F5 and Oracle Collaborate to Strengthen Application Security in the AI Era

F5 and Oracle Plan New Cloud Security Collaboration

F5 and Oracle have announced plans to collaborate on strengthening application and API security for businesses running workloads on Oracle Cloud Infrastructure (OCI). The proposed collaboration aims to help organizations defend critical applications against increasingly sophisticated cyber threats while simplifying security operations.

Announced on October 28, 2026, the initiative is outlined in a non-binding memorandum of understanding (MoU). Under the planned arrangement, F5's web application and API protection (WAAP) technology would be integrated into OCI, bringing additional security capabilities to organizations operating within Oracle's cloud environment.

The announcement comes as enterprises expand their use of cloud applications, APIs and AI-powered services, increasing the importance of protecting digital systems against vulnerabilities and automated attacks.

Addressing AI-Powered Cybersecurity Threats

AI is changing the cybersecurity landscape by enabling attackers to identify vulnerabilities and develop exploitation methods more quickly. This can put pressure on security teams to identify weaknesses and deploy fixes before systems are compromised.

F5 and Oracle intend to address this challenge by making application and API protection more accessible to OCI customers. The planned integration is designed to help organizations defend workloads without introducing unnecessary operational complexity or requiring extensive specialized security expertise.

Application security is particularly important for enterprises that rely on APIs to connect software platforms, exchange information and support automated business processes. Vulnerabilities in these connections can expose sensitive data or disrupt essential services.

Virtual Patching to Reduce Exposure

A key capability highlighted by F5 is virtual patching, which can help protect vulnerable applications while permanent fixes are being developed or deployed.

Traditional vulnerability remediation may require testing, development work and scheduled software updates. During this period, exposed systems can remain at risk.

Virtual patching provides an additional protective layer intended to block attacks targeting known vulnerabilities without immediately modifying the underlying application code. This can give security teams more time to implement and verify permanent fixes.

F5 has positioned this approach as part of a broader AI runtime defense strategy, helping organizations respond to threats while maintaining the availability of critical applications.

Simplifying Security Operations on OCI

The proposed integration is intended to allow customers to access F5's application security technology through Oracle's cloud infrastructure.

For enterprises, this could help reduce the complexity of managing separate security tools and workflows. Security, application and platform teams could potentially work within a more familiar cloud environment while maintaining protection for critical workloads.

The companies also expect the collaboration to reduce dependence on highly specialized security expertise, an important consideration for organizations managing increasingly complex cloud environments.

However, the precise implementation, deployment schedule and availability of the planned capabilities have not yet been announced.

What the Collaboration Means for Enterprises

The announcement reflects a broader industry focus on integrating cybersecurity more closely with cloud infrastructure.

As businesses deploy AI applications and automated services, they must protect not only the models themselves but also the applications, APIs and systems through which those services operate.

For F5, the planned collaboration offers an opportunity to extend its application security technology to OCI customers. For Oracle, it could strengthen the security capabilities available within its cloud ecosystem.

The commercial and operational impact will depend on how the integration is implemented and the protection it ultimately provides to customers.

The Road Ahead

The F5-Oracle collaboration remains at the planning stage under a non-binding MoU. No deployment timeline or detailed commercial terms have been disclosed.

Nevertheless, the announcement highlights the growing importance of application and API protection as organizations adopt AI and expand their cloud operations.

For enterprises, effective cybersecurity will increasingly require coordinated protection across applications, infrastructure and connected services. Integrating security capabilities into cloud environments could help simplify that process, provided the resulting solutions deliver reliable protection without adding unnecessary complexity.