Malwarebytes Premium Security vs Surfshark Antivirus Comparison

• Standard for 3 devices, 1 year: $59.99 a year; the store cart lists the same amount for the next billing
• Standard for 1 device, 1 year: $44.99 a year
• Plus for 3 devices, 1 year: $79.98 a year
• Total for 1 adult and 3 devices, first year: Intro: $89.99 for the first year, a 50% discount
• Total for 1 adult and 3 devices, renewal: $179.99 a year after the first year; the page says the discount is first year only

• Surfshark One, renewal: $99 a year after the first term, whether that term was 1 or 2 years
• Surfshark One, month to month: $19.95 billed every month, no discount
• Surfshark One, first 2 years: Intro: $67.23 for the first 27 months (24 plus 3 bonus months), then $99 a year
• Surfshark One, first year: Intro: $44.85 for the first 15 months (12 plus 3 bonus months), then $99 a year
• Surfshark One+, renewal: $119 a year after the first term

The privacy policy lists, among the data its software collects, 'artifacts detected as malware, PUPs, or suspicious files' and, for blocked exploits, the exploit payload files and possibly a copy of the exploit executable. It says the content analysis of files, photos and messages runs on the device and the company does not receive the content, 'unless we describe otherwise for a specific feature'; one such feature is text message protection on mobile, which sends the sender and the body of texts from senders not in your contacts and keeps the malicious ones for analysis. It does not say whether the upload of detected files can be switched off separately; the opt-out covers 'threat statistics', which include detection samples.

Surfshark says Cloud Protect checks suspicious files against its cloud database in real time 'without ever seeing your personal data', but neither the product pages, the help center nor the privacy policy say whether a file's fingerprint or the file itself is sent.

The privacy policy says Malwarebytes does not sell personal data for money, but that it may share limited information with advertising partners such as Meta to measure ads: a hashed email address, online identifiers, ad click identifiers and IP address. Meta and Malwarebytes are joint controllers for data sent through Meta's business tools. The policy offers an opt-out through 'Your Privacy Choices' on the website or Global Privacy Control. It also says the product collects usage and threat statistics, a machine identifier created at install, and IP-based location, but that it does not store the IP address of client requests.

The privacy policy's antivirus section uses device information to enforce the device limit and processes the malware name and type, country, OS and user ID for statistics. Separately, with your consent, the apps send device and engagement data to analytics and attribution providers, and the policy says advertising partners help attribute sales and show interest-based ads. The policy says Surfshark does not sell personal data.

Malwarebytes is based in Santa Clara, California, and its privacy policy gives that address and says Malwarebytes Inc. takes part in the EU–US, UK and Swiss data privacy frameworks. The policy says the company may disclose personal data to government agencies in response to lawful requests, including subpoenas and warrants.

The contract is with Surfshark B.V., registered in Amsterdam, the Netherlands. The terms of service are governed by the law of the British Virgin Islands.

Founded in 2008; co-founder Marcin Kleczynski is still chief executive. In December 2022 the private equity firm Vector Capital closed a $100 million minority investment and two of its managing directors joined the board.

Surfshark B.V. sells the antivirus as part of its own subscription. The privacy policy says it shares data with its group companies in the EEA, the United States and the United Kingdom, without naming them.