{"url":"https://newsforagent.com/news/2026-10-27/sweet-security-safety-net-http2shell","markdown_url":"https://newsforagent.com/news/2026-10-27/sweet-security-safety-net-http2shell.md","title":"Sweet Security Offers Free HTTP2Shell Virtual Patching","headline":"Sweet Security Opens Sweet Safety Net to All Organizations Hit by HTTP2Shell","description":"Sweet Security is giving any organization 30 days of free Virtual Patching for HTTP2Shell, a flaw in the Brotli decoder.","section":"Product Launches","published_at":"2026-10-27T23:19:04+00:00","modified_at":"2026-10-27T23:19:04+00:00","author":"News Desk","key_takeaways":["Sweet Security's Sweet Safety Net blocks exploitation of HTTP2Shell (CVE-2026-111497) at no cost for 30 days, whether or not an organization is a customer.","Sweet Security says it is observing active exploitation attempts across 88% of monitored environments.","HTTP2Shell sits in the Brotli decoder built into Node.js, Bun, Python, Envoy, Istio and Go frameworks including Traefik, Fiber and Iris."],"companies":[{"name":"Sweet Security","is_primary":true,"profile_url":"https://akta.pro/company-profiles/0000dfz/sweet-security","website":"https://sweet.security"}],"source":{"publisher":"GlobeNewswire","title":"Sweet Security Offers All Organizations Affected by HTTP2Shell Virtual Patching Protection at No Cost","url":"https://www.globenewswire.com/news-release/2026/10/27/3389804/0/en/sweet-security-offers-all-organizations-affected-by-http2shell-virtual-patching-protection-at-no-cost.html"},"other_sources":[],"tags":["Product Launches","Sweet Security"],"body_markdown":"Sweet Security announced Sweet Safety Net on October 27, 2026, extending its runtime Virtual Patching protection to every organization affected by HTTP2Shell (CVE-2026-111497) at no cost for 30 days, whether or not they are Sweet customers. [GlobeNewswire](https://www.globenewswire.com/news-release/2026/10/27/3389804/0/en/sweet-security-offers-all-organizations-affected-by-http2shell-virtual-patching-protection-at-no-cost.html) carried the announcement.\n\n## How Sweet Safety Net Blocks HTTP2Shell\n\nHTTP2Shell sits inside the Brotli decoder built into Node.js, Bun, Python, Envoy, Istio and, as Sweet's own research revealed this week, Go frameworks such as Traefik, Fiber and Iris. Sweet Security said patching the flaw everywhere will take weeks, and that it is already observing active exploitation attempts across 88% of monitored environments.\n\nSweet's Virtual Patching applies a protection policy through its sensor, targeting the vulnerable code path and blocking exploitation while legitimate traffic continues. No application code change is required. Teams apply the policy from Sweet's Vulnerabilities Catalog, and Sweet distributes it to sensors on each node running the affected workload. Once the sensors confirm enforcement, the workload is marked Protected from that vulnerability, and protection follows the workload as it scales and restarts.\n\n\"We are watching HTTP2Shell exploitation attempts in real environments right now,\" said Dror Kashti, CEO and co-founder of Sweet Security. \"We're extending our protection to organizations that need help securing affected applications.\"\n\nEffective immediately, any organization can claim [Sweet Security](https://akta.pro/company-profiles/0000dfz/sweet-security) sensors with Virtual Patching protection for 30 days, with no purchase commitment required. The company said its existing customers are already protected, with runtime sensors and L7 detection rules active across all customer tenants.\n\n## Sweet Security's Funding and Revenue Growth\n\nSweet Security has raised $120 million in total across three funding rounds, according to akta.pro [company records](https://akta.pro/company-data), including a $75 million Series B in November 2025 led by Evolution Equity Partners with Munich Re Ventures, Glilot Capital Partners and Key1 Capital. The same records show a sixfold increase in annual recurring revenue over the past year.\n\n## Earlier Sweet Security Product Launches\n\nSweet Security launched Virtual Patching on October 19, 2026, a capability that protects running cloud and AI applications from specific vulnerabilities the moment they are identified, GlobeNewswire reported. On July 29, 2026, SiliconANGLE reported that the company unveiled Agentic AI Blocking, which stops AI agents mid-action in production when they perform unauthorized tasks. CTech reported on August 13, 2026 that Sweet Security highlighted its Sweet Attack AI red-team agent, which continuously identifies real attack paths by chaining low-severity vulnerabilities in live environments.\n","publisher":{"name":"News for Agent","url":"https://newsforagent.com"}}