ShapeShifter

The Most Advanced Security for Your High-Value Websites

Protects against the most serious website attacks, which traditional web security cant The ShapeShifter offers the rst comprehensive defense against major web attacks. Existing security technologies try to detect attacks based on how they appeared or behaved in the past. This is not effective against adversaries who are constantly changing their code and behaviors to avoid detection. It also does nothing against previously unknown attacks. Instead of guessing about the nature of traffic, the ShapeShifter simply disables the capability of malware to interact with your website. This not only protects against the most serious known attacks but also against unknown attacks which use automation. SAMPLE ATTACKS Account Takeover Database Scraping Carding CSRF Application DDoS Man-in-the-Browser Account Lockout Reconnaissance
SHAPESHIFTER

Plugs into your existing architecture, defending your websites transparently We designed the ShapeShifter for simple implementation. You dont need to make any changes to your web server and your users dont need to install any client software. A few simple load balancing rules determine which portions of your website are protected and which portions bypass the ShapeShifter.

USER

INTERNET

LOAD BALANCER

WEB SERVER

Scales horizontally to meet the needs of websites You can deploy ShapeShifters in parallel. Because they operate statelessly, the ShapeShifter that transforms an outbound page request doesnt have to be the same one that receives the inbound response from the user. This property also allows ShapeShifters to integrate into high-availability architectures.

Requires no additional training or headcount The ShapeShifter creates a new security layer in front of your website which deects attacks from malware and bots as a policy. As a result, the devices do not produce alerts requiring your security teams to analyze data or take an action in order to get value from the product. Adding a ShapeShifter immediately and dramatically improves your security posture while actually reducing the burden on your incident response teams, making them more efficient and effective. One product, many industries The ShapeShifter was developed and tested with the help of some of the worlds largest companies in the elds of nancial services, healthcare, and e-commerce. Those industries face sophisticated daily attacks on their websites and web applications, and they engaged with Shape to get the most advanced security technology available. Every industry has its own specic attacks from malware, bots, and scripts, and ShapeShifter can help in each case.

LOAD BALANCER

SHAPESHIFTERS

This technology sets the stage for a new category of advanced countermeasures and tools to protect complex web based services. In short, a Shape protected website becomes a moving target for fraudsters.
Robert Capps II, Senior Manager, Global Trust & Safety, StubHub, an eBay company

ShapeShifter 3100
Interfaces Form Factor Dimensions (H x W x D) Four, 1 GigE network interfaces 1U W: 17.4/ 443mm D: 11.5 / 292mm H: 1.73 / 44mm 10.63 lb / 4.83 kg 100-240 volts, 50/60Hz 250 watts maximum 850 BTUs/hr maximum Operating 0 to 40C Nonoperating -20 to 75C Operating 10 to 90% RH Nonoperating 5 to 95% RH CE/FCC/UL

Weight Power BTU Rating Temperature Humidity Certications

Front panel conguration

ESC

E0

E1

E2

E3
ENTER

GigE interfaces

www.shapesecurity.com sales@shapesecurity.com 1-888-775-1335