Bitdefender GravityZone
Connect Bitdefender GravityZone to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Connect Bitdefender GravityZone to collect endpoint detection & response evidence with automated compliance tests, switched on per workspace.
| Category | Endpoint Detection & Response |
| Connect with | API token |
| What a connection produces | Automated compliance tests |
| Bitdefender GravityZone's guide | bitdefender.com |
Connect with an API token
-
In Bitdefender GravityZone:
- Sign in to the GravityZone console (https://gravityzone.bitdefender.com/) with an administrator account that has the Manage Networks, Manage Users, Manage Company and View and analyze data rights.
- Click your username in the upper right of the console and select My Account.
- Go to the API keys section and click Add.
- Type a description for the key and select only the Network and Incidents APIs.
- Click Generate.
- Copy the key from the window that appears; it is only readable while that window is open.
Where to find the other values:
- API URL: My Account › Control Center API section shows the Access URL field; paste it as the API URL.
- API key: Shown once in the window displayed after clicking Generate.
Bitdefender GravityZone shows the secret only once, so copy it before you leave the page.
Bitdefender's Public API page also lists a newer 'Service API keys' page under Platform management › User accounts (https://www.bitdefender.com/business/support/en/77211-1658556-service-api-keys.html), which was not read. The required account rights come from Bitdefender's Public API page.
Source: bitdefender.com, checked 2026-10-07.
The permissions Safeguard needs:
Network API,Incidents API. -
On Compliance › Connectors, open Bitdefender GravityZone, click Connect, choose API token and fill in:
Field What to enter API URL Required. For example: https://cloud.gravityzone.bitdefender.com/api API key Required. Stored encrypted and never shown again. -
Click Connect with token.
Frameworks
Safeguard's automated tests read Bitdefender GravityZone and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Automated tests | CC6.8, CC7.2, CC7.3, CC7.4 | 5 |
| ISO/IEC 27001 | Automated tests | A.5.26, A.8.1, A.8.7, A.8.16 | 5 |
| HIPAA Security Rule | Automated tests | 164.308(a)(5), 164.308(a)(6) | 5 |
| PCI DSS | Automated tests | 5.2.1, 5.3.1, 12.10.1 | 5 |
| NIST CSF 2.0 | Automated tests | DE.AE-02, DE.CM-09, PR.PS-01, RS.MI-02 | 5 |
These tests are switched on per workspace by the Safeguard team.
Related
- Endpoint Detection & Response connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks