If non-Microsoft endpoint protection is an absolute requirement in your environment, you can still safely take advantage of MDATP for Mac EDR functionality after configuring MDATP for Mac antivirus functionality to run in Passive mode. What’s new in the latest release What's new. The myth that Mac computers are immune to viruses and malware is simply not true. Mac computers can get viruses and need file-based antivirus protection. Additionally, they need the other layers of protection offered in a device security software suite such as Firewall, Intrusion Prevention.

It’s fair to say there’s less risk of malware attacks on a Mac than a PC, but does that mean you can skip antivirus altogether?

For years, we’ve been told that Macs can’t get viruses. But no computer is immune from cyber attacks, so each year we test Mac antivirus software to their limits with hundreds of virus attacks including worms and ransomware to see how they fare. Read on to see your protection options.

Browse all our antivirus software reviews, or skip straight to the best antivirus packages from our tough tests.

Built-in Mac security

There aren’t many viruses for Mac computers, which makes them hard to come by. Our lab tests Windows antivirus software with several thousand Windows-specific viruses each year, but tests only a few dozen on Mac computers. That isn’t to say that it’s impossible to catch a Mac virus, but the number of different strains is much smaller.

MacOS is secure by design. It requires a number of steps to allow a virus to run on your machine and needs you, the user, to intervene for any program – be it a virus or otherwise – to gain access to critical system files. In short, it’s actually quite tricky to get infected by Malware on an Mac.

Why you should still consider anitivirus for Mac

Do I Need Antivirus Software For Mac

Even if you don’t let a piece of malware run, we have found that macOS’ built-in security scanning doesn’t reliably detect dormant viruses just sitting on the hard drive. If you never had any intention of running the viruses yourself, you could inadvertently share them with somebody you know who might not be so fortunate.

And there’s more to antivirus than simply protection from viruses. Almost all the security suites we test come with additional protection against phishing attacks, where websites pretend to be legit in order to steal your data. We have found that the very best Mac security suites will also bolster your phishing protection quite significantly, and perform better than the protection built into the Mac versions of Safari, Chrome, Firefox and Opera web browsers. For this reason, if you’re nervous about threats on the web, it would make sense to at least consider a Mac security suite.

Antivirus options for Apple Macs

While there’s no cheap way to get yourself a Mac, those who don’t fancy a yearly subscription to a security suite can rest easy in the knowledge that this year we tested three free options, one of which was good enough to be a Best Buy.

If you’re a Which? member, you can see the very best antivirus options on our best antivirus for Mac advice guide. And for everybody else, we’ve highlighted five options from the biggest brands.

Paid antivirus for Mac

Norton Security Deluxe

One of the biggest names in antivirus has a relatively inexpensive Mac option. What’s more, if you have Windows computers in your household you can mix and match the different device types under the same subscription. Subscribing gets you various other benefits, although some, such as the 50GB of cloud storage, is only available for Windows computers. See whether it’s worth paying for in our Norton Security Deluxe for Mac review.

Kaspersky Internet Security

Kaspersky’s security suite includes basic protection as well as tools specifically designed to protect your files from ransomware and a bolstered web browser for banking. Like Norton, you can mix and match a Kaspersky multi-device Internet Security subscription between Windows and Macs. See if it’s worth the cost in our full Kaspersky Internet Security for Mac review.

Bitdefender Antivirus for Mac

It comes with phishing protection and a VPN for keeping your web browsing safe from prying eyes, but can this AV production take on its big-brand rivals? It’s performed well in our tests in previous years, so read our full Bitdefender Antivirus for Mac review to find out.

Free antivirus for Mac

AVG Antivirus for Mac (free)

If you don’t want extra features and also don’t fancy shelling out for yet another digital subscription, AVG Free might be the option for you. There are no frills, but it should deliver when it comes to basic protection, adding that last layer of defence for when all else fails. See how it fared in our antivirus lab test by reading the full AVG Antivirus for Mac review.

Avast Free Antivirus for Mac (free)

Avast and AVG are owned by the same company, so they should perform similarly in our tests. Included in the installation is Avast’s free password manager, which might come in handy if you’ve yet to set one up for yourself. Read our full Avast Free Antivirus for Mac review to see whether it’s a good free choice.

How we test antivirus

Our antivirus test lab is riddled with threats. It has set up dozens of computers in 40 countries around the world to act as ‘honeypots’ for millions of viruses. These honeypots capture viruses that are fresh into the wild and may have only existed for days. This makes the task for the security software very challenging, because many of them rely upon huge databases of so-called virus ‘definitions’ to tell whether or not a file is harmful.

Grabbing new threats means they will also have to rely on their own intuition – rather than simply checking a database – using more advanced techniques to decide if there’s a threat. We also use a mix of scenarios on both Windows and macOS, including viruses stored on USB sticks, and even malicious real-world phishing webpages designed to steal your data. Only the most secure software can fend off all these types of attacks effectively.

