1. API Basics
GravityZone API
The GravityZone API is based on JSON-RPC 2.0 over HTTPS. All console actions can also be performed via API.
API Endpoints
Cloud:
https://cloud.gravityzone.bitdefender.com/api/v1.0/jsonrpcAuthentication
HTTP Basic Auth with API Key
Authorization: Basic [base64(apiKey:)]2. API Examples
Get Endpoints List
curl -X POST "https://cloud.gravityzone.bitdefender.com/api/v1.0/jsonrpc/network" \
-H "Authorization: Basic [API_KEY_BASE64]" \
-d '{"jsonrpc":"2.0","method":"getEndpointsList","params":{},"id":1}'Isolate Endpoint
curl -X POST ".../api/v1.0/jsonrpc/network" \
-d '{"jsonrpc":"2.0","method":"createIsolateEndpointFromNetworkTask",
"params":{"endpointId":"[ID]"},"id":1}'3. SIEM Integration
Splunk
- • Bitdefender Add-on for Splunk
- • Syslog forward to HEC
- • Pre-built dashboards
Microsoft Sentinel
- • Data Connector available
- • CEF format via Syslog
- • Analytics Rules Templates
4. Automation Use Cases
Auto-Isolation on Critical Alerts
API polling → On Severity=Critical → auto-isolate
Daily Health Report
Daily report: Offline endpoints, outdated signatures, open incidents
ServiceNow Integration
Auto-create tickets on security incidents
API Integration Support
Need help with API integration? Thalvos Cloud develops custom automation solutions.
Discuss Project →