CyberIndexBeta

ThreatDown Advanced

MalwarebytesSmall Business Antimalware (primary)Enterprise AntimalwareCompare with others in Small Business Antimalware

Product

ThreatDown business bundle adding EDR with ransomware rollback to next-gen antivirus. Secure email inboxes with Adaptive AI and crowdsourced threat intelligence against advanced phishing attacks. Advanced detection and recovery with built-in ransomware rollback. Control access and prevent infection from peripherals (such as USB devices) plugged into endpoints. It runs on Linux, macOS and Windows.

Current Version
2.5.0.24
Product Page
threatdown.com/pricing
Market
EnterpriseSMB
Licence
Paid
Price
Paid · price unknown
Record Created
2026-09-19
Last Updated
2026-10-20

Vendor

Malwarebytes began as a teenager's fix for his own infected computer: Marcin Kleczynski wrote the first version in the mid-2000s after malware his antivirus could not remove got onto the family PC, and built the company around cleaning up machines that other products had already failed to protect. That remains its distinctive position — for years it was the second opinion people installed alongside their antivirus rather than instead of it, and it still sells a free on-demand cleaner as well as full protection. It is headquartered in Santa Clara, California, with offices in Ireland, Estonia, Italy, Spain and Israel. In 2024 it split its business in two by brand: consumer products keep the Malwarebytes name, and everything sold to organisations moved to ThreatDown. Households buy Malwarebytes Premium, with Malwarebytes VPN, Malwarebytes Mobile Security, Malwarebytes Identity Theft Protection and the free AdwCleaner and Browser Guard tools. Organisations buy ThreatDown Endpoint Protection and the managed detection service above it. Vendor page →

Website
malwarebytes.com
Country
United States
Headquarters
Santa Clara, United States
Year Established
2008
Customers
20K organisations
Users
25M users
Revenue
$126.2M (2017)

Platforms

Linuxnative
macOSnative
Windowsnative

Target Market

Enterprise secondarySMB primary

Capabilities

Malware Detectionkeynative
Ransomware Protectionkeynative
Behavioral Detectionkeynative
Web Protectionkeynative
Email ProtectionNot known
Host Firewallnative
Sandbox AnalysisNot known
Cloud-Assisted ScanningNot known
Heuristic DetectionNot known
Device Controlnative
Vulnerability ShieldingNot known
Central Management Consolenative

5 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummarySubscriptionnot statedyearlyNot known

Versions

  • 2.5.0.24Windows

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

At a glance — latest result per lab test

MITRE ATT&CK Evaluations (Enterprise)

2024-12-11lab report ↗

Each bar is one lab’s own figure on that lab’s own scale. Labs test different models at different times, so the figures are not combined into one score.

MITRE ATT&CK Evaluations (Enterprise)MITRE ATT&CK Evaluations — Enterprise 20242024-12-11
Technique-level detection: 20.3%Any detection: 23.7%Benign activity not alerted: 42.1%Attack sub-steps evaluated: 59

Certifications

Not known

Change History

This record was created 2026-09-19. Everything below is what has changed since.

  • 2026-10-20New versionNew version: 2.5.0.24 (Windows)evidence
  • 2026-10-07Test result addedNew MITRE ATT&CK Evaluations (Enterprise) resultevidence
  • 2026-09-23Capability addedCentral Management Console: built inevidence
  • 2026-09-23Capability addedHost Firewall: built inevidence
  • 2026-09-23Capability addedDevice Control: built inevidence
  • 2026-09-23Capability addedWeb Protection: built inevidence
  • 2026-09-23Capability addedBehavioral Detection: built inevidence
  • 2026-09-23Capability addedRansomware Protection: built inevidence
  • 2026-09-23Capability addedMalware Detection: built inevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-22Product updatedListed in Small Business Antimalwareevidence
  • 2026-09-20Pricing plan addedPrice: subscriptionevidence
  • 2026-09-19Platform addedRuns on Windowsevidence
  • 2026-09-19Product createdNew product listedevidence
  • 2026-09-19Product updatedAlso sold to: Enterpriseevidence
  • 2026-09-19Product updatedSold to: SMBevidence
  • 2026-09-19Platform addedRuns on Linuxevidence
  • 2026-09-19Platform addedRuns on macOSevidence
Something wrong? Suggest a correction →

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.