Malware can be more of a concern if you’re using an old phone. Read our guide on mobile phone security for more.

Important

Welcome to Microsoft Defender for Endpoint, the new name for Microsoft Defender Advanced Threat Protection. Read more about this and other updates here. We'll be updating names in products and in the docs in the near future.

This topic describes how to install, configure, update, and use Microsoft Defender ATP for Mac.

Caution

Running other third-party endpoint protection products alongside Microsoft Defender ATP for Mac is likely to lead to performance problems and unpredictable side effects. If non-Microsoft endpoint protection is an absolute requirement in your environment, you can still safely take advantage of MDATP for Mac EDR functionality after configuring MDATP for Mac antivirus functionality to run in Passive mode.

What’s new in the latest release

Tip

If you have any feedback that you would like to share, submit it by opening Microsoft Defender ATP for Mac on your device and navigating to Help > Send feedback.

To get the latest features, including preview capabilities (such as endpoint detection and response for your Mac devices), configure your macOS device running Microsoft Defender ATP to be an 'Insider' device. See Enable Microsoft Defender ATP Insider Device.

How to install Microsoft Defender ATP for Mac

Prerequisites

• A Microsoft Defender ATP subscription and access to the Microsoft Defender Security Center portal
• Beginner-level experience in macOS and BASH scripting
• Administrative privileges on the device (in case of manual deployment)

Installation instructions

There are several methods and deployment tools that you can use to install and configure Microsoft Defender ATP for Mac.

• Third-party management tools:

• Command-line tool:

System requirements

The three most recent major releases of macOS are supported.

• 10.15 (Catalina), 10.14 (Mojave), 10.13 (High Sierra)
• Disk space: 1GB

Beta versions of macOS are not supported. macOS Sierra (10.12) support ended on January 1, 2020.

After you've enabled the service, you may need to configure your network or firewall to allow outbound connections between it and your endpoints.

Licensing requirements

Microsoft Defender Advanced Threat Protection for Mac requires one of the following Microsoft Volume Licensing offers:

• Microsoft 365 E5 (M365 E5)
• Microsoft 365 E5 Security
• Microsoft 365 A5 (M365 A5)

Note

Eligible licensed users may use Microsoft Defender Advanced Threat Protection on up to five concurrent devices.Microsoft Defender Advanced Threat Protection is also available for purchase from a Cloud Solution Provider (CSP). When purchased via a CSP, it does not require Microsoft Volume Licensing offers listed.

Network connections

The following downloadable spreadsheet lists the services and their associated URLs that your network must be able to connect to. You should ensure that there are no firewall or network filtering rules that would deny access to these URLs, or you may need to create an allow rule specifically for them.

Microsoft Defender ATP can discover a proxy server by using the following discovery methods:

• Proxy autoconfig (PAC)
• Web Proxy Autodiscovery Protocol (WPAD)
• Manual static proxy configuration

If a proxy or firewall is blocking anonymous traffic, make sure that anonymous traffic is permitted in the previously listed URLs.

Warning

Authenticated proxies are not supported. Ensure that only PAC, WPAD, or a static proxy is being used.

SSL inspection and intercepting proxies are also not supported for security reasons. Configure an exception for SSL inspection and your proxy server to directly pass through data from Microsoft Defender ATP for Mac to the relevant URLs without interception. Adding your interception certificate to the global store will not allow for interception.

To test that a connection is not blocked, open https://x.cp.wd.microsoft.com/api/report and https://cdn.x.cp.wd.microsoft.com/ping in a browser.

If you prefer the command line, you can also check the connection by running the following command in Terminal:

The output from this command should be similar to the following:

OK https://x.cp.wd.microsoft.com/api/report

OK https://cdn.x.cp.wd.microsoft.com/ping

Caution

We recommend that you keep System Integrity Protection (SIP) enabled on client devices. SIP is a built-in macOS security feature that prevents low-level tampering with the OS, and is enabled by default.

Once Microsoft Defender ATP is installed, connectivity can be validated by running the following command in Terminal:

How to update Microsoft Defender ATP for Mac

Microsoft regularly publishes software updates to improve performance, security, and to deliver new features. To update Microsoft Defender ATP for Mac, a program named Microsoft AutoUpdate (MAU) is used. To learn more, see Deploy updates for Microsoft Defender ATP for Mac

How to configure Microsoft Defender ATP for Mac

Guidance for how to configure the product in enterprise environments is available in Set preferences for Microsoft Defender ATP for Mac.

macOS kernel and system extensions

In alignment with macOS evolution, we are preparing a Microsoft Defender ATP for Mac update that leverages system extensions instead of kernel extensions. Visit What's new in Microsoft Defender Advanced Threat Protection for Mac for relevant details.

Do I Need Antivirus For Mac

Resources

Do I Need An Antivirus For Macbook Pro

• For more information about logging, uninstalling, or other topics, see the Resources page.