GravityZone Platform
GravityZone CSPM+ inventories your cloud footprint, finds the misconfigurations and over-privileged identities that create risk, measures both against the compliance frameworks you answer to, and detects threats across AWS, Azure and Google Cloud. Agentless.
Agentless
Nothing on the workload
CSPM+ reads the cloud platform's own configuration instead
CSPM + CIEM
Both in one licence
posture and entitlement management together, with threat detection alongside
What it is for
Cloud moves fast because configuration is cheap to change. That is exactly why misconfigurations and over-granted permissions accumulate faster than anyone can audit them.
01 / 03
Know what you are running before you try to secure it.
02 / 03
Stop rebuilding the same evidence pack by hand every quarter.
03 / 03
Posture tells you what could go wrong; detection tells you what is.
Capabilities and benefits
Five views, in the order a team uses them: find out what is there, fix what is wrong, tighten who can reach it, prove it to an auditor, and catch what happens anyway.
The first step in managing a cloud platform and its identity posture is simply understanding what is there. CSPM+ inventories the assets across your accounts, so the conversation starts from a list rather than an assumption.
Not every finding is worth someone's afternoon. CSPM+ highlights the misconfigurations doing the most damage to your security posture and puts them at the top, so remediation follows risk instead of alphabetical order.
Cloud Infrastructure Entitlement Management maps the permissions held by people and by service accounts, and shows where they exceed what is actually used. Correcting an over-privileged account limits the blast radius of a breach before there is one.
Agentless scanning produces actionable outcomes against a range of compliance frameworks, so the team works from a short list of things to change rather than a spreadsheet exported from three consoles.
The GravityZone XDR Cloud sensor monitors AWS, Azure and Google Cloud for threats: suspicious activity such as encryption being removed, anomalies and login failures. Those signals consolidate with the rest of the platform to form the full attack picture.
Why the plus
Early cloud posture tools covered asset discovery and platform configuration, and left the two hardest questions - who can reach this, and is something happening right now - to other products. CSPM+ is the name for closing that gap in one licence.
Discovery of cloud assets and continuous evaluation of platform configuration against best practice. This is the part every posture tool does, and the part CSPM+ starts from.
Cloud Infrastructure Entitlement Management identifies and maps over-privileged identities, human and machine. Permissions are where a small misconfiguration turns into a large incident, and they are invisible to configuration scanning alone.
Detection running on the same cloud data, with outcomes written to be read - not another alert feed to triage in a separate console.
Coverage
Read-only access to the cloud platform's own configuration and identity data. There is no agent to package, deploy or maintain.
Amazon Web Services
Microsoft Azure
Google Cloud
Platform configuration
Cloud asset inventory
Identity entitlements and permissions
Best-practice deviations
Compliance framework alignment
User accounts
Service accounts
Roles and policies
Machine identities
Cloud control-plane activity
Configuration tampering
Login failures
Behavioural anomalies
No agent
Agentless scanning - nothing installed on a workload to assess it
Continuous
Posture re-evaluated as configuration changes, not once per audit cycle
One platform
Findings sit beside endpoint, identity and network signals in GravityZone
CSPM+ licences include CSPM, CIEM and Threat Detection and Response together. Tell us which cloud accounts you need covered and we will size it.
Independent evaluations
CSPM+ is part of the GravityZone platform. These are the published results that platform carries.
In the AV-Comparatives 2025 Endpoint Prevention and Response test Bitdefender achieved top breach prevention at the lowest total cost of ownership, and was the only vendor to block 100% of attacks in the first stage.
In the MITRE Engenuity ATT&CK Evaluations Bitdefender achieved 100% analytical coverage for both Linux and macOS, with zero false positives in both cases.
GravityZone Endpoint Security received the AV-TEST Award 2023 for both Best Protection and Best Performance in the business users category.
Where CSPM+ fits
CSPM+ secures how the cloud is configured and who can reach it. What runs inside it - servers, containers, endpoints - is protected by the GravityZone tiers, and the two share one console.
Not sure where to start? Tell us which cloud accounts and how many endpoints you run, and we will size the combination.
Resources
Product documents, hosted here.
The official product datasheet: what CSPM, CIEM and threat detection each cover, supported cloud platforms and how the assessment works.
The wider detection and response platform the CSPM+ Cloud sensor feeds, including the other five sensor categories.
The endpoint tier that carries EDR and risk management, for teams sizing cloud and endpoint together.
Questions
Tell us which cloud accounts you run and we will size CSPM+ for them, or walk you through the console first.
