F5 Shape, formerly Shape Security, is an enterprise bot-mitigation platform that protects login, checkout, and account-creation flows in particular, using behavioral and environmental signals collected on the client to detect credential stuffing, scraping, and other automated abuse. F5 says it protects some of the world's largest banks, airlines, and retailers, where account takeover and inventory-hoarding bots carry direct financial risk.

F5 completed its acquisition of Shape Security in January 2020, and the technology is now part of F5 Distributed Cloud Bot Defense. Its client-side code uses what F5 describes as VM-based, bytecode-level JavaScript obfuscation with encrypted telemetry.

Rather than relying on IP reputation alone, it collects behavioral and environmental signals on the client to tell real users from automation. F5 positions this as a way to stop automated abuse without adding CAPTCHAs, account lockouts, or multi-factor prompts for real users.