AV-Comparatives Real-World Protection Test July-August 2025

Disclaimer
  1. This test shows how an antivirus behaves with certain threats, in a specific environment and under certain conditions.
    We encourage you to compare these results with others and take informed decisions on what security products to use.
    Before buying an antivirus you should consider factors such as price, ease of use, compatibility, and support. Installing a free trial version allows an antivirus to be tested in everyday use before purchase.

The tests are designed to determine differences between the various detection rates. Naturally, you then need to choose a graphical representation that also makes these differences visible. I completely agree with you: if the starting point of the bars in the graph were zero, then it would be almost impossible to detect any difference between the individual AV programs. However, in that case, you could also forgo such tests altogether. There are certainly good reasons for this opinion, because the observed differences in detection performance are only slight, at least among the established AV providers.
 
Looking at the 'bar charts' its interesting how the starting point is now 80% which is somewhat manipulating, starting at that point does give some red to AV's tested, if the starting point was not 80% or zero there would be little red at the top of any of the AV's - As has been mentioned many times bar for a couple of AV;s it really makes little or no difference which you use in normal life, this wasn't the case some years ago - What's next 90%?
Most all labs will adopt a 90 to 95% threshold. That reflects the reality of the products within the context of the specific test designs.

No matter how much effort is put into these tests to remove bias and to ensure that they replicate "real world" conditions, the test authors can never remove that stuff and therefore the test results are misleading to the person who reads the reports and doesn't know any better.

AV test labs do not exist for consumers, enterprises, or governments. They are for profit organizations whose first duty is to their paying clients.

"5 Stars and All Green Bars" = marketing materials for the subscriber test participants.
 
For reasons unclear
I think the hint may be as followed:
If there are people reading them who are not security/AV geeks
Haha, the users of other forums would have settled for the established opinion already: using Windows Defender is good enough for most users.

Why would I mindlessly follow @Parkinsond's post in an ultimate quest for free AV solutions? Spare time and weird hobbies.
 
Looking at the 'bar charts' its interesting how the starting point is now 80% which is somewhat manipulating, starting at that point does give some red to AV's tested, if the starting point was not 80% or zero there would be little red at the top of any of the AV's - As has been mentioned many times bar for a couple of AV;s it really makes little or no difference which you use in normal life, this wasn't the case some years ago - What's next 90%?
I do not look at the bar graph; I hover each to read the exact percentage.
 
Yes, try it. I know you can uninstall them but who knows what how many file/registry leftovers it leaves behind and it requires a reboot after you uninstall them.
Actually, even before, the extra components that we would unselect were still installed on the device, but they were in a disabled state. Everything is still the same now, except that previously we could unselect them prior to installation, and now, we have to do it after installation. So, an extra inconvenience.
 
Actually, even before, the extra components that we would unselect were still installed on the device, but they were in a disabled state. Everything is still the same now, except that previously we could unselect them prior to installation, and now, we have to do it after installation. So, an extra inconvenience.
I just switched to my lifetime Malwarebytes lifetime license due to this
 
I think the hint may be as followed:

Haha, the users of other forums would have settled for the established opinion already: using Windows Defender is good enough for most users.

Why would I mindlessly follow @Parkinsond's post in an ultimate quest for free AV solutions? Spare time and weird hobbies.
I don't agree. WD is a very inferior av and very easy to bypass with any script. If WD were so "enough", first of all, Microsoft wouldn't use a third party AV to protect their computers and second, third party antivirus companies wouldn't exist.
 
  • Like
Reactions: likeastar20
I don't agree. WD is a very inferior av and very easy to bypass with any script. If WD were so "enough", first of all, Microsoft wouldn't use a third party AV to protect their computers and second, third party antivirus companies wouldn't exist.
 
I don't agree. WD is a very inferior av and very easy to bypass with any script. If WD were so "enough", first of all, Microsoft wouldn't use a third party AV to protect their computers and second, third party antivirus companies wouldn't exist.
 
Whoa, that feels like a bit of an overreaction.


Sure, Windows Defender (WD) isn’t perfect—no antivirus is—but calling it “very inferior” and “easy to bypass with any script” is a stretch. WD has come a long way in recent years and consistently ranks well in independent tests like AV-Test and AV-Comparatives. It’s tightly integrated with Windows, gets frequent updates, and uses cloud-based protection and behavior monitoring.


