Aviatrix Offers Free Tool to Limit Damage From Hacked Cloud Systems

Aviatrix, a cloud security company, announced a tool called Clearance that aims to keep a break-in small. If a hacker gets into one cloud service, Clearance limits what that service can reach next. From November 1, 2026, through May 1, 2027, the company says every enterprise can use it free across its whole setup.

What it does

Each program running in the cloud, called a workload, gets a short list of the connections it actually needs. Everything else is blocked. That covers traffic going out to the internet and traffic moving sideways between internal systems. Aviatrix calls what a hacked workload can still reach its "blast radius." Clearance is meant to shrink it, whether or not anyone has noticed the breach yet.

The safe test

Many teams avoid strict rules because one wrong rule can knock a business application offline. Clearance runs a new rule in monitor mode first. It checks the rule against real traffic and shows which connections it would block, without blocking anything. Turning enforcement on is one setting, and backing out is one action.

Why now

Aviatrix points to three recent incidents. Its chief executive said this patch cycle runs into the holiday change freeze, so the tool is meant as a backstop while teams patch.

• PHP2Shell: two critical flaws in PHP, a common website language. Attacks began four days before the October 21 fix.
• eMudhra: eight certificates had keys weak enough to forge trusted ones. VPNs, containers and Linux systems that have not updated still trust them.
• LiteLLM: compromised for the second time this year, with every AI provider key the gateway held harvested.

Cost and access

After the free period, Clearance includes 15 workloads with no time limit, which Aviatrix says is enough for a typical VPC or VNet, a private network space in the cloud. Beyond that it is priced per workload, and pricing is by request. A free Containment Assessment is open now. It is read-only and installs nothing. AWS Marketplace enrollment opens November 1.

What to keep in mind

These claims come from Aviatrix's own announcement. The release does not include independent testing or customer results. A business with cloud systems can ask its IT team whether a breach in one place could spread, and whether tighter limits can be tested safely first.