F5 Shape Security vs ThreatMetrix comparison

The Shape technology platform, covered by 50+ patents, stops automated fraud and other attacks on web and mobile applications, including credential stuffing, account takeover, scraping, and unauthorized aggregation. Shape is one of the largest processors of login traffic in the world, protects more than 1.3 billion user accounts, and prevented more than $1 billion in fraud losses last year.

Shape solutions leverage artificial intelligence and machine learning, among other technologies, to accurately determine in real-time if an application request is from a fraudulent source, and if so, effectively mitigate. As soon as new countermeasures are deployed, 5%-10% of attackers will typically attempt to retool and start a new attack. Shape solutions adapt and maintain full efficacy even as attackers evolve.

The world's leading banks, airlines, retailers, hotel chains, and federal agencies rely on Shape as their primary line of defense against sophisticated cybercrime.

Shape Solutions:

Shape Recognize: Identify returning, known users of your website and reduce authentication friction for these users. This enables organizations using Recognize a persistent and secure login experience where good users face less login challenges while still increasing online safety.

Shape AI Fraud Engine (SAFE): SAFE connects context across different browsers and devices used by the same user, as well as observations from across Shape’s entire network. This allows Shape's AI engine to drive down fraud each month as its engine consumes more data.

F5 Device ID+: A real-time and precise device identifier using advanced signal collection and machine learning to assign a unique fingerprint to each device visiting your site. Simple deployment with immediate results for security, networking, and fraud. Better understand the unique devices visiting your applications.

Shape Enterprise Defense: Invisibly protect every application from attack, fraud, and abuse. Defending the world's largest companies, Shape knows whether a request is bot or human driven and if the intent is malicious or benign. This allows Shape to prevent fraud in real-time; manage aggregated and partner access to applications and provide new data for better customer insights.

Shape was recognized by Cybercrime Magazine as one of the Hot 150 Cybersecurity companies in 2019 and CB Insights 2019 AI 100 most promising artificial intelligence startups across the globe.

ThreatMetrix leverages a large database of malicious IP addresses and device fingerprints to enable effective fraud assessment using historical data. Real-time analytics and customizable scoring rules help identify suspicious transactions, supporting fraud detection across diverse platforms.

ThreatMetrix is renowned for its seamless integration with custom applications and device profiling, offering a robust system for risk mitigation through real-time analytics. While documentation is excellent and product enhancements are proactive, some challenges include cumbersome SDK integration and limited data retention at six months. Users often face difficulties due to its unintuitive rule engine, data overload, and high pricing. Additional tools may be needed for comprehensive protection beyond core features. Despite an outdated interface, many utilize ThreatMetrix for its functionality in fraud prevention, particularly across mobile and banking domains.

• Massive Database: Utilizes an extensive repository of malicious IPs and device fingerprints for fraud detection.
• Customizable Scoring Rules: Enables tailored fraud detection.
• Real-time Analytics: Facilitates immediate risk mitigation.
• Seamless Integration: Easy connection with custom applications for device profiling.
• Proactive Enhancements: Features frequent updates and excellent documentation.

• Improved Fraud Detection: Advanced analytics aid in identifying suspicious activity.
• Scalability: Adapts to unique business needs across platforms.
• Efficient Risk Assessment: Real-time data enables quick response to threats.
• Customization: Tailored rules enhance fraud prevention strategy.
• Integration Capabilities: Smooth connectivity with existing systems.

Many organizations implement ThreatMetrix to enhance security in mobile applications, retail environments, and banking sectors. By using SDK and API integrations, they can maintain device identity, ensure secure transactions, and conduct thorough threat and risk assessments, addressing challenges like DDoS threats and ghost brokering.