How We Test, Rate, and Review Antivirus Software

Antivirus software is necessary to keep your internet-connected device free from Trojans, viruses, malware, and potentially unwanted programs. To choose the best option for you, learn how we test, rate, and review it.
We receive compensation from the products and services mentioned in this story, but the opinions are the author's own. Compensation may impact where offers appear. We have not included all available products or offers. Learn more about how we make money and our editorial policies.

Antivirus software works by protecting your computer, mobile, and other internet-connected devices from viruses, Trojans, and malware, including ransomware.

Most modern antivirus uses a combination of application whitelisting and blacklisting to protect users. Application whitelisting creates a list of things that are safe and only allows those things through, while blacklisting creates a list of unsafe things that are blocked when recognized.

We evaluate these products based on independent third-party testing, our own in-house testing, and the overall value they provide. We then weigh each feature and calculate an overall star rating out of 5 possible stars.

Antivirus star rating

All products are tested on our own devices with subscriptions bought using our own money. Here’s what goes into every antivirus rating that we display on All About Cookies.

In this article
Protection features (30%)
Test results (30%)
Quality of scans (20%)
Ease of use (10%)
Value (10%)
How we calculate our ratings

Protection features (30%)

This section of our rankings determines how the antivirus software protects you from malware, viruses, Trojans, and hackers. Protection features are very important and need to function properly.

Real-time protection

What it is: Real-time protection is the ability to protect you as you’re using the internet, including blocking malicious downloads as they happen. This is different from virus scans, which search for files that are already on your computer.

How we test it: We turn on the antivirus real-time protection and try to download fake virus files.

How we rate it:

  • Best: The antivirus has real-time protection on by default and it blocks fake virus download before it can be downloaded.
  • Worst: The software has no real-time protection available.

Surfshark real-time protection catching a threat

Firewall

What it is: A blocker that filters internet traffic to catch anything malicious before it infects your computer.

How we test it: We turn on the firewall feature, if available, and run EICAR testing to see if it catches the test files.

How we rate it:

  • Best: A robust firewall that filters out harmful executable files while allowing through everything that’s safe.
  • Worst: A firewall that doesn’t work at all or blocks so much that you can’t use your computer.

Bitdefender firewall settings

Test results (30%)

Independent third-party testing is one of the best ways to evaluate a security product. We take test results from the two most reputable companies — AV-TEST and AV-Comparatives — as well as our own EICAR testing, to see how well the software works.

EICAR tests

What it is: European Institute for Computer Anti-Virus Research (EICAR) is an independent company that provides test files that mimic malware, viruses, Trojans, phishing, and potentially unwanted programs to test the effectiveness of your antivirus software.

How we test it: We turn on the antivirus software and run the files from EICAR.

How we rate it:

  • Best: The antivirus software blocks everything from EICAR without blocking other good programs.
  • Worst: The antivirus software lets everything through and fails all the EICAR tests.

AVG EICAR malware test blocked

AV-TEST results

What it is: A reputable third-party service that rigorously tests antivirus software. It should be noted that companies have to pay to be evaluated by AV-TEST, but AV-TEST only gives accurate findings and doesn’t play favorites.

How we test it: We search for the most recent AV-TEST scores on each individual product.

How we rate it:

  • Best: A perfect score from AV-TEST without any breaches or glitches.
  • Worst: A failing grade from AV-TEST.

Malwarebytes AV-TEST protection score on Windows, August 2023

AV-Comparatives results

What it is: Another reputable third-party service that rigorously tests antivirus software. Again, companies must pay to be evaluated, but that is for the privilege of evaluation and doesn’t affect the results.

How we test it: We also search AV-Comparatives for the most recent scores for each product.

How we rate it:

  • Best: A perfect score without any issues.
  • Worst: A failing grade or serious issues with the service.

SE Labs results

What it is: A U.K.-based firm that evaluates cybersecurity products and services. Like AV-TEST and AV-Comparatives, SE Labs uses a combination of the most aggressive and most modern malware, viruses, and Trojans to test an antivirus’ effectiveness.

How we test it: We search SE Labs for the most recent testing and scores for each product evaluated.

How we rate it:

  • Best: A perfect score from SE Labs with no performance issues.
  • Worst: A failing score or low score with performance issues.

Quality of scans (20%)

This refers to the type and efficiency of the antivirus scans meant to catch anything malicious or even unwanted from your device. A scan is essential to catching anything that real-time protection doesn’t.

Manual and scheduled scans

What it is: Manual scans are ones you initiate yourself while scheduled ones can be set-and-forget routine security measures.

How we test it: When testing the product, we look for the ability to scan manually as well as set scheduled scans.

How we rate it:

  • Best: Offers both manual and scheduled scans and may include unscheduled scans run by the antivirus software as a precautionary measure.
  • Worst: Doesn’t allow you to scan your device at will.

Avira allows you to set up scheduled smart and quick scans.

Scan speed

What it is: This is how fast your software scans your device for viruses, Trojans, malware, and potentially unwanted programs.

How we test it: We run full disk scans along with quick scans and anything else offered by the software during our testing.

How we rate it:

  • Best: A full disk scan that takes less than 5 minutes and does not affect the operation of your computer or other device while the scan is running.
  • Worst: A scan taking 30 minutes or more and makes your device unusably slow while scanning.

ZoneAlarm full scan timer

Ease of use (10%)

If software is too confusing, you may not want to use it. We evaluate how easy a product is to use, especially for those who aren’t tech savvy, and how well the design and interface make using the antivirus a breeze.

User interface

What it is: This is how you see and use the product.

How we test it: We examine a product as if we knew nothing about how it’s supposed to work. Our evaluation includes finding every advertised feature to see if it’s readily available or if you have to search for it.

How we rate it:

  • Best: A modern, clean dashboard that has all the features easily accessible and written in plain language.
  • Worst: An outdated-looking dashboard with overly technical terms and features hidden away in menus that you have to click endlessly to find.

Screenshot of Bitdefender Antivirus Free dashboard showing your device is at risk messages.

Customer service

What it is: This refers to the customer service options, the efficiency of the service provided, and the time it takes to receive a response from support.

How we test it: We reach out to support like any other customer via all the available channels.

How we rate it:

  • Best: A product with live chat or phone support that goes directly to a real person who can help us in plain language.
  • Worst: Only email or web-based submission forms that take hours or days to receive a response, if you get one at all.

Norton 360 customer support live chat

Value (10%)

This evaluates how much value the product adds at its price point, especially in comparison to its competitors. Products that offer a lot for a little provide the most bang for your buck. We also look at free products to make sure they keep your data safe and do what they advertise.

Price and plans

What it is: What features and functionality you get for the price you pay for the software.

How we test it: We compare each antivirus to competitors to see who’s offering the best value for the money.

How we rate it:

  • Best: Free or less than $10/yr that offers everything from scheduled scans and real-time protection to extras like a firewall or a VPN.
  • Worst: Anything that costs more than $50/yr and gives you very little or offers features that aren’t very useful to the everyday person.

How we calculate our ratings

We’ve included the percentages of how each aspect is weighted when we evaluate the software. We keep a grading rubric where we enter all the information based on a 5-star system. Once the totals are tallied, we input our star rating on our product reviews based on the breakdown you see above.

Testing is not a one-and-done situation. We retest products regularly and give updates on if and how the service has changed. This allows us to recommend the best antivirus software so you can make an informed decision.