Overview
Explore
Partners
What's popular
JuicedShop Security Lab Series: Injection Attacks
The JuicedShop series is designed to explore the capabilities of Burp Suite and web application testing. Divided into shorter, palatable CTF games, the JuicedShop series features the vulnerable Juice Shop web application. These challenges provide an opportunity to apply web application testing methodologies in a live environment for real-world use cases.
The Cyber Window
The Cyber Window is a learning series hosted by Global Application Security Architect Matt Rose that covers a wide range of Application Security topics. In each episodes, Matt breaks down complex AppSec topics into easy-to-understand concepts and lessons.
Deploying and Securing Multi-Cloud and Edge Generative AI Workloads with F5 Distributed Cloud
In the current AI market, the demand for scalable and secure deployments is increasing. Public cloud providers (AWS, Google, and Microsoft) are competing to provide GenAI infrastructure, driving the need for multi-cloud and hybrid cloud deployments.
However, distributed deployments come with challenges, including:
Complexity in managing multi-cloud environments.
Lack of unified visibility across clouds.
Inconsistent security and policy enforcement.
F5 Distributed Cloud provides a solution by offering a seamless, secure, and portable environment for GenAI workloads across clouds. This lab will guide you through setting up and securing GenAI applications with F5 Distributed Cloud on AWS EKS and GCP GKE.
JuicedShop Security Lab Series: Vulnerable and Outdated Components
The JuicedShop series is designed to explore the capabilities of Burp Suite and web application testing. Divided into shorter, palatable CTF games, the JuicedShop series features the vulnerable Juice Shop web application. These challenges provide an opportunity to apply web application testing methodologies in a live environment for real-world use cases.
Getting Started with NGINX One
Explore NGINX One, an all-in-one platform that integrates the best of NGINX's offerings into a unified package that includes a cloud-based dashboard and access to F5 Distributed Cloud. Customers get advanced load balancing, web and application server capabilities, API gateway functionalities, and security features. The goal of NGINX One is to provide unparalleled performance, security, and scalability for modern applications, whether they are deployed in the cloud, on-premises, or in hybrid environments.
What's new
Partner POV | These 4 Threats to AI Applications Require New Cybersecurity Strategies
Large language models and AI applications are transforming enterprises but introduce new vulnerabilities. Traditional cybersecurity is inadequate against threats like prompt injection, toxic outputs, data exfiltration, and AI-specific DoS attacks. Companies must understand these risks and adopt modern strategies to protect their AI investments and ensure secure, trustworthy interactions.
Akamai Firewall for AI Overview
Akamai Firewall for AI is purpose-built to secure AI apps and interactions. Learn how it works in this overview video.
Partner POV | Strategic Openness is Banks' Next Competitive Differentiator
With open finance initiatives gathering momentum globally, forward-thinking banks around the world have advanced beyond viewing more open ecosystems through the lens of regulatory obligations or passing trends.
Getting Started with NGINX One
Explore NGINX One, an all-in-one platform that integrates the best of NGINX's offerings into a unified package that includes a cloud-based dashboard and access to F5 Distributed Cloud. Customers get advanced load balancing, web and application server capabilities, API gateway functionalities, and security features. The goal of NGINX One is to provide unparalleled performance, security, and scalability for modern applications, whether they are deployed in the cloud, on-premises, or in hybrid environments.
JuicedShop Security Lab Series: Software and Data Integrity Failures
The JuicedShop series is designed to explore the capabilities of Burp Suite and web application testing. Divided into shorter, palatable CTF games, the JuicedShop series features the vulnerable Juice Shop web application. These challenges provide an opportunity to apply web application testing methodologies in a live environment for real-world use cases.
JuicedShop Security Lab Series: Vulnerable and Outdated Components
The JuicedShop series is designed to explore the capabilities of Burp Suite and web application testing. Divided into shorter, palatable CTF games, the JuicedShop series features the vulnerable Juice Shop web application. These challenges provide an opportunity to apply web application testing methodologies in a live environment for real-world use cases.
Hands-On Lab Workshop: Juiced Shop, OWASP
Join us for the Virtual Lab Workshop! During this exclusive session, the host will introduce the Juiced Shop Lab. This workshop is designed to introduce fundamental concepts of web application security testing through our CTF mini-games series, JuicedShop. After the live lab, you'll have a better understanding of how to use Burp Suite and will be able to apply those skills to more challenges in our JuicedShop series. This one-hour event is limited to a small group of participants who will have the opportunity to engage in Q&A during the session. Attendees are encouraged to actively participate by launching the lab themselves alongside the presenter for a hands-on experience.
JuicedShop Security Lab Series: Security Misconfiguration
The JuicedShop series is designed to explore the capabilities of Burp Suite and web application testing. Divided into shorter, palatable CTF games, the JuicedShop series features the vulnerable Juice Shop web application. These challenges provide an opportunity to apply web application testing methodologies in a live environment for real-world use cases.
JuicedShop Security Lab Series: Cryptographic Failures
The JuicedShop series is designed to explore the capabilities of Burp Suite and web application testing. Divided into shorter, palatable CTF games, the JuicedShop series features the vulnerable Juice Shop web application. These challenges provide an opportunity to apply web application testing methodologies in a live environment for real-world use cases.
