Waratek Patch
Patches for Java vulnerabilities, without waiting for the upgrade
Free patches for the Java CVEs you can't upgrade away yet. A patch can block the exploit, alert you when someone tries it, or both.
When you're ready for more, Waratek RASP adds security rules that stop zero-days too.
Join the waitlist
Leave your details and we'll get in touch.
You're on the list
Thanks, there. We'll be in touch at .
Patch now, upgrade when you're ready
Upgrading a JDK or a framework in production can take months. A Waratek patch protects the application you run today, so you can upgrade on your own schedule.
You turn patches on in the Waratek Portal. No code changes, no rebuilds.
| Patch | Mode | Enable |
|---|---|---|
| Spring4ShellCVE-2022-22965 | Protect | |
| Apache Struts OGNL injectionCVE-2017-5638 | Protect | |
| Jackson deserializationCVE-2019-12384 | Detect |
Over ten years of Java security
We've been patching Java applications at runtime for over a decade, from the JDK to the libraries and app servers on top of it.
Tens of thousands of applications
Waratek Patch runs on our RASP agent, which already protects tens of thousands of Java applications in production.
Interested in Waratek Patch?
Sign up and we'll get in touch.