AI Governance & Security Vendor Wiki

6 min read

F5

Researched 2026-06-28. Primary category: ai-gateway. F5 is the acquirer of calypsoai (not itself acquired — the seed stub mislabeled this).

One-liner — The incumbent application-delivery / load-balancer vendor now bolting AI runtime security and “AI guardrails” onto its traffic platform, anchored by its 2025 acquisition of calypsoai.

What it does

F5 is a long-established public company (NASDAQ: FFIV) best known for load balancers, application delivery controllers (BIG-IP), and more recently a broader Application Delivery and Security Platform (ADSP) spanning WAF, API security, bot defense, and multicloud networking. Because F5 already sits inline on enterprise application traffic, its AI play is to inspect and control AI/model traffic on the same data path. After acquiring calypsoai it launched F5 AI Guardrails (model-agnostic runtime security for AI models and agents — data security, adversarial-threat defense, AI governance) and F5 AI Red Team (autonomous-agent attack simulation, advertised as >10,000 new attack patterns/month).

Where it sits in the stack

Primary ai-gateway (single controlled exit/inspection point for model traffic) and ai-runtime-security (the AI firewall function from CalypsoAI). Layer: model-prompt. As an inline inspection point it can screen untrusted input (prompt injection), catch sensitive-data exfiltration in prompts/responses, and constrain outbound model traffic. Lives at the boundary between green (internal) and red (model/internet) zones.

Deployment & architecture

F5 deploys as inline proxy / ADC (hardware, virtual, and SaaS/cloud), with API-based integration; CalypsoAI’s guardrails are model-agnostic and front multiple proprietary and open-source models. Integrations center on the F5 ADSP (BIG-IP, F5 Distributed Cloud) plus standard enterprise plumbing (SIEM, IdP). The AI Guardrails / AI Red Team products are the inference-security layer of that platform.

Positioning & differentiators

F5’s pitch is “you already route your app traffic through us, so route and inspect your AI traffic through us too” — consolidation onto an existing inline chokepoint rather than a new standalone proxy. Versus pure-play AI firewalls (witnessai, prompt-security, lakera, aim-security, prisma-airs), F5 leads with incumbency and an installed base; versus other infra giants making the same move (cisco/cisco-ai-defense, palo-alto-networks/prisma-airs, cloudflare), it is one of several network/app-delivery vendors absorbing an AI-security startup. Versus standalone ai-gateway tools (portkey, litellm, kong) it is heavier and security-led rather than developer-routing-led.

Ownership, funding & M&A

Public (NASDAQ: FFIV), HQ Seattle, founded 1996. Acquired calypsoai — announced 2025-09-11 at ”~$180M in purchase consideration financed primarily with cash,” closed 2025-09-26 for $145.2M in cash as recorded in Note 4 of F5’s FY2026 Q1 Form 10-Q (goodwill $114.2M; developed technology $16.9M). F5 does not reconcile the gap between the announced and recorded figures, and disclosed that CalypsoAI’s revenue and earnings were not material to its operations. This is the M&A the seed flag pointed at; the seed’s framing of F5 as “acquired” was wrong — F5 is the buyer. On 2026-06-22 F5 announced a separate, second AI-security acquisition, surepath-ai (network-based shadow-AI discovery and intent classification), launched alongside the F5 AI Security Platform — SurePath’s discovery layer feeds the CalypsoAI-derived AI Guardrails and AI Red Team products. That release announced the deal as already completed; F5 published no separate close date, filed no 8-K, and has not named SurePath in any SEC filing as of 2026-07-27, but its Q3 FY2026 earnings release shows $47.6M of “acquisition of businesses, net of cash acquired” for the nine months ended 2026-06-30 against nil at the six-month mark — placing the close and the cash payment inside the quarter ended 2026-06-30 and implying a ~$47.6M price (F5 has not itemized it; the Q3 FY2026 10-Q, due early August 2026, should confirm). Unlike CalypsoAI, the SurePath brand survives — surepath.ai is live and F5 says it will keep selling SurePath as an independent platform alongside ADSP integration.

CTO / hedge-fund lens

Day-1 in the sense that an AI gateway / runtime-inspection point is a baseline control, but for most funds F5 is relevant only if you are already an F5/BIG-IP shop and want to consolidate AI inspection onto existing infrastructure rather than buy a pure-play. SR 11-7 / model-risk angle is indirect (it’s a control point, not a governance/documentation system). Fits larger, infrastructure-heavy enterprises; a 50-person fund with no F5 footprint would more likely reach for a SaaS gateway or its SASE vendor’s built-in AI controls.

Competitors / alternatives

prisma-airs, cisco-ai-defense, cloudflare, witnessai, prompt-security, lakera, aim-security, portkey, litellm, kong.

Open questions / to verify

  • Pricing/packaging of F5 AI Guardrails + AI Red Team (standalone vs ADSP bundle).
  • Whether CalypsoAI’s standalone product/brand persists or is fully absorbed into F5 ADSP. Resolved 2026-07-27: fully absorbed. calypsoai.com 301-redirects to F5’s AI Guardrails page and no CalypsoAI branding remains.
  • What accounts for the ~$35M gap between CalypsoAI’s announced ~$180M consideration and the $145.2M recorded at close; F5 has not broken it out.
  • F5 financial detail (revenue/segment) not researched here — public filings if needed.

Sources

History

  • [2026-07-27] SurePath AI status corrected pending → closed (closed 2026-06-22, announced as already completed; ~$47.6M cash implied by F5’s Q3 FY2026 cash-flow statement, not itemized by F5). Confirmed it is a separate deal from CalypsoAI and that the SurePath brand persists. See surepath-ai.
  • [2026-07-27] Corrected CalypsoAI deal facts against F5’s FY2026 Q1 Form 10-Q: close date 2025-10-08 → 2025-09-26, price recorded as $145.2M cash (vs ~$180M announced). Resolved the brand-absorption open question — fully absorbed, CalypsoAI brand retired. See calypsoai.
  • [2026-07-13] Added SurePath AI acquisition (announced 2026-06-22, pending close) and F5 AI Security Platform launch; see surepath-ai.
  • [2026-06-28] Stub created from seed registry.
  • [2026-06-28] Researched; corrected ownership from “acquired” to public (F5 is the acquirer, NASDAQ: FFIV). Confirmed F5 acquired CalypsoAI ~$180M, announced 2025-09-11, completed 2025-10-08 (primary F5 sources). Documented F5 AI Guardrails + F5 AI Red Team.

Graph View

Backlinks