Broadcom Launches VMware HyperArmor to Bolster Hypervisor Security
Broadcom has unveiled VMware HyperArmor, a security tool for the VMware Cloud Foundation hypervisor. The software supports ESX 8.x and later, offering host-level virtual patching that blocks malicious actions without requiring reboots or upgrades. It also blocks unauthorized executables and scripts and adds multi-factor authentication for ESX SSH logins.
Broadcom has introduced VMware HyperArmor as a security addition for VMware Cloud Foundation. The product focuses on the hypervisor layer, covering ESX 8.x and later, and provides virtual patching at the host level. This is meant to stop attempted malicious activity without requiring administrators to reboot hosts or install software upgrades.
HyperArmor also seeks to prevent unauthorized executables and scripts from running. For ESX SSH access, it adds multi-factor authentication, requiring a separate one-time password after standard login credentials. It avoids installing agents in guest virtual machines and is positioned alongside VMware vDefend’s virtual patching at the network layer.
Organizations running VMware Cloud Foundation, their IT and security teams, and customers relying on those systems could benefit if HyperArmor reduces exposure to hypervisor attacks. Host-level virtual patching may lower disruption by avoiding immediate reboots or upgrades, while MFA for ESX SSH logins could strengthen access controls but may add administrative steps. Because virtual patching is temporary, it may not remove the need for eventual vendor fixes, so its societal impact likely depends on how consistently it is deployed and maintained.