TrustRadius: an HG Insights company

F5 Distributed Cloud Bot Defense vs. Sonatype Platform

Save this comparison

Save this comparison

Contact about F5 Distributed Cloud Bot Defense

Please fill out the form below to get in touch.

F5

Connect with F5

What are you interested in?

Already have an account?

You hereby consent to have TrustRadius share the information supplied on this form with F5 so that F5 and TrustRadius may contact you in regard to the information requested.

Add Product

Recommended Comparisons

    Overview
    ProductRatingMost Used ByProduct SummaryStarting Price

    F5 Distributed Cloud Bot Defense

    Score8.6 out of 10
    N/AF5 Distributed Cloud Bot Defense (formerly Shape Defense, acquired January 2020) provides security to protect a website from bots, fake users, and unauthorized transactions, preventing large scale fraud and eroded user experiences. Companies get visibility, detection and mitigation outcomes to reduce fraud and cloud hosting, bandwidth and compute costs, improve user experiences, and optimize their business based on real human traffic.N/A

    Sonatype Platform

    Score8.8 out of 10
    Enterprise companies (1,001+ employees)
    Sonatype secures the software supply chain and protects organizations' vital software development lifecycle(SDLC). The platform unites security teams and developers to accelerate digital innovation without sacrificing security or quality across the SDLC. With users among more than 2,000 organizations and 15 million software developers, Sonatype tools and guidance help users to deliver and maintain exceptional and secure software.

