Dossier · Acquired asset · 2 independent sources
Wib
Last updated: Jul 31, 2026
Wib was an Israeli API security company whose platform provided visibility, inventory, testing, and risk analysis across the API lifecycle. F5 acquired Wib in February 2024 and is incorporating its capabilities into F5 Distributed Cloud API Security.
Visit WebsiteCompany Overview
Wib built a holistic API security platform for discovering and governing APIs from development through production. Its core problem was the gap between the APIs an organization believes it owns and the endpoints, versions, schemas, authentication states, and data flows that actually exist across code repositories, public assets, cloud services, and runtime traffic. Public descriptions of the platform emphasize continuous API inventory, identification of rogue, zombie, and shadow APIs, API change management, vulnerability detection, API penetration testing, and analysis of business risk and impact. Those capabilities are more specific than a conventional web application firewall: they help a security team understand what an interface is, what it exposes, and whether it remains inside approved governance. F5's current product documentation attributes related capabilities to code-repository analysis, runtime inspection, external crawling, OpenAPI specification generation, sensitive-data discovery, authentication-risk scoring, and enforcement.
Wib sold into the enterprise API-security market, where software teams, application-security groups, and governance stakeholders must protect APIs spanning hybrid and multicloud environments. The commercial problem is durable because APIs expose business processes and sensitive data while changing faster than manual inventories and review processes can keep up. Wib reportedly raised $16 million in 2022, led by Koch Disruptive Technologies with participation from Kmehin Ventures, Venture Israel, Techstars, and existing investors. These funding and market signals support the conclusion that Wib reached meaningful commercial validation, but the public record does not establish a complete customer list, recurring-revenue scale, or independent operating results.
The competitive set included API-security specialists such as Salt Security, Traceable, Noname Security, and Pynt, as well as broader API-management, application-security, and cloud-security platforms. Wib's defensible positioning was the attempted combination of lifecycle visibility, inventory, posture analysis, testing, and remediation rather than a single runtime control. That positioning also created execution challenges: discovery quality depends on access to code and telemetry, risk scoring must avoid overwhelming security teams, and a platform must integrate with API gateways, CI/CD, identity systems, and developer workflows. The acquisition is therefore useful evidence of strategic value, but not proof that every original product claim or workflow remained differentiated after integration.
F5 announced the acquisition in February 2024 and stated that Wib capabilities would add vulnerability detection and observability to F5 Distributed Cloud Services. F5's published capability set includes API code analysis before production, API testing, compliance analysis, public-asset threat-surface assessment, and a fusion layer that correlates insights across sources. The former Wib CTO described the integration publicly, while the transaction value was not disclosed. Wib.com now redirects to F5's Distributed Cloud API Security product page, so this record should be treated as an acquired asset and historical company analysis rather than an active independent startup profile.
API discovery and lifecycle security have credible dual-use relevance. Defense, intelligence, critical-infrastructure, and public-sector systems increasingly depend on APIs connecting services, data stores, identity systems, and operational applications; unmanaged or weakly governed interfaces can create exploitable paths or unintended data exposure. Wib did not publicly establish a dedicated defense product, government deployment, or security authorization in the sources reviewed. The defense case is therefore capability-based and conditional: its technology could support hardening of sensitive application ecosystems, but actual mission adoption, deployment constraints, and assurance evidence require separate diligence.
Dual-Use Assessment
Wib's API discovery, code analysis, testing, posture assessment, and governance capabilities have substantive commercial and security applicability. The same controls can help protect defense, intelligence, critical-infrastructure, and public-sector application interfaces, but available public evidence does not confirm dedicated defense customers, government contracts, or authorization outcomes. The dual-use thesis is therefore technically credible but adoption-dependent.
Strategic Fit Assessment
Wib is no longer an independent strategically relevant startup after its 2024 acquisition by F5. The transaction and subsequent F5 product integration validate API lifecycle security as a strategic capability, while the disclosed record does not support an independent current valuation, ownership opportunity, customer-scale judgment, or investment recommendation. The appropriate diligence question is how effectively Wib's technology and team translated into F5's product rather than whether Wib remains an strategically relevant standalone entity.
Strategic Value to U.S.-Israel Alliance
Wib's strategic value lies in making API security more lifecycle-aware: discovery and code-level analysis can identify risk before runtime controls are forced to compensate for unknown or poorly governed interfaces. F5's stated integration into Distributed Cloud API Security gives the capability access to a broader application-security platform and enterprise distribution. For national-security analysis, the relevant value is improved visibility and policy control over interfaces connecting sensitive services; the record should not be read as evidence of confirmed defense deployment.
Key Technologies
- API discovery across code, public assets, and runtime telemetry
- Continuous API inventory and lifecycle change management
- API code analysis and pre-production vulnerability detection
- API security testing and suspected-threat validation
- API posture, compliance, and business-risk analysis
- Shadow, rogue, zombie, and unmanaged API identification
- Cross-source API threat and telemetry correlation
Use Cases & Applications
- Finding undocumented or unmanaged APIs in enterprise production environments
- Assessing API risk before endpoints are released into production
- Testing suspected API vulnerabilities and validating traffic-based findings
- Monitoring public assets for APIs outside approved security governance
- Generating compliance and posture evidence for API programs
- Prioritizing remediation of exposed interfaces and sensitive data paths
- Hardening APIs that connect mission-critical or defense-adjacent services
- Maintaining an enterprise API inventory across hybrid and multicloud deployments
Sources and verification
This profile is based on public-source research, Claw & Talon curation, and editorial judgment. Inclusion does not imply endorsement, partnership, investment, or a recommendation to transact. Readers should still confirm current status, customers, funding, and product claims before relying on this profile. The editorial policy explains how profiles are researched, where automated drafting is used, and how corrections work; the research methodology documents how evidence is graded, what counts as an independent source, and why some profiles are excluded from search indexing.
This record lists 6 public references used for company identity, status, positioning, or material-claim review.
Public sources
The links below are visible public references used for source discipline around company identity, status, funding, customer, acquisition, public-company, or other material claims where available.
- F5 Distributed Cloud API Security Current canonical F5 product page documenting API discovery, code-repository analysis, runtime inspection, testing, sensitive-data protection, authentication-risk scoring, monitoring, and enforcement.
- F5 Is Shifting Left to Protect APIs F5's official account of Wib integration and the resulting API code analysis, testing, compliance, threat-surface, and correlation capabilities.
- F5 Transforms Application Security for the AI Era F5 announcement describing the February 2024 acquisition-related API security capabilities.
- API security startup Wib acquired by F5 for tens of millions of dollars Reputable contemporaneous reporting on the acquisition, headquarters, founding context, funding, and product scope; transaction value was reported as an estimate and is not treated as confirmed here.
- Wib | LinkedIn Public company profile identifying Wib as a Tel Aviv API-security company founded in 2021 with a historical 51-200 employee range and wib.com as its former website.
- Wib raises $16M to accelerate growth and tackle rising API problems Wib-distributed funding announcement naming the 2022 round participants; its syndicated release also identifies the stable Wib logo asset used in this record.
- Profile update timestamp Last updated in the Claw & Talon database on Jul 31, 2026.
Related sector
See the Cybersecurity sector page for market context, related subcategories, and other Israeli companies in this part of the database.