Windows Defender vs Norton vs McAfee: Do You Need Paid Antivirus?

Windows Defender — officially Microsoft Defender Antivirus, accessed through the Windows Security app — is free, built into every copy of Windows 10 and Windows 11, and has scored top marks in independent lab testing. For basic virus and malware protection, it's genuinely competitive with paid software. But Norton 360 and McAfee's paid suites bundle things Defender doesn't offer at all: a VPN, dark web and identity monitoring, cloud backup and live human support. Whether that's worth $30–$90 a year depends on what you actually do online, not on whether Defender can "detect viruses" — it can.

What Windows Defender actually is

Microsoft Defender Antivirus is the antivirus engine behind the Windows Security app, and it has been on by default in Windows since Windows 8. According to Microsoft's own documentation, it moved away from a static signature-based engine back in 2015 in favor of machine learning, behavioral monitoring, and cloud-delivered protection that can block "almost all malware at first sight, in milliseconds," including fileless malware that changes its behavior mid-attack.

It's not a standalone antivirus program you install — it's already running the moment you turn on a new Windows PC. Per Microsoft's support documentation, the Windows Security app that houses it also includes a firewall, app and browser control (SmartScreen web/download filtering), device security, account protection, and family/parental options — all at no cost and with no subscription.

How Windows Defender performs in independent testing

The most commonly cited concern about Defender is that it's "not as good" as paid software. That hasn't held up in recent independent lab results. AV-TEST's published results for Microsoft Defender Antivirus (Consumer) on home Windows systems show perfect 6/6 scores across protection, performance, and usability in October and December 2025 and again in February and April 2026, earning AV-TEST's "Top Product" certification each round. Its June 2026 result was 6/6 for protection and usability with a 5.5/6 performance score. AV-TEST tested 14 home-user security products in its March–April 2026 round, and several competing paid products also achieved full marks — so a top score doesn't mean Defender is uniquely superior to every paid suite, but it does confirm the free, built-in option is a legitimate contender rather than an afterthought.

That's a meaningful shift from Defender's reputation a decade ago. If your main worry is "will this actually stop malware," recent lab data says yes, reliably.

What Windows Defender doesn't include

Where Defender clearly falls behind isn't detection — it's the extras that paid suites bundle in one subscription. Based on Microsoft's own documentation, Windows Security does not include:

• A VPN. Defender has no built-in VPN for encrypting your connection on public Wi-Fi or masking your IP address.
• Dark web or identity monitoring. There's no scanning of breach databases or the dark web for your email, passwords, or Social Security number.
• Identity theft insurance or restoration support. No reimbursement coverage or case managers if your identity is stolen.
• A dedicated password manager. Windows Security doesn't include one (Microsoft offers password saving through the Edge browser separately, but it isn't part of Defender).
• Cloud backup. No automatic backup storage for ransomware recovery.
• Cross-platform licensing. Windows Security is Windows-only; it doesn't extend to your Mac, iPhone, or Android phone under one plan.
• Live human support or a money-back malware guarantee. There's no dedicated phone/chat support team or "we'll remove it or refund you" promise tied to Defender.

None of that makes Defender's antivirus engine worse. It just means Defender is a virus scanner and firewall, not a security "suite" in the way Norton and McAfee package their products.

There's one partial exception worth knowing about: if you already pay for a Microsoft 365 Personal or Family subscription, Microsoft's support documentation notes that subscribers get access to additional Microsoft Defender features that extend protection across Windows, Mac, Android, and iOS devices through a separate Microsoft Defender app. That's not the same as the free Windows Security app most people mean by "Windows Defender," and it doesn't add a VPN or identity monitoring on its own — but it's a middle option worth knowing about if you're already a Microsoft 365 subscriber and just want cross-device malware alerts without a dedicated security suite.

What Norton 360 adds

Norton's entry-level suite, Norton 360 Standard, lists for $94.99 for the first year and covers 3 devices (Windows, Mac, Android, or iOS). Alongside antivirus/malware/ransomware protection with what Norton calls its "100% Virus Protection Promise," it bundles a VPN, dark web monitoring, a password manager, 2 GB of PC cloud backup, and AI-powered scam and deepfake detection. It does not include LifeLock identity theft protection or credit monitoring — those are reserved for higher tiers.

Step up to Norton 360 Deluxe ($119.99 for the first year, 5 devices) and Norton adds parental controls and expands cloud backup to 50 GB, on top of the same VPN, dark web monitoring, and password manager. Norton's most expensive plans bundle LifeLock identity theft monitoring, credit monitoring, and identity-theft insurance, though those specific plans and prices sit above what's covered here.

