Endpoint and Human Risk Assessment

Endpoint and Human Risk Assessment is a risk analytics capability of the GravityZone platform. It combines two features: Endpoint Risk Analytics, which covers endpoint misconfigurations and application vulnerabilities, and Human Risk Analytics, which measures risky user behavior. Together they consolidate endpoint, application, and user risk into one prioritized view and generate a company risk score unique to your organization. Security teams use the prioritized findings to focus on the issues that expose the organization most, and to automate remediation of common misconfigurations from the Integrated Risk Management dashboard.

Endpoint Risk Analytics identifies technical risk: endpoint misconfigurations and vulnerable applications that attackers exploit. Human Risk Analytics identifies behavioral risk: risky user activities such as flouted password policies or a high malware detection count. Endpoint and Human Risk Assessment combines both into one company risk score, so teams see technical and human risk in a single, prioritized posture overview rather than in separate tools. This helps reduce the likelihood of a breach by addressing both the configuration and the human element.

Endpoint and Human Risk Assessment generates a company risk score based on system misconfigurations, application vulnerabilities, and user-related risks, consolidated into one prioritized view. The score considers the severity of these risks and how many endpoints or accounts they affect. For vulnerabilities, it also takes industry relevance and active exploitation into account, using Bitdefender threat intelligence. This helps security teams understand their organization’s exposure and identify which risks to address first.

Yes, for common issues. Endpoint and Human Risk Assessment provides automated remediation for the most common misconfigurations, and provides monitoring and alerting for more unusual configuration issues that need review. This reduces the manual effort of fixing routine misconfigurations and lets security teams focus on higher-risk items. For software vulnerabilities, the Patch Management module monitors and reports patch status across the infrastructure, including third-party applications.

It is a capability of the GravityZone Platform, not a separate product. It works alongside the platform’s prevention and Endpoint Detection and Response (EDR) features, through one console. As an integrated capability, it reduces the attack surface and provides risk visibility and mitigation without adding a separate tool. It is included in GravityZone endpoint security tiers; confirm the specific tiers and any add-on requirements with Bitdefender sales or your partner.