In short: Bitdefender GravityZone Extended Email Security protects business email from phishing, business email compromise, impersonation and malware. It can filter mail at the perimeter through an MX record change, protect Microsoft 365 mailboxes through the API with post-delivery remediation, or both. It is an add-on to an existing Bitdefender GravityZone licence, managed in the same console.
What Extended Email Security is
Email is a common way for attacks to start, and the threats have moved on from obvious spam to convincing impersonation, invoice fraud and links that turn malicious after delivery. GravityZone Extended Email Security (EES) is Bitdefender's cloud email protection product. It combines secure email gateway filtering with mailbox-level protection, and it is fully integrated into the GravityZone console, so email and device incidents can be investigated together.
EES is sold as an addition to an existing Bitdefender licence. Through us that is normally GravityZone Cloud MSP Security; Bitdefender also accepts its direct business plans, GravityZone EDR Cloud and Bitdefender MDR as the base.
Deployment models
| Model | How it works | Best for |
|---|---|---|
| Perimeter (MX) | Your MX records point at Bitdefender, which filters inbound mail before it reaches your mail system | Stopping threats before they reach any mailbox |
| Mailbox (Microsoft 365 API) | Connects to Microsoft 365 through its API, with no MX change, and monitors mail after delivery | Microsoft 365 tenants that want fast deployment and post-delivery clean-up |
| Both | Perimeter filtering before delivery plus API protection afterwards | Organisations that want both layers |
With API protection, EES keeps monitoring email after it has been delivered and can remediate a message later found to be malicious, including retracting it from every mailbox in the organisation. A monitor mode lets you see what would be caught before enforcement is switched on.
What is included
- Protection against phishing, impersonation, business email compromise, malware and zero-day threats
- Analysis using multiple filters, machine learning and Bitdefender threat intelligence
- SPF and DMARC email authentication checks
- Graymail filtering to separate newsletters and bulk mail from important messages
- Outbound scanning for malware, spam and signs of a compromised account
- An end-user quarantine digest with self-service release, within policies you set
- Microsoft 365 integration with Entra ID directory sync and organisation-wide retraction
- Central policies and reporting in the GravityZone console
How it is licensed
Extended Email Security is licensed as an add-on to your GravityZone base licence and billed monthly through your Forever Systems account. Bitdefender does not publish the counting unit on its product page, and shared mailboxes and service accounts can affect it, so we check your tenant and confirm exactly what is counted before quoting. Prices depend on the deployment model and numbers, so ask us for a quote.
Requirements and deployment
For the Microsoft 365 API model you need a Microsoft 365 global administrator to grant consent; nothing changes in your DNS. For the perimeter model we update your MX records and restrict your mail system so it accepts inbound mail only from the gateway, so attackers cannot bypass it. We usually start in monitor mode, review what EES would have caught, then switch on enforcement and user quarantine digests. Your SPF, DKIM and DMARC records are worth checking at the same time; see DMARC and email authentication.
Who it suits and how we help
EES suits organisations already using GravityZone who want email and endpoint security in one console, and Microsoft 365 users who want stronger protection than the built-in filtering without rerouting mail. We set it up, tune the policies, manage quarantine release requests and review incidents with you. Compare other email security products, then contact us for a quote.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Does Bitdefender Extended Email Security work with Google Workspace?
Bitdefender's mailbox (API) integration is for Microsoft 365. If you use Google Workspace or another platform, ask us and we will confirm against Bitdefender's current documentation whether perimeter (MX) filtering suits your setup.
Do I need to change my MX records?
Only for perimeter protection. The Microsoft 365 API model connects directly to your tenant with no DNS changes.
Can I buy Extended Email Security without GravityZone endpoint protection?
No. Bitdefender sells it as an add-on to an existing Bitdefender licence, such as GravityZone Cloud MSP Security, a Business Security plan, GravityZone EDR Cloud or Bitdefender MDR.
Can it remove a phishing email after it has been delivered?
Yes, with Microsoft 365 API protection. EES monitors mail after delivery and can retract a malicious message from every mailbox in the organisation.