Sweet Security Offers One-Click Virtual Patching for Cloud and AI Workloads

Sweet Security has launched a new capability called Virtual Patching, designed to provide immediate protection for running cloud and AI applications against newly identified vulnerabilities. This feature allows security teams to deploy protection with a single click, bridging the critical gap between the discovery of a security flaw and the implementation of a permanent fix by engineering teams.

The typical vulnerability remediation process can be lengthy, often taking days or weeks. This period involves developing fixes, rigorous testing, obtaining necessary approvals, and finally deploying updated applications. During this window, the vulnerable application remains exposed to potential attacks. The increasing speed and decreasing cost of AI-powered attacks exacerbate this challenge, placing immense pressure on security teams whose response workflows still rely on manual investigations, inter-team handoffs, and rigid release schedules. Leaving a workload unprotected during this remediation window is no longer a theoretical risk but a direct target for adversaries.

Sweet Security's Virtual Patching aims to close this exposure window effectively. From the company's Vulnerabilities Catalog, security personnel can identify a specific vulnerability, select the 'Enforce protection' option, and deploy a policy across all nodes running the affected workload. The deployed sensor then applies this policy directly to the running application, blocking any traffic attempting to exploit the vulnerability while allowing legitimate traffic to pass unimpeded. Crucially, this protection is dynamic, following the workload as it scales up or restarts.

"AI is accelerating vulnerability discovery and exploitation to the point where exploits are emerging days before patches are available; faster patching alone isn’t enough. Sweet’s Virtual Patching provides a critical layer of protection against known and unknown exploits, helping teams apply protection immediately while giving them the time they need to remediate vulnerabilities at their source," stated James Berthoty, CEO of Latio Tech. This highlights the industry's recognition of the need for proactive, immediate security measures beyond traditional patching cycles.

Dror Kashti, CEO of Sweet Security, emphasized the urgency of the situation: "When a team knows an application can be exploited, waiting is not an option. Sweet’s new Virtual Patching gives security teams the ability to protect production immediately while engineering finishes the permanent fix. That changes the economics of cloud security by reducing the time and effort between identifying a risk and doing something about it." This underscores the product's value proposition in streamlining the security response and reducing the overall risk posture.

The Virtual Patching functionality is integrated with Sweet Security's existing offerings, particularly Sweet Attack, an autonomous AI red-team agent. Sweet Attack continuously identifies exploitable attack paths within an organization's runtime environment. When Sweet Attack discovers a vulnerability, it can automatically suggest a virtual patching policy that security teams can then choose to enforce. This creates a closed-loop system: the AI identifies the exploit, a policy is generated to block it, and the sensor enforces this protection at runtime.

This approach offers a significant advantage in the current threat landscape, where the speed of exploitation often outpaces the speed of patching. By providing an immediate, automated layer of defense, Sweet Security's Virtual Patching empowers organizations to maintain a stronger security posture without disrupting ongoing development and deployment cycles. The ability to quickly apply and then remove these virtual patches offers a flexible and efficient method for managing cloud-native application security.