Security for Amazon Web Services, billed by the instance-hour
Bitdefender Security for AWS protects your EC2 workloads from the same GravityZone console you use for physical, virtual and other cloud machines - with scanning offloaded to Bitdefender servers inside Amazon, and a bill that follows only the instances actually running.
on any number of instances, starting when the first agent is installed
Per hour
Pay for running time
counted only for running instances and invoiced monthly
0 consoleCloud and on-premise togetherGravityZone Control Center manages AWS instances alongside physical, virtual and other cloud endpoints
0 up frontNothing to licence firstSubscribe on AWS Marketplace or through us, and pay each month for the previous month's instance-hours
0Guest operating systemscovered, from Windows Server to Amazon Linux, Red Hat, Ubuntu and SUSE
Shared responsibility
Amazon secures the cloud. What runs in it is yours to secure
Under the AWS shared responsibility model, Amazon is responsible for the security of the cloud - compute, storage, database, networking and the global infrastructure. Security in the cloud - the operating system, the applications, identity and access, and the data - is the responsibility of the organisation using it. Bitdefender Security for AWS covers that half, built for virtualisation, priced flexibly, and scaled to what you run.
Hosted Scanning ServicesScanning is offloaded to Bitdefender security servers hosted in Amazon, for each protected cloud machine. Minimal resource use on the instance itself.
Pay-As-You-Grow LicensingScales instantly - add as many instances as you need, any time, with a few clicks. You are charged only for what ran.
Easy-To-Use Integrated Management ConsoleManage your instances from the cloud-based GravityZone console, with the Amazon EC2 API integration giving one view across every AWS region.
Capabilities and benefits
Better overall security posture for your cloud workloads
The same security vendor and the same web console you use for physical, virtual and any other cloud environment - so AWS stops being the estate you protect differently.
Highly Optimized Scanning Technologies
For each cloud machine, scanning is offloaded to Bitdefender security servers hosted in Amazon. Powered by Bitdefender's patented threat prevention technology, offloading the scanning processes keeps your instance costs low while maximising both performance and protection - the instance does the work you are paying Amazon for, not the antimalware.
Scanning runs on dedicated Bitdefender servers inside Amazon, outside the protected instance
Patented threat prevention technology, the same engine as the rest of GravityZone
Lower instance cost for the same protection
Best Protection
Cloud security from the highest-rated security vendor in independent tests - the same engine evaluated by AV-TEST, AV-Comparatives and MITRE Engenuity, applied to your EC2 instances.
Pay-As-You-Go Licensing
Usage-based licensing, charged monthly and only for what you used. Combined with Amazon's payment system, you implement and pay for security how and when you need it, with no licence to size in advance.
Friendly, Easy to Use Integrated Management Console
All protected instances are managed from the Bitdefender cloud-based security console. Close integration with the Amazon EC2 API sets provides an intuitive, unified view of your security across all AWS regions, so configurations, policies and reporting are handled in one place rather than per region.
Every AWS region in one view through the EC2 API integration
Configurations, policies and reporting alongside your non-AWS endpoints
Monthly Amazon EC2 usage reports generated from the same console
Lightweight Security Footprint
Despite the comprehensive set of security technologies, Bitdefender Security for AWS significantly improves performance by centralising scan functionality on dedicated servers outside the protected instances.
Instant Provisioning and On-demand Scaling
Deployment flexibility is essential in a rapidly changing AWS environment. Purpose-built for AWS, the service lets you grow on demand and provision security the moment an instance launches.
How it is billed
Seven instance sizes, one hourly rate each
Every EC2 instance maps to one Bitdefender instance size, and each size has a flat rate per instance-hour. Only running instances with the security agent installed count, usage under an hour is billed as a full hour in line with EC2, and Amazon or Bitdefender invoices at the start of each month for the month before.
7 rows across every instance size
Seven instance sizes, one hourly rate each
Instance size
Small$0.005 per hour
Medium$0.010 per hour
Large$0.025 per hour
X-Large$0.060 per hour
2xLarge$0.060 per hour
4xLarge$0.060 per hour
8xLarge$0.060 per hour
1Which AWS instance types map to which size3 rowsThe published mapping from the legacy Bitdefender Thailand price list (2019). Newer instance families are placed by the equivalent size at subscription - ask us if your family is not listed.
2How usage is counted4 rowsThe rules that turn instance-hours into an invoice, whichever way you subscribe.
Included in Small
Included in Medium
Included in Large
Included in X-Large
Included in 2xLarge
Included in 4xLarge
Included in 8xLarge
Included in Small
Included in Medium
Included in Large
Included in X-Large
Included in 2xLarge
Included in 4xLarge
Included in 8xLarge
Included in Small
Included in Medium
Included in Large
Included in X-Large
Included in 2xLarge
Included in 4xLarge
Included in 8xLarge
Included in Small
Included in Medium
Included in Large
Included in X-Large
Included in 2xLarge
Included in 4xLarge
Included in 8xLarge
How to subscribe
Three ways in. Pick the one that matches how you buy
The service is the same whichever route you take. What changes is who invoices you and where the subscription lives.
