Skip to content
US & Canada EditionGet The List — free weekly

The Edit — Tech

Antivirus: What It Stops and What It Does Not

Two independent labs test this software to a published methodology and detection rates cluster near 100%, including the protection already on your computer. The owner scores say something else entirely.

ByTheo Vance AI analyst·Published September 7, 2026·7 min read

This guide is research-led: we have not handled these units ourselves. If you buy through our links we may earn a commission — it never changes a pick. How we choose

Two independent European laboratories, AV-TEST and AV-Comparatives, test this software against live malware on a published methodology and release the results. That makes antivirus one of the few consumer categories where the central claim is independently measured.

The quick list

Every pick, in order. Jump to the full test on any of them.

  1. Highest rated here

    McAfee Total Protection 2026, 5 Devices

    The best-rated product in a category where the best rating is 4.2, and owners describe the software itself as the thing that annoys them.

    4.2from 1,818 verified reviews
  2. McAfee Total Protection, 3 Devices

    14,433 ratings, effective by most accounts, and installation is where the reports divide rather than protection.

    4.2from 14,433 verified reviews
  3. Most-reviewed

    Norton 360 Deluxe, 5 Devices

    20,927 ratings at 4.0, and the protection is not what owners complain about — the installation and the billing are.

    4.0from 20,927 verified reviews
  4. Norton 360 Premium, 10 Devices

    Owners praise the security and the low system overhead, and name the auto-renewal directly as the thing they dislike.

    4.0from 12,270 verified reviews

Detection is close to solved

The headline finding across both labs is dull: the major products all score between 99.5% and 100% against widespread malware, and they have for years. The gap between the best and the tenth-best is a fraction of a percentage point.

That includes the protection already built into current desktop operating systems, which now sits alongside the paid suites in the same test rounds rather than below them.

So the question is not whether a paid product detects better. It is whether the things bundled around the scanner are worth a subscription, and whether the false-positive rate is low enough that the software stays out of your way.

The two numbers the labs publish

Protection rate is the share of live samples blocked. Read it against the whole field rather than in isolation, because 99.6% and 100% are not meaningfully different when the sample set is a few hundred files.

False positives is the number of clean files wrongly flagged, and it is the score that separates products. A scanner that quarantines a legitimate installer is a scanner people switch off, which takes the protection to zero.

Both labs also run a performance test measuring the slowdown a suite imposes on ordinary tasks. That figure predicts whether you will still be running it in a year better than the detection rate does.

Norton 360 Premium, 10 Devices

Owners praise the security and the low system overhead, and name the auto-renewal directly as the thing they dislike.

4.0from 12,270 verified reviews
See it at AmazonSee Norton 360 Premium, 10 Devices on Amazon (opens in a new tab)

Current price shown on Amazon. We may earn a commission.

Specifications for Norton 360 Premium, 10 Devices
Covers10 devices
Owners praiseLow system overhead
WatchAuto-renewal disliked explicitly

Owners describe excellent security with low system overhead, which is the performance measure above showing up in the wild. On a machine that is already slow, that matters more than a decimal place of detection.

What they name as the problem is the auto-renewal, explicitly and repeatedly. That is a billing complaint attached to a product doing its technical job, and it is the pattern across this whole page.

Buy it if

  • You have a large household or a small office
  • System performance matters to you

Don't buy it if

  • You would forget to cancel

The 2 detection methods every suite uses

Signature detection compares a file against a database of known malware. It is fast, exact, and useless against anything written last week.

Behavioural or heuristic detection watches what a program does — encrypting files in bulk, editing startup entries, injecting into other processes — and stops it on that basis. It catches novel threats and it is also where false positives come from.

All 4 products on this page do both, as does the scanner in Windows and macOS. The marketing terms layered on top, whatever a box calls them, describe the same 2 mechanisms.

The category rating is a billing rating

Rank these products by owner rating and nothing scores above 4.2. That is a whole category sitting where the automatic litter boxes sit, and the reports say plainly what causes it.

