Cloud adoption moved faster than security coverage could follow. Most organizations spent the last several years shifting workloads to virtual machines across AWS, Azure, and GCP, while their security tools largely stayed focused on endpoints and on-premises servers. ESET is closing that gap with the launch of Cloud Workload Protection, a new module announced at RSAC 2026 and added to its ESET PROTECT Platform.
The timing connects directly to a number that is hard to look past. Public cloud data breaches now carry an average cost of $5.17 million per incident, the highest figure across all environment types. For midmarket businesses and managed service providers running virtual machines in public cloud environments, that exposure sits largely outside the protection perimeters most security tools currently cover.
ESET’s new module pulls cloud VM data directly into the ESET PROTECT XDR Platform, extending visibility beyond traditional endpoints and giving security teams a single management view that spans both environments. Michal Jankech, Vice President of Enterprise and SMB/MSP at ESET, noted that roughly 80 percent of organizations now treat public cloud as central to their digital operations, making the case that leaving cloud workloads outside the security perimeter is a gap the market can no longer justify.
What separates this from standalone cloud security tools is the integration model. Rather than adding another separate product to an already crowded security stack, ESET includes Cloud Workload Protection within existing ESET PROTECT subscriptions at no additional cost, with the exception of the Entry tier. The module also supports compliance validation across regulatory frameworks including NIST, CIS, HIPAA, and PCI DSS, generating audit evidence that IT managers can use directly rather than assembling manually.
The broader ESET PROTECT update adds several other meaningful improvements alongside the new module. AI reporting within ESET LiveGuard Advanced now produces behavioral reports covering incident actions and characteristics analyzed through ESET’s cloud sandbox, with AI-generated summaries available for XDR subscribers.
Incident Graphs received significant upgrades for EDR and XDR customers, offering clearer visual attack timelines and richer contextual data including identity-related information. ESET AI Advisor also moves into the main ESET PROTECT console, making it accessible without navigating to a separate section.
Taken together, the update reflects a broader industry shift where security vendors recognize that protecting an organization now means following workloads wherever they run, not just defending the perimeter where they used to live.
