Cybersecurity firm Bitdefender released a new product named GravityZone Exposure Management on October 27, 2026. The platform maps attack routes across corporate systems and pinpoints the exact repair required to block each path.
Windows systems can use the tool immediately, and support for other platforms will arrive later. Businesses may purchase the software as an add-on for top-tier business plans or operate it independently alongside security products from other vendors. Bitdefender did not reveal the cost.
The platform merges multiple defense functions into a single system. It detects unpatched applications, vulnerable configurations, and dangerous user behaviors on work devices, while also scanning internet-connected assets to identify exposed elements. It then maps attack routes through connected vulnerabilities and points out the single remedy that breaks each chain.
A component called PHASR handles per-user hardening by tracking how individual employees operate their devices. The system then limits tools such as PowerShell strictly to each worker's actual requirements. Administrators depend on PowerShell for daily tasks, but malicious actors exploit it to navigate internal networks.
Bitdefender designed the offering for small security departments operating with minimal personnel. Andrei Florescu, who leads Bitdefender's business unit, stated that the software provides lean teams with control over their attack surface. A survey of 1,200 security employees supports this strategy, as 38 percent identified maintaining security rules as their primary challenge, while 35.4 percent worried that new controls would disrupt daily operations.
This release coincides with artificial intelligence speeding up vulnerability identification across the technology sector. Microsoft patched a record 1,400 flaws in October 2026, and Bank of America reportedly hired 1,000 contractors to address weaknesses identified by artificial intelligence models like Anthropic's Mythos.
The software arrives at an important moment for Pakistani organizations. Numerous local banks, financial technology firms, and government websites operate without dedicated personnel for attack path analysis, meaning tools like GravityZone could offer lean local teams a quicker method to prioritize repairs.