Help Net Security rounds up four new infosec products

Help Net Security published its October 23, 2026 roundup of new infosec products featuring AppGate, IDENTOS, Sweet Security and ThreatModeler. The trade site said the four vendors brought updates for cloud workloads, threat modeling, access policy and operational technology security. Each product update appeared in the same weekly collection.

Sweet Security introduced Virtual Patching to defend live cloud and AI workloads against named vulnerabilities as soon as they are found. The product applies to running cloud and AI workloads. Teams can turn the protection on with one click while engineers build, test and ship a lasting fix. The one-click control lets security teams activate coverage for live environments quickly.

ThreatModeler released NexusAI, an AI-driven threat modeling assistant inside its Nexus platform. NexusAI lets enterprises automate much of the work to build, review and update threat models. Security teams can grow their impact without adding more manual labor.

IDENTOS said PolicyArc is now generally available. PolicyArc gives security, platform and compliance teams one place to set, enforce and audit access rules across their applications. PolicyArc exists to safely extend access beyond people and services to AI agents acting for them.

AI agents are software programs that act on behalf of users or systems. PolicyArc is designed to manage access for those agents alongside access for people and services. Security, platform and compliance teams can use the tool to set and enforce rules for all three categories. The product covers access for people, services and AI agents.

AppGate broadened its zero trust operational technology offering with Session Governance features. ZTNA stands for zero trust network access, a method of controlling user and system connections to internal resources. The expansion builds on the ZTNA for OT product that AppGate launched in March 2026. Session Governance adds session-level oversight to the zero trust operational technology product.

The first ZTNA for OT release governed which users could reach critical systems. Session Governance now extends that earlier product with controls for activity inside a session.

Session Governance assists critical infrastructure operators in cutting third-party access risk. It also eases compliance audits. And it safeguards operational uptime. The features address the access that outside vendors and partners need to reach operational systems.

The latest release manages activity inside every session and lets supervisors veto behavior that leaves the approved boundary. Supervisors can stop actions that fall outside the permissions set for a given session. The control applies to activity inside every session in the operational technology environment.