Why preemptive cybersecurity in the age of AI is a business imperative

By Paul Hadjy, Vice President of APAC and Cybersecurity Services at Bitdefender

Cybersecurity can no longer be treated as a reactive discipline. In an era of increasing digital complexity and AI-driven threats, organisations must shift from a “detect and respond” model to a “predict and prevent” mindset. This is not only a technical shift—it’s a strategic business decision that can dramatically reduce risk, preserve brand trust, and deliver measurable ROI. 

Gartner® recently projected that “by 2030, preemptive cybersecurity solutions will account for 50% of IT security spending, up from less than 5% in 2024, and replace traditional ‘stand-alone’ extended detection and response (XDR) solutions as the preferred approach to defend against cyberthreats.” ¹ This fundamental transition mirrors a growing realisation: In the age of AI-accelerated attacks, reacting to threats after they’ve already infiltrated your systems is often too little, too late. 

The real risk lurking in your own tools 

Every organisation today runs on a stack of applications and tools.

It’s alarmingly common for employees to retain access to hundreds of risky utilities and applications they never use—leaving up to 95% of the attack surface unnecessarily exposed. Team changes, project transitions, and special exceptions often lead to a bloated permissions landscape. Each unmonitored app is a doorway for attackers—one they can exploit without setting off alarms.

This is where Living-off-the-Land (LOtL) techniques come into play. These are cyberattacks where adversaries exploit legitimate tools and applications already present in your environment to move stealthily through systems. And this is not an exception; a recent analysis of 700,000 cyber incidents revealed it is now the dominant attack method. Because these LOtL techniques blend in with normal behaviour, these attacks are notoriously hard to detect until damage is done.

The bigger issue? If you manage a growing organisation, you know that exceptions are the norm: people need unique tools, access levels, or workflows. That’s fine—for productivity. But unless you’re proactively managing and reviewing these exceptions, you’re quietly increasing business risk.

A preemptive approach to risk reduction 

Bitdefender’s GravityZone PHASR is the industry’s first preemptive cybersecurity platform designed to shrink your attack surface before an incident occurs. It doesn’t wait for attackers to make the first move—it continuously analyses your digital environment to identify unnecessary exposure through unused applications that are enabled.

This approach, known as Proactive Hardening and Attack Surface Reduction (PHASR), gives your leadership team the ability to finally measure the reduction of business risk over time—an ability that’s been elusive in traditional cybersecurity programmes.

With PHASR, executive leaders can confidently say: “We’ve reduced our attack surface by 32% over the past quarter,” or “We’ve eliminated 12 unnecessary tools or applications with elevated privileges that posed potential breach risks.” This kind of data-driven accountability elevates cybersecurity to a boardroom-level conversation. 

Beyond risk: Meeting compliance and visibility requirements

As regulatory environments evolve globally, compliance is no longer just a checkbox—it’s a continuous, auditable process. External Attack Surface Management (EASM) is an approach that provides visibility into your exposed assets—both internal and external—so you know exactly what could be seen and exploited by attackers.

This visibility is not just technical; it’s strategic. When you know which assets are at risk and why, you can align your cybersecurity investments with business priorities and regulatory requirements. This makes your organisation not only safer, but smarter.

The call for C-Suite leadership

Too often, cybersecurity is seen as an IT problem. In reality, it’s a business resilience issue—one that demands executive ownership. Boards and C-level leaders must start treating proactive risk reduction as a strategic lever, not just a technical necessity.

 The organisations that succeed over the next decade will be those that recognise this shift early and take action. Thankfully, innovation in security enables leaders to move from guesswork to precision, from passive defence to active risk reduction. It offers the tools to identify weak spots, reduce unnecessary exposure, and prove cybersecurity ROI with clear, quantifiable metrics.

Find out more here on how PHASR redefines endpoint security.

¹ Gartner, Emerging Tech: Preemptive Cybersecurity Is Now Critical for Effective Detection and Response, Isy Bangurah, Tom Powledge, 17 June 2025.  
Gartner is a registered trademark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved.