Bitdefender GravityZone
The endpoint protection Saaskly's own company runs on, and the winner here: Business Security is £24.60 a device a year at list (£17.22 on the current 30 per cent first-term offer) with Windows, Mac, Linux and servers in one price, bought online with a card up to 100 devices and managed from a licensing page inside the console. Romanian-owned, all engineering in Romania, 99.8 per cent in the latest AV-Comparatives business test. What to know: EDR is a step up to Business Security Premium at £54.40, MDR is quote-only, patching, disk encryption and email security are add-ons, and there is no monthly billing for a direct buyer.
How we testBitdefender is a Romanian company, founded in Bucharest in 2001 by Florin and Mariuca Talpes, who still hold the majority; Vitruvian Partners took a minority stake in 2017. It is privately held, every one of its five research and development centres is in Romania (Bucharest, Cluj-Napoca, Iasi, Timisoara and Targu Mures), and its business pages carry the European Digital SME Alliance's "Cybersecurity made in Europe" label with a pointed line about the US CLOUD Act. We looked for a Russian or Chinese link in the ownership, the management or the engineering and found none. The UK entity is Bitdefender Limited, Companies House 05046316, with Florin Talpes as the person with significant control.
Prices are in pounds excluding VAT ("taxes not included" at checkout), read on 9 September 2026 for 25 devices on a one-year term. GravityZone Business Security is the plan we score: £614.99 list for 25 devices, which is £24.60 a device a year, or £430.49 (£17.22) on the 30 per cent first-term promotion running at the time, with desktops, laptops and servers, physical or virtual, Windows, macOS and Linux, all drawn from the same device count. GravityZone Small Business Security is priced almost identically (£619.99 list) with fewer modules, so Business Security is the better buy of the two. Business Security Premium, at £1,359.99 list for 25 (£54.40 a device, £38.08 on promotion), is where EDR arrives, under the names Attack Forensics and Visualization and Sandbox Analyzer. Business Security Enterprise and the MDR and MDR Plus services are quote-only; no MDR price is published anywhere. Add-ons at extra cost include Patch Management, Full Disk Encryption, Email Security for Microsoft 365 and Google Workspace, and Security for Mobile. Two- and three-year terms are offered; there is no monthly billing for a direct buyer, which only Bitdefender's MSP partners get. A free trial is offered on every self-service tier, and a paid one-hour Setup and Go onboarding session was £167.33 in the same cart.
The buying route is the commercial structure Tim praised in the brief: a pricing calculator and card checkout on bitdefender.com for one to 100 devices, then partners above that or for Enterprise, with the same GravityZone Control Center console from a handful of seats to thousands. Seats are added and renewals handled from the My Company licence page inside the console, and the public API and ConnectWise, NinjaOne and Datto integrations mean an MSP can run it too. An on-premises Control Center is available as a virtual appliance for anyone who does not want the cloud console. Ransomware Mitigation restores encrypted files from its own copies on every tier, Network Attack Defense and Risk Management are standard on Business Security, and mobile devices need the paid add-on. No MCP server was found.
The independent record is the strongest in this comparison outside Sophos and CrowdStrike. AV-Comparatives' Business Security Test for August to November 2025 (published 15 December 2025) scored Business Security Premium at 99.8 per cent real-world protection with two false alarms, 99.9 per cent malware protection with none, and "Very Fast" for performance; Bitdefender reports the Approved Business Product award for both 2025 rounds and the top EPR result, which we could not read from the lab's PDF. It has taken part in the MITRE ATT&CK Enterprise evaluations for three consecutive years to 2024 and makes much of needing an average of three alerts to describe an incident. Two GravityZone server-side request forgery bugs (CVE-2024-2223 and CVE-2025-2243) are on record and patched; no breach of Bitdefender itself. Trustpilot's 4.3 on 12,243 reviews is the consumer profile, with VPN pop-ups and renewals the themes, so it says little about GravityZone; G2 gives GravityZone 4.0 on 79 reviews, with console complexity for non-technical users the recurring complaint.
In our experience: Next Generation ICT Ltd, the company behind Saaskly and Fractional Teams, runs GravityZone on its own estate. We chose it because the commercial structure fits a small company as well as a large one, the licensing portal lets us add and renew seats ourselves, deployment is quick, and we have found no Russian or Chinese link in its ownership or engineering. For security reasons we do not publish which tier or how many devices we run. Saaskly has an affiliate link for Bitdefender through impact.com, disclosed on this page; it was joined after the score was set and did not change it.
Pros
- +Servers, Windows, macOS and Linux in one per-device price; card checkout to 100 devices and a licensing page in the console for adding seats and renewing
- +Romanian-owned, all engineering in Romania, no Russian or Chinese link found; 99.8 per cent in the latest AV-Comparatives business test and three years of MITRE evaluations
- +First-party: Saaskly's own company runs GravityZone and would choose it again for the commercial structure, the portal and the deployment
Cons
- −EDR only from Business Security Premium at £54.40 a device, more than double the scored tier; MDR has no published price at all
- −Patching, disk encryption, email security and mobile protection are all paid add-ons
- −No monthly billing for a direct buyer (annual, two or three years only); the console is more than a very small firm needs
Pricing
Minimum commitment: £24.60 (£24.60/yr for the entry licence). The least you can spend before walking away; excludes numbers, minutes and add-ons.