Owners are largely positive about protection. What they raise, again and again, is auto-renewal at a price nobody quoted them, installation that failed, downloads that would not activate, and prompts that will not stop.

Product Rating Ratings
McAfee Total Protection 2026, 5 devices 4.2 1,818
McAfee Total Protection, 3 devices 4.2 14,433
Norton 360 Deluxe, 5 devices 4.0 20,927
Norton 360 Premium, 10 devices 4.0 12,270
Most-reviewed

Norton 360 Deluxe, 5 Devices

20,927 ratings at 4.0, and the protection is not what owners complain about — the installation and the billing are.

4.0from 20,927 verified reviews
See it at AmazonSee Norton 360 Deluxe, 5 Devices on Amazon (opens in a new tab)

Current price shown on Amazon. We may earn a commission.

Specifications for Norton 360 Deluxe, 5 Devices
Covers5 devices
BillingAuto-renews
WatchInstallation failures reported

20,927 ratings makes this the most-evidenced product here, and owners report it preventing virus and malware problems effectively. The protection is not in dispute.

Installation splits sharply, with some owners reporting it straightforward and others reporting outright failures, and the listing states auto-renewal in the title. Buy the boxed key rather than the auto-renewing download if you would rather decide again next year than be billed.

Buy it if

  • You want the most-evidenced suite available
  • You will diarise the renewal date

Don't buy it if

  • Automatic renewal at an unquoted price would bother you
Highest rated here

McAfee Total Protection 2026, 5 Devices

The best-rated product in a category where the best rating is 4.2, and owners describe the software itself as the thing that annoys them.

4.2from 1,818 verified reviews
Specifications for McAfee Total Protection 2026, 5 Devices
Covers5 devices
Owners praiseCost across several machines
WatchConstant prompts reported

4.2 is the highest rating in this category, on 5-device coverage that owners rate as cost-effective across a household. That is the honest case for a suite: one subscription is cheaper than several.

The complaint is the software’s own behaviour — owners describe constant prompts as annoying. A security product that trains you to dismiss its notifications has undermined the thing you bought it for.

Buy it if

  • You are covering a household of machines
  • You want one subscription rather than several

Don't buy it if

  • Notifications and upsell prompts would irritate you

What a suite adds beyond the scanner

The scanner is commodity. What the paid tiers actually sell is a bundle: a VPN, a password manager, dark-web monitoring, parental controls, cloud backup and identity-theft cover.

Each of those is a real product with its own market, and each is available separately, often free or cheaper. The suite is a convenience purchase, and it is worth the money when you would otherwise buy 2 or 3 of those things anyway.

Judge it as a bundle rather than as protection. If the only component you will use is the scanner, the operating system already has one.

McAfee Total Protection, 3 Devices

14,433 ratings, effective by most accounts, and installation is where the reports divide rather than protection.

4.2from 14,433 verified reviews
Specifications for McAfee Total Protection, 3 Devices
Covers3 devices
Owners praiseQuick install on several laptops
WatchInstall and download reports split

Owners describe it as effective across several machines and quick to install on multiple laptops, which is the realistic use for a 3-device licence.

Functionality and installation both split, and the pattern is worth naming: in this category the reports divide on whether the software installed and behaved, almost never on whether it detected. That is the labs’ finding showing up in owner reviews.

Buy it if

  • You want a deep evidence base behind the purchase
  • Three machines is the right number

Don't buy it if

  • You want setup to be certain rather than likely

The 3 checks before buying

Look up the current AV-TEST or AV-Comparatives round, published every 2 months, and confirm the product is in the top group rather than trusting a box claim. Then check the false-positive column, which is where products genuinely differ.

Then read the renewal terms, which is what the ratings on this page are actually about. And read the robot vacuum shortlist for the same lesson carried to a purchase, or what the earbud spec sheet hides for it in a third category. The number a shelf competes on is rarely the number that decides whether you keep using the thing.