Antivirus

Software that scans devices for known malicious programs and blocks or removes them, traditionally by matching files against a list of known threat signatures.

Antivirus is one of the oldest and most familiar security tools. Classic antivirus compares files to a database of known malware signatures and quarantines anything that matches. Modern products also look at suspicious behaviour, and Windows includes Microsoft Defender Antivirus by default.

Antivirus is still a necessary layer, but it is no longer enough on its own. Attackers change their malware frequently, use legitimate administrative tools, or simply log in with stolen passwords, none of which a signature-based scanner will reliably catch. Many cyber insurance applications now ask about more advanced protection, such as endpoint detection and response, rather than basic antivirus alone.

Practical tip: make sure every company computer, including laptops that rarely come into the office, has active and up-to-date protection reporting to a central console. A product that is installed but switched off or months out of date provides very little protection. Ask your IT provider whether endpoint detection and response would be a sensible upgrade.