What is virtual patching?

Virtual patching is a security measure that is used to immediately close security gaps in software or web applications without having to wait for official updates or patches from the provider. This is done by implementing virtual patches or security rules at the security infrastructure level, such as a Web Application Firewall (WAF) or a reverse proxy.

Unlike traditional patching methods that require time to develop, test and implement, Virtual Patching enables immediate protection against known vulnerabilities. This is particularly important because security vulnerabilities can often be quickly exploited by attackers before official patches are available. Virtual patching has particularly great advantages in the case of zero-day attacks, as the newly discovered vulnerability can be fixed immediately and digital services can continue to operate even if no official updates are yet available.

Implementing virtual patches is done by creating security rules that monitor traffic and detect and block specific attack patterns. These rules are dynamically and continuously updated to respond to new threats and ensure the security of the application.

Airlock Secure Access Hub offers Virtual Patching as part of its security features. Using a reverse proxy approach with multi-level filtering and dynamic whitelist filtering, Airlock enables effective implementation of virtual patching to protect applications from known and unknown security vulnerabilities. Learn more about Airlock Secure Access Hub's virtual patching capabilities at the following link: Airlock Secure Access Hub - Virtual Patching.