> ## Documentation Index
> Fetch the complete documentation index at: https://docs.threataware.com/llms.txt
> Use this file to discover all available pages before exploring further.

# BitDefender

> Connect ThreatAware to Bitdefender GravityZone for endpoint protection and threat management

## Overview

The BitDefender integration enables ThreatAware to collect read-only data from your Bitdefender GravityZone platform, providing visibility into endpoint protection status and helping validate your security controls.

<Info>
  **Connection Method**: API
  **Setup Time**: 20 minutes
  **Access Required**: BitDefender Company Administrator account
</Info>

## Data collected

The BitDefender integration provides:

* Endpoint protection status
* Threat detection and response data
* Security policy compliance metrics
* Device inventory and health status

## Use cases

<CardGroup cols={2}>
  <Card title="Endpoint Protection Tracking" icon="shield-check">
    Monitor endpoint protection status across all managed devices
  </Card>

  <Card title="Compliance Validation" icon="clipboard-check">
    Verify endpoint protection policies are properly configured
  </Card>

  <Card title="Threat Management" icon="eye">
    Track threats and security incidents across your environment
  </Card>

  <Card title="Audit Support" icon="file-contract">
    Generate reports showing endpoint protection coverage
  </Card>
</CardGroup>

## Setup instructions

<Steps>
  <Step title="Log in to Bitdefender GravityZone Portal">
    Access the [Bitdefender GravityZone](https://gravityzone.bitdefender.com) portal with a **Company Administrator** account.
  </Step>

  <Step title="Create or Select an Admin Account">
    If needed, create a new admin under **Accounts** > **Add** and assign the **Company Administrator** role.

    Assign the following permissions:

    * **Manage Networks**
    * **Manage Users**
    * **Manage Company**
    * **Manage Reports**

    Ensure the correct targets to be monitored are selected.
  </Step>

  <Step title="Generate API Key">
    In your account:

    * Click your username in the top left to access **My Account**
    * Navigate to **API Keys** and click **Add** to create a new API key
    * Select both **Network API** and **Accounts API**
    * Click **Save**
    * Copy the generated **API Key**
  </Step>

  <Step title="Retrieve API URL">
    In your GravityZone account settings:

    * Locate the **API URL** specific to your GravityZone environment
    * Copy this URL for use in ThreatAware
  </Step>

  <Step title="Configure in ThreatAware">
    Complete the integration setup in ThreatAware:

    * Open ThreatAware and navigate to **Settings** > **Integrations**
    * Search for and select **BitDefender**
    * Enter the required credentials:
      * **API Key**: The key generated in BitDefender GravityZone
      * **API URL**: Your GravityZone API URL
    * Click **Connect** to establish the integration
  </Step>

  <Step title="Verify Connection">
    After connecting, verify the integration status shows as **Active** in ThreatAware.
  </Step>
</Steps>

## Required credentials

<AccordionGroup>
  <Accordion title="API Key" icon="key">
    **Field Name**: BitDefender API Key
    **Type**: Password (encrypted)
    **Description**: The API key created in the BitDefender API Keys section

    <Tip>
      Store this credential securely in your organisation's password manager for future reference.
    </Tip>
  </Accordion>

  <Accordion title="API URL" icon="server">
    **Field Name**: BitDefender API URL
    **Type**: String
    **Description**: The URL specific to your Bitdefender GravityZone environment

    **Format**: `https://cloud.gravityzone.bitdefender.com`
    **Example**: `https://cloud.gravityzone.bitdefender.com` or region-specific URL from your account
  </Accordion>
</AccordionGroup>

## Verification and testing

After setup, verify the integration is working correctly:

1. **Check Integration Status**
   * Navigate to **Settings** > **Integrations** in ThreatAware
   * Confirm the BitDefender integration shows **Active** status
   * Check the last sync timestamp

2. **Verify Data Collection**
   * Wait 60 minutes for the initial data poll
   * Search for a known device in ThreatAware
   * Check device details for BitDefender protection status

3. **Test Queries**
   * Create a test query to filter devices by BitDefender security status
   * Verify the data matches your expectations

## Troubleshooting

<AccordionGroup>
  <Accordion title="Invalid API Key or URL Error" icon="triangle-exclamation">
    **Symptoms**: Integration status shows authentication failure

    **Solutions**:

    * Verify the **API Key** and **API URL** match the entries in the BitDefender GravityZone settings
    * Ensure the API key has not expired
    * Check that both **Network API** and **Accounts API** are selected
    * Confirm the credentials were entered without extra spaces
  </Accordion>

  <Accordion title="Permission Errors" icon="ban">
    **Symptoms**: Integration connects but no data appears or limited data is available

    **Solutions**:

    * Verify that all necessary permissions are assigned to the admin account
    * Ensure the admin has **Manage Networks**, **Manage Users**, **Manage Company**, and **Manage Reports** permissions
    * Check if there are organisational policies restricting API access
    * Review [BitDefender API Documentation](https://www.bitdefender.com/business/support) for required permissions
  </Accordion>

  <Accordion title="No Data After 1 Hour" icon="database">
    **Symptoms**: Integration shows active but no endpoint data appears

    **Solutions**:

    * Verify there are managed devices in your BitDefender GravityZone environment
    * Check the API key's scope and access permissions
    * Ensure devices are properly enrolled and visible in GravityZone
    * Review ThreatAware integration logs (contact support if needed)
  </Accordion>

  <Accordion title="Connection Timeout" icon="clock">
    **Symptoms**: Integration fails to connect with timeout errors

    **Solutions**:

    * Verify the API URL is correct and accessible from ThreatAware
    * Check firewall rules allow outbound HTTPS (443) to BitDefender
    * Confirm your GravityZone instance is accessible via the internet
    * Test the URL in a browser to ensure it's reachable
  </Accordion>
</AccordionGroup>

## Additional resources

<CardGroup cols={2}>
  <Card title="BitDefender API Documentation" icon="book" href="https://www.bitdefender.com/business/support">
    Official BitDefender documentation for API configuration and permissions
  </Card>

  <Card title="ThreatAware Support" icon="life-ring" href="mailto:help@threataware.com">
    Contact ThreatAware support for integration assistance
  </Card>
</CardGroup>

## Best practices

<Tip>
  **Credential Management**

  * Create a dedicated API key specifically for ThreatAware
  * Document credentials in your organisation's password manager
  * Rotate credentials annually or per your security policy
  * Monitor for authentication failures in ThreatAware regularly
</Tip>

<Tip>
  **Security Considerations**

  * Only grant permissions necessary for monitoring
  * Limit API key scope to relevant networks and devices
  * Review audit logs in BitDefender periodically to monitor API usage
  * Follow your organisation's least privilege principles
</Tip>