New capability blocks vulnerability exploitation in running workloads, giving engineering teams time to deliver permanent fixes without leaving cloud applications and agents exposed
TEL AVIV, Israel, Oct. 19, 2026 (GLOBE NEWSWIRE) — Sweet Security, the leading runtime security platform for cloud and AI, today announced the release of Virtual Patching, a new capability that protects running cloud and AI applications from specific vulnerabilities the moment they are identified. Security teams can enforce protection in one click while engineering develops, tests, and deploys a permanent fix.
Today, vulnerability remediation can take days or weeks as engineering teams develop fixes, test changes, obtain approvals, and deploy updated applications. During that window, the running application remains exposed. AI is making attacks faster and cheaper, increasing pressure on defenders whose response still depends on manual investigation, cross-team handoffs, and release schedules. A vulnerable workload left unprotected is not a theoretical risk. It is a target.
Sweet’s new Virtual Patching closes that window. From Sweet’s Vulnerabilities Catalog, a security team can identify a vulnerability, select Enforce protection, and deploy a policy to every node running that workload. The sensor applies it to the running application, blocking requests that attempt to exploit it while leaving normal traffic unaffected. Protection follows the workload as it scales and restarts. When a permanent fix is deployed, removing protection is equally simple.
“AI is accelerating vulnerability discovery and exploitation to the point where exploits are emerging days before patches are available; faster patching alone isn’t enough. Sweet’s Virtual Patching provides a critical layer of protection against known and unknown exploits, helping teams apply protection immediately while giving them the time they need to remediate vulnerabilities at their source,” said James Berthoty, CEO and founder, Latio Tech.
“When a team knows an application can be exploited, waiting is not an option,” said Dror Kashti, CEO and co-founder of Sweet Security. “Sweet’s new Virtual Patching gives security teams the ability to protect production immediately while engineering finishes the permanent fix. That changes the economics of cloud security by reducing the time and effort between identifying a risk and doing something about it.”
Virtual Patching works alongside Sweet Attack, Sweet’s autonomous AI red-team agent, which continuously validates exploitable attack paths using unmatched runtime context. When Sweet Attack identifies a vulnerability, it suggests a virtual patching policy the security team can enforce immediately. The result is a complete loop: Sweet Attack finds the exploit, the policy closes it, and the sensor enforces it at runtime.
To learn how Sweet’s Virtual Patching helps organizations change the economics of cloud security, protect production faster, and deliver measurable risk reduction with less manual effort, visit Sweet Security to request a demo.
About Sweet Security
Sweet Security delivers a proactive runtime security platform for cloud and AI. By understanding how cloud applications, identities, and AI agents behave in live environments, Sweet helps security teams discover what’s running, prove which weaknesses can be exploited before attackers do, harden their defenses, and stop malicious activity in real time. Trusted by the world’s leading AI companies to secure the next frontier, Sweet gives organizations the visibility and control to innovate with confidence while protecting the systems their businesses depend on.
Media Contacts
Noa Glumcher
CMO, Sweet Security
noag@sweet.security
Chloe Amante
Montner Tech PR
camante@montner.com
A photo accompanying this announcement is available at: https://www.globenewswire.com/NewsRoom/AttachmentNg/08c87754-c190-4e7c-aa6c-5c1757654c2a
