Bitdefender has launched a new security product called GravityZone Exposure Management. The tool maps attack paths across a company’s systems and shows exactly which fix would block each route. The Romanian cybersecurity firm announced the launch on October 27, 2026.
The product is available now for Windows, with other systems to follow. Companies can buy it as an add-on for Bitdefender’s top business plans. Alternatively, they can run it as a standalone tool alongside another vendor’s security software. Bitdefender has not disclosed pricing.
GravityZone Exposure Management combines several defensive features in one platform. First, it finds unpatched software, weak settings, and risky user habits on work devices. Then it scans internet-facing assets to see what the company has exposed. Furthermore, it draws attack paths through linked weaknesses and highlights the single fix that would break each chain.
The tool also includes a feature called PHASR for per-user hardening. Specifically, PHASR learns how each employee uses each device over time. It then restricts tools like PowerShell to only what that user actually needs. This matters because administrators rely on PowerShell for routine work, but attackers abuse it to move inside networks.
Bitdefender targets the product at lean security teams with limited staff. According to Andrei Florescu, who runs Bitdefender’s business unit, the tool gives lean teams control over their attack surface. A company survey of 1,200 security workers backs this focus. In fact, 38% named keeping security rules up to date as their top obstacle. In addition, 35.4% feared breaking day-to-day work with new controls.
The launch comes as AI accelerates vulnerability discovery across the industry. For example, Microsoft fixed a record 1,400 flaws in October 2026. Furthermore, Bank of America reportedly brought in 1,000 contractors to fix flaws found by AI models like Anthropic’s Mythos.
For Pakistani businesses, the product arrives at a critical time. Many Pakistani banks, fintechs, and government portals lack dedicated security staff for attack path analysis. As a result, tools like GravityZone could give lean Pakistani security teams a faster way to prioritize fixes.
