Security isn’t just a checkbox
You need software that stops malware. Actually stops it.
We verify this by digging into third-party lab reports. Specifically AV-Test and AV-Comparitives. These groups run extensive tests multiple times a year. The bar isn’t high, but it is necessary. We want protection scores of at least 5.5/6 from AV-Test. From AV-Comparitives, you want an online protection rate hitting 97%.
Don’t just look for the virus blocker though. You need ransomware defense too. You know the type, locking you out until you pay. Phishing attempts need stopping as well, those manipulative traps for your data. Check if these specific protections are bundled in the product you’re looking at.
Who is watching the watchers
Trust matters. It has to.
Read the privacy policy. Not skimming, actually read it. Do they anonymize your info? Yes or no? What data do they hand to third parties? And what kind of companies receive that data?
You also need clarity on law enforcement cooperation. Ideally, the company shares nothing unless a valid legal order forces them. The scope should be tiny, limited strictly to what is required for an account. Most antivirus privacy policies stumble here, especially when it comes to their included VPNs.
Almost every brand we tested claims to offer a “no-logs” VPN. They say they record zero browsing data. Yet most lack transparency reports. No third-party audits either. Those are trust signals. Without them, it’s just words on a page.
If your antivirus comes with a VPN, ignore it. Buy a separate, recommended VPN.
The basics of protection
Your antivirus needs to do the job Microsoft Defender already does, only better. That means real-time virus protection. You need easy manual scans. You need automated scans that actually schedule themselves simply, a feature Defender often fumbles.
Some suites throw in device optimization tools. They clean up junk files. They tweak settings for speed. Useful, if you care about squeezing extra life from old hardware.
Performance matters
It runs in the background. Constantly.
If it slows you down, you uninstall it. Generally, I advise avoiding anything chewing more than 10% CPU while idle. The tools we recommend? They sit at 5% or lower. Some use barely 1%.
Running a full scan uses more power. Bitdefender handles this well, staying under 10%. Norton is heavier. It spikes around 40%. But it’s fast, so the interruption is short. If a scan drags on over 10 minutes while holding that high CPU load, stay away.
Your hardware affects these numbers. Your experience will differ. This is why money-back guarantees exist. Test it for a few weeks. If it feels sluggish, switch.
Cover all your bases
How many devices do you own? One phone, a tablet, a PC, a Mac?
Bitdefender limits individual plans to five devices. Keep track of those limits. The best providers cover macOS, iOS, and Android alongside Windows. This ensures your entire ecosystem stays locked down. Note that some features, like optimization, might only work on Windows. Malwarebytes, for instance, restricts its deep cleaning tools there.
Free is actually good
The engine doesn’t change when you pay. The same companies power the free and paid versions. The core malware protection is identical. You get easy scan scheduling. You get real-time defense.
So why pay? For the extra tools. Browser safety extensions. Privacy monitors. Dark web monitoring. Some brands like Bitdefender or Malwarebytes even toss in identity theft protection. That’s where the value lies, not in the antivirus scanner itself.
A word on bundled VPNs
We’ve said it before. They are mediocre.
Most antivirus bundles perform poorly during testing. Speed loss often exceeds the 25% we consider acceptable. They lack advanced privacy tricks like obfuscation. No Tor Over VPN servers either.
Want privacy? Get a dedicated service. Don’t rely on the bonus feature from your security suite.
The Avast situation
It was the gold standard once. Me too. Everyone knew to install it.
Then 2024 came. The FTC slapped a $16.5 million fine on Avast. They had been selling user data from 2013 through 2019. A subsidiary called Jumpshot did the dirty work, harvesting browsing data from safe browsing extensions.
Avast shuttered Jumpshot in 2023 after its then-CEO acknowledged the breach of trust. No new allegations of illicit sales have emerged since. We trust they haven’t resumed the activity. But we haven’t re-tested them in years. Can we recommend it?
Not at this time.
The Kaspersky problem
Kaspersky scores high. Third-party labs love the performance.
But Russia is banned. Well, the software is banned for US users. As of 2024. You cannot sell it to citizens here, or anyone located within US borders, directly or indirectly.
Commerce Secretary Gina Raimondo was blunt at the time. Russia has shown capability and intent to weaponize Russian companies like Kaspersky for intelligence gathering. She pledged to safeguard national security using every tool available.
Kaspersky denies it. They claim contributions to protecting US interests. They say they do not engage in threatening activities. Despite that, the ban holds. Since our readership is predominantly American, we stopped testing them. We won’t recommend what we can’t test, legally or ethically.
How we test
First, the money. Plans and pricing determine value. If that checks out, I start hands-on work. I use a 2025 Thinkpad. I measure usability. I watch CPU usage. I time the scans.
Then the extras. I install the cybersecurity tools. I run them through speed tests against different servers. I calculate the average loss.
Finally, the documents. Privacy policies get the deep read. What is collected? How is it secured? Who gets it? I also dig into history. Data breaches? Misuse of info? We want to know they treat your data with care, because once it’s out, it’s gone.
Is your setup secure? You might be closer to that than you think, or further than you’d like to admit. The choice remains yours, right up to the moment something goes wrong.
