These tests evaluate the suites “real-world” protection capabilities with default settings (incl. on-execution protection features). It is our aim to do these tests rigorously. Due to that, these tests are time and resource expensive, so only products chosen for the yearly main test-series are included.

The Malware Protection Test is an enhancement of the File Detection Test which we performed in previous years. Any samples that have not been detected e.g. on-access are executed on the test system, with Internet/cloud access available, to allow features such as behavioural protection to come into play.

Programs running in background such as real time protection antivirus software use some percentage of system resources. These tests help users evaluate their anti-virus protection in terms of system speed (system performance).

Annually we release a summary report that collates the results of the various consumer tests. We then give awards and comment on product abilities.

These enterprise summary reports tests put special emphasis on business product features which are important to sys admins. The resulting test results and reviews are time-saving resources for sys admins when they need to decide on an antivirus solution.

The Advanced Threat Protection (ATP) Test, aka Enhanced Real-World Test, uses hacking and penetration techniques that allow attackers to target specific external computer systems, and evaluates how well security products protect against such attacks. This test checks protection against targeted advanced threats, such as exploits and fileless attacks. See how well the tested products protect against this increasing menace!

Enterprise endpoint prevention and response (EPR) products are used to defend against multi-stage targeted attacks. The EPR Test uses a variety of attack scenarios, to test each product’s ability to prevent and respond to threats, and provide analytical and remedial tools. It also considers the total cost of ownership (TCO) for each product.

Our Offensive Security Tests include complex hands-on Red-Team and Pen-Tests, where we assess various areas such as EDR-Detection, Tamper-Protection, LSASS-Protection, Process-Injection-Detection, etc. These evaluations provide invaluable insights into the effectiveness of different security measures.

Sometimes we release tests which might be of public interest and reflect current security issues, such as IoT-Tests, VPN-Tests, Stalkerware-Tests, Support-Tests, Privacy-Tests,  …

Integration of new technologies into smartphones also brings risks of malware, phishing and concentrated attacks on sensitive data. This section contains tests and reviews of Mobile Security products.

These reviews evaluate the protection provided to Mac OS users. Macs are being attacked more and more by cybercriminals, who start to take advantage of the complacency towards malware threats amongst Mac users.

Linux systems are considered to be very secure, and the usage rate on desktop systems is low compared to other platforms. Nonetheless, Linux malware exists and successful malware attacks on Linux systems have been known.

These tests evaluate the protection provided against phishing websites. These malicious websites can pose a real threat to any user who is connected to the Internet, as they attempt to steal sensitive information such as usernames, passwords, and credit card details.

Spam can be defined as unsolicited emails sent en masse. These may be sent for advertising purposes, in which case they may be seen as irritating but harmless. These Tests evaluate the Spam-Blocking capabilities of Security Solutions.

Parental control software is designed to keep children away from materials that their parents feel is not yet appropriate for them, and may also allow Internet access to be restricted to particular times or a total number of hours per day or week.

Often, security vendors rely on AV-Comparatives to give them an unbiased and competent feedback regarding their new product features and feature updates. These commissioned reviews of a single product help vendors improve their software and offer valuable data regarding the product’s overall performance. Commissioned comparative reports might also be found in this section.

False alarms can sometimes cause as much troubles as a real infection. With AV testing it is important to measure not only detection capabilities but also reliability – one of reliability aspects is certainly product’s tendency to flag clean files as infected. These are FP addendum reports of the Malware Protection Tests.