Skip to main content

CLOUD SOLUTIONS

Open source software used by Bitdefender products for business

This section informs you about the open source software used by Bitdefender products for business.

Bitdefender may operate with software or technologies licensed to Bitdefender from third parties for use and redistribution, under open source licenses.

Below you can find the open source software tools incorporated in Bitdefender products for business. The lists are updated regularly.

Open source software used by Bitdefender Endpoint Security Tools and Bitdefender Security for Mobile

Software name

Short Description

License Type

Website

ACRA

ACRA is a library enabling Android Application to automatically post their crash reports to a report server. It is targeted to android applications developers to help them get data from their applications when they crash or behave erroneously.

Apache License, Version 2.0

https://github.com/ACRA/acra

Boost

Boost provides free peer-reviewed portable C++ source libraries.

Boost software license

http://www.boost.org

DazukoFS

DazukoFS is a mechanism that allows userspace applications to perform online file access control.

Bitdefender uses this tool in binary mode. The original library is not modified.

GPL version 2

http://dazuko.dnsalias.org/

GSON

GSON is a Java library used to convert Java Objects into their JSON representation and to convert a JSON string to an equivalent Java object. Gson can work with arbitrary Java objects including pre-existing objects that you do not have source-code of.

Apache License, Version 2.0

https://github.com/google/gson

LibCurl

LibCurl is a free client-side URL transfer library, supporting cookies, DICT, FTP, FTPS, Gopher, HTTP (with HTTP/2 support), HTTP POST, HTTP PUT, HTTP proxy tunneling, HTTPS, IMAP, Kerberos, LDAP, POP3, RTSP, SCP, and SMTP. The library supports the file URI scheme, SFTP, Telnet, TFTP, file transfer resume, FTP uploading, HTTP form-based upload, HTTPS certificates, LDAPS, proxies, and user-plus-password authentication.

MIT style

https://curl.haxx.se/libcurl/

LibSsh2

LibSsh2 is a client-side C library implementing the SSH2 protocol.

BSD-3

https://www.libssh2.org/

MiniTemplator

MiniTemplator is a compact template engine for HTML files. MiniTemplator provides the features to build professional web applications, and it is compact and fits within a single code module.

Bitdefender uses this tool in binary mode. The original library is not modified.

GNU LGPL

http://www.source-code.biz/MiniTemplator/)

OpenSSL

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols. It is also a general-purpose cryptography library.

Open SSL

http://www.openssl.org/

PCRE

The PCRE library is a set of functions that implement regular expression pattern matching using the same syntax and semantics as Perl 5. PCRE has its own native API, as well as a set of wrapper functions that correspond to the POSIX regular expression API.

BSD

http://www.pcre.org/

SQLite

SQLite is a self-contained, high-reliability, embedded, full-featured, public-domain, SQL database engine.

GPL public domain

http://www.sqlite.org/

Tinyxml

TinyXML is a simple, small, C++ XML parser that can be easily integrating into other programs.

Zlib

http://www.grinninglizard.com/tinyxml/

(V6) CEF

The Chromium Embedded Framework (CEF) is a simple framework for embedding Chromium-based browsers in other applications.

BSD-3

https://bitbucket.org/chromiumembedded/cef/src/master/

ZBar Barcode Reader

ZBar is an open source software suite for reading bar codes from various sources, such as video streams, image files and raw intensity sensors. It supports many popular symbologies (types of bar codes) including EAN-13/UPC-A, UPC-E, EAN-8, Code 128, Code 39, Interleaved 2 of 5 and QR Code.

Bitdefender uses this tool in binary mode. The original library is not modified.

GNU LGPL

http://zbar.sourceforge.net/iphone

Zlib

Zlib is designed to be a free, general-purpose, legally unencumbered, lossless data-compression library for use on virtually any computer hardware and operating system.

Zlib

http://www.zlib.net/

c-ares

c-ares is a C library for asynchronous DNS requests

MIT

https://github.com/c-ares/c-ares

cyrus-sasl

Cyrus SASL is an implementation of SASL that makes it easy for application developers to integrate authentication mechanisms into their application in a generic way.