What McAfee Total Protection adds

McAfee's Total Protection lineup starts with a Basic plan at $29.99 for the first year (1 device) that includes antivirus, web protection, a Secure VPN, and basic identity monitoring and alerts. The Essential plan ($39.99/year, 5 devices) and Premium plan ($49.99/year, unlimited devices) add personal-info and online-account scans, McAfee's Social Privacy Manager, up to $1 million in identity theft coverage, bank/credit card transaction monitoring, credit score and report monitoring, identity restoration support, and credit lock/security freeze tools. The Advanced plan ($89.99/year, unlimited devices) goes further with full personal data removal (not just scanning) and up to $2 million in identity theft coverage.

In short: even McAfee's cheapest paid tier bundles a VPN and identity monitoring that Defender simply doesn't offer, and the pricier tiers layer on credit monitoring and six- and seven-figure identity theft insurance.

Side-by-side: Windows Defender vs Norton 360 vs McAfee

This table focuses on Defender against each paid suite's entry-level plan. If you're weighing Norton against McAfee and Bitdefender directly, see our separate breakdown of those three paid suites' features and pricing.

Performance impact

All antivirus software — free or paid — has to scan files, which uses CPU and disk resources. Microsoft's own documentation acknowledges this directly: its Defender Antivirus overview notes that "Microsoft Defender Antivirus, like other antivirus software, can cause performance issues on endpoint devices," which is why Microsoft ships a dedicated Performance Analyzer tool to identify which files, paths, or processes are slowing down scans. AV-TEST's home-user results likewise score every product, including Defender, on a dedicated "Performance" category specifically because scanning overhead is a universal tradeoff — Defender posted 6/6 on performance in most recent rounds and 5.5/6 in June 2026, per the lab's published data. AV-TEST publishes performance scores for Norton, McAfee, and dozens of other products on the same 0–6 scale, so if system slowdown is your deciding factor, check the labs' current comparative results for all three products side by side rather than assuming any one of them is lighter by default.

Price comparison at a glance

Windows Defender costs nothing beyond the price of Windows itself. On the paid side, McAfee's entry point (Basic, $29.99/year for 1 device) undercuts Norton's entry point (Standard, $94.99/year for 3 devices), but McAfee's Basic plan doesn't include the deeper identity-restoration and credit-monitoring features found in its Essential tier and above. Norton's Standard plan, despite the higher first-year price, includes a password manager and cloud backup that aren't part of McAfee's comparable tier. Both companies advertise "first year" introductory pricing, and renewal pricing for both is typically higher than the first-term price — check the current renewal terms on Norton's or McAfee's own pricing pages before you buy.

Who actually needs paid antivirus

Based purely on the feature gaps above, here's a reasonable way to decide:

• Stick with Windows Defender if: you only use one Windows PC, already use a separate password manager and VPN (or don't need one), keep your own backups, and mainly want reliable malware blocking without paying a subscription.
• Consider Norton 360 or McAfee if: you want a VPN and identity/dark-web monitoring bundled into one subscription, need to cover multiple device types (Mac, phone, tablet) under one plan, want cloud backup for ransomware recovery, or want a company you can call if something goes wrong.
• Consider the identity-monitoring tiers specifically if: you've been part of a data breach before, want credit monitoring, or want financial coverage in case your identity is stolen — that's the area where Defender has literally nothing to offer, free or otherwise.

How to strengthen Windows Defender for free

If you decide Defender is enough, a few free steps close some of the gap without a subscription:

• Turn on Windows Firewall and Controlled Folder Access (ransomware protection) inside the Windows Security app's "Virus & threat protection" and "App & browser control" sections.
• Use a separate, dedicated authenticator app for two-factor authentication on your important accounts — this blocks most account-takeover attempts that antivirus software can't stop on its own.
• Learn to recognize phishing emails, since social-engineering attacks bypass antivirus entirely by tricking you into handing over credentials.
• Back up important files yourself (an external drive or a cloud storage service you already pay for) since Defender doesn't include backup.
• If identity monitoring is your main concern rather than malware, you can also look into free breach-notification tools or manually opt out of data broker sites rather than paying for a full suite just for that one feature.

What to do next

If your main question is "will Defender actually stop viruses," the honest answer from recent independent testing is yes — it's a legitimate, well-scoring antivirus engine, not a placeholder. The decision to pay for Norton or McAfee instead comes down to whether you want the VPN, identity monitoring, cloud backup, and cross-platform coverage bundled in, and whether you're willing to pay $30–$120 a year for that convenience versus assembling free equivalents yourself. Compare current pricing directly on Norton's site and McAfee's site before subscribing, since introductory pricing changes and renewal rates are typically higher. If you're weighing two paid suites against each other instead, see our comparison of Norton, Bitdefender, and McAfee's prices and features.

Written bySana Qureshi

Sana Qureshi runs the security and privacy desk. She reports on actively exploited vulnerabilities, vendor patches and data breaches, and covers the password managers, VPNs and authentication tools readers use to protect themselves. Her alerts cite vendor advisories, CISA and the CVE record directly.

More from Sana QureshiAll Security & Privacy coverage