What happened
On June 22-26, 2026, F5 launched its AI Security Platform and simultaneously acquired SurePath AI (Denver, ~19 employees, ~$6M raised). SurePath adds network-based AI discovery via frictionless redirects and out-of-band analysis — detecting shadow AI, classifying workflow intent, and tracing MCP server connections without application-level integration. The combined platform delivers four pillars: governance, discovery (SurePath), AI red-teaming (from CalypsoAI acquisition), and runtime guardrails (98.2% efficacy vs. prompt injection and data leakage). Supports on-premises, air-gapped, private cloud, and public cloud.
Why it matters
F5 is the first traditional ADC/application delivery vendor to build a unified AI security control plane, leveraging its existing in-path network position. The SurePath acquisition closes the shadow-AI visibility gap — the hardest problem for enterprises deploying AI faster than governance can track — without requiring application changes.
Applicability
CISOs in regulated industries (financial services, healthcare, government) with strict data residency requirements should evaluate F5's air-gapped deployment option now; existing F5 customers gain SurePath visibility with minimal friction.