OpenLDAP Public License

https://github.com/cyrusimap/cyrus-sasl

cppcodec

cppcodec supports a range of codecs using a shared template-based implementation. The focus is on a high-quality API that encourages correct use, includes error handling, and is easy to adopt into other codebases.

MIT

https://github.com/tplgy/cppcodec

Libtins

libtins is a high-level, multiplatform C++ network packet sniffing and crafting library.

BSD 2-Clause

https://github.com/mfontanini/libtins

mit-kerberos

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography.

MIT

https://web.mit.edu/kerberos/

nlohmann/json

The nlohmann/json library has the following design goals: intuitive syntax, trivial integration and serious testing.

MIT

https://github.com/nlohmann/json

SQliteCpp

SQLiteC++ offers an encapsulation around the native C APIs of SQLite, with a few intuitive and well documented C++ classes.

MIT

https://github.com/SRombauts/SQLiteCpp

spdlog

spdlog is a very fast, header-only/compiled, C++ logging library.

MIT

https://github.com/gabime/spdlog

socket.io

Socket.IO enables real-time bidirectional event-based communication.

MIT

https://github.com/socketio/socket.io

winpty

winpty is a Windows software package providing an interface similar to a Unix pty-master for communicating with Windows console programs

MIT

https://github.com/rprichard/winpty

JSONModel

JSONModel allows rapid creation of smart data models. You can use it in your iOS, macOS, watchOS and tvOS apps. Automatic introspection of your model classes and JSON input drastically reduces the amount of code you have to write.

MIT

https://github.com/jsonmodel/jsonmodel

Brotli

Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods.

MIT

https://github.com/google/brotli

microsoft/Detours

Detours is a software package for monitoring and instrumenting API calls on Windows. Detours has been used by many ISVs and is also used by product teams at Microsoft.

MIT

https://github.com/microsoft/Detours

libuv

libuv is a multi-platform support library with a focus on asynchronous I/O.

MIT

https://github.com/libuv/libuv

microsoft/GSL

The Guidelines Support Library (GSL) contains functions and types that are suggested for use by the C++ Core Guidelines maintained by the Standard C++ Foundation. This repo contains Microsoft's implementation of GSL.

MIT

https://github.com/microsoft/GSL

google/flatbuffers

FlatBuffers is a cross platform serialization library architected for maximum memory efficiency. It allows you to directly access serialized data without parsing/unpacking it first, while still having great forwards/backwards compatibility.

Apache 2

https://github.com/google/flatbuffers

ZeroMQ

ZeroMQ (also known as ØMQ, 0MQ, or zmq) looks like an embeddable networking library but acts like a concurrency framework. It gives you sockets that carry atomic messages across various transports like in-process, inter-process, TCP, and multicast.

GNU LGPL version 3

https://zeromq.org/

azmq

The azmq library provides Boost Asio style bindings for ZeroMQ

BSL 1.0

https://github.com/zeromq/azmq

elfutils

elfutils is a collection of utilities and libraries to read, create and modify ELF binary files, find and handle DWARF debug data, symbols, thread state and stacktraces for processes and core files on GNU/Linux.

GPLv2+, LGPLv3+ or GPLv3+

https://sourceware.org/elfutils/

BPF Compiler Collection (BCC)

BCC is a toolkit for creating efficient kernel tracing and manipulation programs, and includes several useful tools and examples. It makes use of extended BPF (Berkeley Packet Filters), formally known as eBPF, a new feature that was first added to Linux 3.15. Much of what BCC uses requires Linux 4.1 and above.

Apache 2

https://github.com/iovisor/bcc

ICU

ICU is a mature, widely used set of C/C++ and Java libraries providing Unicode and Globalization support for software applications. ICU is widely portable and gives applications the same results on all platforms and between C/C++ and Java software.

Unicode

https://icu.unicode.org/

breakpad

Breakpad is a set of client and server components which implement a crash-reporting system.

Multiple licenses

https://chromium.googlesource.com/breakpad/breakpad

gRPC

gRPC is a modern open source high performance Remote Procedure Call (RPC) framework that can run in any environment. It can efficiently connect services in and across data centers with pluggable support for load balancing, tracing, health checking and authentication.