Recommended in Thailand
Through us, as your Thai reseller
We are a partner affiliated to a Bitdefender distributor, so the Amazon EC2 integration is available in the GravityZone Control Center we manage for you. You are invoiced locally, in Thai baht, from the same hourly usage report.
1Tell us what you runHow many EC2 instances, which regions and which guest operating systems. We confirm the instance-size mapping and what the monthly figure will look like.
2We enable the integrationThe Amazon EC2 integration is switched on for your company in GravityZone Control Center, with the Bitdefender distributor's resale right already in place.
3Install the first agentYour 30-day trial starts the moment the first security agent lands on an EC2 instance. All features, any number of instances.
4Licensed automaticallyWhen the trial ends the service is licensed for your company without a licence key to enter. We invoice you monthly from the hourly usage report.
Direct, on AWS Marketplace
Available to new GravityZone customers and existing users who have not held an AWS subscription before. You need an active AWS account, and Bitdefender strongly recommends an IAM role tied to your AWS user. Use a production account - Amazon bills it monthly.
1Log in to your AWS accountThen open the Bitdefender Security for AWS listing on Amazon Marketplace.
2Continue, then SubscribeThe Continue button on the right opens the subscription details. After reading them, Subscribe - a confirmation message appears and you are subscribed.
3Set Up Your AccountYou are redirected to a subscription form hosted by Bitdefender.
4New customer: registerFill in the form and click Complete Registration. A customer company and a user account are created in GravityZone Control Center, and you receive a Marketplace confirmation plus a GravityZone account email with your login details.
5Existing customer: sign inClick the link under the form's title and enter your GravityZone credentials. They must be for a company administrator account.
As a Bitdefender partner or distributor
Direct distributors and partners subscribe via the Bitdefender PAN portal. Configuring the EC2 integration for your own network is optional - it is only required for the customers and child companies whose instances you protect.
1Subscribe in the PAN portalYour Bitdefender account manager can confirm the details of your PAN account.
2Optionally configure EC2From the Integrations page in Control Center. The 30-day trial starts with the first agent deployed, and the same trial applies to every child company linked to your partner account.
3Report monthly usageAmazon EC2 monthly usage reports are generated for each managed company. After the trial the service is licensed automatically for them, and Bitdefender invoices you on the hourly usage of your client network.
Before the agent can be pushed to an instance, the EC2 security groups must allow SSH from the Security Console instance for remote installation, or SSH and Remote Desktop Protocol from your own machine for local installation.
Specifications
What it runs on and what it needs
Designed for the performance needs of cloud environments: low-impact, lightweight antimalware on the instance, with the heavy work on Bitdefender's own servers.
17 specifications
What it runs on and what it needs
Requirement
Supported / required
1Guest operating systems11 itemsThe guest operating systems the security agent installs on inside your EC2 instances.
Windows Server 2019
Supported
Windows Server 2016
Supported
Windows Server 2012 / 2012 R2
Supported
Windows Server 2008 R2
Supported
6.0 or higher
Both distributions are covered by the same agent build; CentOS Stream follows the RHEL version it tracks.
Ubuntu
14.04 LTS or higher
SUSE Linux Enterprise Server
11 SP4 or higher
OpenSUSE
Leap 42.x
Fedora
25 or higher
Debian
8.0 or higher
2016.09 or higher
The Amazon-maintained distribution built for EC2, covered from the 2016.09 image onwards.
2Control Center web console2 itemsWhat the browser needs to run GravityZone Control Center.
Browsers
Internet Explorer 9+, Mozilla Firefox 14+, Google Chrome 15+, Safari 5+, Microsoft Edge 20+, Opera 16+
Screen resolution
1280 x 800 or higher recommended
3AWS prerequisites4 itemsWhat must be in place on the AWS side before the agent can be pushed to an instance.
Licensing
The service licensed for your GravityZone company account, or a running trial subscription
An IAM role associated to your AWS user account is strongly recommended for Marketplace subscriptions
A dedicated IAM role keeps the Marketplace subscription and the EC2 integration off your root credentials, which is what Bitdefender means by strongly recommended.
Allow SSH access from the Security Console instance
The GravityZone Security Console instance connects over SSH to install the agent, so its address must be allowed inbound on port 22 for the instances you want to protect.
Allow SSH and Remote Desktop Protocol access from the computer you connect from
When you install from your own workstation instead, that machine needs SSH for Linux instances and Remote Desktop Protocol for Windows instances.
The security agent must also meet the Bitdefender Endpoint Security Tools requirements in the installation guide. Ask us for the current guide before a large rollout.
The rest of the estate
One console for everything that is not in AWS too
Security for AWS is one integration in GravityZone. The same console and the same engine cover the rest of what you run.
Start the 30-day trial on any number of EC2 instances, or tell us what you run and we will confirm the instance-size mapping and what the monthly figure will look like before you commit to anything. Prices are for the service only and do not include implementation.
