9 questions to ask before you buy a security suite
Here are the key facts you need to know about the latest releases
Do I really need security software?
It’s a fair question: back in the days of Windows 98, it was horribly easy to get a virus. All you had to do was open a dodgy email attachment, click on a malicious web link or plug in an infected USB flash drive. Nowadays, however, Windows 10 has all sorts of protections built-in, and receives regular security updates to ensure that newly-discovered vulnerabilities are fixed before they can be exploited.
Sadly, it’s not enough to guarantee your safety. Cybercriminals are constantly looking for new ways to bypass your security, and even if the vast majority of their efforts are thwarted, they only have to get lucky once to ruin your day. And it’s not just about technical tricks: the number one vulnerability is – no offence – you. Clever hackers look for ways to dupe innocent computer users into installing malicious software, or giving up their valuable credentials.
If you want to minimise your chances of being hit then yes, you need security software. And that doesn’t just mean Microsoft’s own Windows Defender Antivirus: this simple tool blocks the most common threats, but as we discuss on p88, it’s not as effective as third-party security software. It’s a good idea to at least consider upgrading to something smarter and more effective.
Is free security software worth it?
You might wonder why anyone would choose to pay for security software when there are several free antivirus tools out there – but the free packages generally come with strings attached. For a start, their interfaces are almost always loaded with adverts, trying to persuade you to upgrade to a paid-for security suite. Quite often you’ll see these appear as pop-up notifications, too. We’d have thought this nagging approach would generate more illwill than sales, but publishers keep doing it so it must be working.
The free packages tend to be basic: they’ll block a virus when it appears on your system, but they don’t include other features such as file encryption utilities or password tools. These are held back for paying customers – to encourage you to get your wallet out.
If you can live with those limitations, though, there’s nothing wrong with free antivirus software. Publishers normally use the same scanning systems and databases as in their paid-for suites. After all, it’s their reputation on the line if their free product lets a virus slip through.
Antivirus or security suite?
Many security products are offered in two flavours: a basic antivirus tool and a more extensive (and expensive) internet security suite. Both do the same basic job of detecting and removing malware – the difference is down to the extra features included in the “internet security suite”. But different publishers have different ideas about where exactly to draw the line. Some “antivirus” products come with more extra features than you would expect, such as browser extensions and password managers – while conversely there’s no guarantee that a given security suite will include a particular feature. Many security suites no longer even include a firewall, as we discuss below.
It’s understandable that certain publishers – including McAfee and Symantec – have chosen to ditch the traditional “antivirus” and “security suite” labels altogether. When it comes to choosing a suite, we suggest you forget about the distinction, and check our feature table overleaf for the features that are important to you.
Do I need a 2018 suite?
A few years back, it was the norm for security vendors to release a major software update each year. That model’s on its way out, though. Most of the security suites in this month’s Labs don’t have any sort of year or version number in their name – and even among the ones that do, you might find that when you install the software the 2018 branding is nowhere to be seen.
While it might seem a bit prosaic, this is good news. Rather than holding back new features and enhancements for an annual update, it’s now the norm for publishers to make them available to all users as soon as they’re ready. That means you don’t have to worry about missing out on updates because they’re being held back for next year’s release.
What’s more, the rolling update model can help you save money, as there’s no longer any firm division between releases of the software. If you can find an older edition of your
“The free packages tend to be basic: they’ll block a virus when it appears on your system, but they don’t include other features”
chosen suite online, you can often buy it at a discount – and then use the licence key to download and register the very latest version.
Be a smart shopper
Pricing is a slippery thing. If you browse around a few security vendor websites, you’ll see lots of “special offers” and “discounts” – aimed at scaring you into buying now before the price goes back up. Sometimes these are genuinely good deals, but it’s always worth checking out a few online retailers before making your purchase. Some publishers allow third parties to sell their wares for much less than the price you’ll pay on the official website. This is less common than it used to be, but Kaspersky is one notable name that still permits cut-price sales. And don’t forget the tip above about looking for last year’s release either.