    $0

    for use of the Sonatype Nexus Repository Community Edition

    Pricing
    F5 Distributed Cloud Bot DefenseSonatype Platform
    Editions & Modules
    Enterprise
    Custom Quote
    per year
    Sonatype Air-Gapped Environment Nexus Repository
    $175
    per year per user
    Sonatype Repository Firewall
    $224
    per year per user
    Sonatype Repository Firewall for Artifactory
    $224
    per year per user
    Sonatype Air-Gapped Environment Repository Firewall
    $230
    per year per user
    Sonatype Repository Firewall Cloud
    $265
    per year per user
    Sonatype Lifecycle
    $690
    per year per user
    Sonatype Lifecycle Cloud
    $810
    per year per user
    Sonatype Air-Gapped Environment Lifecycle
    $825
    per year per user
    Sonatype Nexus Repository Pro
    $960
    per month (billed annually)
    Sonatype Nexus Repository
    $960
    per month (billed annually)
    Sonatype SBOM Manager
    Contact Sales
    Offerings
    Pricing Offerings
    F5 Distributed Cloud Bot DefenseSonatype Platform
    Free Trial
    YesYes
    Free/Freemium Version
    NoNo
    Premium Consulting/Integration Services
    YesNo
    Entry-level Setup FeeOptionalRequired
    Additional Details——
    More Pricing Information
    Community Pulse
    F5 Distributed Cloud Bot DefenseSonatype Platform
    Considered Both Products
    F5
    No answer on this topic
    Sonatype
    No answer on this topic
    Key User Insights
    Would buy again
    98%
    Would buy again
    41 Answers
    100%
    Would buy again
    14 Answers
    Delivers good value for the price
    100%
    Delivers good value for the price
    39 Answers
    100%
    Delivers good value for the price
    14 Answers
    Happy with the feature set
    100%
    Happy with the feature set
    42 Answers
    100%
    Happy with the feature set
    14 Answers
    Lived up to sales and marketing promises
    97%
    Lived up to sales and marketing promises
    35 Answers
    90%
    Lived up to sales and marketing promises
    9 Answers
    Implementation went as expected
    89%
    Implementation went as expected
    32 Answers
    100%
    Implementation went as expected
    12 Answers
    Best Alternatives
    F5 Distributed Cloud Bot DefenseSonatype Platform
    Small Businesses
    Rencore Code (SPCAF)
    Score8.8 out of 10
    No answers on this topic
    Medium-sized Companies
    Trend Vision One Email and Collaboration Security
    Score9.9 out of 10
    No answers on this topic
    Enterprises
    Checkmarx
    Score7.6 out of 10
    No answers on this topic
    All AlternativesView all alternativesView all alternatives
    User Ratings
    F5 Distributed Cloud Bot DefenseSonatype Platform
    Likelihood to Recommend
    8.5
    (42 ratings)
    8.8
    (14 ratings)
    Likelihood to Renew
    8.2
    (1 ratings)
    8.9
    (2 ratings)
    Usability
    -
    (0 ratings)
    8.0
    (2 ratings)
    Availability
    -
    (0 ratings)
    9.0
    (1 ratings)
    Performance
    -
    (0 ratings)
    8.0
    (1 ratings)
    Support Rating
    8.6
    (42 ratings)
    10.0
    (2 ratings)
    Online Training
    -
    (0 ratings)
    8.0
    (1 ratings)
    Implementation Rating
    7.7
    (30 ratings)
    8.0
    (1 ratings)
    Configurability
    -
    (0 ratings)
    8.4
    (2 ratings)
    Contract Terms and Pricing Model
    -
    (0 ratings)
    9.0
    (1 ratings)
    Ease of integration
    -
    (0 ratings)
    9.0
    (1 ratings)
    Product Scalability
    -
    (0 ratings)
    8.0
    (1 ratings)
    Professional Services
    -
    (0 ratings)
    9.0
    (1 ratings)
    Vendor post-sale
    -
    (0 ratings)
    10.0
    (1 ratings)
    Vendor pre-sale
    -
    (0 ratings)
    10.0
    (1 ratings)
    User Testimonials
    F5 Distributed Cloud Bot DefenseSonatype Platform
    Likelihood to Recommend
    F5
    I'd strongly recommend it, but with a few caveats depending on how mature the team is with behavioral based security tools. One of our fintech clients was getting hit with low volume, widely spread login attempts, below our rate limiting thresholds. F5 Distributed Cloud Bot Defense was able to flag abnormal input timings, inconsistent device fingerprinting and high entropy in field population behavior. You can only imagine the wave of downstream account lockouts this saved the client. On the other end we had a client with a real time trading platform using Graphql over websockets. F5 Distributed Cloud Bot Defense wasn't able to tap into that stream natively. we had to reverse engineer a proxy layer to inspect events. It worked but it was clunky and not officially supported
    Incentivized
    Read full review
    Sonatype
    - Guidance on remediation is very good - Vulnerability detection is very good - Support is very good - Ability to ask PMs/POs open questions at Office Hours every month is very good - Support for languages is lacking (TIOBE Index Top20) - Some features are un-neededly hidden and make the usage more complex then it needs to be
    Read full review
    Pros
    F5
    • Quickly helps mitigate the retooling and newer advanced bot attacks
    • Excellent customer service from our f5 bot Defense team/partners
    • Easy to do Traffic Analysis/False Positive reviews with their dashboard of data
    • Our F5 Security/Solutions Architect and TAM is always there for us whenever we need them
    • First class service by the F5 Distributed Cloud Bot DefenseSOC, the Tactics Team, the F5 Testing person that helps us, the mobile SDK experts, the Client-Side Signals experts and F5 management
    • Industry best Threat Briefings
    • Not only is F5 Distributed Cloud Bot Defense great at stopping the advanced bot attacks, they also have protection against any tampering or replay attacks.
    Read full review
    Sonatype