Apache 2

https://grpc.io/

jq

Jq is used to slice, filter, map and transform structured data. jq is written in portable C, and it has zero runtime dependencies.

MIT

https://stedolan.github.io/jq/

Libpcap

Libpcap is a portable C/C++ library for network traffic capture.

BSD-3

http://www.tcpdump.org/

rapidjson

RapidJSON is a JSON parser and generator for C++. It supports both SAX and DOM style API. The SAX parser is only a half thousand lines of code.

MIT

https://rapidjson.org/

osquery

osquery exposes an operating system as a high-performance relational database. This allows you to write SQL-based queries to explore operating system data.

Apache license 2.0 and GPL license 2.0

https://www.osquery.io/

Open source software used by Bitdefender GravityZone Management Appliance

Software name

Short Description

License Type

Website

Bzip2

Bzip2 is a free and open-source file compression program that uses the Burrows–Wheeler algorithm. It only compresses single files and is not a file archiver.

BSD-style

http://www.bzip.org/

c-ares

c-ares is a C library for asynchronous DNS requests

MIT

https://github.com/c-ares/c-ares

breakpad

Breakpad is a set of client and server components which implement a crash-reporting system.

Multiple licenses

https://chromium.googlesource.com/breakpad/breakpad

Boost

Boost provides free peer-reviewed portable C++ source libraries.

Boost software license

http://www.boost.org

cppcodec

cppcodec supports a range of codecs using a shared template-based implementation. The focus is on a high-quality API that encourages correct use, includes error handling, and is easy to adopt into other codebases.

MIT

https://github.com/tplgy/cppcodec

CityHash

CityHash provides hash functions for strings. The functions mix the input bits thoroughly but are not suitable for cryptography.

BSD

https://code.google.com/p/cityhash/

Cpp_redis

Is a C++11 Asynchronous Multi-Platform Lightweight Redis Client, with support for synchronous operations, pipelining, sentinels and high availability.

MIT

https://github.com/cpp-redis/cpp_redis

Curl

Curl is used in command lines or scripts to transfer data. It is also used in cars, television sets, routers, printers, audio equipment, mobile phones, tablets, media players and is the internet transfer backbone for thousands of software applications affecting billions of humans daily.

BSD

http://curl.haxx.se/

Dazukofs

DazukoFS is a mechanism that allows userspace applications to perform online file access control.

Bitdefender uses this tool in binary mode. The original library is not modified.

GPL version 2

http://dazuko.dnsalias.org/

Dmidecode

Dmidecode reports information about your system's hardware as described in your system BIOS according to the SMBIOS/DMI standard (see a sample output). This information typically includes system manufacturer, model name, serial number, BIOS version, asset tag as well as other details of varying level of interest and reliability depending on the manufacturer.

Bitdefender uses this tool in binary mode. The original library is not modified.

GPL version 2

http://www.nongnu.org/dmidecode/

Expat

Expat is a stream-oriented XML parser library written in C.

Expat excels with files too large to fit RAM and where performance and flexibility are crucial.

BSD

http://www.libexpat.org/

File

The file command is "a file type guesser", a command-line tool that tells you in words what kind of data a file contains. Unlike most GUI systems, command-line UNIX systems - with this program leading the charge - don't rely on filename extentions to tell you the type of a file, but look at the file's actual contents. This is, of course, more reliable, but requires a bit of I/O.

BSD

http://www.darwinsys.com/file/

FreeType

FreeType is a freely available software library to render fonts.

FreeType is written in C, designed to be small, efficient, highly customizable, and portable while capable of producing high-quality output (glyph images) of most vector and bitmap font formats.

FreeType (BSD-style)

http://www.freetype.org/

HAproxy

HAProxy is a free, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for very high traffic web sites and powers quite a number of the world's most visited ones;

Bitdefender uses this tool in binary mode. The original library is not modified.

GPL version 2

http://www.haproxy.org/

iPKG

iPKG is a very lightweight package management system designed for Linux installations with severe storage limitations such as handheld computers. iPKG is more than just an embedded Linux flash image builder. It also allows for dynamic installation/removal of packages on a running system.

Bitdefender uses this tool in binary mode. The original library is not modified.

