Avast Business Antivirus

What is included in Avast Business Antivirus?

File and Web Shield – Scans files, downloads and websites before they reach the user.
Behaviour Shield and CyberCapture – Watches running processes and sends unknown files for cloud analysis.
Ransomware Shield – Blocks untrusted applications from modifying files in protected folders.
Exchange and SharePoint protection – Scans mail and document stores directly on Windows Server.
Avast Business Hub – Optional cloud console for policies, alerts, reporting and deployment.
Important – No EDR, patch management or mobile device coverage included.

What are the main benefits of Avast Business Antivirus?

Avast Business Antivirus is the entry protection tier of Avast's business endpoint range for Windows PCs, Mac computers and Windows servers, and Avast now sells this same tier under the name Avast Essential Business Security. It installs standalone on individual devices or reports into the cloud-based Avast Business Hub, and there is no on-premises console option.

One protection engine – Every Avast business tier ships the identical antivirus components.
Console is optional – Start unmanaged on single devices, add the Hub later.
Server and mailbox coverage – One agent protects Windows servers, Exchange and SharePoint.
Network discovery – Finds unprotected devices and pushes the agent remotely.
Local update server – One device caches definition updates for the whole network.
Evidence reporting – Scheduled reports on detected threats and device status.

Best antivirus? Why Windows Defender alone is not enough
Where the protection built into Windows stops and where a managed business product starts.

Which company size is Avast Business Antivirus suitable for?

This product fits organisations that need dependable endpoint protection without a dedicated security team. The deciding factor is rarely headcount. It is whether you have to produce evidence of what happened on a device after an incident, because that is exactly where this tier stops.

Does Avast Business Antivirus meet the requirements of Swiss cybersecurity legislation?

The reporting obligation under the revised Information Security Act (ISG) has been in force since 1 April 2025 and applies to operators of critical infrastructure, such as energy and water utilities, transport companies, listed hospitals, data centres and cantonal and municipal administrations, not to companies in general. Affected organisations must report a cyberattack to the Federal Office for Cybersecurity (BACS) within 24 hours of discovering it, with a further 14 days to complete the report. Avast Business Antivirus supports the detection half of that duty: the shields log malware detections per device, and the Business Hub collects those detections and alerts in one place, so you can state when something was found and on which machine. It does not support the investigative half, because there is no EDR component in this product, so it cannot reconstruct how an attacker got in, what was executed, or which data was touched, and that is the substance a complete follow-up report needs. Patch status is also outside this tier, so vulnerability evidence has to come from somewhere else. This text is general product information and not legal advice; whether your organisation falls under the reporting obligation should be clarified with a qualified legal adviser.

Does Avast Business Antivirus meet the requirements of European cybersecurity legislation?

No product makes a company NIS 2 compliant. The directive obliges organisations in the covered sectors to put risk-management measures and reporting processes in place and to be able to demonstrate them. The measure categories it names include risk analysis and security policies, incident handling, business continuity and backup, supply chain security, vulnerability handling, cyber hygiene and staff training, cryptography, and access control including multi-factor authentication. Avast Business Antivirus contributes to two of those categories: basic cyber hygiene, through enforced and centrally configured malware protection on every managed endpoint, and the first stage of incident handling, through detection, alerting and per-device logging. It contributes nothing to backup, vulnerability handling, cryptography, access control or supply chain measures, since Cloud Backup and Patch Management are separate services and the Avast Business range offers neither disk-encryption management nor an end-user multi-factor authentication service. Because member states translate the directive into their own national law, the concrete obligations depend on where your organisation operates.

What should you know about official assessments of Avast?