    • Nexus firewall is a great feature enabled for all our proxy repositories which are used to download the third-party opensource packages.
    • Nexus IQ is integrated with build stage to analyze the component against evaluation policy. This helps to figure out the application security standards.
    • Nexus IQ is also having a feature to scan container images before it uploads to our private repository. This is great feature for container platforms.
    Read full review
    Cons
    F5
    • On a technical side, we've had a lot of deployment issues. This is not a one-sprint solution.
    • We ran into undocumented failure modes and had to rely on L2 and L3 customer support, delaying troubleshooting significantly [in our experience].
    • Accurate log ingestion is a larger challenge than one would want in a security tool.
    Read full review
    Sonatype
    • Support on the end of life lifecycle of known open source components that are going end of life, or already went end of life
    • Support for emerging infrastructure as code frameworks
    • Support for native/ default retention, archiving and clean up policies for hosted repositories
    Read full review
    Likelihood to Renew
    F5
    We are more likely than not, to renew it. It saved us from a really huge data breach 4 months ago. It has earned its shower so far
    Incentivized
    Read full review
    Sonatype
    Sonatype supports more than 200 dev(s). It proves with the repository to store the artifacts. Allows for governance of open source software used by the different teams. It is used by security teams to scan for vulnerabilities in software(s) and in the deployed containers. It helps ensure code quality.
    Incentivized
    Read full review
    Usability
    F5
    No answers on this topic
    Sonatype
    Overall experience is great with the Platform; however, I see some opportunity with upgrading the platform as it is missing with data of historical scans to allow reviewer to get view of trend how the application/product development team is considering fixing the issues.
    Incentivized
    Read full review
    Reliability and Availability
    F5
    No answers on this topic
    Sonatype
    Extremely good
    Read full review
    Performance
    F5
    No answers on this topic
    Sonatype
    Sonatype products are great value as I said but a few areas like how products use underlying resources in order to make it further lightweight, is something I would like them to consider.
    Read full review
    Support Rating
    F5
    Official support can sometimes take time to reach the right people. However, once you are in contact with the appropriate experts, the support is excellent, as F5 staff are true specialists. On the other hand, we always receive prompt assistance from our local sales team, who typically help us connect with the right people quickly.
    Incentivized
    Read full review
    Sonatype
    Monthly touchpoints with Sinisa has been very valuable.
    Incentivized
    Read full review
    Implementation Rating
    F5
    Implementation of Distributed Cloud is accomplished a few different ways, it would pay to meet with the F5 team and map out your implementation prior to acquisition to make sure you Infrastructure and Operations teams are aligned to the approach and requirements.
    Incentivized
    Read full review
    Sonatype
    easy to implement and performing the scans via automations as well
    Incentivized
    Read full review
    Alternatives Considered
    F5
    Clodflare bot management was our other obvious option for us. We tested it on a staging version of our RFQ platform. It was great for broad traffic filtering but had a hard time with nuanced differences between real subcontractors and low volume bots mimickingt human input whereas that's where F5 Distributed Cloud Bot Defense thrived
    Incentivized
    Read full review
    Sonatype
    Out of other products we evaluated before choosing Sonatype, the later looked far more user friendly, easy to understand and work with. This was key for us, as the tool needs to be used by many engineers that don't have security as their main focus. Having a tool that is easy to understand and work with, makes the process of evaluating open source dependencies much easier and appealing for developers.
    Incentivized
    Read full review
    Contract Terms and Pricing Model
    F5
    No answers on this topic
    Sonatype
    Great value for money
    Read full review
    Scalability
    F5
    No answers on this topic
    Sonatype
    Everything is very good except a little concern regarding large scale docker usage.
    Read full review
    Professional Services
    F5
    No answers on this topic
    Sonatype
    Very good
    Read full review
    Return on Investment
    F5
    • F5 Distributed Cloud Bot Defense has helped our customers identify real human traffic and bot traffic, allowing them to prioritize real traffic to applications and improve cloud service usage.
    • F5 Distributed Cloud Bot Defense ha ayudado a nuestros clientes a poder identificar cuál es el tráfico real de personas y cual el de Bot para así poder priorizar el tráfico real hacia las aplicaciones mejorando los consumos de servicios en nube.
    Incentivized
    Read full review
    Sonatype
    • Sonatype's centralized management of artifacts have made it very easy for developers to share code in an efficient manner.
    • Sonatype's low false positive rate has made it easier to convince developers to remediate vulnerabilities
    • Sonatype's archaic architecture has made it more expensive to manage than it could be.
    Read full review
    ScreenShots

    Sonatype Platform Screenshots

    Screenshot of Sonatype LifecycleScreenshot of Sonatype Lifecycle - Chrome extensionScreenshot of Sonatype Advanced Legal PackScreenshot of Sonatype Nexus RepositoryScreenshot of Sonatype Nexus Repository ManagerScreenshot of Remediation of vulnerabilities