Try our new research platform with insights from 80,000+ expert users

Bitdefender GravityZone Extended Detection and Response (XDR) vs Vectra AI comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Bitdefender GravityZone Ext...
Ranking in Network Detection and Response (NDR)
16th
Ranking in Extended Detection and Response (XDR)
25th
Average Rating
8.0
Reviews Sentiment
7.7
Number of Reviews
5
Ranking in other categories
Endpoint Detection and Response (EDR) (44th)
Vectra AI
Ranking in Network Detection and Response (NDR)
2nd
Ranking in Extended Detection and Response (XDR)
9th
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
44
Ranking in other categories
Intrusion Detection and Prevention Software (IDPS) (2nd), Identity Threat Detection and Response (ITDR) (5th), AI-Powered Cybersecurity Platforms (5th)
 

Mindshare comparison

As of January 2025, in the Network Detection and Response (NDR) category, the mindshare of Bitdefender GravityZone Extended Detection and Response (XDR) is 0.6%, up from 0.5% compared to the previous year. The mindshare of Vectra AI is 20.1%, up from 20.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Network Detection and Response (NDR)
 

Featured Reviews

Kamel Ahmed - PeerSpot reviewer
Easy to use, helps against advanced threats, and enhances the security posture
We used Kaspersky for four years. I like Kaspersky more than Bitdefender GravityZone. Kaspersky helps manage everything on the client computers. It is easier to find files easily using Kaspersky. It is easier to manage things with Kaspersky. However, Bitdefender GravityZone is easier to use. The GUI is more simple. Kaspersky‘s GUI is more difficult, so we switched to Bitdefender GravityZone.
Mohammad Alkurdi - PeerSpot reviewer
Innovative detection features enhance monitoring
The advantages of the integration are not entirely out-of-the-box. You have to do it manually. When I'm doing tier response, an out-of-the-box solution is not available. You need to have a Linux server, and from the Linux server, you must perform AI tasks, and there is a lot to be handled in the back end. This is a major consideration about them. The recall feature, if it can be placed in some areas instead of the cloud, and charged for, would be better. Recall the storage where you watch all the traffic, and you can recall it and try to analyze it in the back end. It’s cloud-based. If they offer it on-prem, it would be better. I think they have a solution, but I have never tested it, to be honest with you.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It never fails. Bitdefender always catches all of the viruses that have been detected on customer sites."
"Bitdefender GravityZone Ultra Plus is highly stable."
"I find Bitdefender GravityZone Ultra Plus to be a pretty good solution for the mid-level market, specifically for organizations with up to two hundred fifty users. I like that it is an averagely priced solution. It also has a straightforward installation that can be completed within three to five minutes. Its technical support is also good enough."
"The best thing about Bitdefender is that it has got top-notch features and it is not tied to specific countries like some other antivirus tools."
"The product is easy to use."
"It has helped us to organize our security. We get a better overview on what is happening on the network, which has helped us get quicker responses to users. If we see malicious activity, then we can quickly take action on it. Previously, we weren't getting an overview as fast as we are now, so we can now provide a quicker response."
"The solution is currently used as a central threat detection and response system."
"It is doing some artificial intelligence. If it sees a server doing a lot of things, then it will assume that is normal. So, it is looking for anomalous behavior, things that are out of context which helps us reduce time. Therefore, we don't have to look in all the logs. We just wait for Vectra to say, "This one is behaving strange," then we can investigate that part."
"Vectra produces actionable data using automation. That has helped us. It's less manpower now to look at incidents, which has definitely increased efficiency. Right now, in a lot of cases, our mean time to detection is within zero days. This tells me by the time something happened, and we were able to detect it, it was within the same day."
"The most useful feature is the anomaly detection because it's not signature-based. It picks up the initial part of any attack, like the recon and those aspects of the kill chain, very well."
"Vectra AI is the best. It is a major product in our cybersecurity."
"The solution provide visibility into behaviors across the full lifecycle of an attack in our network, beyond just the Internet gateway. It makes our security operations much more effective because we are now looking not just at traffic on the border, but we're looking at east-west internal traffic. Now, not only will we see if an exploit kit is being downloaded, but we would be able to see then if that exploit kit was then laterally distributed into our environment."
"It does a reliable job of parsing out the logs of all the network traffic so that we can ingest them into our SIEM and utilize them for threat hunting and case investigations. It is pretty robust and reliable. The administration time that we spend maintaining it or troubleshooting it is very low. So, the labor hour overhead is probably our largest benefit from it. We spend 99% of our time in Vectra investigating cases, responding to incidents, or hunting, and only around 1% of our time is spent patching, troubleshooting, or doing anything else. That's our largest benefit from Vectra."
 

