Discover A New Approach to Workload Protection


AppDefense for Intrinsic Workload Protection

Video Play Icon

Deploy Hypervisor-Native Workload Protection

Protect your apps and data with the only security approach that’s intrinsic to your virtualization infrastructure. 

Improve the security of your applications from within the hypervisor — and get 360o visibility into every workload — with VMware AppDefense. Rather than chasing after threats, reduce your attack surface by leveraging AppDefense to model intended application behavior, monitor for anomalous activity, and provide application control, reputation scoring, and security.


Download Solution Overview

Step Up to Intrinsic Workload Protection

Lowering attack exposure and preventing a data breach is increasingly critical in the enterprise. Organizations can now protect themselves with VMware AppDefense — the only workload protection product that is embedded within the hypervisor and distributed across your entire environment. This unique position provides unparalleled security isolation and application visibility to dramatically improve your security posture.

Get AppDefense by Upgrading to vSphere Platinum

Deploy Powerful Workload Protection Easily

Get 360o Visibility into Every Workload

Ensure the integrity of the OS/hypervisor, from a unique vantage point within the hypervisor itself. Verify the reputation of every executable, understand all process-process communications on the network, and highlight any software vulnerabilities.

Achieve Operational Simplicity

Avoid installing and managing additional host agents. AppDefense is embedded within the hypervisor, providing a simple 1-click deployment model to every host — and the ability to manage directly from the familiar vSphere client.

Isolate Controls from the Attack Surface

"Root can’t defend against root” — an adversary on a compromised workload can easily disable traditional endpoint protection agents. In contrast, AppDefense, a module inside the vSphere hypervisor, operates as a “super-root”, isolating it from the attack surface.

How AppDefense Works

Inspect every process, every communication, every software

Inspect every process, every communication, every software

Build a model of “known-good” app behavior

Build a model of “known-good” app behavior

Learn from the collective knowledge of 1000s of customers

Learn from the collective knowledge of 1000s of customers

Enforce known good behavior for each workload

Enforce known good behavior for each workload

Spotlight on Application Security 

Interfaith Medical Enhances Data and Application Security

Video Play Icon

Why AppDefense is the Next Big Thing

See how VMware has been “architecting security in”.

Verodin Finds AppDefense Shrinks the Attack Surface

Review Verodin’s demonstration of AppDefense protections and effectiveness.

Download White Paper

AppDefense Delivers on the Core Principles of Cyber Hygiene

Learn how AppDefense provides the critical elements of an effective information security program.

Read the Blog

What Are the Key Use Cases for AppDefense?

Accelerate Security Operations

Streamline security reviews by enabling infrastructure and security teams to collaborate from a single pane of glass. Visualize topology maps for every application and VM in your environment, and drill-down to see detailed workload context — roles, meta-data, process, and network activity.

Assure Every Workload

Enable application control and whitelisting — and patch risky software sooner — by continuously scanning workloads to highlight vulnerabilities in the OS, hypervisor, or application software. Ensure OS integrity, and provide reputation scores for every process.

Protect Critical Workloads

Shield crown jewel applications running inside micro-segments - such as shared services, domain controllers, and critical assets - by modeling “known good” behavior and by providing fewer and more authoritative alerts for anomalous behavior.

Enhance Micro-Segmentation Effectiveness

Provide additional workload context to NSX to assist in the definition of micro-segments, and enable faster and more granular responses to risky workload behavior, by pushing into NSX policies for actions such as quarantining, activity logging, etc.

We’re Powering Our Customers’ Success 

Interfaith Medical Center Secures Patient Data

Interfaith Medical Center Secures Patient Data

Interfaith Medical Center enhanced security for vSphere infrastructure by moving to a zero-trust security model with NSX and AppDefense. 

Ceridian Seamlessly Connects to the Cloud

Video Play Icon

Ceridian Seamlessly Connects to the Cloud

Ceridian leveraged a Virtual Cloud Network with AppDefense to meet current network and data security needs and provide for future growth.


Deliver Protection Across Clouds

Secure east-west network traffic and protect workloads across multi-cloud environments with a purpose-built internal firewall.

More on Service-Defined Firewall 

Virtualize with VMware vSphere

Explore the industry-leading server virtualization software helping you run, manage, connect, and secure your applications across clouds.

More on vSphere 

Build on a Foundation of NSX

Connect and protect applications across your data centers and clouds with virtualized networking and security via VMware NSX.

More on NSX 

Transform Your Business

Learn about a new approach to building and operating a single Virtual Cloud network for all your apps and data, wherever they run.

More on Networking & Security Transformation