OPSWAT releases periodic market share reports for several sectors of the security industry. This report includes worldwide market share for antivirus and encryption applications. The data used in this report was collected on October 1, 2013. Please note that OPSWAT is not a research institution and makes no claims on accuracy of this data in the real world marketplace; this report aims to distribute the unique data collected to inspire public discussion, not to make any claims as to why changes have occurred. To see a description of the data collection and its limitations, see the data collection section of this report.
OPSWAT is a San Francisco based software company that provides solutions to secure and manage IT infrastructure. Founded in 2002, OPSWAT delivers solutions that provide manageability of endpoints and networks, and that help organizations protect against zero day attacks by using multiple antivirus engine scanning and detailed file filtering. OPSWAT’s intuitive applications and comprehensive development kits are deployed by SMB, enterprise and OEM customers to more than 100 million endpoints worldwide. To learn more about OPSWAT’s innovative and unique solutions, please visit www.opswat.com.
As seen in past reports, Microsoft leads worldwide antivirus vendors with more than a quarter of the market, and Avast follows closely behind with 23.6%. The remaining antivirus vendors all show market shares in the single digits, with AVG, Symantec, and ESET leading this tier. The top ten antivirus vendors control 92% of the market. Only antivirus products with real time protection (RTP) enabled are included in this comparison. A product with RTP enabled is currently actively protecting a user’s machine, while a product without RTP enabled is expired or disabled. In the table to the right, clicking each vendor name will reveal the distribution of component products within it.
Antivirus Vendor (click to expand)
|Microsoft Security Essentials||67.7%|
|System Center Endpoint Protection||1.2%|
|avast! Free Antivirus||83.4%|
|avast! Internet Security||12.7%|
|avast! Pro Antivirus||1.7%|
|AVG Anti-Virus Free Edition||57.9%|
|AVG Internet Security||35.7%|
|Norton Internet Security||42.2%|
|Symantec Endpoint Protection||20.1%|
|Other (each less than 1%)||1.0%|
|ESET Smart Security||56.3%|
|ESET NOD32 Antivirus||34.4%|
|ESET Endpoint Security||5.7%|
|ESET Endpoint Antivirus||3.6%|
|Avira Free Antivirus||85.1%|
|Avira Internet Security||8.8%|
|Avira Antivirus Premium||5.0%|
|Kaspersky Internet Security||58.4%|
|Kaspersky Anti-Virus for Windows Workstations||4.0%|
|Kaspersky Small Office Security||2.9%|
|Kaspersky Endpont Security||2.3%|
|McAfee VirusScan Enterprise||26.7%|
|Total Protection for Small Business||3.5%|
|Bitdefender Total Security||49.1%|
|Bitdefender Internet Security||30.9%|
|Bitdefender Antivirus Plus||14.5%|
|Endpoint Client by Bitdefender||1.8%|
|Endpoint Security by Bitdefender||1.8%|
|BitDefender Business Client||1.8%|
While the comparison above only includes data from products with real time protection (RTP) enabled, OPSWAT also looked at data for all installed products, including those that are expired or disabled. If RTP is not enabled, the product is installed on the user’s machine but not actively protecting it. When RTP status is not a factor, Microsoft’s lead in market share increases by 8%, while Avast’s share decreases by 5%. Similarly, all the other top vendors show decreased market share in this comparison. This result reveals that a high number of users who have Microsoft antivirus products installed on their machines do not have these products running. The next section, which shows comparisons by product, gives more insight into the difference in RTP status between Microsoft’s products.
In the worldwide market of antivirus products with real time protection (RTP) enabled, avast! Free Antivirus ranks as the leader, with a share of 19.6%. Microsoft claims the next two positions, with Security Essentials and Windows Defender at 17.2% and 7.8%. The other products that showed more than four percent of the market include Avira Free Antivirus, AVG Anti-Virus Free Edition, and ESET Smart Security. The top ten products control 72.1% of the market. A product with RTP enabled is actively protecting a user’s machine, as opposed to products that are expired or disabled. Only these active antivirus products are included in this section of the report.
|Antivirus Product||Market Share|
|A||avast! Free Antivirus||19.6%|
|B||Microsoft Security Essentials||17.2%|
|D||Avira Free Antivirus||5.8%|
|E||AVG Anti-Virus Free Edition||4.8%|
|F||ESET Smart Security||4.0%|
|G||Kaspersky Internet Security||3.8%|
|H||Norton Internet Security||3.2%|
|I||avast! Internet Security||3.0%|
|J||AVG Internet Security||2.9%|
|K||ESET NOD32 Antivirus||2.5%|
The ranking of all installed antivirus products, regardless of whether real time protection (RTP) is enabled, shows one big difference from the graph above. In this expanded set of data, which includes expired and disabled products, Windows Defender tops the list with almost 20% of the market. This is more than double the product’s market share when only products with RTP enabled are compared. This huge adjustment caused by Windows Defender in this data set causes every other top antivirus product to lose market share in the comparison. Besides the change in Windows Defender, the ranking of products is the same as that seen in the RTP enabled comparison. One noteworthy conclusion drawn from this data set is that Windows Defender is much more likely to be disabled on a person’s computer compared to other top antivirus products.
