Suspicious Activity Detection
An intruder has to run programs on your computer and reach their own servers. Each scan looks for the signs they leave behind.
Documents that open command windows
A document, email or web browser program that starts a command window or a script is a classic sign of a malicious attachment.
Connections to known attackers
Connections to servers that public threat lists name as attackers' control servers. The lists are checked on your computer, and only a match is reported.
Hidden doors for intruders
A command window waiting for connections from the network, a remote-control program open to the network, or a web server that starts a command window.
Built-in tools misused
System tools that attackers like to borrow, started in ways that everyday use does not.
Clues connected
Separate warning signs from the same scan are joined into one alert, so you see the whole attack instead of its pieces.
Which plans include it
Strong and above. Higher plans look for more patterns.
The app sends a short summary of the programs running on your computer, their names and network ports, never your files. You can switch it off in the app.
Compare the Plans
Each plan's card shows how many defense mechanisms its scans run.