Primary moat: switching costs. F5 appliances and software are embedded in mission-critical paths with customer-specific iRules, security and traffic policies, and operational run-books. Replatforming is risky and expensive, which reduces churn.
Intangibles matter too: the BIG-IP and NGINX brands are well regarded by enterprise network and security teams and now sit within the broader F5 Application Delivery and Security Platform (ADSP), which spans hardware, virtual editions, NGINX, and distributed cloud services.
Platform unification, AI assistants, and security enhancements should increase stickiness over time. Risks to the moat include the steady rise of cloud-provider native load balancers and cloud WAAP offerings, along with product-transition complexity as customers move from BIG-IP classic to Next.
Net, we view the moat as solid but not impregnable, thus a mid-70s score.