Protection
Both AV-Test and AV-Comparatives, the leading antivirus testing labs, carry out large scale anti-malware tests for macOS at least once a year. Their findings form the basis of our analysis in the protection category.
In their Malware Protection Tests, as they are aptly called, an antivirus software is installed on a freshly updated MacBook, after which it is exposed to just under 600 malware samples.
These samples range from the very harmful to the fairly harmless, such as adware that hitch a ride with bundled software. The samples also include close cousins: Malware samples that are similar, but modified enough to avoid detection from XProtect’s blacklist of known malware.
Although the malware sample count of only 600 is very small in comparison to the 10.000+ malware samples used for Windows, it is an accurate representation of the malware for macOS out there in the “wild”.
The low number of malware samples is the reason why all 5 of the antivirus for Mac on our list have a 100% detection rate. In such a limited malware library, any antivirus that doesn’t score at least a 99% protection rate, is considered a failure.
The testing process itself is fairly straightforward. After the macOS systems have been (re-)installed, updated and equipped with the latest antivirus software, a USB drive containing the malware samples is introduced.
There are now 3 moments at which the antivirus software can intervene:
- Antivirus can notice some or all threats once the USB is inserted.
- If available, a USB scan is executed, during which the antivirus has another chance of detecting the malware samples.
- If any samples are left undetected and/or undeleted, these are moved to the Mac’s hard disk and executed. Allowing the antivirus software a final attempt at quarantining and deleting the threats.
We use these findings by the testing labs, to reach our protection score.
Privacy
The data industry continues to expand. Governments, Internet Service Providers (ISPs), advertisers, and tech firms are all attempting to track your every move online.
In a time where even a big antivirus brand was caught selling its user’s data (Yes Avast, we’re talking about you), consumers are right to worry.
Luckily, the desire to be anonymous online has sparked fresh innovation. New cybersecurity firms have sprouted left and right, and created several technological solutions to help you protect you privacy.
By far the most important of these is the Virtual Private Network (VPN). A relatively straightforward yet ingenious solution that allows you to encrypt your internet connection, and in turn become fully anonymous online.
It works as follows: Instead of surfing the web directly, you establish an encrypted connection to a VPN server first. Then you continue surfing the web as you normally would.
Now anyone attempting to trace your online behaviour back to you, is actually tracing your behaviour back of that server, which is used by thousands of people. It’s like attempting to discover your home address, but only finding a busy train station. Voila, you are anonymous.
At SoftwareLab, we test the VPN of each of the security companies, and check several factors:
- How does the VPN connection influence your upload and download speed, and your latency (ping)?
- How many servers are available and in what regions?
- What security features does the VPN have (AES-256 encryption, a kill-switch and the OpenVPN protocol are key features)?
- How much does the VPN cost?
- Who owns the VPN? Has the antivirus company created its own VPN (as Norton has), bought an existing VPN firm (as McAfee has), or is it selling a partner’s VPN service under its own name (as BitDefender, Panda, and BullGuard do)?
The final privacy score is largely dependent on the quality of the VPN. But it is still influenced by the presence (or lack thereof) of other privacy features, such as a webcam and microphone protection, and an anti-tracker.
Speed
The final factor that we take into consideration when selecting the best antivirus for macOS, is the impact on the operating speed.
All software that operate continuously in the background require a certain amount of resources to run. But it shouldn’t be noticeable.
AV-Test dedicates a specific part of their test to measuring the impact a security tool has on the operating speed – called the performance section. We use their test results, combined with our own experience working with the antivirus software, to reach an objective verdict in this category.