Sweet Security Offers 30 Days of Free HTTP2Shell Runtime Protection

Sweet Security announced on October 27 that organizations affected by HTTP2Shell can receive 30 days of its runtime protection at no cost, including businesses that are not existing customers. The offer, called Sweet Safety Net, provides runtime sensors and virtual patching while application teams work on permanent fixes. The company says its sensors enforce a protection policy that blocks exploit attempts before they reach vulnerable code, without requiring application-code changes. CEO and co-founder Dror Kashti said: “We are watching HTTP2Shell exploitation attempts in real environments right now.” Sweet says workloads receive a Protected status after the sensors confirm enforcement, and that protection follows workloads when they scale or restart. These are the company’s descriptions of its product’s operation. Sweet says it has observed exploitation attempts across 88% of the environments it monitors. That figure describes the company’s monitored environments. Its announcement identifies affected Brotli-decoding implementations across Node.js, Bun, Python, Envoy and Istio, as well as the Go frameworks Traefik, Fiber and Iris. The offered protection is intended to operate while organizations prepare permanent fixes. The announcement follows Sweet’s October 25 disclosure from Tel Aviv that its research had identified related Brotli-decoding exposure in Go frameworks. That earlier release cautioned that the presence of a dependency alone does not establish exploitability: versions, decoder use and configuration affect actual exposure.