Remember that getting the best up-front price is only half of the battle. Once your initial subscription is up, your security suite will almost invariably offer you a nice, easy way to extend it for another year – for a much steeper price. This is your cue to take a fresh look at your options: it may be that some other security suite is now the best value option. Even if you want to stick with your existing software, you can normally save money by buying a new licence and adding it to your account, rather than paying full price an extension.
Is a firewall necessary any more?
A decade or so ago, every internet security suite came with a firewall, designed to put you in control of who (or what) could connect to you over the internet – and to ensure that if something nasty did get onto your computer, it couldn’t spread or phone home without your say-so.
In truth, this was always a little bit odd, because Windows already had its own configurable firewall. The feature was added to Windows XP in 2004, with the express intention of shutting off online attacks. It did this very well, and over the years it’s only got better. At the same time, the rise of the household router has also made it much harder for attackers to connect directly to your PC over the internet.
Many security experts agree, therefore, that the Windows 10 firewall is nowadays all you need. If there’s a problem with it, it’s only that it’s not very user-friendly. Some suites address that by including firewall management tools, which automatically apply certain settings, or help you configure rules and exceptions. Others still provide a proprietary firewall, which might well be easier to configure. If all you’re looking for is online safety, however, a standalone firewall is no longer a necessity.
The truth about safe browsing
The web can be a dangerous place – you never really know what’s behind a link until you click on it. Hack attacks can even lead to malware being distributed by reputable sites. Most security suites monitor your browser, to warn you away from danger and dangerous downloads.
There are several ways of doing this, however. Most suites can inspect your internet traffic as it comes in, and vet the code running on a web page, to warn you if something’s amiss – regardless of the browser you’re using. For a more integrated experience, publishers often also offer an optional browser extension, which can manipulate web pages to place warnings directly on the page, and actively block dodgy content. These extensions are a mixed blessing, though: they can slow things down, and may include intrusive toolbars or adverts. Some will even filter your web searches, to ensure that only safe results are returned – the catch being that the results you see typically come from a second-tier provider such as Yahoo or Ask.com.
Finally, several suites also include a dedicated “safe browser” – typically a modified version of Chrome with minimal features and which won’t accept any extensions or customisations of any type. This makes it all but impossible for a hacker to hijack your browser and spy on sensitive activities such as online banking. It’s a feature worth looking for.
Password managers
Several security suites include a password manager, which can be used to generate unique passwords for every online service you use, and automatically fill them as needed in as you go about your business. Generally speaking, this is an excellent idea: if you use the same password for everything, one data leak – from any site – could allow a hacker to hijack all your personal services. An easily guessable password is just as bad.
Before you get invested in a bundled password manager, check the small print. In many cases, the password manager is a subscription feature. You might only have the use of it for as long as you carry on using that security suite – or you might even have to pay extra for it once you reach the end of a trial period.
If you don’t like the terms, it’s no problem: there are plenty of free standalone password managers, including 1Password, Dashlane and LastPass. In many cases you can even download the password manager that’s included with a different suite. Whichever manager you choose, the feature to look for is the ability to synchronise the password database across all the platforms you use.
Parental controls
Nearly half of the suites in this month’s Labs feature some sort of parental control module, allowing you to restrict how and when your child uses the computer. If your offspring is old enough to explore the internet on their own, that might appeal.
Before you invest, check out the free family features built into Windows 10. At account.microsoft. com/family, you can set up per-user screen-time limits, block unsuitable websites and limit access to apps, games and media based on age ratings.
Those free features might do all you need, but there are advantages to third-party parental controls. Microsoft’s restrictions only work in Internet Explorer and Edge, while most other systems will also work with Chrome and Firefox. They’ll also work with older versions of Windows, and they give you category-based control over which sites are blocked.
“Most suites can inspect your internet traffic as it comes in, and vet the code running on a page to warn you if something’s amiss”