Policy tuning has improved cloud threat detection while rule creation still needs simplification
What is our primary use case?
I primarily used Bitdefender Security for AWS for SOC policy tuning and other SOC-related tasks. Our work involved integrating Bitdefender with different environments and fine-tuning security policies to enhance malware threat protection.
Bitdefender Security for AWS provides comprehensive protection for cloud-based infrastructures. It covers endpoint, network, and identity security, making integration easier across cloud environments. After integration, we fine-tuned detection policies and monitored activity logs. Any detections—such as malware, lateral movements, or suspicious DNS activity—were forwarded to our SIEM or XDR for analysis and response.
As part of both the SOC and incident response teams, I worked on integrating Bitdefender Security for AWS with other security tools. This integration helped streamline alert management, reducing false positives through continuous policy optimization.
The solution secures EC2 instances directly from the Bitdefender console and includes advanced features such as anti-malware protection and behavioral threat detection. It is especially beneficial to SOC teams for its ease of policy management and scalability, making it a reliable solution for maintaining a secure AWS environment.
How has it helped my organization?
Bitdefender Security for AWS has positively impacted our organization by enhancing cloud workload protection
What is most valuable?
Bitdefender Security for AWS provides an agent-based solution that combines antivirus, endpoint detection and response and behavioral detection to reduce the risk of compromised production servers.
One of the best features of Bitdefender Security for AWS is its protection for EC2 workloads. It offers centralized management from a single console, allowing users to manage policies, deployments, and visibility across all AWS platforms. This centralized approach simplifies administration and improves efficiency.
The anti-malware and behavioral detection features are robust. For both Windows and Linux EC2 instances, Bitdefender provides strong detection capabilities against both known and unknown threats, helping to minimize false positives and accurately identify true positives. It also supports offloading scans to optimize performance.
Bitdefender Security for AWS helps secure servers running in AWS while reducing CPU and I/O consumption. Managing physical servers is often more complex since it may require additional hardware, such as memory expansions or system extensions, to maintain performance. In contrast, AWS environments benefit from Bitdefender’s optimized performance, resulting in lower CPU and memory usage, as well as better handling of I/O loads.
From a security standpoint, this solution allows for easier management even under high resource consumption. Because it operates within AWS, performance remains stable, making it a reliable and efficient choice for cloud-based security operations.
What needs improvement?
For a small industry, it may work fine. However, when implementing Bitdefender Security for AWS in a large-scale environment, you need to handle things very carefully. Proper planning and policy tuning are essential. Managing it on a large scale can be challenging, especially if a policy inadvertently impacts the environment. Therefore, it’s important to approach this tool with caution. It would be helpful if Bitdefender introduced simpler processes, as creating policies and rules can sometimes feel quite complicated.
For how long have I used the solution?
I have used Bitdefender Security for AWS for almost one year.
What do I think about the stability of the solution?
I have not found that much issue with Bitdefender Security for AWS, but it was good.
What do I think about the scalability of the solution?
When it comes to scalability, it's AWS, so scaling is easy. However, you still need to verify configurations, as everything depends on rules and policies. Therefore, this situation should be handled carefully.
How are customer service and support?
The support team for Bitdefender Security for AWS is good, actually. It's really very good in support. They always give immediate acknowledgment and also try to resolve it very quickly. Even regarding escalations, I didn't see any escalations related to these support cases because every time they provide us good services.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
It was my first time using Bitdefender Security for AWS for this specific type of policy. However, I have worked with several other security tools before. This one was a bit different. I used it for the first time in this project, but previously, I had experience with other tools such as antivirus, EDR, and XDR solutions.
I didn’t evaluate alternative tools before choosing Bitdefender Security for AWS because it was already implemented when I joined the project. Therefore, I didn’t get the opportunity to review or compare other options.
How was the initial setup?
What about the implementation team?
What's my experience with pricing, setup cost, and licensing?
Pricing was pretty straightforward and wallet friendly. We went with the pay-as-you-go model through AWS Marketplace, basically charged per EC2 instance per hour, no big upfront fees or anything. For our pilot with like 50 instances, it came out way cheaper than what we'd pay for CrowdStrike extras, maybe 20% less overall. Bills scaled right with our usage, never any nasty surprises, and we kept tabs on it via AWS Cost Explorer so SOC budgeting stayed easy.
Which other solutions did I evaluate?
Before selecting Bitdefender Security for AWS, we evaluated CrowdStrike Falcon Cloud Security and Trend Micro Deep Security as primary alternatives for EC2 workload protection, given our existing experience with both on endpoints and servers
What other advice do I have?
When I joined the project, it was already in place. I didn’t review what had been implemented previously or what was new. However, what I observed is that, from a policy perspective, the process of creating and fine-tuning policies worked very well. We were able to create templates and policies effectively, which improved the overall configuration.
When you create clear policies and rules, your false positives are automatically reduced, and your threat protection becomes stronger. During behavioral analysis, the system can easily identify situations that typically generate false positives. Using behavioral detection features helps differentiate between true positives and false positives, which is very useful.
