Sweet Security Brings Runtime-CNAPP Power to Windows

Sweet Security has expanded its Runtime CNAPP sensor to Windows, enabling organisations to secure Windows workloads and applications in the cloud, with the Windows sensor developed in Rust to minimise resource usage.

The new capability maintains the same depth of behavioural insight, real-time detection and automated investigation that Sweet’s CNAPP for Linux offers, and it extends coverage to attack vectors such as DLL injection, registry manipulation and PowerShell scripting, in addition to monitoring Layer 7 data and application behaviour.

The sensor is cross-correlated with cloud audit logs and cloud identities (CDR and ITDR) to maximise context and observability, delivering rapid detection and investigation across all workloads. In a recent customer evaluation, a credential-dumping attempt was identified within seconds, with detection relying on the correlation of PowerShell execution, registry export and file creation anomalies; from detection to full investigation, the process took under two minutes.

This launch, according to Sweet Security, marks a major step forward for the entire cloud security industry and moves toward universal runtime protection across all cloud workloads.