Cons

"The solution must improve its management features."
"The mobile version needs improvement."
"The solution seems to be pretty amateur for an EDR solution, and it should be more in sync in terms of features, with solutions such as FireEye and SentinelOne."
"Adding a feature like Data Loss Prevention would be beneficial."
"One of the things that we are missing a bit is the capability to add our own rules to it. At the moment, the tech engine does its thing, but we have some cool ideas to make additional rules. There should be an option in the platform to add custom rules, or there should be some kind of user group where we can suggest them for the roadmap and see if they get evaluated and get transparent communication on whether they will be implemented in the product or not."
"For S&D account scans, it would be easier if Vectra AI could triage with users. If a client uses a lot of accounts, then it could indicate that these accounts are benign, for example. That would help a lot."
"The advantages of the integration are not entirely out-of-the-box. You have to do it manually."
"What is most important for us is to have one place where we can manage a few brains because we are based on a zero-trust network. As a result, each customer needs to have a separate brain. For the SOC team, we need to have one place where the SOC analyst can go to visit the website and from that site manage all of the customers. Right now, Vectra AI doesn't have this capability, and I would really like to have this feature."
"There could be an option where Vectra manages the solution remotely, and when there is an attack, there could be a notification center to give us information about the attack."
"The main improvement I can see would be to integrate with more external solutions."
"I think Vectra AI's automation, reporting, and integration could be improved."
"Neither Vectra nor Darktrace have a function like a status health check on my log sources and traffic sources."
 

Pricing and Cost Advice

"It's a very good price for MSP. It's cheaper than Symantec."
"We have purchased licenses for the use of Bitdefender GravityZone Ultra Plus. The price of the solution is reasonable but could be better."
"Bitdefender GravityZone Ultra Plus is pretty average, meaning it's not cheaper, but it's pretty good. It has average pricing."
"Vectra's licensing model could scale to our research network, which has multiple, 100-gigabit links."
"The solution's pricing was 50 percent lower than the other vendors shortlisted."
"The pricing and licensing are quite straightforward because they're based on the IP licenses. As a result, they are easy to count."
"Vectra's pricing is too high. All schools will not be able to afford it. Vectra will only end up targeting higher education and higher value independence purely because of the price. A lot of schools would love to have a product like Vectra AI, but they simply can't because they struggle to even pay the high E5 licensing from Microsoft. When you're up against that, Vectra AI is never going to be within the sector's price range."
"At the time of purchase, we found the pricing acceptable. We had an urgency to get something in place because we had a minor breach that occurred at the tail end of 2016 to the beginning of 2017. This indicated we had a lack of ability to detect things on the network. Hence, why we moved quickly to get into the tool in place. We found things like Bitcoin mining and botnets which we closed quickly. In that regard, it was worth the money."
"The pricing is high."
"The pricing is very good. It's less expensive than many of the tools out there."
"There are additional features that can be purchased in addition to the standard licensing fee, such as Cognito Recall and Stream."
report
Use our free recommendation engine to learn which Network Detection and Response (NDR) solutions are best for your needs.
831,265 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
26%
Manufacturing Company
9%
Retailer
8%
Comms Service Provider
8%
Computer Software Company
15%
Financial Services Firm
12%
Manufacturing Company
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about Bitdefender GravityZone Ultra Plus?
The best thing about Bitdefender is that it has got top-notch features and it is not tied to specific countries like some other antivirus tools.
What needs improvement with Bitdefender GravityZone Ultra Plus?
The solution must improve its management features. They are not as good as Kaspersky's. Kaspersky provides remote desktop connection features, but Bitdefender doesn’t. I manage it remotely using SC...
What is the biggest difference between Corelight and Vectra AI?
The two platforms take a fundamentally different approach to NDR. Corelight is limited to use cases that require the eventual forwarding of events and parsed data logs to a security team’s SIEM or ...
What do you like most about Vectra AI?
The solution is currently used as a central threat detection and response system.
What is your experience regarding pricing and costs for Vectra AI?
Vectra is cheaper in terms of pricing and features compared to Darktrace.
 

Also Known As

GravityZone Ultra Plus
Vectra Networks, Vectra AI NDR
 

Overview

 

Sample Customers

Archdiocese, Northstar, SeSa, W&W Informatik, Yamaha Motor Europe
Tribune Media Group, Barry University, Aruba Networks, Good Technology, Riverbed, Santa Clara University, Securities Exchange, Tri-State Generation and Transmission Association
Find out what your peers are saying about Bitdefender GravityZone Extended Detection and Response (XDR) vs. Vectra AI and other solutions. Updated: January 2025.
831,265 professionals have used our research since 2012.