Anti-malware software
Anti-malware software is a program that checks files, downloads and websites for known harmful software and stops it before it can run. It is one of two malware protection options in Cyber Essentials v3.3, for Windows and macOS devices. It must stay updated, stop malware and malicious code running, and block malicious websites (A8.1 to A8.3).
- Term
- Anti-malware software
- Also known as
- Antivirus, Anti-virus software, AV
- Category
- Malware, cloud and threats
- Requirement area
- 5. Malware protection
- Reviewed against
- Requirements v3.3
What does the term anti-malware software mean in Cyber Essentials?
Anti-malware software is a program that checks files, downloads and websites for known harmful software and stops it before it can run.
Anti-malware software (option for in scope devices running Windows or MacOS including servers, desktop computers, laptops)
How does anti-malware software apply to Cyber Essentials?
In plain terms
It is a security guard on each computer. It checks everything that arrives, from email attachments to downloads, against what it knows about harmful software, and refuses entry to anything suspicious. Antivirus is the older name. Microsoft Defender, built into Windows, is one example.
What Cyber Essentials asks
If you use anti-malware software, the requirements say it must be configured to:
- "be updated in line with vendor recommendations"
- "prevent malware from running"
- "prevent the execution of malicious code"
- "prevent connections to malicious websites over the internet"
A8.2 covers the first three and A8.3 the last. The A8.2 guidance says you can use any commonly used product, free or paid for, as long as it meets the requirements, and adds: "For the avoidance of doubt, Windows Defender is suitable for this purpose." The A8.3 guidance notes that on Windows 11, MS Defender SmartScreen can provide the web protection. A6.2.2 asks you to list your malware protection software with its version, so the assessor can check it is supported.
The option covers Windows and macOS devices. Phones and tablets normally use application allow listing instead.
What an assessor looks for
At Cyber Essentials Plus, sub-test 3.1 checks that the software is installed and running on each sampled device. Test files sent by email and browser download must be blocked. Where the test files do not prove the configuration, sub-test 3.1.3 checks the logs and update status by hand.
See the malware protection requirements and Microsoft Defender for Business setup. Related: malware, signature-based detection.
Related terms
- Allow listing (application allow listing)Allow listing is a malware protection option in which only approved applications, restricted by code signing, are allowed to execute on devices.
- MalwareMalware is software that someone has written and spread on purpose to cause harm, such as computer viruses, worms and ransomware.
- Signature-based detectionSignature-based detection is the way anti-malware software recognises known malware, by comparing files against a list of fingerprints, called signatures or definitions, supplied by the vendor.
- Application controlApplication control is a setting or tool that decides which programs are allowed to run on a device and blocks everything else.
- Attack surfaceAn attack surface is every point where an attacker could try to get into your organisation: each internet-facing service, device, account and piece of software.
- Authenticated scanAn authenticated scan is a vulnerability scan that logs in to a device, so it can see exactly which software and updates are installed.
Frequently asked questions
Anti-malware software is a program that checks files, downloads and websites for known harmful software and stops it before it can run. The definition follows the NCSC's Cyber Essentials: Requirements for IT Infrastructure v3.3.
In the 2026 Danzell question set, anti-malware software comes up at A8.1, A8.2, A8.3, A6.2.2. Read those questions against the definition above so your answers use the term the way the assessor will.
Anti-malware software relates to 5. Malware protection in the NCSC's Cyber Essentials: Requirements for IT Infrastructure v3.3. Read that section for the control your answers must show.
Would you pass the 2026 question set?
Answer 24 yes or no questions, built by the assessors who mark Cyber Essentials, and get a readiness score in about five minutes, with any auto-fail questions you miss flagged first in your results.