GPL version 2

https://web.archive.org/web/20100823030002/ http:/www.handhelds.org/moin/moin.cgi/Ipkg

jq

Jq is used to slice, filter, map and transform structured data. jq is written in portable C, and it has zero runtime dependencies.

MIT

https://github.com/stedolan/jq

Json-c

JSON-C implements a reference counting object model that allows you to easily construct JSON objects in C, output them as JSON formatted strings and parse JSON formatted strings back into the C representation of JSON objects.

BSD

https://github.com/json-c/json-c

Jsoncpp

JsonCpp is a C++ library that allows manipulating JSON values, including serialization and deserialization to and from strings. It can also preserve existing comment in unserialization/serialization steps, making it a convenient format to store user input files.

MIT

https://github.com/open-source-parsers/jsoncpp

Libbdvmi

Is a x86-specific library that helps in performing a virtual machine introspection.

Bitdefender uses this tool in binary mode. The original library is not modified.

GNU LGPL version 3

https://github.com/bitdefender/libbdvmi

Libhpdf

LibHaru is a free, cross platform, open source library for generating PDF files. At this moment LibHaru does not support reading and editing existing PDF files.

Zlib

http://libharu.org/

Libmilter

Libmilter uses a set of C preprocessor macros to specify platform specific features of the C compiler and standard C libraries.

Sendmail

http://www.sendmail.org/

Libpng

Libpng is the official PNG reference library that supports almost all PNG features, is extensible, and has been extensively tested for over 23 years.

Libpng

http://www.libpng.org/pub/png/

Libpq

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads.

PostgreSQL (BSD-style)

http://www.postgresql.org/

Librabbitmq4

This is a C-language AMQP client library for use with v2.0+ of the RabbitMQ broker.

MIT

https://github.com/alanxz/rabbitmq-c

Libstatgrab

Libstatgrab is a library that provides cross platform access to statistics about the system on which it is run. It is written in C and presents a selection of useful interfaces which can be used to access key system statistics. The current list of statistics includes CPU usage, memory utilisation, disk usage, process counts, network traffic, disk I/O, and more.

Bitdefender uses this tool in binary mode. The original library is not modified.

GNU LGPL version 2

http://www.i-scream.org/libstatgrab/

Libuuid

A portabale universally unique identifier C library.

BSD

http://e2fsprogs.sourceforge.net/

Libxenserver

Libxenserver is a complete SDK for Citrix XenServer, exposing the XenServer API to C programmers.

BSD

https://github.com/Antique/libxenserver

Lua

Lua is a powerful, efficient, lightweight, embeddable scripting language. It supports procedural programming, object-oriented programming, functional programming, data-driven programming, and data description.

MIT

http://www.lua.org/

Makeself

Makeself.sh is a small shell script that generates a self-extractable compressed tar archive from a directory. The makeself.sh script itself is used only to create the archives from a directory of files.

Bitdefender uses this tool in binary mode. The original library is not modified.

GPL version 2

http://megastep.org/makeself/

Minizip

This package enables to extract files from a .zip archive file and is compatible with PKZip 2.04g, WinZip, InfoZip, MimarSinan Codex Suite 2002 tools and compatible software. Runs both under Linux and Windows

Zlib

http://www.zlib.net/

MongoDB C driver

Mongo-C-driver is a project that includes two libraries:

Libmongoc, a client library written in C for MongoDB.

Libbson, a library providing useful routines related to building, parsing, and iterating BSON documents.

Apache License version 2.0

https://github.com/mongodb/mongo-c-driver

MongoDB-org-*

MongoDB is a document database with the scalability and flexibility that you want with the querying and indexing that you need.

Bitdefender uses this tool in binary mode.The original library is not modified.

MongoDB SSPL

https://www.mongodb.com/

Nginx-ensite

This is a shell (Bash) script that replicates for nginx the Debian a2ensite and a2dissite for enabling and disabling sites as virtual hosts in Apache 2.2/2.4.

a2dissite is a symbolic link to a2ensite.

N/A

https://github.com/perusio/nginx_ensite

Nodejs

Node.js is a JavaScript runtime built on Chrome's V8 JavaScript engine.

