# Impart Security Debuts Runtime Defense Harness, Delivering AI-Written Virtual Patches in 60 Minutes

> Impart Security launched the Runtime Defense Harness, letting security teams deploy AI-written virtual patches within 60 minutes of a vulnerability disclosure.

- Published: 2026-11-04T12:24:35+00:00
- Section: Product Launches
- Author: News Desk
- URL: https://newsforagent.com/news/2026-11-04/impart-security-runtime-defense-harness
- Source: [Business Wire](https://www.businesswire.com/news/home/20261104775316/en/)

## Key takeaways

- Impart Security's Runtime Defense Harness lets security teams deploy a tested virtual patch as soon as 60 minutes after a vulnerability disclosure.
- During a high-severity Node.js vulnerability, Impart customers had a blocking virtual patch within 24 hours, while a leading CDN's log-only rules arrived four days later.
- The harness is available now to Impart customers at no added cost and supports models from Anthropic, OpenAI, Azure, or Google.

Impart Security launched the Runtime Defense Harness on November 4, 2026, a controlled environment where AI agents write and test virtual patches for new vulnerabilities without sitting in the traffic path. Security teams can deploy a tested virtual patch as soon as 60 minutes after disclosure, according to [Business Wire](https://www.businesswire.com/news/home/20261104775316/en/).

## How the Runtime Defense Harness Works

In the harness, agents build each virtual patch against the customer's own traffic, an engineer approves it, and Impart's engine enforces it as deterministic code. The model helps write and test each rule but never sits in the live request path. Impart's Layer 7 engine enforces approved rules inline as deterministic WebAssembly, so the same request gets the same decision every time, with no extra network hop or per-request inference.

The harness applies three controls. Agents get just-in-time access to only the traffic and systems each task needs, and block mode and live rule changes require an engineer's approval. Every virtual patch is code that teams can version, test, and roll back in seconds. Teams use Impart's lightweight AI model or bring their own models from Anthropic, OpenAI, Azure, or Google, and every agent action lands in an event timeline showing what the AI did, why, and what changed.

"The old rhythm of security teams responding to a vulnerability, filing a ticket, and hoping for a patch a few weeks later is long gone. AI has compressed the timeline, so exploits can arrive before the fix. We built the Runtime Defense Harness with the controls first, so teams can move fast without risking production," said Jonathan DiVincenzo, CEO and co-founder of Impart.

During a high-severity Node.js vulnerability (CVE-2026-111497) that could allow remote code execution, Impart customers had a blocking virtual patch within 24 hours. A leading CDN's rules arrived four days later, in log-only mode, against its own published five-day response target.

"The harness coordinates agents to do what a security engineer does when a new CVE lands: understand the attack, write the rule, test it, and hand it over for approval. Your engineers make the call. The harness makes sure everything in front of them is tested and auditable," said Brian Joe, chief product officer and co-founder of Impart.

The Runtime Defense Harness is available now for Impart customers at no added cost. Teams can start with Impart Defend Free, a free command-line tool that audits their current WAF rules, at [impart.ai/runtime-defense-harness](https://impart.security).

## Other Security Vendors Ship AI Defenses

Cogent Security released VR-1.1 on November 3, 2026, a frontier reasoning model for cybersecurity that repaired 57.9% of 190 LiveCVEBench tasks, outperforming Claude Code and Codex at 45.3%, [PR Newswire](https://www.prnewswire.com/news-releases/cogent-unveils-vr-1-1--its-latest-frontier-cyber-model-which-tops-livecvebench-for-vulnerability-repair-302927966.html) reported. Wiz Cloud Japan launched a free program on October 30, 2026, using AI-powered vulnerability scanning to help Japanese enterprises and government agencies, with non-destructive tests and repair guidance for up to 21 days, according to [Prtimes](https://prtimes.jp/main/html/rd/p/000000002.000189980.html). Cisco plans to extend its eBPF-based Shield security capability to Linux applications early next year, allowing controls to mitigate vulnerabilities without applying patches, [Security Boulevard](https://securityboulevard.com/2026/10/cisco-plans-to-extend-ebpf-to-improve-application-security/) reported on October 29, 2026.

## Cisco's Early Next Year Timeline

Cisco's planned extension of its eBPF-based Shield capability to Linux applications is slated for early next year, the company said, according to Security Boulevard's October 29, 2026 report.

## Companies in this story

- Impart Security · website: https://impart.security

---
News for Agent · https://newsforagent.com/llms.txt