Application Threats with low false-positive rate
Vulnerability Mitigation
Managed rules addressing code injection techniques including SQLi, NoSQLi, OScommandi, XSS, and directory traversal
Technology-Specific Protection
Specialized rules for web technologies like Apache Struts2, Apache Tomcat, Oracle WebLogic, WordPress, Drupal, and Joomla
Cyber Threat Intelligence
Regularly updated rulesets incorporating latest threat intelligence and security alerts
Compliance Support
Security rules designed to help meet compliance standards such as PCI-DSS
Standard contract
No
No
No
Customer reviews
Trevis Macnon
Security has protected global apps and APIs and connects multi-cloud workloads securely
Reviewed on Dec 08, 2025
Review from a verified AWS customer
What is our primary use case?
My main use case for F5 Distributed Cloud Services is to protect web applications and APIs from attacks.
A specific example of how I use F5 Distributed Cloud Services to protect my web applications or APIs is that it uses F5 XC WAF to block bot-driven card testing attacks.
My main use case for F5 Distributed Cloud Services helps with those types of attacks by connecting workloads across AWS , Azure , GCP, and on-premises, creating a secure global network fabric.
What is most valuable?
The best features F5 Distributed Cloud Services offers are global application delivery, multi-cloud networking, and DDoS protection.
The global application ready value of F5 Distributed Cloud Services helps us accelerate content delivery globally.
F5 Distributed Cloud Services has positively impacted my organization by providing secure access to all our internal applications, protecting our employee, partner, or contractor's access to the application, accelerating content delivery globally, and connecting workloads across AWS , Azure , GCP, and on-premises to create a secure global network fabric.
What needs improvement?
F5 Distributed Cloud Services can be improved because the cost can be high, especially for premium platform pricing, which may exceed smaller companies that are working on tight budgets, and there is vendor lock-in.
F5 Distributed Cloud Services requires time to master the configuration of policies, networking, and security, making it time-consuming to learn.
For how long have I used the solution?
I have been using F5 Distributed Cloud Services for two years.
What do I think about the stability of the solution?
F5 Distributed Cloud Services is very stable, with no downtime.
What do I think about the scalability of the solution?
F5 Distributed Cloud Services is very scalable and grows with our organization's needs.
How are customer service and support?
F5 Distributed Cloud Services customer support is amazing, with a very dedicated and professional team. I would rate F5 Distributed Cloud Services customer support an eight out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I previously used a different solution before switching to F5 Distributed Cloud Services.
Before switching to F5 Distributed Cloud Services, we were using Cloudflare , but we migrated to F5 XC because it was simpler, more cost-effective, and an easy-to-deploy solution.
What was our ROI?
Since using F5 Distributed Cloud Services, we have seen a return on investment with a reduction in infrastructure cost by eliminating on-premises WAF appliances and increased security, avoiding breach costs, along with better performance leading to revenue growth.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing for F5 Distributed Cloud Services is that everything is good and great.
Which other solutions did I evaluate?
Before choosing F5 Distributed Cloud Services, I evaluated other options, including Akamai Kona Site Defender .
What other advice do I have?
My advice to others looking into using F5 Distributed Cloud Services is that it is a good platform that will protect all your clients, employees, and provide protection from any threats while also improving your company revenue growth.
F5 Distributed Cloud Services is a good tool and highly recommendable.
I found this interview to be great and have no suggestions for changes. I would rate this review an eight out of ten.
Filip Mikulik
Protects web applications with comprehensive security features
Reviewed on Jan 22, 2025
Review provided by PeerSpot
What is our primary use case?
There are two main use cases for Distributed Call Services: DDoS or Distributed attacks protection and WAF web application security or firewall.
What is most valuable?
All features are valuable. In a multi-cloud or distributed cloud, there are many protection possibilities from data to web application or API protection, including bot mitigation. This is a comprehensive package for web application security. The main benefit is Web App Security, offering a complete security package from DDoS to web application firewall, API protection, and bot mitigation.
What needs improvement?
It's a long way to be perfect, of course, as with all solutions. The main issue is integration with other parts or products of F5, like on-premise WAF . There are some problems, mainly from the perspective of implementation and customer expectations, which sometimes differ from reality.
