Detection, quarantining, deleting

In the area of protection, the lab examines the capability of detecting malware. The digital malware samples are mostly brand-new. First the products for consumers were evaluated. Managing to complete the test error-free and with 100 percent detection were Avast, Bitdefender, Intego, NortonLifeLock and Trend Micro. The packages from Avira and F-Secure followed close behind at 99.8 percent detection each.

The packages for endpoints in a corporate environment can ferret out the digital attackers even more effectively. The solutions from Bitdefender, ESET, FireEye and Symantec detected the attackers 100 percent. The product from Sophos committed a miniscule error: 99.9 percent.

No braking allowed!

In the test category of performance, the lab tests the level of resources the protection packages require and thus the load placed on the Mac. The test uses a reference Mac and performs a variety of tasks on it, such as copying files, downloads, launching programs or installing apps. The testers clock the times required as a reference value. The lab then repeats all the tasks with an installed protection solution.

There were hardly any anomalies among the packages for private users in the current test. In fact, the packages from Avast, Intego, NortonLifeLock, Trend Micro and F-Secure achieved the full 6 points. The protection packages from Bitdefender and Avira slowed the system down slightly, and for this they received a small point reduction: 5.5 points each.

Among the corporate solutions, ESET, Sophos and Symantec earned the full 6 points, as they placed no measurable load on the system. Bitdefender was somewhat conspicuous: 5.5 points. Only FireEye slowed things down a bit more in places: 5 points.

Sorry, false alarm!

Every false positive committed by a protection solution causes slight panic in users or creates unnecessary work for support staff in corporate environments. In order to test this detection function, in the category of usability, the testers ran just under 130,000 harmless files through the systems and observed what the protection solutions detected. The result was perfect! Among the packages for private users in all solutions for corporate user, there was not a single false alarm. That is why all the products garnered the full 6 points.

Extra tests without point rating

With the categories discussed thus far, the certification tests and point ratings were complete. But the testers were also interested in examining how Mac and Windows interact. After all, both systems often operate within one network. If malware for Windows lands in a Mac, this naturally does not disrupt the Mac. But the digital malware sample could threaten the Windows PCs over the network. That is why without conducting any rating, the lab evaluated whether the Mac protection packages detected Windows malware.

The lab also checked whether the packages were able to detect potentially unwanted applications – PUAs for short – and warn against them. The programs are not dangerous, but they can really get on users' nerves.

For the Windows and PUA test, the testers used Windows malware over 2,800 times and just under 1,000 PUAs. Among the consumer packages, Avast, Bitdefender and Trend Micro achieved detection rates above 99 percent. Intego was just below this value. Avira, NortonLifeLock and F-Secure averaged significantly poorer results.

The detection rate among corporate solutions turned out to be generally higher: Bitdefender, ESET, Sophos and Symantec found the Malware and PUAs at rates of 95 to 99 percent. Only FireEye came in lower.

The best MacOS protection programs

The final test table shows that there is really good protection software out there for the Mac – for both consumer and corporate users.

For consumers, the top recommendations are the products in the test scoring 18 points. They came from Avast, Intego, NortonLifeLock and Trend Micro. But the jockeying for first place could hardly have been more heated, as Bitdefender and F-Secure followed with 17.5 points. Even the last place was still very good, as Avira earned 17 out of 18 possible points.

The corporate endpoint solutions also achieved very favorable results. ESET, Sophos and Symantec racked up the full 18 points. Hot on their heels were Bitdefender with 17.5 points and FireEye with 17 points. One highlight worth noting: all corporate products received the full 6 points in the most important category of malware detection!