Skip to main content

Broadcom Introduces VMware HyperArmor, Expanding Hypervisor Security and Protections for VMware Cloud Foundation

Written by Customer Service on . Posted in Public Companies.

VMware HyperArmor offers unique, proactive zero day protection to VMware Cloud Foundation environments with no downtime, software upgrades, or in-guest agents

PALO ALTO, Calif., Oct. 13, 2026 (GLOBE NEWSWIRE) — Broadcom Inc. (NASDAQ: AVGO), a global technology leader that designs, develops, and supplies semiconductor and infrastructure software solutions, today introduced VMware HyperArmor, a new software solution to help further protect the VMware ESX hypervisor component of VMware Cloud Foundation (VCF) against the exponential increase in cyber attack sophistication by closing exposure windows without disrupting the workloads that depend on the host.

“Frontier AI has changed the three V’s of cybersecurity threats – the volume, velocity, and variety. When attacks come at machine speed, reactive detection and patching are no longer enough,” said Paul Turner, chief product officer, VMware Cloud Foundation Division, Broadcom. “VMware HyperArmor takes a different approach by allowing only what is ‘known good’ to run on the host. With VMware vDefend already delivering virtual patching capabilities for the network layer of VMware Cloud Foundation, VMware HyperArmor now expands that protection around the hypervisor component itself.”

As AI-accelerated threats grow in scale and sophistication, the threat surface now extends across every layer of the infrastructure stack including the hypervisor. Two problems account for most hypervisor attacks: stolen root credentials and unpatched vulnerabilities. VMware HyperArmor addresses both problems, with support for VMware ESX 8.x and later releases, as follows:

  • Virtual patching for VCF’s ESX Component Host Environment. HyperArmor delivers host-layer virtual patching to shield ESX by detecting and blocking attempted malicious actions within the host nodes before any vulnerabilities can be exploited. These host-level virtual patching capabilities complement the network-layer virtual patching available for VCF via VMware vDefend. Because virtual patching of ESX does not require host reboots or software upgrades to mitigate vulnerabilities, security teams will benefit from dramatically reduced risk windows and IT teams gain more operational flexibility to test and apply official patches on the schedule they prefer.
  • Positive Host Security Guardrails. HyperArmor protects the host at the infrastructure layer, with no agents inside guest virtual machines (VMs). An ESX host runs a small, fixed set of processes. HyperArmor establishes a positive security baseline and automatically blocks any unauthorized executable or script. HyperArmor takes an inventory of scripts already on the host and allows them automatically, and administrators can approve new ones. The result is continuous monitoring and compliance enforcement with minimal performance overhead.
  • Hypervisor-level multi-factor authentication (MFA). HyperArmor integrates MFA functionality directly into the ESX SSH login path. Logging in requires two steps: standard SSH credentials, followed by a secondary time-based one-time password challenge tied to a separately defined identity. Even if an attacker obtains the root password through phishing or credential leaks, they cannot reach the command line without that second factor.

“Attackers are using automation and AI to exploit infrastructure weaknesses faster than most organizations can patch, which means layered defense must extend all the way to the hypervisor as the foundation of the private cloud,” said Stephen Elliot, Group Vice President, Software Development and IT Operations, IDC. “Technology leaders should prioritize preventive controls that help shrink exposure windows without disrupting production, and approaches that harden the virtualization layer natively rather than relying on external agents or post-incident detection.”

Defense in Depth Across VMware Cloud Foundation

VMware HyperArmor works alongside the broader security capabilities in VMware Cloud Foundation to deliver an integrated and multi-layered approach. VMware Cloud Foundation is hardened out of the box with key capabilities that include centralized identity management, data-at-rest and data-in-transit encryption, and VMware vSphere live patching, which applies critical updates to the hypervisor without taking workloads down or placing hosts into full maintenance mode. VMware HyperArmor adds a proactive layer of protection for the hypervisor by blocking process execution exploits and credential theft. VMware vDefend delivers strong lateral security with micro-segmentation and advanced threat detection and prevention for VCF workloads, which uses deep traffic inspection to block emerging exploits and to deliver network-level virtual patching. VMware Avi Load Balancer provides web application and API protection (WAAP) for securing web and API traffic. Together, these layers give customers defense in depth across the infrastructure, network, and hypervisor.

Additional Resources

About Broadcom
Broadcom Inc. (NASDAQ: AVGO) is a technology leader that designs, develops, and supplies semiconductors and infrastructure software for global organizations’ complex, mission-critical needs. Broadcom combines long-term R&D investment with superb execution to deliver the best technology, at scale. Broadcom is a Delaware corporation headquartered in Palo Alto, CA. For more information, visit www.broadcom.com.

Broadcom, the pulse logo, and Connecting everything are among the trademarks of Broadcom. The term “Broadcom” refers to Broadcom Inc., and/or its subsidiaries. Other trademarks are the property of their respective owners.

Media Contact:
Roger T. Fortier
VMware Cloud Foundation Division, Broadcom
+1.408.348.1569
roger.fortier@broadcom.com

Disclaimer & Cookie Notice

Welcome to GOLDEA services for Professionals

Before you continue, please confirm the following:

Professional advisers only

I am a professional adviser and would like to visit the GOLDEA CAPITAL for Professionals website.

Important Notice for Investors:

The services and products offered by Goldalea Capital Ltd. are intended exclusively for professional market participants as defined by applicable laws and regulations. This typically includes institutional investors, qualified investors, and high-net-worth individuals who have sufficient knowledge, experience, resources, and independence to assess the risks of trading on their own.

No Investment Advice:

The information, analyses, and market data provided are for general information purposes only and do not constitute individual investment advice. They should not be construed as a basis for investment decisions and do not take into account the specific investment objectives, financial situation, or individual needs of any recipient.

High Risks:

Trading in financial instruments is associated with significant risks and may result in the complete loss of the invested capital. Goldalea Capital Ltd. accepts no liability for losses incurred as a result of the use of the information provided or the execution of transactions.

Sole Responsibility:

The decision to invest or not to invest is solely the responsibility of the investor. Investors should obtain comprehensive information about the risks involved before making any investment decision and, if necessary, seek independent advice.

No Guarantees:

Goldalea Capital Ltd. makes no warranties or representations as to the accuracy, completeness, or timeliness of the information provided. Markets are subject to constant change, and past performance is not a reliable indicator of future results.

Regional Restrictions:

The services offered by Goldalea Capital Ltd. may not be available to all persons or in all countries. It is the responsibility of the investor to ensure that they are authorized to use the services offered.

Please note: This disclaimer is for general information purposes only and does not replace individual legal or tax advice.