Bitdefender GravityZone EDR Reviews

I use Bitdefender GravityZone EDR for the grooming industry. It is primarily utilized for the office environment.

The features I find most effective for threat detection include centralized control policy distribution and the control of independent devices, such as printers, laptops, and desktops connected to the network.

I like the risk assessment tool built into Bitdefender GravityZone EDR because I'm really into risk assessments and vulnerability testing. I think that is crucial and needed, and I don't see that often with most EDRs. The telemetry I get from the tool can be used in a SOC I use.

The solution has behavior monitoring that allows you to monitor people's specific behaviour and practices. You can then ask the person to stop or start doing something. You can also do application management and access management. You can do many things within Bitdefender GravityZone EDR because it is like a one-stop shop scenario.

The solution's workflow is very cumbersome and should be improved. Many things in the tool are hard to find. I wouldn't miss something called clients as opposed to column networks. You have to go into networks. Then, you can break down into the different networks of different companies you're working with.

It's just not very intuitive when you get to those things. Every time I go into it, I have to figure out exactly where I need to go.

The top priority is definitely security.  The second key aspect is browsing security.

One strong point is that it doesn't have many background services running on the Windows system or server operating system. This minimizes impact because it's a lighter version.

For instance, when comparing Bitdefender GravityZone to Sophos, I noticed Sophos has 19 background services, which is quite excessive. This creates issues for our in-house developed applications, especially with database services, causing CPU usage spikes to as high as 95 to 98 percent.

So, Bitdefender significantly reduces CPU load compared to Sophos.

GravityZone is lightweight and efficient for us. When comparing antivirus solutions in the market, Bitdefender often ranks in the top one or two. We previously used Sophos for around three years, but it wasn't compatible with our systems. Bitdefender offers fewer background services, which suits our needs better. More features, more background services. Fewer features, fewer background services

We offer Bitdefender GravityZone Ultra to our clients. GravityZone Ultra has features such as encryption. I can do anything from their simple core, which is just antivirus, to their complete MDR product if necessary. However, what I usually do is install core plus ATS with encryption and then integrate that with the SOC service so that you only have to look at the SOC interface to monitor the Bitdefender logs. Essentially, it streamlines the SOC.

It's a product from EDR. We are monitoring endpoints for malicious code. It's a basic antivirus. We are also looking for day-zero attacks and for anomalous behavior as well. That's it, ostensibly.

It's a very comprehensive product. I like the fact that Bitdefender is used by about 38% or more, of other security vendors is another type of tick box that lends credibility.

We are integrators for clients in the SME segment. We evaluate different product lines, and we feel GravityZone performs well.

We set the product price-wise. The main criteria are price and performance. If it works well, we push it to the client.

So far, we haven't had any surprises. The product performs well compared to other products. It does not put a heavy burden on memory. It does what we want, even on systems with low resources.

In the beginning (initial stages), there were big differences, and it was heavy on detecting threats, and false positives were more.

But recently, I haven't found any issues. It's very smooth. In a year, if we come across anything to be escalated, once we escalate it, it's not doing anything. It runs very smoothly.

Analytical features:

The analytic features are very good. After deploying Bitdefender, it provides detailed logs about any threats encountered and quarantines the threat. It synchronizes this information, and you can see which PC or device faced the threat when you log into the console. It's very easy to resolve these issues with the available resources. 

The system also reacts automatically, and you can change policies from the source and push them out as needed.

It's a continuous monitoring system, we can take immediate action if something comes up. It's not spreading like it used to. Before, we faced issues with worms spreading very fast, but this blocks them on the first level. We don't face any issues with PCs being listed as threats. We take them offline and check for malware or if anything has been bypassed. It's working out very well.

We have small, medium, and large enterprise customers. Some of our customers are government entities. They use the solution to have more visibility and early visibility.

Sandbox Analyzer, HyperDetect, and EDR are valuable to our customers. As far as security is concerned, Bitdefender is one of the best solutions available in the market right now.

One of its standout features is handling configuration and security at the endpoint level. For example, users can't just uninstall the endpoint software out of frustration because it requires a secure key that only the administrator can generate. This gives you a stronger level of control compared to other solutions. If an attempt is made to uninstall it, the admin receives a notification and can take appropriate action.

I had a situation where an employee on suspension tried to tamper with the endpoint security. Thanks to Bitdefender, I was immediately alerted, and I was able to prevent any potential data loss. When the employee returned to the office, he no longer had access.

The solution also excels in periodic and on-demand scanning, which helps remove unnecessary or potentially harmful applications. Recently, one of my client applications was flagged as malware by Bitdefender. I escalated the issue to the financial application's OEM to confirm it was safe. They provided me with the SOC reports for the year, which confirmed there was no malware. After rescanning, the issue was resolved, and I had the assurance I needed.

A common challenge with endpoint solutions when it comes to response time and resource consumption is their impact on system resources. However, with Bitdefender, there were no issues with excessive resource usage, even on PCs with 8 or 16 GB of RAM. The agents are designed to work efficiently, ensuring that user performance remains unaffected.

We use the platform for endpoint security across Windows and Mac operating systems. We are also considering extending its use to Linux endpoints to ensure comprehensive protection across all operating systems in our environment.

The product has provided us with visibility into the traffic flow from endpoints and the ability to enforce security policies, helping us position for zero-trust compliance objectives.