F5, Inc.

F5, Inc.

F5 was founded in 1996 and went public in 1999, surviving the dot-com bust that erased many networking peers. François Locoh-Donou took over as CEO in 2017 after building the EMEA business for competitor Ciena. The company originated with the BIG-IP hardware appliance that sat in front of web servers. That hardware monopoly — BIG-IP became the default in enterprise data centers — generated the cash flow that funded the current transformation, which started in earnest with the $670 million acquisition of NGINX in 2019 (per the firm, 2019). The firm's strategy now divides into two pillars: a legacy systems business and a distributed cloud services platform built around the NGINX software line. F5 delivers application security through its Advanced WAF, anti-bot, and API protection modules, competing directly with Cloudflare and Akamai in web application firewalls and DDoS mitigation. Its BIG-IP Next software runs on-premises, in private clouds, and across AWS, Microsoft Azure, and Google Cloud. The firm also operates in application delivery networking, multi-cloud networking, and access management. Key customers span global banks, major airlines, and federal agencies. Classified work with U.S. government cybersecurity programs is a material but undisclosed revenue line. The company reported roughly 6,500 employees as of early 2025, with the core engineering talent concentrated in Seattle and a secondary hub in San Jose. F5 added Shape Security in 2020 for bot mitigation technology and Threat Stack in 2021 for cloud workload security, signaling the move into cloud-native and AI-driven security operations. Locoh-Donou has not erected a separate venture arm or club deal structure. Instead, F5 uses its nearly $1 billion in annual operating cash flow for targeted acquisitions that augment the platform — no third-party fund management. F5 is a public technology company that behaves like essential infrastructure, not a speculative enterprise. Its moat stems less from innovation speed than from installed-base inertia: enterprise applications written to BIG-IP iRules cannot easily migrate to another vendor. The structural differentiator is this application code lock-in, combined with a deliberate push into API security for the Kubernetes environments where its hardware cannot follow. Locoh-Donou is the fourth CEO in the firm's history. No active family office structure or sponsor capital sits behind the company — it is a widely held, publicly traded entity.