New Cloud Security Tool Limits Breach Spread
Aviatrix launches a monitor-mode policy engine to help enterprises secure network paths without triggering service outages.
Updated on Oct. 26, 2026 in Cybersecurity
Live Poll
Do you trust that your organization's cloud data is protected against the rapid spread of cyberattacks?
Aviatrix has launched Clearance, a security product designed to limit cloud workload paths to prevent the spread of breaches. The tool allows security teams to test policies in monitor mode before active enforcement, with free access offered to enterprises between November 1, 2026, and May 1, 2027.
Why it matters
Enterprises frequently delay security enforcement because misconfigured rules can cause application outages, leaving them vulnerable during patch cycles. This tool provides a containment backstop, allowing teams to secure systems while they prepare for events like holiday change freezes.
The platform includes a free Containment Assessment for up to 15 workloads and is available to Aviatrix's 500 leading enterprise clients. The effectiveness of these policies remains subject to the accuracy of the Active Defense agents modeling the network estate.
The players
Aviatrix
A Santa Clara-based cloud networking and security firm that develops products for multi-cloud traffic management and visibility.
The details
Clearance functions by restricting network paths between cloud workloads to contain potential security compromises. It uses Active Defense agents to model the organization's cloud estate and draft security policies based on specific application requirements. Security teams can run these policies in monitor mode to evaluate traffic patterns and potential impacts on connectivity before enforcing the restrictions.
Timeline
October 21, 2026: PHP2Shell vulnerability fix is released.
October 26, 2026: Aviatrix announces the Clearance product.
November 1, 2026: Free Clearance program access begins.
May 1, 2027: Free Clearance program access concludes.
The Tech Race
Aviatrix's move follows a series of 2026 infrastructure security incidents, including multiple compromises of the LiteLLM service and the identification of weak keys in eMudhra certificates. These events underscore the current industry focus on network-level containment to mitigate the impact of unpatched vulnerabilities.
Enterprises can access the Clearance program through the AWS Marketplace beginning November 1, 2026. Teams can utilize the 15-workload Containment Assessment to test and refine traffic policies without risking production outages.
The takeaway
The move highlights the industry shift toward pre-enforcement testing in cloud security environments. Security teams should track the adoption of monitor-mode policies during the upcoming patch cycle to determine if this approach reduces the incidence of misconfiguration-linked outages.
What happens next
Enterprises should monitor their security posture during the upcoming holiday change freeze as teams work to patch vulnerabilities across cloud estates.
Further reading
For broader trends in enterprise defense, visit our Cybersecurity section.
More information
Access the free cloud security containment assessment to evaluate your network policies.
Live Poll
Do you trust that your organization's cloud data is protected against the rapid spread of cyberattacks?
