September 2026 Edition: How quickly do antivirus programs block malware?
Following the conclusion of the September edition of the Advanced In-The-Wild Malware Test, we are publishing a summary in which we examine not only the effectiveness of protection but also what happens within the system between the execution of malware and its detection and neutralization. We will examine a scenario where several solutions achieve the […]
July 2026: malware vs. protection mechanisms
After weighing all the pros and cons and reviewing comments from vendors, we are publishing the results of the July edition of the Advanced In-The-Wild Malware Test. This time, in addition to the effectiveness of the protection itself, we’re taking a closer look at how modern malware exploits legitimate Windows tools and system components to […]
EDR-XDR Visibility & Correlation Assessment 2026
Independent assessment of attack visibility, telemetry, and incident response capabilities We present the results of EDR and XDR solution tests, focusing on attack visibility, telemetry quality, event correlation, and analysis and incident response capabilities. This year’s edition was designed for organizations, SOC teams, security administrators, and cybersecurity solution vendors who want to verify not only […]
May 2026: Protection against malware and living-off-the-land techniques
We are publishing a summary of the May edition of the Advanced In-The-Wild Malware Test, which aimed to assess the effectiveness of protection against modern malware threats. As part of the test, we also assessed whether the threat was blocked, and if so, at what stage of the attack chain the product responded—we evaluate this […]
Advanced In-The-Wild Malware Test in March 2026 including effectiveness analysis and telemetry
We have completed our summary of the March 2026 edition of the Advanced In-The-Wild Malware Test. One of the main objectives of this study is to determine whether the tested solution was able to block the threat, and if so, at what stage of the entire incident chain this occurred. We automatically analyze whether the […]
Advanced In-The-Wild Malware Test – the January 2026 Edition
The beginning of 2026 was not peaceful at all, considering the number and effectiveness of cyberattacks. We continue to see an escalation of attacks using malware, which now increasingly rely on legitimate system components, complex TTP chains, and detection avoidance mechanisms rather than droppers. The consequence of such an attack may be its detection by […]
Product of the Year 2026 – Recommended security solutions for Windows 10-11 & Windows Server
Advanced In-The-Wild Malware Test Summary – 2025 The purpose of the Advanced In-The-Wild Malware Test in 2025 is to identify security vendors whose solutions meet the rigorous testing requirements defined by the AVLab Foundation for Cybersecurity The “Product of the Year 2026” and “TOP Remediation Time 2026” certificates are awarded based on the results of […]
Analysis of modules for protection of online banking and payments – 2026 edition
Most modern antivirus programs for Windows 10, Windows 11, and macOS offer basic protection for online banking and payments as standard. This usually includes anti-phishing and anti-malware mechanisms, protection against keyloggers and screenloggers, blocking untrusted applications and scripts, and detecting unauthorized changes to DNS settings. However, some manufacturers go a step further by implementing dedicated […]
Summary of the Advanced In-The-Wild Malware Test in November 2025
It can be said that since the November edition of the Advanced In-The-Wild Malware Test 2025, cyberspace has not slowed down even for a moment. The threat landscape is changing rapidly, and cybercriminals are refining their techniques at a pace that forces both security vendors and the laboratories testing their effectiveness to remain constantly alert. […]
We are changing the certification thresholds in the Advanced-In-The-Wild Malware Test
In the current Advanced-In-The-Wild Malware Test methodology, the EXCELLENT certificate was awarded to products that achieved at least 99% effectiveness in detecting and blocking threats in a given test edition. However, practice and analysis of data from multiple iterations show that this threshold does not fully reflect the real differences between the most effective solutions […]
