AV-TEST Product Review and Certification Report – Mar-Apr/2024
During March and April 2024 we continuously evaluated 17 home user security products using their default settings. We always used the most current publicly-available version of all products for the testing. They were allowed to update themselves at any time and query their in-the-cloud services. We focused on realistic test scenarios and challenged the products against real-world threats. Products had to demonstrate their capabilities using all components and protection layers. Further information on the compliance of this test with the AMTSO standard can be found here.
![](/fileadmin/_processed_/3/0/csm_Microsoft_250x125_b795327f9e.png)
Defender Antivirus (Consumer)
Version | 4.18 |
Platform | Windows 11 Professional (English), (64-Bit) |
Report | 241213 |
Date | Mar-Apr/2024 |
Protection
Protection against malware infections
(such as viruses, worms or Trojan horses)
More information
Industry average![]() | March | April | |
Protection against 0-day malware attacks, inclusive of web and e-mail threats (Real-World Testing) 316 samples used | 99.5% | 100% | 100% |
Detection of widespread and prevalent malware discovered in the last 4 weeks (the AV-TEST reference set) 19,228 samples used | 100% | 100% | 100% |
Protection Score | 6.0/6.0 |
Performance
Average influence of the product on computer speed in daily usage
More information
Industry average![]() | Standard PC | Industry average![]() | High end PC | |
Slowing-down when launching popular websites 65 websites visited | 23% | 19% | 21% | 13% |
Slower download of frequently-used applications 25 downloaded files | 1% | 0% | 1% | 0% |
Slower launch of standard software applications 70 test cases applied | 9% | 10% | 5% | 7% |
Slower installation of frequently-used applications 24 installed applications | 15% | 22% | 16% | 26% |
Slower copying of files, locally and in a network 9,828 files copied | 3% | 1% | 4% | 0% |
Performance Score | 6.0/6.0 |
Usability
Impact of the security software on the usability of the whole computer
(lower values indicate better results)
More information
Industry average![]() | March | April | |
False warnings or blockages when visiting websites 500 samples used | 0 | 0 | 0 |
False detections of legitimate software as malware during a system scan 1,017,422 samples used | 2 | 0 | 0 |
False warnings concerning certain actions carried out whilst installing and using legitimate software 20 samples used | 0 | 0 | |
False blockages of certain actions carried out whilst installing and using legitimate software 20 samples used | 0 | 0 | |
False warnings concerning certain actions carried out whilst installing and using legitimate software 20 samples used | 0 | 0 | |
False blockages of certain actions carried out whilst installing and using legitimate software 20 samples used | 0 | 0 | |
False warnings concerning certain actions carried out whilst installing and using legitimate software 30 samples used | 0 | 0 | |
False blockages of certain actions carried out whilst installing and using legitimate software 30 samples used | 1 | 0 | |
Usability Score | 6.0/6.0 |
Evaluation based on a point system
All products can achieve a maximum of 6 points each in the three categories of protection, performance and usability. This means 18 points are the best possible test result.
At 10 points or higher, a product is awarded the AV-TEST seal of approval.
At 17.5 points or higher, AV-TEST also issues the "TOP PRODUCT" award. Additional details ›
![]() | ![]() | ![]() | ![]() ![]() |
outstanding | satisfactory | insufficient | certificates |
![ATP Test under Windows 11 – The Advanced Threat Protection (ATP) test goes considerably farther than traditional tests: It evaluates security products in 10 realistic scenarios involving ransomware and info stealers, which utilize or combine state-of-the-art attack techniques. In doing so, the ATP test analyzes whether the defensive measures hold up in each step – or where they fail. The 12 tested products for consumer users and corporate users, running on Windows 11, are required to hold their own against techniques such as COM hijacking, reflective code loading, decoupling and low entropy encoding. Many products were up to the task, but not all. In some cases, the last firewall failed, and data was encrypted, stolen, or both.](/fileadmin/_processed_/8/8/csm_1224_ATP_Oktober24_6a1a421aac.png)
Ransomware: 12 security packages and solutions for Win11 in the...
January 17, 2025 | Antivirus for Windows
![Security software in the advanced test – Cyber attackers are constantly tweaking new attack techniques, honing existing ones or combining them into an attack wave. In the latest Advanced Threat Protection test (ATP), the experts from AV-TEST examined how well protection products detect and fend off the newly developed attacks. In the test lab, 6 products for consumer users and 8 solutions for corporate users demonstrated how well they can parry attacks. In the test, attackers with ransomware and info stealers harnessed the techniques of dynamic API resolution, DLL sideloading, PowerShell ScriptBlockAst command concealment, cloaking themselves in known Windows tools. The test indicates that some protection products are hard put to deal with the attack techniques and cannot always withstand the attacks.](/fileadmin/_processed_/3/5/csm_1024_aufmacher_atp_634fe63c38.jpg)
ATP TEST: concealed attacks of ransomware and info stealers ...
November 20, 2024 | Antivirus for Windows
![A test commissioned by NordSec In September/October 2024, AV-TEST performed a comparison test of ExpressVPN, IPVanish VPN, Mullvad VPN, NordVPN and Proton VPN. The test focused on their additional capabilities of blocking malicious URLs and phishing websites as well as false positive avoidance.](/fileadmin/_processed_/3/e/csm_AV-TEST_NordSec_VPN_Additional_Security_Feature_Evaluation_November_2024_16da948510.png)
Evaluation of an Additional Security Feature for VPN’s ...
November 19, 2024 | Commissioned tests, VPN tests