VMware launches HyperArmor to help customers manage monthly security patches
VMware has introduced HyperArmor, a security tool intended to help customers manage the rapid pace of software updates. The company moved to monthly patch releases after using artificial intelligence to identify numerous flaws in its infrastructure products, but users have struggled to keep pace with testing and deploying updates safely. HyperArmor aims to ease this burden whilst protecting systems against known vulnerabilities.
The tool operates through three mechanisms: virtual patching that blocks attacks without modifying vulnerable code, automated validation to prevent unauthorised configuration changes, and multi-factor authentication for privileged access. Developed by Broadcom subsidiaries Symantec and Carbon Black, HyperArmor is sold as a separate optional product for VMware Cloud Foundation. Customers must purchase it separately to access these capabilities.
- VMware introduced HyperArmor to manage monthly patches from AI-discovered vulnerabilities.
- The tool provides virtual patching, system state validation, and multi-factor authentication.
- Customers must purchase HyperArmor separately to access its security features.
New here? Start with this
VMware is a software company specialising in virtualisation, which allows organisations to run multiple applications and systems on shared computer hardware. Its products are widely used to manage data centres and cloud infrastructure, making them central to how many companies operate their IT systems.
Software vulnerabilities are security flaws that can be exploited by attackers, so technology vendors regularly release patches to fix them. However, testing and deploying patches is challenging for IT teams, as each update must be carefully validated to ensure it doesn't disrupt operations whilst providing necessary security protection.
The frequency of security patches has increased significantly in recent years, as companies use more sophisticated methods to identify vulnerabilities. This growing volume of updates has become a challenge for IT departments, creating demand for tools that can help manage the deployment of patches more effectively and securely.
Both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
VMware's monthly patches reflect responsible security stewardship in identifying vulnerabilities, and HyperArmor genuinely addresses customer management challenges. By offering HyperArmor separately, VMware respects customer autonomy—many organisations have existing patch management processes and shouldn't be forced to pay for duplicate capabilities. This approach balances security obligations with customer choice and cost control.
The case against
The separate pricing model creates a problematic dynamic where customers face both mandatory frequent patches due to VMware's own discovered vulnerabilities and must separately purchase tools to deploy them safely. This effectively monetises patch management complexity and burdens organisations with additional costs precisely when managing security is most critical. Patch management infrastructure should be foundational, not a premium add-on, especially for customers lacking sophisticated DevOps capabilities.
Read the full article at the source →
Originally published by The Register as “VMware is pushing so many patches, it thinks users need new tools to manage the flood”.