GravityZone Business Security
£24.60/yr · annual commitment
Month-to-month: not published
- ✓£24.60 per device per year at list (£614.99 for 25 devices), £17.22 on the 30% first-term promotion running 9 Sep 2026. Ex VAT. Desktops, laptops and servers, Windows, macOS, Linux, one device count. Self-service to 100 devices; 1, 2 or 3-year terms; no monthly billing direct. Add-ons: Patch Management, Full Disk Encryption, Email Security, Security for Mobile.
GravityZone Business Security Premium
£54.40/yr · annual commitment
Month-to-month: not published
- ✓£54.40 per device per year at list (£1,359.99 for 25), £38.08 on promotion. Adds EDR (Attack Forensics and Visualization) and Sandbox Analyzer. Business Security Enterprise, MDR and MDR Plus are quote-only. One-month free trial.
Specifications
| Rating | 4.5 |
| Scored tier* | £24.60/device/yr (Business Security) |
| Monthly billing | Annual only |
| Entry plan | £24.80/device/yr (Small Business Security) |
| Seats | Up to 100 |
| Servers | Included |
| EDR | Next tier up |
| MDR | Add-on, quote |
| Buy online | ✓ |
| Self-service portal | ✓ |
| AV-Comparatives | Business Security Test Aug to Nov 2025: 99.8% real-world protection, 2 false alarms; 99.9% malware protection |
| AV-TEST | Not in the June 2026 business cycle; vendor cites 2023 Best Protection and Best Performance awards |
| SE Labs | Not checked |
| MITRE evaluated | ✓ |
| Ransomware rollback | ✓ |
| Web filtering | ✓ |
| Email security | Paid add-on |
| Patching | Paid add-on |
| Device control | ✓ |
| Platforms | Windows · Mac · Linux · Server |
| Cloud console | ✓ |
| RMM integrations | ConnectWise (Asio, PSA, Automate), NinjaOne, Datto RMM |
| API | ✓ |
| MCP server | No |
| Owned in** | EU-owned |
| Russian or Chinese link | None found |
| Phone support | ✓ |
| Trustpilot (reviews) | 4.3 (12,243) |
| Scored tier name | Business Security |
| VAT basis | Excluding VAT |
| Top plan | £54.40/device/yr (Business Security Premium) |
| EDR tier or add-on | Business Security Premium, £54.40 per device per year at list (£38.08 on promotion): Attack Forensics and Visualization plus Sandbox Analyzer |
| Monthly billing available | No |
| How you buy | Card checkout on bitdefender.com for 1 to 100 devices; partners above 100 or for Enterprise |
| Free trial (days) | 30 |
| Price changes | 30% off the first term on every self-service tier on 9 Sep 2026; list price on renewal. No dated UK price rise found. |
| Test record note | Approved Business Product for both 2025 AV-Comparatives rounds per Bitdefender; the lab PDF could not be read |
| Behavioural detection | ✓ |
| Exploit prevention | ✓ |
| Firewall management | No |
| Disk encryption management | No |
| Vulnerability scanning | ✓ |
| Application control | No |
| Mobile threat defence | No |
| iOS | No |
| Android | No |
| Platform notes | Mobile (iOS, Android, ChromeOS) via the paid Security for Mobile add-on; on-premises console as a VMware, Citrix or Hyper-V appliance |
| On-premises console option | ✓ |
| Console data location | Not stated on the pages read |
| Deployment | Installer, remote install from the console, RMM push |
| SIEM export | ✓ |
| Multi-tenant console | ✓ |
| SSO into console | No |
| HQ | Romania |
| Owner | Talpes family majority; Vitruvian Partners minority |
| Engineering locations | Romania (Bucharest, Cluj-Napoca, Iasi, Timisoara, Targu Mures) |
| Link evidence | None found in ownership, management or engineering |
| SOC 2 | No |
| ISO 27001 | ✓ |
| Cyber Essentials | No |
| Major incident on record | No |
| Incident note | CVE-2024-2223 and CVE-2025-2243 (GravityZone SSRF) patched; no breach of Bitdefender itself found |
| Live chat | ✓ |
| UK support hours | Business support portal, phone and chat; hours not confirmed |
| Paid support tier | Setup and Go onboarding £167.33; training £41.07 a seat |
| Support channels | Support portal, Phone, Live chat +1 |
*Scored tier: the business tier the score is set on (the cheapest plan with a cloud console covering Windows, macOS and Windows Server), per device per year on a one-year term at about 25 devices, then per device per month where monthly billing exists, in the currency the vendor shows a UK visitor on the research date; see each profile for the VAT basis, the seat band and what the tier above adds.
**Owned in: where the company that owns the vendor answers to. A US-owned vendor is subject to US law (including the CLOUD Act) wherever the console data sits. "Russian or Chinese link" records ownership, management or engineering links found on the research date, with the evidence on the profile; Saaskly marks these down in the score by editorial rule and says so.
Ready to try Bitdefender GravityZone?
Affiliate link: Saaskly may earn a commission. It never affects our verdict.
Researched and drafted with AI assistance; reviewed and approved by Tim Meredith. How we use AI
Work at Bitdefender GravityZone? Something not look right? Register in the vendor portal to see what we publish and send corrections.