A computing system implemented method for protecting and repairing a current virtual asset from damage by potential security threats, comprising: monitoring the current virtual asset for the potential security threats with a virtual asset agent running within the current virtual asset to identify the potential security threats that risk compromising virtual asset data to unauthorized computing systems, wherein the monitoring comprises identifying whether a network protocol being employed is a security threat based on whether that network protocol is appropriate and/or expected; determining a severity of the potential security threats that are identified by the virtual asset agent for having gained access into the current virtual asset, wherein the severity of the potential security threats is related to a content of the virtual asset data; if the severity is greater than a predetermined threshold , creating a new virtual asset with the virtual asset agent and decommissioning the current virtual asset, wherein creating the new virtual asset includes: copying the virtual asset data to the new virtual asset, copying one or more applications hosted by the current virtual asset to the new virtual asset, and copying the virtual asset agent to the new virtual asset to enable the new virtual asset to protect and repair the new virtual asset from the damage by the potential security threats; and receiving , with the new virtual asset, secrets that are associated with the current virtual asset to enable the new virtual asset to continue operations of the current virtual asset, wherein the secrets are received from an asset management computing system . monitoring the current virtual asset for the potential security threats with a virtual asset agent running within the current virtual asset to identify the potential security threats that risk compromising virtual asset data to unauthorized computing systems, wherein the monitoring comprises identifying whether a network protocol being employed is a security threat based on whether that network protocol is appropriate and/or expected; determining a severity of the potential security threats that are identified by the virtual asset agent for having gained access into the current virtual asset, wherein the severity of the potential security threats is related to a content of the virtual asset data; if the severity is greater than a predetermined threshold , creating a new virtual asset with the virtual asset agent and decommissioning the current virtual asset, wherein creating the new virtual asset includes: copying the virtual asset data to the new virtual asset, copying one or more applications hosted by the current virtual asset to the new virtual asset, and copying the virtual asset agent to the new virtual asset to enable the new virtual asset to protect and repair the new virtual asset from the damage by the potential security threats; and copying the virtual asset data to the new virtual asset, copying one or more applications hosted by the current virtual asset to the new virtual asset, and copying the virtual asset agent to the new virtual asset to enable the new virtual asset to protect and repair the new virtual asset from the damage by the potential security threats; and receiving , with the new virtual asset, secrets that are associated with the current virtual asset to enable the new virtual asset to continue operations of the current virtual asset, wherein the secrets are received from an asset management computing system . <EOS>