Also, the idea that Microsoft uses third-party AVs to protect their systems isn’t entirely accurate. Most of their consumer and enterprise setups rely on Defender, especially with Defender for Endpoint in business environments. And the existence of third-party AVs doesn’t automatically mean WD is bad—it just means people want options, and some may prefer more features or different approaches.


If someone’s running shady scripts, any AV can be bypassed. Security is layered—AV is just one part. So let’s not throw WD under the bus too quickly. It’s more than “enough” for the average user when combined with smart browsing habits and regular updates.
 
Whoa, that feels like a bit of an overreaction.


Sure, Windows Defender (WD) isn’t perfect—no antivirus is—but calling it “very inferior” and “easy to bypass with any script” is a stretch. WD has come a long way in recent years and consistently ranks well in independent tests like AV-Test and AV-Comparatives. It’s tightly integrated with Windows, gets frequent updates, and uses cloud-based protection and behavior monitoring.


Also, the idea that Microsoft uses third-party AVs to protect their systems isn’t entirely accurate. Most of their consumer and enterprise setups rely on Defender, especially with Defender for Endpoint in business environments. And the existence of third-party AVs doesn’t automatically mean WD is bad—it just means people want options, and some may prefer more features or different approaches.


If someone’s running shady scripts, any AV can be bypassed. Security is layered—AV is just one part. So let’s not throw WD under the bus too quickly. It’s more than “enough” for the average user when combined with smart browsing habits and regular updates.
Microsoft does not use Windows Defender.
Deactivate the cloud in WD. It is very easy to skip WD, and with scripts that are quite easy to program.
Although Microsoft has "improved", it is still a mediocre antivirus and completely dependent on the cloud. The clearest proof is Microsoft itself. There is no worse blind man than he who does not want to see.
 
Microsoft does not use Windows Defender.
Deactivate the cloud in WD. It is very easy to skip WD, and with scripts that are quite easy to program.
Although Microsoft has "improved", it is still a mediocre antivirus and completely dependent on the cloud. The clearest proof is Microsoft itself. There is no worse blind man than he who does not want to see.
and regarding corporate sector (including MS company)

Screenshot_30-9-2025_17420_www.av-comparatives.org.jpeg


 
  • Like
Reactions: simmerskool
I don't agree. WD is a very inferior av and very easy to bypass with any script. If WD were so "enough", first of all, Microsoft wouldn't use a third party AV to protect their computers and second, third party antivirus companies wouldn't exist.
Fact Check

Microsoft Uses Its Own Security, Not Third-Party Antivirus


Contrary to this post, Microsoft does not use third-party antivirus software in its corporate and coding environments. Instead, the technology giant relies on its own comprehensive, in-house security suite, with Microsoft Defender at its core.

Evidence strongly indicates that Microsoft's internal cybersecurity strategy is centered around its own products, including "Microsoft Defender Antivirus" and the more advanced "Microsoft Defender for Endpoint". This approach, often called "dogfooding," involves using their own software to ensure its effectiveness and to showcase its capabilities to customers.

While Windows operating systems are designed to be compatible with third-party antivirus solutions, and will even disable Microsoft Defender when a different antivirus is installed, Microsoft's corporate policy is to utilize its integrated security ecosystem. This system extends beyond basic antivirus to include threat protection, identity management, and cloud security.

This post's assertion that Microsoft is using a third-party AV would be an admission of its own product's inferiority, and is a moot point, as there is no credible information to support the claim. In fact, public statements and documentation from Microsoft consistently highlight the robust capabilities of Microsoft Defender in enterprise settings.

The existence of a thriving third-party antivirus market is not an indictment of Microsoft Defender's quality. The cybersecurity landscape is diverse, and organizations may choose third-party solutions for various reasons, including legacy system compatibility, specific feature sets, or established vendor relationships. However, for its own extensive network, Microsoft trusts its own security solutions.


Sources

"Microsoft Support"

[Virus and Threat Protection in the Windows Security App]

(Virus and Threat Protection in the Windows Security App - Microsoft Support)

"Microsoft Security"

[Microsoft Defender for Business]

(Microsoft Defender for Business | Microsoft Security)

"Reddit"

[Why do companies prefer to add 3rd party products into Microsoft suites]

()

"Microsoft Learn"

[Why you should use Microsoft Defender Antivirus together with Microsoft Defender for Endpoint]

(Why you should use Microsoft Defender Antivirus together with Microsoft Defender for Endpoint - Microsoft Defender for Endpoint)

"Avertium"

[Microsoft Security Solutions]

(Microsoft Security Services | Avertium)