2026 edition
The 2026 roundup: consumer antivirus in Australia
This is the current edition of an annual review. It describes what the consumer antivirus category consists of as it is sold to Australian buyers in 2026, sets out the criteria used to look at any product in it, and records in detail the one product this site has a commercial relationship with. Earlier editions are not published on this site; this is the edition in force.
The commercial position, stated before anything else
Surfshark Antivirus is linked from this page through a paid affiliate arrangement. A subscription bought after following that link earns MSMM-SOU s.r.o. a share of the sale from the vendor. The price you are charged is the vendor's own and is not increased by the commission. No payment has been made for a favourable description, and there is nothing on this page a vendor has approved or reviewed.
What a consumer antivirus subscription consists of in 2026
The word "antivirus" now names a bundle rather than a program. Underneath it sit several components that were separate products a decade ago, and separating them again is the most useful thing a reader can do before spending money, because the components have different value depending on the device and on what is already installed.
- The malware engine
- The part that still deserves the name. It inspects files, archives, installers and running processes, comparing them against known-bad patterns and against models of how malicious code behaves. This is the component that every product in the category has.
- Real-time protection
- A driver or system extension that hooks into file and process activity so that inspection happens at the moment something is written, opened or executed, rather than only when a scan is run. It is also the component responsible for most of the performance cost people associate with antivirus software.
- Web and DNS filtering
- A list-based block on addresses known to host malware or phishing pages, applied either in the browser through an extension or at the name-resolution layer for the whole device. Its usefulness depends entirely on how current the list is.
- Bundled extras
- Password managers, VPN services, file shredders, "system cleaners", identity monitoring. These are genuinely separate products sold inside the same subscription. Some are useful; some duplicate a tool already in the operating system or the browser; a "cleaner" that promises to speed up a modern computer generally does not.
A reader comparing two subscriptions is usually comparing two different bundles, not two different engines. Working out which components you would actually use, before looking at any price, keeps the comparison honest.
The criteria this edition applies
The roundup is written against eight questions, applied in the same order to anything it covers. They test fit and terms rather than detection strength, because detection strength requires a laboratory and this publisher does not run one.
Platform coverage
Which operating systems the vendor states it supports. A household with a Linux desktop or an older Mac can be excluded by a product that otherwise suits it.
Device count
How many simultaneous installations a subscription allows, according to the vendor. Australian households commonly run more connected devices than an entry-level plan covers.
Component list
What the vendor states is included, separated out as above, so that a bundle is compared with a bundle.
Scanning model
Whether protection is continuous, scheduled, on demand, or a combination. This determines both the protection model and the day-to-day performance cost.
Subscription terms
Term length, what happens at renewal, and how a subscription is cancelled. The renewal is where most consumer dissatisfaction in this category begins.
Data handling
What the vendor's own privacy documentation says it collects and shares. Security software runs with deep access to a device, which makes its privacy policy more consequential than most.
Support route
How the vendor says a customer reaches help. This matters only once something has gone wrong, which is exactly when it is too late to check.
Australian availability
Whether the product is sold to Australian customers and billed in a way an Australian buyer can use.
Surfshark Antivirus: what this edition can state
This is the one product covered under a commercial arrangement, and the description below is confined to what the material this publisher works from actually says. Anything not listed here is not being withheld — it is simply not something this site can verify, and inventing it would make the rest of the page worthless.
| Criterion | Position in this edition |
|---|---|
| Platform coverage | Stated support for desktop computers running Windows, macOS and Linux; mobile devices running Android, iOS and Windows; tablets running iOS, Android and Windows. |
| Device count | Not stated here. Check the plan details on the vendor's site. |
| Component list | Described by the vendor as an antivirus product. The precise component breakdown is not stated here. |
| Scanning model | Not stated here. |
| Subscription terms | Not stated here. Term length, renewal behaviour and cancellation route are published by the vendor and should be read before purchase. |
| Data handling | Not stated here. The vendor's own privacy policy is the authoritative source. |
| Support route | Not stated here. |
| Australian availability | Sold online; availability, billing currency and applicable terms are matters for the vendor's site at the time you buy. |
A table with that many blanks is unusual in this genre, and it is deliberate. The alternative — filling the gaps with plausible-sounding detail — is how affiliate pages in the security category come to mislead people, and under Australian Consumer Law the publisher of a misleading claim is accountable for it, not only the advertiser.
This is a paid link. Following it and subscribing earns MSMM-SOU s.r.o. a commission from the vendor; your price is unaffected. It opens the vendor's own site, where the current plan details, terms and pricing are published.
How to read a roundup that covers one product
Coverage of a single product is a narrow roundup, and narrowness has a cost the reader should know about: nothing here tells you that this product is better than one not mentioned, because the ones not mentioned were never examined. The comparison this edition can genuinely help with is a different and more useful one — between a paid product in general and what your devices already do — and that comparison is set out across the by-device pages.
For head-to-head detection comparisons between named products, the independent testing organisations that run controlled malware samples against current builds are the appropriate source, and their published methodologies are worth reading before their scores are.
What to be wary of on other sites in this category
- Pages that display a "scan" of your device, a progress bar, or a warning that threats were found. A web page cannot inspect your computer for malware, and anything presenting itself that way is an advertisement.
- Ranked lists with scores out of ten and no stated method. A score without a method is a layout choice.
- Prices quoted as current without a date. Introductory pricing in this category expires, and the renewal figure is often a different number entirely.
- Claims of total protection. No product prevents every compromise, and a vendor's own documentation will not claim it does.
Buying and cancelling as an Australian customer
Software sold to consumers in Australia comes with consumer guarantees under Australian Consumer Law, and those guarantees sit alongside whatever the vendor's own terms say. A guarantee cannot be excluded by a contract term, and a business that tells a customer otherwise may itself be breaching the law. The Australian Competition and Consumer Commission publishes the current guidance at accc.gov.au, and it is the authority to rely on rather than a summary on a site like this one.
Two practical habits follow. Read the renewal terms before the first payment, not at the end of the term, and record where the cancellation control lives — in an account page, in an app store subscription list, or through support. And keep the purchase confirmation, since it is the document that establishes what you were told at the time of sale.
What this edition cannot tell you
- Whether one product detects more malware than another. That requires controlled testing.
- What anything costs. Prices change by promotion, term and region; the vendor's page is the only current source.
- Whether a product suits your specific configuration. Compatibility is a question for the vendor's system requirements.
- What other users think. No testimonials are published here, because none could be verified.
- How products not covered compare. They were not examined and are not being ranked by omission.
Where this edition came from
Vendor documentation for product facts; Australian government bodies for anything about risk, rights or reporting; and general technical description where a statement holds across the category rather than for one product. Nothing was tested here, nothing was scored, and no figure appears that would need an experiment behind it. The full account is on the methodology page, and corrections are welcome at info@lumosnetwork.online.