The solution is completely cloud-based, and we use AWS Cloud. Bitdefender Security for AWS helps us create effective rules and policies. Implementing these policies and rules also reduces the need for manual intervention by employees.
Overall, I would rate Bitdefender Security for AWS a seven out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Roadblock for attackers
What do you like best about the product?
It acts as a shield for preventing anticipated attacks from hackers. It's real time detection of attacks before they even take place is very helpful in tightening the security.
What do you dislike about the product?
The UI is a bit favourable to the technical audience. It could be made more balanced to support every category of users.
Also, it requires high spec. Systems to function smoothly.
What problems is the product solving and how is that benefiting you?
In today's world, data theft is no big deal. But on the same note, it is not less expensive to the affected as well. I work with data all the time and they are very sensitive in nature too. This tool has helped me in protecting and preventing the thefts at great extent.
Good
What do you like best about the product?
It has a simple, intuitive interface that makes it easy to manage and monitor network traffic. It also provides detailed reports and alerts, which can help organizations identify and respond to potential threats in a timely manner.
What do you dislike about the product?
Bitdefender Network Traffic Security Analytics is a premium security solution, and as such, it can be more expensive than some other options on the market. This can be a challenge for smaller organizations or those with limited budgets.
What problems is the product solving and how is that benefiting you?
By monitoring and analyzing network traffic in real-time, Bitdefender Network Traffic Security Analytics can provide organizations with greater visibility into their network. This can help detect potential threats more quickly and allow for a more rapid response.
It is better option for network security but it also need network detection and analytic.
What do you like best about the product?
It detect network traffic like IDS but not in better way
What do you dislike about the product?
Improve your security to devlope better exprience
What problems is the product solving and how is that benefiting you?
It may be good in some manner by deploying better intrusion detection system
Good Analytics tool for Security Incidents
What do you like best about the product?
>>> It aggregates data from your Network Elements using network pro, which uses the spanned Port itself which mirrors the copy of network traffic itself instead of creating load by directly inspecting the same Database logging traffic of Network Elements
>>> BitDefender Cloud Intelligence Feature is relatively stable in terms of scalability since more than half a billion devices are in the Cloud Intelligence Network and analysis of the logged data with low network latency
What do you dislike about the product?
>>> The User Interface needs to be made more User Friendly such as we have in CloudWatch Alarms in the case of AWS
>>> Also, only the Source and destinations are logged Hop Wise; it needs to have a filter where not just threat wise but traffic volume wise it could detect the flow through a network device and if iOS upgrades should be done on those devices
What problems is the product solving and how is that benefiting you?
Analyzing the Network elements automatically instead of manual Portscan runs helps to perform an allowlist to minimize False Positives
Also we can copy the logs to a clipboard and save it for further deep inspection
offers excellent defense against malware and phishing attacks
What do you like best about the product?
Monitors networks for suspicious activity and provides tools to defend against cyber-attacks. Threat visualizations serve as a roadmap for inquiries and enhance the capacity for immediate action.
What do you dislike about the product?
There are no drawbacks. The cost is slightly higher, and frequent updates will be beneficial.
What problems is the product solving and how is that benefiting you?
it helps me to keep an eye on my network traffic in real-time so I know what's happening. and it offers high-level security for the network.
Best antivirus in the market for beginners
What do you like best about the product?
First important thing about bitdifender is it's cheap compared to other competitors which gives it a priority. And i tried other traffic security analytics tools but they seem to allow few risky sites which bitdefender blocks
What do you dislike about the product?
One major issue with bitdefender is though it is supposed to block only malicious sites, sometimes it blocks genuine sites too if it is http which is needed for my office work
What problems is the product solving and how is that benefiting you?
My pc got hacked months back because of which i need to get bitdefender. But once i installed it i am completely worry free now. It takes care of all secure options like malicious sites, download without permission and even scanning existing malware in system
BitDefender is a great antivirus, easy to use, install and monitor for suspicious apps.
What do you like best about the product?
BitDefender Gravity zone is simplistic to navigate and monitor user machines for the different sites, acquiring the install file and
What do you dislike about the product?
The Bitdefender Gravity zone portal could be made to be more user-friendly, somedays it takes a bit of navigating to get to what I'm looking for. Otherwise, everything else is great
What problems is the product solving and how is that benefiting you?
This helps with finding any suspicious activity or apps on user machines; Analytics is great for seeing and compare users and find problematic machines
Bitdefender Adds Extra Security Reassurance
What do you like best about the product?
It is an easy software that protects from malware
What do you dislike about the product?
There are a good number of updates that need to be kept up with but they are quick and easy
What problems is the product solving and how is that benefiting you?
It allows me to work remotely from public places while feeling secure that I have privacy and protection using my computer
Good software for managing overall traffic
What do you like best about the product?
Its advanced threat detection is spot on, and that too in real-time. A great solution to managing and maintaining network traffic. Also, the breach detection feature work very well.
What do you dislike about the product?
The price is slightly on the higher side. Also, RAM consumption is more as it keeps on processing in the background.
What problems is the product solving and how is that benefiting you?
Providing advanced level security to the network.
