Skip to main content
Bitdefender GravityZone is in Beta. It is available to every tenant and shows a Beta badge in Settings › Integrations › Directory. If something does not match your GravityZone console, contact support@msportal.ai.
Bitdefender GravityZone brings antivirus agent health into MSPortal: which endpoints are protected, which have outdated signatures or an outdated agent, where malware was detected, license status, and how much of each client’s RMM-managed fleet GravityZone covers. This setup is for MSP staff with integration management access. MSPortal only reads from GravityZone. It never changes policies, endpoints or licenses, and it does not start scans or isolate endpoints.

​
What the integration covers

  • Covered: GravityZone Cloud consoles, the managed endpoints of each GravityZone company, their agent health, and license use.
  • Not covered: on-premises GravityZone consoles, detection and incident details, quarantine, and EDR or XDR events. Bitdefender endpoints are not added to Devices; coverage is compared with the devices your RMM already reports.

​
Before you connect

Create an API key in GravityZone Control Center:
  1. In GravityZone, open My Account › Control Center API and create an API key.
  2. Enable the Network API on the key. Also enable Companies and Licensing to list client companies by name and report license use.
  3. Copy the key, and copy the access URL shown on the same page, for example https://cloud.gravityzone.bitdefender.com/api.
A partner (MSP) console lists every client company to map. A single-company console maps its one company.

​
Connect

  1. Open Settings › Integrations, choose Directory, find Bitdefender GravityZone, and choose Connect.
  2. Enter the Access URL and paste the key into API Key.
  3. Choose Test connection. A rejected key, a key without the Network API, or an address that is not a GravityZone access URL each shows its own reason.
  4. Choose Save and continue. MSPortal saves the key in the vault and starts the first sync.
Connect Bitdefender GravityZone page with the Access URL and API Key fields and the Before you start steps. If you later change the access URL, enter the API key again. MSPortal only sends a saved key to the URL it was saved with.

​
Match companies

Open Import or match companies. Link each GravityZone company to its MSPortal company: accept the suggestion, choose another company, or use Import company to create one. Accept strong matches accepts every suggestion at 90% confidence or more after you review them. Ignore hides a GravityZone company that is not a client’s, and you can restore it later. Reports, the dashboard and AI reports count endpoints only for matched companies.

​
Where the data appears

  • Security › Endpoints: Bitdefender endpoints appear with the source Bitdefender, an online status, and badges for Infected, Malware detected, Signatures outdated and Agent outdated. Open an endpoint to see the Bitdefender agent section: agent version, license, last update, antivirus signatures, agent updates, malware, policy, network isolation and protection modules. See Find security endpoints.
  • Reports: add the Bitdefender Protection Coverage block. It compares protected endpoints with the devices your RMM manages, counts healthy endpoints and agent problems, and lists the companies with the largest coverage gaps. It compares device counts; endpoints are not matched to RMM devices one by one. It reflects the latest sync, not the report period.
  • AI reports: security reports include a Bitdefender summary and the endpoints with problems.
  • Assistant and MCP: ask which endpoints have outdated signatures, or use list_bitdefender_endpoints.
In reports, AI reports and MCP, malware detected means a detection in the 24 hours before the latest sync.

​
Sync and troubleshooting

GravityZone syncs every 4 hours. To sync now, choose Run sync on the connection page or on the integration’s row. Large consoles take longer because MSPortal stays within GravityZone’s API rate limits.
  • GravityZone rejected this API key: check that the key was copied in full and is still active.
  • This API key cannot read endpoints: enable the Network API on the key, then test again.
  • GravityZone did not answer at this access URL: copy the access URL again from My Account › Control Center API.
  • License counts are missing: enable the Licensing API on the key, then run a sync.
  • An endpoint is missing: only managed endpoints sync. Check that the endpoint has a GravityZone agent and that its company is matched.
To remove the connection, open More actions on the connection page and choose Disconnect…. This removes the stored key, the company matches and the data synced from GravityZone. It changes nothing in GravityZone; delete the key there when you no longer need it.