shouldiuse.io

Categories

VERDICT

F5, Inc. Review

Depends

Should I use F5, Inc.?

Unified delivery & security for applications, APIs, & AI workloads across any infrastructure, trusted by 85% of the Fortune 500. Secure your digital ecosystem. - f5.com

· 1 month ago

Buy only if you run complex, high-stakes apps at enterprise scale with dedicated network and security staff. Small teams needing a load balancer or WAF should use AWS ALB, Cloudflare, or open-source NGINX instead.

Confidence

Medium. Based on ~20 public sources: SEC filings, F5 KB advisories, vendor comparisons, Reddit, and employee reviews.

Ratings

  • Value for moneyQuote-based pricing; no public cost data
  • Ease of use
  • Feature depth
  • Support qualityNo direct support-quality evidence in sources
  • Security posture

Pricing

Pay-as-you-go, hourly

BIG-IP VE (AWS)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierNo
BIG-IP VE SubscriptionQuote-based
Trial licenseFree

Best for

  • Large enterprises with dedicated NetSec teams
  • Regulated industries like banking
  • Hybrid multicloud app estates
  • Consolidating WAF + API security

Not for

  • Startups and small teams needing simple load balancing
  • Anyone without BIG-IP-trained admins
  • Simple sites wanting CDN or basic WAF
  • Buyers wanting transparent self-serve pricing

Gotchas - check before you buy

high

Nation-state actors (UNC5221) stole BIG-IP source code; CISA issued emergency directive ED 26-01.

high

2025 supply-chain hack reportedly endangered 600,000+ internet-connected devices.

medium

Subscription VE licensing is self-serve, but enterprise deals stay opaque until quoted.

low

Quarterly plus out-of-band security notifications; budget patch windows for BIG-IP and NGINX.

Pros and cons

Pros

  • Trusted by 85% of the Fortune 500 per F5's own marketing
  • Gartner MQ Leader; 4.4/5 G2 rating across 260+ reviews
  • Covers load balancing, WAF, API, and AI security plus NGINX
  • Consumable on-demand via AWS Marketplace pay-as-you-go Virtual Edition
  • 30 years in market; ~6,500 employees across 43 countries

Cons

  • Nation-state breach stole BIG-IP source code, disclosed October 2025
  • No public pricing; quote-based enterprise sales process
  • Steady CVE stream (HTTP/2, NGINX Agent) demands patch ops
  • Trial licenses reportedly hard to obtain for evaluation
  • NGINX community forked after F5 acquisition

Sources & method

- 10 sources - High-risk: nation-state breach disclosed Oct 2025; steady CVE advisory stream since.

official x4review x3security x2news x1
  • Nation-state breach (disclosed Oct 2025), UNC5221 stole BIG-IP source code and vulnerability data; CISA directive followed; F5 filed SEC 8-K.
  • BIG-IP HTTP/2 vulnerability CVE-2026-59762, Security advisory for HTTP/2 flaw in BIG-IP.
  • NGINX Agent vulnerability, Out-of-band security notification for NGINX Agent CVE.

Key stats

  • Ease of use: 2/5

    Rating

  • Pay-as-you-go, hourly

    Starting price

  • 10

    Sources

  • Analyzed

  • Value for money. Quote-based pricing; no public cost data
  • Ease of use: 2/5. Guess: BIG-IP complexity; trial license friction reported
  • Feature depth: 5/5. Broadest delivery plus security portfolio in category
  • Support quality. No direct support-quality evidence in sources
  • Security posture: 2/5. 2025 nation-state breach; ongoing CVE advisories
  • 4.4/5 G2 rating 260+ reviews
  • 85% Fortune 500 reach Per F5's own claim
  • 6,500 Employees 75 offices, 43 countries
  • 1996 Founded Seattle, WA

Pricing

BIG-IP VE (AWS)

Pay-as-you-go, hourly

  • 10Gbps Virtual Edition on AWS Marketplace
  • PAYG billing

BIG-IP VE Subscription

Quote-based

  • Self-license VEs on-demand
  • Enterprise sales negotiation

Trial license

Free

  • LTM VM trial
  • Approval reportedly slow

Security

High-risk: nation-state breach disclosed Oct 2025; steady CVE advisory stream since.

  • Nation-state breach (disclosed Oct 2025)UNC5221 stole BIG-IP source code and vulnerability data; CISA directive followed; F5 filed SEC 8-K.⁴
  • BIG-IP HTTP/2 vulnerability CVE-2026-59762Security advisory for HTTP/2 flaw in BIG-IP.
  • NGINX Agent vulnerabilityOut-of-band security notification for NGINX Agent CVE.

What users say

Direct user reviews are scarce in sources; employee sentiment is 77% positive across 175 reviews, while Reddit threads cite trial-licensing friction and breach fallout.

Alternatives

Compare F5, Inc. with each alternative.

  • NGINX (open source)

    Free reverse proxy and load balancer; simpler, though F5 owns it

    F5, Inc. vs NGINX (open source)

  • AWS Elastic Load Balancing

    Managed cloud load balancing; skip BIG-IP if AWS-native

  • Cloudflare

    CDN, WAF, and DDoS protection without appliance overhead

Companies that use it

  • University of Derby
  • Paciolan
  • Mirai
Full analysis

Based on ~20 public sources: SEC filings, F5 KB advisories, vendor comparisons, Reddit, and employee reviews.

Fortune-500-grade app delivery and security — enterprise fit, expensive overkill for small teams.

Methodology

Based on ~20 public sources: SEC filings, F5 KB advisories, vendor comparisons, Reddit, and employee reviews.

Read how a report is made.

Sources

  1. F5 homepagef5.com
    official
  2. F5 Advanced WAF comparison (G2 rating, founding year)primaryguard.com
    review
  3. F5 8-K on security incidentsec.gov
    security
  4. Zscaler: F5 incident advisory (UNC5221)zscaler.com
    security
  5. Cybersecurity Dive: supply-chain hack exposurecybersecuritydive.com
    news
  6. BIG-IP VE on AWS Marketplaceaws.amazon.com
    official
  7. F5 subscription licensingf5.com
    official
  8. Reddit r/f5networks trial license threadreddit.com
    review
  9. Comparably employee reviewscomparably.com
    review
  10. 30 years of F5 (headcount)f5.com
    official

Add this review to your site

This check for F5, Inc. says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends F5, Inc. Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.