For how long have I used the solution?
I worked for an F5 partner, not as a customer. We used the Services line for DDoS protection. It was the main use case for Silver Line for about one and a half years.
What do I think about the stability of the solution?
There are compliance issues, mainly if a customer wants something that isn't possible, yet not with the functionality.
What do I think about the scalability of the solution?
I have had no problem with scalability yet, so it's good.
How are customer service and support?
From my point of view, support is responsible and okay.
How would you rate customer service and support?
Positive
How was the initial setup?
Distributed code is easy to set up. If rated on a scale from one to ten, where ten means very easy, I would probably rate it a nine.
What other advice do I have?
For those who want to use Azure Cloud Services, consider implementing it. It's pretty good. From my point of view, it's easy to set up and offers strong functionalities.
The overall product rating is nine out of ten.
reviewer2586870
Enhancing security with multi-cloud networking and effective DevOps integration
Reviewed on Oct 21, 2024
Review provided by PeerSpot
What is our primary use case?
A common use case is multi-cloud networking. If a global customer has applications on different clouds that come together as one application, F5 can be a good entry point for that application with additional security.
How has it helped my organization?
Using F5 Distributed Cloud Services eliminates the need for hardware in your data center, resulting in cost savings.
What is most valuable?
F5 Distributed Cloud Services is valued for multi-cloud networking and easy integration with DevOps tools and Kubernetes . It offers comprehensive security, including DDoS protection, API protection, and application protection through a unified console. Multi-cloud networking and API Protection and Discovery are unique features.
F5 is known for being the best load balancer in the market. Customers with an existing module can easily adopt additional modules without investing in new hardware.
What needs improvement?
The pricing could be adjusted to better meet the needs of typical customers in regions like Poland, where the product is considered too expensive.
For how long have I used the solution?
I estimate F5 Distributed Cloud Services has been available for no more than two years.
What do I think about the stability of the solution?
I rate the overall solution as highly stable, scoring it a ten out of ten.
What do I think about the scalability of the solution?
I rate the scalability of the solution at a ten out of ten, indicating that it should work flawlessly.
How are customer service and support?
I have worked with their support for over ten years and rate it a ten out of ten since the quality is among the best.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I work with other vendors, such as Broadcom, BeyondTrust, and Qualys.
How was the initial setup?
The cloud version is quick to implement, typically taking a few hours.
What about the implementation team?
From my company, one person is usually enough for implementation. For maintenance, there are four engineers who handle duties between teams.
What was our ROI?
The solution provides a return on investment by eliminating the need for hardware in the data center.
What's my experience with pricing, setup cost, and licensing?
I am not involved in sales, so I do not deal with the pricing aspect directly. I give the cost of the solution a four out of ten since it is not a cheap product.
What other advice do I have?
I recommend the solution for its features like multi-cloud networking and easy integration with DevOps tools. However, cost comparisons with other services show a significant difference.
I'd rate the solution ten out of ten.
James S.
F5 Shape Bot
Reviewed on Nov 01, 2022
Review provided by G2
What do you like best about the product?
The F5 Shape Bot Defense is straightforward to use. You need to put it on your head, and it will do its job.
What do you dislike about the product?
My biggest complaint is that the bot is not always accurate when shooting the ball. Sometimes it will hit the ball too high or too low, and it doesn't always make contact with the ball.
What problems is the product solving and how is that benefiting you?
F5 Shape Security provides a bot defense solution that is helping to protect my online presence from bot attacks. This benefits me by helping to keep my online presence safe and secure from potential bot attacks.
Information Technology and Services
Brilliant ! No wonder they are leaders in their space
Reviewed on Oct 29, 2022
Review provided by G2
What do you like best about the product?
From a biz perspective, dramatically reduces risk of online automated attacks, breaches of web and mobile apps
What do you dislike about the product?
Not easy to see, always gauge the efficacy of the solution. Not clear exactly what the AI algorithms are looking for
What problems is the product solving and how is that benefiting you?
reduced hassles (friction) for returning genuine users of our systems
Protect vital web, mobile apps from fraud, breach and importantly abuse
Protect vital web, mobile apps from fraud, breach and importantly abuse