GravityZone PHASR

Attackers rarely bring their own malware. They use the tools that are already installed on the machine.

Description

A clean Windows 11 installation contains 133 living-off-the-land binaries. Most of them are never used. Those unused tools are exactly what ransomware crews and stealthy attackers rely on, disguised as ordinary administration.

GravityZone PHASR closes that gap. Its Dynamic Attack Surface Reduction (DASR) shuts down attack paths before they can be exploited, and it sits alongside GravityZone as well as third-party EDR and XDR tools. Instead of only raising alerts, PHASR restricts the legitimate actions attackers abuse — up to 95 percent of them, according to Bitdefender.

Machine learning builds a risk profile for every user and endpoint pairing, then works out which tools can be locked down without getting in anyone's way. Hardening adapts on its own as behaviour and threat vectors change. Restrictions stay granular: PowerShell can remain available while encrypted commands are blocked.

What's included

• Dynamic Attack Surface Reduction – closes attack paths proactively instead of waiting for execution.
• Targeted hardening – risk profiles per user and endpoint reveal unused, risky tools.
• Granular control – risky actions inside allowed tools are blocked while the application stays usable.
• Autopilot and Direct Control – recommendations apply automatically or await approval.
• Attack surface metrics – every recommendation shows how much risk it removes.

Who it's for

PHASR suits organisations whose EDR or XDR generates a steady stream of alerts about trusted but risky behaviour. Smaller IT and security teams benefit most, because hardening needs no hand-written rules. Managed service providers use it to harden customer environments without adding headcount.

Good to know

• A complement, not a replacement – PHASR works alongside existing EDR/XDR systems, from Bitdefender or from third parties.
• How to buy – as an add-on licence for GravityZone Business Security Enterprise, the MDR offerings and GravityZone Cloud MSP Security Solutions.
• Deployment – built into the GravityZone platform and activated there within minutes.
• Licensing per device and term
• Renewal through the renewal product of the same name

All prices net plus 19% VAT.