Shape Security

Brief Overview

Shape Security provides technology for protecting Websites from sophisticated attacks.


Shape Security
800 West El Camino Real, Suite 250
Mountain View, California 94040
Tel: (650) 399 – 0400


Derek Smith, Co-Founder and CEO of Shape Security, was previously head of Oakley Networks.


Sumit Agarwal, Justin Call, and Derek Smith co-founded Shape Security in 2012. It received Series A funding in 2012 from Kleiner Perkins Caulfield & Byers, as well as TomorrowVentures. It received Series B funding in 2013 from Kleiner Perkins Caulfield & Byers, Venrock, Allegis Capital, Google Ventures, TomorrowVentures, and Enrique Salem (former CEO of Symantec). The company claims to have grown its team from 45 to 100 into 2014. By 2014, capital raised by Shape Security has grown to $66M.

Key Competitors

CloudFlare, Symantec, Intel Security (McAfee), Checkpoint

Products and Services

Shape Security provides technology for the prevention of advanced attacks against e-commerce and social Websites. Shape Security’s product is called ShapeShifter, which offers defense for Websites against attacks such as account takeover, reconnaissance attacks, application-level DDOS, man-in-the-browser attacks, carding, account lockout, and cross-site request forgery. The technology in the product is focused on disrupting botnet behavior using a scrambling of exchanges between a Website and its visitors. The appliance is inserted into the load balancing architecture in front of the Website to determine which portions of traffic are sent to the ShapeShifter and which are not. The company uses polymorphic countermeasures to deal with malware.