Much good work is lost for the lack of a little more.

BitDefender GravityZone

Security for Endpoints

Security service for physical workstations, embedded devices and servers delivered by the GravityZone On Premise console.

  • Protection for any number of physical endpoints: Windows, Linux and Mac
  • Best performance and protection
  • Smart Scanning - centralized scanning offloads security tasks to Security Virtual Appliances

Key Benefits

Easy to deploy accelerates implementation and lowers cost

Delivered as a Linux Ubuntu self-configuring hardened virtual appliance, integrates with VMware vCenter, Citrix XenServer, and Active Directory.

High availability and performance

GravityZone Security for Endpoints is delivered within a virtual appliance with built-in redundancy to minimize risks and performance issues when managing large environments, and drastically reduces the manual effort and hardware needed to maintain an enterprise-wide security system.

Scalable and resilient security

Eliminates single point of failure and AV storms; grows organically by cloning virtual appliances and automating deployment with golden images.

Simplified security management

GravityZone Security for Endpoints simplifies security operations, reduces the time required to manage and maintain security operations and further streamlines security management workflows.

Breakthrough resource optimization for physical machines

Security offloading for all types of endpoints in laptops and desktops.

Wide operating system coverage

Windows Workstation, Embedded, Server, Mac and major Linux distributions

Key Features

Smart Scanning - centralized scanning offloads security tasks to Security Virtual Appliances

Antimalware, Antivirus, Antispyware, Antiphishing, Trojan & Rootkit detection.

Environment-aware security agent

Fully featured two-way personal firewall and host-based intrusion detection and prevention HIDS / HIPS

Integration with Microsoft Active Directory.

Content Control
Multiple thread filtering of web content to identify potential online threats

Intelligent deployment

Behavior Monitoring and Application Control.

Device Control
Port and device control to enforce data protection policies

Multiple layers of security for endpoints: antivirus and antimalware with behavioral monitoring, zero-day threat protection, application control and sandboxing, firewall, device control and content control

Location-aware policies
Security policies that adapt as users take their systems outside the company.

Policy Inheritance
Enables the administrator to save time when creating new policies by using ones that are already created.

User-aware policies (on-premise console)
Different security policies can be adapted based on employee roles in the company, they are available when there is an Active Directory integration and are applied when the user logs in.

Endpoint staging
Allows testing the GZ kits and new updates delivered by Bitdefender before deploying them in the production environment.



Unpatched systems leave organizations susceptible to malware incidents, outbreaks, and data breaches. Keep your OS and Applications up to date across the entire Windows install base - workstations, physical servers and virtual servers with GravityZone Patch Management.


GravityZone FDE protects data for the entire endpoint hard drive by leveraging the encryption mechanisms provided by Windows (BitLocker) and Mac (FileVault). It takes advantage of the native device encryption to ensure full compatibility and maximized performance. GZ FDE is integrated into the GravityZone Console and Agent, with no additional agent to deploy or key management server to install. The use of existing endpoint security infrastructure to manage Full Disk Encryption enables fully centralized deployment with minimal administrative effort.