Salt Security API Protection Platform vs. F5 Distributed Cloud Bot Defense

Salt is highly recommended for anyone who wants to discover, monitor and protect their APIs against various types of attacks. Salt should not be used as a SIEM.

F5 Distributed Cloud Bot Defense is well suited for large Enterprises that face advanced bot attacks from Web
Scraping, Credential Stuffing, Carding/Credit Card Stuffing, Fake Account
Creation, and more where the collection of the Client-Side signals helps clearly show if the attackers are telling lies vs. other bot solutions that place a lot of the responsibility on their customers to tune bot scores.

• PII identification in API traffic.
• Divergence between API traffic and documentation (swagger files).
• Potential attacks with information to take counter measures.

• Quickly helps mitigate the retooling and newer advanced bot attacks
• Excellent customer service from our f5 bot Defense team/partners
• Easy to do Traffic Analysis/False Positive reviews with their dashboard of data
• Our F5 Security/Solutions Architect and TAM is always there for us whenever we need them
• First class service by the F5 Distributed Cloud Bot DefenseSOC, the Tactics Team, the F5 Testing person that helps us, the mobile SDK experts, the Client-Side Signals experts and F5 management
• Industry best Threat Briefings
• Not only is F5 Distributed Cloud Bot Defense great at stopping the advanced bot attacks, they also have protection against any tampering or replay attacks.

• The platform could have more options for exporting detailed data from attackers' dashboards.
• The Attackers dashboard could also have more options of filters in order to support the investigations of the attack.
• The OAS analysis could present a more detailed view of the found issues.

• On a technical side, we've had a lot of deployment issues. This is not a one-sprint solution.
• We ran into undocumented failure modes and had to rely on L2 and L3 customer support, delaying troubleshooting significantly [in our experience].
• Accurate log ingestion is a larger challenge than one would want in a security tool.

Support is quick to respond. They help guide you through any issues you have and ensure everything has been resolved before disconnecting. Wait times can vary, but it depends on the time of day. Eventually, excellent support is reached, and you can learn a few things from them as well.

Incentivized

F5 Distributed Cloud Bot Defense and our partners are great at helping us with in-depth Traffic Analysis of protected endpoints first in Monitoring Mode. After 7-14 days of Traffic Analysis/False Positive reviews, we can clearly tell when we are ready to place protected endpoints into Mitigation Mode.

We tried controls offered by the IaaS providers but these were hard to manage and did not provide the visibility we wanted. We also protected APIs with a normal WAF but this was only helpful for assets we knew about and API attacks were not caught by the WAF.

We have tried a whole bunch of solutions before we got Shape bot defense solution. But non of them worked for us the way F5 Shape solution worked

Incentivized

• Salt Security API Protection Platform has provided detailed information that is helping us to identify and investigate attacks in our environment

• [F5] Shape [Security] established a clear negative trend line in bot traffic to our retail site.
• [F5] Shape [Security's] anti-automation has moved our business out of reach for ROI for attackers.
• So far, [F5] Shape [Security] has not caused any incidents as a technology, and has stifled attacks which would have certainly landed as a Sev 2 without this protection.