Partner POV | Global Payments Company Secures APIs to Protect Payment Innovation
Akamai demonstrates their ability to revolutionize global payments by securing APIs with unparalleled visibility and automation. They empower the customer to mitigate risks, ensure compliance, and confidently expand into new markets, transforming API security from a black box into a transparent, manageable asset. Discover how this synergy fuels secure, rapid growth.
JuicedShop Security Lab Series: Broken Access Control
The JuicedShop Security Lab Series is designed to explore the capabilities of Burp Suite and web application testing. Divided into shorter, palatable CTF games, the JuicedShop series features the vulnerable Juice Shop web application. These challenges provide an opportunity to apply web application testing methodologies in a live environment for real-world use cases.
JuicedShop Security Lab Series: Insecure Design
The JuicedShop series is designed to explore the capabilities of Burp Suite and web application testing. Divided into shorter, palatable CTF games, the JuicedShop series features the vulnerable Juice Shop web application. These challenges provide an opportunity to apply web application testing methodologies in a live environment for real-world use cases.
The Cyber Window
The Cyber Window is a learning series hosted by Global Application Security Architect Matt Rose that covers a wide range of Application Security topics. In each episodes, Matt breaks down complex AppSec topics into easy-to-understand concepts and lessons.
The Cyber Window Episode 11: AI Problems for App Sec Teams
In this episode of The Cyber Window, WWT Global Application Security Architect Matt Rose discusses the challenges AI copilots and vibe coding practices effect application security teams
Hour of Cyber: Application Security
The Application Security Hour of Cyber is an interactive glass board session that explores application security in 2025 and industry best practices. Organizations must change their approach to application security to effectively identify and remediate risks in their applications. Application vulnerabilities should be seen as comprehensive security risks, rather than categorized into code, runtime or open-source risks, to allow for more effective remediation. Expect a focused discussion with just enough depth to provoke thought and define next steps.
F5 Distributed Cloud WAF on Regional and App Connect Deployment Mode
F5 Distributed Cloud WAF deployed on Regional Edge and App Connect Deployment mode. This deployment model offers an optimal solution for scenarios where backend applications are inaccessible from the internet, lacking a Fully Qualified Domain Name (FQDN) or Public IP.
In this case Customer Edge sites can be deployed to connect these "private" customer sites to the XC Global Network via IPSEC tunnels opened from Distributed Cloud Customer Edges to the closes two REs sites.
Distributed Cloud WAF is deployed on the Regional Edges, where the services are being advertised to the Internet through anycast IPs.
Customer Edges are being deployed on the customer sites and connect to the closest RE and traffic will be inspected by the WAAF security policy.
The traffic will then be forwarded across the distributed cloud global network towards an egress Regional Edge and then over an IPSEC tunnel to the Customer edge site where it will be forwarded to the backend applications as pure IP-based traffic.
F5 Distributed Cloud (XC) Application Security with Terraform
In this lab, users will experience F5 Distributed Cloud Web App and API protection (WAAP), where organizations can simplify their path to effective security without sacrificing continued business innovation and customer demand. An API-driven approach to application protection enables improved collaboration between networks, security operations, and developers. This lab will use Terraform to deploy a Web App and API protection solution that protects an existing application
F5 Distributed Cloud WAF on Regional Deployment Mode
This WWT Lab will provide a hand on experience of F5 Distributed Cloud WAF deployed on Regional Edge in deployment mode. This deployment mode is better suited when protecting backend applications which are already public accessible from the internet via FQDN or Public IP.
F5 Distributed Cloud WAF is deployed on the Regional Edges, where the services are being advertised to the internet through anycast IPs. The end users will connect to their closest Regional Edge and the traffic will be inspected by the WAF security policy.
The traffic will then be forwarded across the XC Global Network towards an egress Regional Edge and then towards the customer site as regular internet traffic. The customer will filter the traffic, only allowing traffic forwarded by the XC platform.
Practical API Security: Discover, Defend, and Secure APIs from Code to Runtime
This lab provides a hands-on introduction to API security and visibility using F5 Distributed Cloud Web App and API Protection (XC WAAP). As APIs continue to grow in number and complexity, they have become a primary target for cyberattacks. This lab explores how to discover, document, and secure both known and shadow APIs using the platform's API Discovery, Schema Validation, and Security Dashboards.
Participants will learn how to:
Send traffic through the F5 HTTPS Load Balancer to trigger API Discovery and the API Crawler
Automatically generate and maintain an API inventory, including undocumented shadow APIs
Apply OpenAPI Schema Validation to enforce API conformity and detect anomalies
Gain deep insights through advanced API Security Dashboards, including threat levels, sensitive data exposure, authentication status, and risk scores
Understand the importance of integrating DevSecOps practices by leveraging IaC and GitHub Actions for API protection deployment
By the end of this lab, users will gain critical visibility into their API ecosystem, identify vulnerabilities, and take actionable steps to secure both documented and undocumented APIs—helping to bring shadow APIs into the light.
The AI Factory Revolution: Engineering Away Resource Contention with F5, NVIDIA & WWT
Artificial intelligence (AI) has created unprecedented demand for computing resources, causing strain on existing infrastructure and creating bottlenecks that limit business transformation. AI factories are large-scale infrastructure for organizations looking to harness AI capabilities while managing resource constraints. NVIDIA's AI capabilities, F5's application security and delivery solutions, and WWT's consulting expertise create a powerful solution.