92.8%

Attack reduction achieved by blocking tools unused by the management team

95.1%

Attack reduction achieved by allowing tools such as PowerShell to only take legitimate actions

99%

Of companies don’t use Bitsadmin, but have it enabled.

133

LOLBins in a fresh Windows 11 installation.

Stop Stealthy Ransomware Attacks

 

Faster, stealthier, AI-automated attacks and increased attack surfaces have made chasing EDR/XDR alerts unsustainable, especially for lean teams. PHASR disrupts ransomware attacks by proactively restricting up to 95% of the legitimate actions that attacks abuse.

Reduce Risk Rapidly, Without Friction

 

Conventional security tools rely on static rules and exceptions that are painful to implement and manage and negatively impact employee productivity. PHASR enables organizations to cut cyber risk by 30% or more in just 30 days - without slowing users, adding IT burden, or requiring changes to existing security stacks.

Bolster Security Efficiency

 

Security and IT teams spend significant time investigating alerts that involve trusted but risky behaviors and trying to discern the intent behind the actions. PHASR reduces investigation and response workloads by up to 50% by proactively restricting legitimate but atypical behavior.

Compromises Should Not Lead to Successful Ransomware and Data Breaches

PHASR’s dynamic attack surface reduction hardens your environment and stops attacks before they escalate.

Bitdefender PHASR Tailored Hardening

Tailored Hardening

PHASR uses AI algorithms to build risk profiles for each user‑endpoint combination, identifying unnecessary tools and tailoring hardening dynamically.

 

GravityZone Platform -  Attack surface exposure insights reports

Dynamic Attack Surface Reduction

PHASR continuously learns, adapting autonomously to changing behaviors and threat vectors, minimizing IT overhead.

GravityZone Platform - PHASER rules dashboard

Precise Control

PHASR allows granular restriction of risky behaviors within allowed tools—e.g., allowing PowerShell but blocking encrypted commands.

GravityZone Platform -  PHASR - LOLBins analysis dashboard

Application Risk Metrics

PHASR displays attack surface and risk reduction metrics associated with each recommendation, enabling better security posture tracking.

GravityZone Platform - PHASR Autopilot Protection setup view

Autopilot Protection

PHASR dynamically applies hardening recommendations as behaviors and threats evolve. Admins can also choose Direct Control mode.

GravityZone Platform - PHASR - Endpoint issues view

Simplified Deployment and Management

Seamlessly integrated within the GravityZone Platform. Existing customers can activate and start identifying risks in minutes.

simplify threat
"Bitdefender has consistently performed well in independent tests, including MITRE Engenuity and has introduced innovative features such as Deep Process Inspector and Advanced Reasoning. Most recently, in 2024, Bitdefender Proactive Hardening and Attack Surface Reduction (PHASR), a groundbreaking technology that transforms how defense-in-depth-security is applied and managed across businesses."

 

IDC, IDC ProductScape: Worldwide Small and Medium-Sized Business Endpoint Protection Market.

dots
GravityZone Unified Cybersecurity Platform: Security - Risk - Compliance

Augment your GravityZone platform and any 3rd party EDR

Faster, AI-enabled attacks that hide behind trusted activity pose one of the most significant challenges to conventional security. Given the expanded attack surfaces that make compromises more likely, relying on detection and response to uncover and stop attacks is not sustainable, especially for lean IT and security teams.

 

Bitdefender GravityZone PHASR is a groundbreaking innovation that augments Bitdefender GravityZone and any 3rd party EDR/XDR solution. As part of the GravityZone unified security, risk, and compliance platform, PHASR helps lean teams proactively stop ransomware and data breaches, while eliminating complexity and improving security efficiency.

 

Bitdefender GravityZone PHASR is available as a standalone license, compatible with any 3rd party EDR/XDR tool and as an additional license to the Bitdefender GravityZone Enterprise package and MDR offerings.

Security That’s Consistently Recognized Across Independent Evaluations

Top Protection. Lowest TCO AV-Comparatives 2025 EPR Test

Bitdefender achieved top breach prevention and lowest TCO and was the only vendor to block 100% of attacks during the first stage.

AV Comparatives

Best Protection. Best Performance for Business Users

Bitdefender GravityZone Endpoint Security received the AV-TEST Award 2023 for Best Protection and Best Performance in the business users category.

Bitdefender Awards for Best Protection 2023

High Threat Visibility, Minimal Noise

Bitdefender achieved 100% analytical coverage for both Linux and macOS, with zero False Positives (FPs) in both cases.

Mitre

A Customers’ Choice in Gartner® Peer Insights™

Voice of the Customer for EPPs

 

Gartner Peer Insights

The Only Visionary in the 2025 Gartner® Magic Quadrant™ for EPPs

gartner

Named a Strong Performer

Forrester Wave Strong Performer 2024
GravityZone PHASR resources
Datasheet

GravityZone Security PHASR Datasheet

Read More
Read the Report Technical Explainer

Living off the Land Attacks

Read the Report
Read More TechZone Article

Proactive Hardening and Attack Surface Reduction (PHASR)

Read More
Watch now On-Demand Webinar

Shrinking the Attack Surface and Stopping Misuse of Legitimate Tools

Watch now

What are Living off the Land techniques and how do they bypass detection?

They involve attackers using legitimate binaries to evade detection — similar to an intruder using a valid badge instead of breaking in.

How does GravityZone PHASR identify unnecessary, risky tools?

PHASR uses threat intelligence and ML algorithms to map user‑endpoint behavior, identifying risky, unused tools for restriction without impacting productivity.

What makes GravityZone PHASR unique?

It dynamically tailors security per user, restricting risky actions instead of blocking entire applications, maintaining usability and manageability.

How can I Get PHASR?

PHASR is available as an add-on license to Bitdefender GravityZone Business Security Enterprise and MDR offerings and as a standalone product, compatible with 3rd party EDR/XDR tools.

Proven. Unsurpassed Cybersecurity Effectiveness.

We’re here to help you choose the solution or service that’s right for your business. See all products