Broadcom introduces VMware HyperArmor to strengthen VMware Cloud Foundation security

Broadcom has introduced VMware HyperArmor, a software solution designed to strengthen security for the VMware ESX hypervisor component of VMware Cloud Foundation (VCF).

The launch addresses growing concerns about cyberattacks targeting infrastructure vulnerabilities and compromised administrative credentials. According to Broadcom, HyperArmor introduces proactive protection at the hypervisor layer, helping organisations reduce exposure to potential exploits without disrupting the workloads running on affected hosts.

The company says the solution provides protection without requiring host reboots, software upgrades or agents installed inside guest virtual machines.

Addressing vulnerabilities before they are exploited

As AI accelerates the volume and sophistication of cyber threats, organisations face increasing pressure to reduce the time between vulnerability discovery and remediation.

Broadcom says VMware HyperArmor takes a preventive approach by establishing controls over what can execute on the ESX host and blocking unauthorised activity before vulnerabilities can be exploited.

Paul Turner, chief product officer of Broadcom's VMware Cloud Foundation Division, said the speed of AI-driven attacks makes reactive detection and patching insufficient on their own.

HyperArmor is designed to complement existing security capabilities within VMware Cloud Foundation, extending protection directly to the hypervisor rather than relying exclusively on network-level controls or post-incident detection.

Three layers of protection

VMware HyperArmor introduces three principal security capabilities for supported VMware ESX 8.x and later releases.

Host-level virtual patching: The solution detects and blocks attempted malicious actions within ESX host nodes, helping shield them from exploitation while official patches are prepared, tested and applied. Broadcom says this protection does not require host reboots or software upgrades, allowing IT teams to manage patching schedules with greater flexibility.

Positive host security guardrails: HyperArmor establishes a baseline of authorised processes and scripts on the host. It automatically allows inventoried scripts and enables administrators to approve new ones, while blocking unauthorised executables and scripts. The approach is designed to provide continuous monitoring and compliance enforcement without significant performance overhead.

Hypervisor-level multi-factor authentication: The solution integrates MFA into the ESX Secure Shell (SSH) login process. Administrators must provide standard SSH credentials followed by a time-based one-time password linked to a separately defined identity. This adds another layer of protection if an attacker obtains a root password.

Extending defence across VMware Cloud Foundation

HyperArmor is designed to work alongside VMware Cloud Foundation's broader security capabilities.

These include VMware vDefend for network security, micro-segmentation and network-level virtual patching, as well as VMware Avi Load Balancer for web application and API protection. VMware Cloud Foundation also includes capabilities such as centralised identity management, encryption and vSphere live patching.

Together, these technologies are intended to provide layered protection across the hypervisor, network and application-facing infrastructure.

The approach reflects the importance of protecting the virtualisation layer, where a compromise can potentially affect multiple workloads and systems operating on shared infrastructure.

Responding to AI-accelerated cyber threats

Stephen Elliot, group vice president for software development and IT operations at IDC, highlighted the need for preventive controls that reduce exposure to attacks without disrupting production environments.

As organisations expand their use of AI and automation, security teams must account for threats that can exploit infrastructure weaknesses at increasing speed. Protecting the hypervisor is therefore an important part of a broader infrastructure security strategy, particularly for organisations running business-critical workloads in private cloud environments.

With VMware HyperArmor, Broadcom is extending its security offering to address host-level risks alongside existing network and workload protections.

Strengthening the private cloud security stack

VMware HyperArmor adds another preventive security layer to VMware Cloud Foundation, focusing on unauthorised execution, credential theft and exploitation of hypervisor vulnerabilities.

For enterprises operating critical applications on virtualised infrastructure, the ability to introduce additional controls without taking workloads offline may help balance security requirements with operational continuity.

Broadcom's latest release reflects a broader industry focus on building security into infrastructure itself as AI-enabled threats continue to evolve.

About Broadcom

Broadcom Inc. is a global technology company that designs, develops and supplies semiconductor and infrastructure software solutions for organisations with complex, mission-critical requirements. Its portfolio spans technologies supporting enterprise infrastructure, networking, security and cloud environments.

Source & Credits: Broadcom's official announcement