This graph shows a comparison between desktop and laptop users within each top antivirus, and considerable differences are seen across products. The only product with noticeably more users on laptops, as opposed to desktops, is McAfee VirusScan, with a 65/35% ratio. Windows Defender leans very slightly toward desktop users, but all other top antivirus products show significantly more desktop users. The products with the highest percentage of desktop users are Kaspersky Internet Security, with 66.3%, followed by Norton Internet Security at 62.8%. These results only include products with real time protection enabled.
This section features a cross comparison between windows operating systems and the top antivirus products found on them. Only the top six products, and only those with real time protection enabled are included in this comparison. Windows Defender is by far the most common antivirus product found on Windows 8 operating systems. Microsoft Security Essentials is evenly represented across Windows XP and Windows 7, and avast! Free Antivirus is most commonly found on computers with Windows 7. If only Windows XP users are considered, Avira Free Antivirus becomes the second-ranked antivirus product, and ESET Smart Security follows. These results only include products with real time protection enabled.
This comparison shows the percentage of users of each antivirus product that also have an additional product installed on their machine. This could be due to any number of reasons, such as difficulty in uninstallation, low confidence in the product, or low interference with other products. Previous comparisons in this report showed that Windows Defender was much more likely to have real time protection disabled compared to other antivirus products. With Windows Defender inactive, one would expect most users to have another product installed to protect their machines. This holds true, as machines with Windows Defender show the highest rate of multiple antivirus products installed, with around 65%. Out of the remaining products, McAfee VirusScan shows the highest rate, while Microsoft Security Essentials shows the lowest. These results include all products, whether or not real time protection is enabled.
In the previous comparison, computers with Windows Defender installed were the most likely to have another antivirus product installed. Windows Defender, as an antivirus product, is only available on Windows 8, where it is pre-installed, integrated in the operating system, and impossible to remove without hacking the system. The result is that Windows 8 users, at almost 65%, are much more likely to have another antivirus product installed than are users of other operating systems, which are each around 20% or lower. Windows XP is lowest at around 9%. This comparison includes all products, whether or not they have real time protection enabled.
According to the data, very few users have encryption actively running on their machines. However, laptops are much more likely to have at least one drive encrypted than are desktops. Around 53% of computers in this data set had encryption software installed. Out of all laptop computers with encryption software installed, 2.8% were found to have at least one drive encrypted, as opposed around 1% of desktop users. This higher rate of encryption in laptops is expected; since laptops are more easily stolen, protection of sensitive data is a higher priority.
This report shows comparisons for antivirus applications on Windows systems from data collected from users of OPSWAT’s Security Score and free GEARS Cloud tools. These free products use the detection capabilities of OPSWAT GEARS technology to collect information regarding the applications installed on endpoint computers. Security Score is a personal security monitoring tool available at opswat.com/products/security-score and also at various download sites across the web. GEARS Cloud is a network monitoring tool available at gears.opswat.com and is free to manage up to 25 devices. Only free GEARS Cloud users are included in this report. These tools are used around the world by home and business users, both expert and inexperienced in security software. For the purpose of the report, the sample of more than 4000 users is assumed to be representative of the market, based on the wide accessibility of the tools to a large range of users. However, these results are likely to differ from those in the real world (see below for more details). GEARS Cloud and Security Score run continuously in a user’s system as security tools. This allows for continuous reports over time from each user, as long as the application is installed. For this report, the data was collected to show what was on each user’s computer from the most recent data transfer that was sent before the time of collection on 10/1/2013.
This is the first market share report to include data from GEARS Cloud users. The previous report used only Security Score data, and other past reports that used data from OPSWAT’s AppRemover tool (www.appremover.com). By combining data from GEARS Cloud and Security Score, the results are expected to contain a wider variety of users, potentially representing a more accurate representation of the real world market. However, several attributes inherent in way the data is collected may cause the results in this report to differ from what exists in the real world. OPSWAT makes no claims as to the accuracy of the data in the real world market and is continuously working on ways to overcome the following obstacles:
Stay tuned for the next market share report in January, which will feature new comparisons and in-depth comparisons of product usage. OPSWAT is working to increase global usage of Security Score, GEARS Cloud, and other free applications. Mac application data will also be added in the future.
Vendors of antivirus, P2P, patch management, backup, encryption, and other applications interested in inclusion in these reports, GEARS Cloud, and OESIS Framework are encouraged to contact firstname.lastname@example.org to learn how to partner with OPSWAT.
Disclaimer of Warranty
OPSWAT Inc. makes no representation or warranties, either express or implied by or with respect to anything in this document, and shall not be liable for any implied warranties of merchantability or fitness for a particular purpose or for any indirect special or consequential damages.
OPSWAT, OESIS, Metascan, Metadefender, AppRemover and the OPSWAT logo are trademarks and registered trademarks of OPSWAT, INC. All other trademarks, trade names and images mentioned and/or used herein belong to their respective owners. No part of this publication may be reproduced, stored in a retrieval system or transmitted, in any form or by any means, photocopying, recording or otherwise, without prior written consent of OPSWAT Inc. No patent liability is assumed with respect to the use of the information contained herein. While every precaution has been taken in the preparation of this publication, OPSWAT Inc. assumes no responsibility for errors or omissions. This publication and features described herein are subject to change without notice.