Bitdefender

GravityZone (EDR / ATC / PHASR / Risk Management)

Response status

Post-exploitation detection and protection

Response information checked

2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides endpoint protection, MDR and GravityZone.

Coverage focuses on behavior such as shells spawned by PHP. Some Linux rules exclude PHP-FPM; scope varies by rule.

Scope: Detection or blocking post-exploitation actions does not replace PHP patching.

What users should do

Patch PHP and check feature, OS and PHP execution-mode coverage.

Official service URL

• https://www.bitdefender.com/

Source URLs

1. Bitdefender: PHP2Shell technical advisoryhttps://www.bitdefender.com/en-gb/blog/businessinsights/technical-advisory-php2shell-pre-auth-rceResponse evidence