Sweet Security has introduced Virtual Patching, a feature designed to protect running cloud and AI applications from known vulnerabilities immediately after they are identified. The tool aims to close the window between vulnerability disclosure and deployment of a permanent fix, a process that can take days or weeks as engineering teams develop, test, and approve updates.
From the Vulnerabilities Catalog, security teams can select a vulnerability and enforce protection with one click. The policy is applied to every node running the workload, and the sensor blocks requests that attempt to exploit the vulnerability while leaving normal traffic unaffected. Protection persists across scaling and restarts, and can be removed once the permanent fix is in place.
The feature works with Sweet Attack, the company's autonomous AI red-team agent. When Sweet Attack identifies an exploitable attack path, it suggests a virtual patching policy that teams can enforce immediately, creating a loop of finding the exploit, closing it, and enforcing it at runtime. Sweet Security CEO Dror Kashti said the capability reduces the time and effort between identifying a risk and acting on it, while Latio Tech CEO James Berthoty noted that faster patching alone is insufficient as AI accelerates exploit development.