Cybersecurity company S.C. Bitdefender SRL today unveiled Bitdefender GravityZone Proactive Hardening and Attack Surface Reduction, a new technology designed to transform how defense-in-depth security is applied and managed across businesses.
GravityZone PHASR analyzes individual user behavior, such as application use and resource privileges, clustering users into groups with similar patterns. The approach ensures security policies and controls are mapped precisely to user-intended privileges and behaviors, dynamically adjusting as the attack surface evolves.
The new service seeks to tackle the issue where security teams struggle to keep pace as attacks become more advanced and frequent. Bitdefender argues that existing security models have a focus that overly relies on reactive detection and response and a “one-size-fits-all” approach to expanding attack surfaces, exposure management and endpoint security solutions.
GravityZone PHASR allows security teams to anticipate and quickly mitigate emerging risks before they escalate, the company says. The service seamlessly adapts as threats and user roles evolve to ensure security measures always remain aligned with business objectives.
In one example, if a user’s responsibilities change or a new attack technique emerges, the new service utomatically suggests policy adjustments to maintain protection. Bitdefender says the proactive approach enables organizations to reduce fluctuating attack surfaces dramatically.
Under the hood, the service is built on years of advanced machine learning models applied to individual users, groups, applications and endpoints within Bitdefender GravityZone XDR. The service applies artificial intelligence algorithms to establish behavioral norms across groups addressing critical areas such as data access rights, application usage and security permissions to deliver a comprehensive assessment of vulnerabilities and potential attack vectors impacting the business.
Benefits include dynamically adaptive security controls tailored to each business. By integrating with GravityZone endpoint security and risk analytics, the service correlates user behaviors with known threats based on factors such as job type and geography. The approach minimizes risks by determining each company’s optimal attack surface configuration without compromising operational efficiency.
Additionally, GravityZone PHASR shifts security from reactive detection to proactive prevention by identifying and closing security gaps before they are exploited. It optimizes current security investments by recommending impactful policy changes to reduce risks, such as those associated with supply chain attacks, insider threats and mergers and acquisitions.
Bitdefender will make the service available to a select group of customers as part of the GravityZone Early Access Program, with broader availability planned for 2025.