MIT

https://nodejs.org/

OpenLDAP

OpenLDAP software is an open source implementation of the Lightweight Directory Access Protocol. The suite includes:

SLAPD- stand-alone LDAP daemon (server) libraries implementing the LDAP protocol, utilities, tools and sample clients.

OpenLDAP

http://www.openldap.org/

OpenSSL

OpenSSL is a robust, commercial-grade and full-featured toolkit for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols and also a general-purpose cryptography library.

Open SSL

http://www.openssl.org/

PCRE

The PCRE library is a set of functions that implement regular expression pattern matching using the same syntax and semantics as Perl 5. PCRE has its own native API, as well as a set of wrapper functions that correspond to the POSIX regular expression API. The PCRE library is free, even for building proprietary software.

BSD

http://www.pcre.org/

PhantomJS

PhantomJS (phantomjs.org) is a headless WebKit scriptable with JavaScript. The latest stable release is version 2.1.

BSD-3

https://bitbucket.org/ariya/phantomjs/src

Php7.2

PHP is a popular general-purpose scripting language that is especially suited to web development.

PHP License, version 3.01

https://secure.php.net/

Php7.2-Haru

LibHaru is a free, cross platform, open source library for generating PDF files.

Zlib

http://libharu.org/

Php-AMQP

This extension can communicate with any AMQP spec 0-9-1 compatible server, such as RabbitMQ, OpenAMQP and Qpid, giving you the ability to create and delete exchanges and queues, as well as publish to any exchange and consume from any queue.

PHP License, version 3.01

https://pecl.php.net/package/amqp

Php-igbinary

Igbinary is a drop in replacement for the standard php serializer. Instead of

time and space consuming textual representation, igbinary stores php data

structures in a compact binary form.

BSD-3

http://pecl.php.net/package/igbinary

Php-imagick

Imagick is a native php extension to create and modify images using the ImageMagick API.

PHP License, version 3.01

https://pecl.php.net/package/imagick

Php-mongodb

This extension is developed atop the libmongoc and libbson libraries. It provides a minimal API for core driver functionality: commands, queries, writes, connection management, and BSON serialization.

Apache License version 2.0

https://github.com/mongodb/mongo-php-driver

Php-redis

This extension provides an API for communicating with Redis servers.

PHP License, version 3.01

https://pecl.php.net/package/redis

Php-SQLite3

SQLite3 is a PHP extension for use with the SQLite database system.

This extension bundles SQLite 3.5.9 though the minimum requirement is 3.3.9.

PHP License, version 3.01

https://pecl.php.net/package/sqlite3

Php-APCu

APC User Caching.

PHP License, version 3.01

https://pecl.php.net/package/APCu

Php-chartdir

ChartDirector is a charting library for software developers to develop applications that contains charts.

ChartDirector version 6

http://www.advsofteng.com/download.html

Php-Gearman

The Gearman PHP Extension provides a wrapper to libgearman. This gives the user the ability to write fully featured Gearman clients and workers in PHP, allowing them to quickly develop distributed applications.

PHP License, version 3.01

https://github.com/wcgallego/pecl-gearman

Php-Mcrypt

Mcrypt allows developers to use a large range of encryption functions, without changing their code radically. Mcrypt replaces the crypt() package and crypt(1) command with extensions.

PHP License, version 3.01

https://secure.php.net/

Php-SSH2

Provides bindings to the functions of libssh2 which implements the SSH2 protocol

PHP License, version 3.01

https://pecl.php.net/package/ssh2

RabbitMQ-server

RabbitMQ runs on many operating systems and cloud environments, and provides a wide range of developer tools for most popular languages.

Mozilla Public License, version 1.1

http://www.rabbitmq.com/

SNMP libs

AGENT++ SNMP software is dedicated to make the simple in Simple Network Management Protocol come true for developing SNMP agents and applications (Java/C++) as well as authoring (SMI) MIBs.

Apache License version 2.0

http://www.agentpp.com/

Spiped

Is a utility for creating symmetrically encrypted and authenticated pipes between socket addresses, so that one may connect to one address (e.g., a UNIX socket on localhost) and transparently have a connection established to another address (e.g.,a UNIX socket on a different system). This is similar to ssh -L functionality, but does not use SSH and requires a pre-shared symmetric key.