Two authorities have issued decisions against Avast over historic data processing. In February 2024 the US Federal Trade Commission filed a complaint and Avast agreed to a settlement, finalised in June 2024, requiring a payment of USD 16.5 million, banning the sale or licensing of browsing data from Avast-branded products for advertising purposes, and imposing independent privacy-programme assessments every two years for twenty years. In April 2024 the Czech Office for Personal Data Protection issued a final and binding decision fining Avast Software CZK 351 million for transferring pseudonymised browsing data from roughly 100 million users to its Jumpshot subsidiary during 2019 without a valid legal basis. Avast closed Jumpshot voluntarily in January 2020, and on the FTC settlement the company stated that it disagreed with the allegations and the characterisation of the facts but was satisfied to resolve the matter. Both proceedings concern consumer antivirus software and browser extensions from the period before 2020, not the business endpoint products, and no authority has restricted the sale or use of Avast software. Independent testing is unaffected: AV-Comparatives issued an Approved Business Security Product Award in July 2024 and AV-TEST certified Approved Corporate Endpoint Protection for Windows in 2025, both for Ultimate Business Security, which runs the same protection engine as Avast Business Antivirus. In practice this matters most for public-sector tenders and for supply-chain questionnaires that ask whether a supplier has been subject to regulatory action, where you will need the decision references rather than the product data sheet.

Does Avast Business Antivirus help with security questionnaires from large customers?

Partly, and it is worth knowing precisely where the line runs. It answers the endpoint malware questions: that every workstation and Windows server runs a current, centrally configured anti-malware agent, that real-time scanning covers files, web traffic and email, that ransomware behaviour against protected folders is blocked, that Exchange and SharePoint stores are scanned, and that detections are logged and can be exported as a report from one console. It does not answer the questions on removable media control, web content filtering, vulnerability and patch status, endpoint detection and response, disk encryption, multi-factor authentication, or backup and recovery, because none of those are part of this tier. Closing the first group of gaps is usually cheapest inside the same family rather than by adding a second vendor: Premium Business Security adds USB Protection and Web Control, Ultimate Business Security adds Patch Management, and Cloud Backup can be added as a separate service. Encryption and multi-factor authentication have no equivalent anywhere in the Avast Business range and will need a different supplier.

What is the difference between Avast Business Antivirus, Premium Business Security and Ultimate Business Security?

The decisive difference is not the antivirus engine. All three tiers ship identical protection components and receive the same unified build with each engine update, so detection quality does not change as you move up. What separates them is the control and automation layered around that engine: USB Protection and Web Control appear at Premium, and Patch Management is included at Ultimate. The second difference matters for architecture: the console is optional for Avast Business Antivirus and Premium, but mandatory for Ultimate, because Patch Management only runs as a managed service. Several of the added services are Windows-only, which is the point to check if part of your fleet runs macOS.

Test: The best antivirus programs for Windows
How current Windows protection products compare and which criteria actually decide the choice.

Which limitations should you know before buying?

Platform coverage is the constraint that catches most buyers out. VPN, Patch Management and Browser Shield are not available on macOS, so a mixed fleet ends up with a narrower feature set on the Mac side. Linux is handled by a separate product, Avast Business Antivirus for Linux, which is not managed from the Business Hub, so Linux servers stay outside your central reporting and have to be tracked by hand. Mobile devices cannot be managed at all, because Avast removed Mobile Security from these subscriptions and affected devices reverted to the free consumer version. There is also no on-premises console: the Business Hub is cloud-only, which is worth checking against your own data-processing policy before you commit. We found no capability in this product that is restricted to specific countries or regions, so the binding limits here are platform-based rather than regional.

Data loss is expensive: how backups help you avoid outages
Why endpoint protection alone does not get you back online after a ransomware incident.

Frequently asked questions about Avast Business Antivirus

What happened to existing Avast Business Antivirus subscriptions?

Avast upgraded them to Avast Essential Business Security and updated the activation codes automatically, so the higher protection tier activated without a reinstall of the agent. Devices that previously used the separate Patch Management add-on are moved over to the Patch Management included with Ultimate Business Security once the old add-on ends.

Can Avast Business Antivirus be managed from the Avast Business On-Premise console?

No. Avast's Small Business Solutions work only with the cloud-based Avast Business Hub. If an internal policy requires an on-premises management server, this product line will not satisfy it and you should evaluate a vendor that still ships an on-premises console.