BSD

https://github.com/Tarsnap/spiped

SQLite

SQLite is a self-contained, high-reliability, embedded, full-featured, public-domain, SQL database engine.

GPL public domain

http://www.sqlite.org/

Squid 4

Squid is a fully-featured HTTP/1.0 proxy which is almost a fully-featured HTTP/1.1 proxy. Squid offers a rich access control, authorization and logging environment to develop web proxy and content serving applications. Squid offers a rich set of traffic optimization options, most of which are enabled by default for simpler installation and high performance.

Bitdefender uses this tool in binary mode. The original library is not modified.

GPL, version 2

http://www.squid-cache.org/

Strongswan OpenSource IPsec-based VPN Solution

StrongSwan is a free open-source IPsec based VPN client that is available for most of the operating systems out there. It implements both the IKEv1 and IKEv2 key exchange protocols to exchange cryptic certification keys between hosts and clients.

GPL, version 2

https://www.strongswan.org

Tacopie

Is a multi-platform TCP Client & Server C++11 library.

MIT

https://github.com/Cylix/tacopie

TinyXML

TinyXML is a simple, small, C++ XML parser that can be easily integrating into other programs.

Zlib

http://www.grinninglizard.com/tinyxml/

Xen

Bitdefender uses this tool in binary mode. The original library is not modified.

LGPL version 2

http://www.xenproject.org/

Xen-detect

Simple GNU C / POSIX application to detect execution on Xen VMM platform.

BSD

http://www.xenproject.org/

Zlib

Zlib is designed to be a free, general-purpose, legally unencumbered, lossless data-compression library for use on virtually any computer hardware and operating system.

Zlib

http://www.zlib.net/

isomorphic-fetch

This module enables the use of fetch in your Node code, in a cross-browser compliant fashion. The Fetch API is part of the Web platform API defined by the standards bodies WHATWG and W3C.

MIT

https://www.npmjs.com/package/isomorphic-fetch

@microsoft/microsoft-graph-client

The Microsoft Graph JavaScript client library is a lightweight wrapper around the Microsoft Graph API that can be used server-side and in the browser

MIT

https://www.npmjs.com/package/@microsoft/microsoft-graph-client

@azure/msal-node

The MSAL Node enables applications to authenticate users using Azure AD work and school accounts (AAD), Microsoft personal accounts (MSA) and social identity providers like Facebook, Google, LinkedIn, Microsoft accounts, etc. through Azure AD B2C service. It also enables your applications to get tokens to access Microsoft Cloud services such as Microsoft Graph.

MIT

https://www.npmjs.com/package/@azure/msal-node

catch2

Catch2 is a unit testing framework for C++, but it also provides basic micro-benchmarking features, and simple BDD macros.

BSL 1.0

https://github.com/catchorg/Catch2

cpp-netlib

The project aims to build upon the latest C++ standard (currently C++11) to provide easy to use libraries for network programming.

Boost software

https://cpp-netlib.org/

cyrus-sasl

Cyrus SASL is an implementation of SASL that makes it easy for application developers to integrate authentication mechanisms into their application in a generic way.

OpenLDAP Public License

https://github.com/cyrusimap/cyrus-sasl

freetype

FreeType is a freely available software library to render fonts.

FTL and GPL version 2

https://freetype.org/

hvmi

Virtual Machine Introspection is defined as the technique of analyzing the state and behavior of a guest virtual machine from outside of it. In addition, Introspection can also leverage virtualization extensions to provide security.

Apache 2

https://github.com/hvmi/hvmi

libcperciva

libcperciva is a library code shared between tarsnap, scrypt, kivaloo, spiped, and bsdiff.

BSD

https://github.com/Tarsnap/libcperciva

libkvmi

libkvmi is used to test libraries.

GNU LGPL 3

https://github.com/bitdefender/libkvmi

simpleini

A cross-platform library that provides a simple API to read and write INI-style configuration files. It supports data files in ASCII, MBCS and Unicode. It is designed explicitly to be portable to any platform and has been tested on Windows, WinCE and Linux.

MIT

https://github.com/brofield/simpleini