Test Lab: MRG Effitas Logo
Test Title: MRG Effitas Q3 2020 360 Degree Assessment and Certification
AMTSO Test ID: AMTSO-LS1-TP028

  • Statement from Test Lab:

    “A first-of-its-kind test that covers all angles, our pioneering 360 Degree Protection Test targets the key threats faced by internet users. In each test case we employ the full spectrum of Early Life Malware. We use a Time-To-Detect metric to measure how long it takes each application to detect and neutralize missed threats.”

    Test Plan

    Participants: 4
    These Vendors chose to adopt Participant status under the AMTSO Standard, gaining certain guaranteed rights in return for attestations

    “Included” Vendors: 4
    These Vendors did not chose to adopt Participant status under the AMTSO Standard, but may have engaged with the test lab in other ways

    Compliance Status: Confirmed compliant with AMTSO Standard v1.3

    Published test Report

    Publication Date: 2020-12-16

    Participation information
    Vendor Status Phase 1 Feedback Attestations Comments (Phase 1) Phase 2 feedback Comments (Phase 2)
    Avast PARTICIPANT Completed Completed None Completed None
    Avira PARTICIPANT Completed Completed None Completed None
    BitDefender INCLUDED None None None None None
    Broadcom/Symantec PARTICIPANT Completed Completed Submitted None None
    ESET INCLUDED None None None None None
    F-Secure PARTICIPANT Completed Completed None Completed Submitted
    Microsoft INCLUDED None None None None None
    Trend Micro INCLUDED None None None None None
    Notable Commentary

    Broadcom/Symantec (Phase 1):
    “Financial malware simulator test methodology – A test should use real malware from the industry instead of generated samples.”

    F-Secure (Phase 2):
    “This comment is regarding the test that was conducted in MRG Effitas 360 degree assessment 2020 Q2 and 360 degree assessment 2020 Q3 Tests.
    In our opinion the sample used for clean files test were not simulating the real world scenario as experienced every day by users.
    If we want to simulate a real-world scenario for normal users, the clean set for false positive testing should be composed of common/popular applications from popular software/websites. In the case that handcrafted or newly created applications are to be used, they need to be tested with proper paramaters such as being found in locations related to code development.    “

  • Test Plan

    Notification date: 2020-07-17
    Notification method: Publicly posted test plan, Contact List notice

    Commencement date: 2020-07-24

    Phase 1 Commentary dates: 2020-08-10 – 2020-08-19
    Phase 2 Commentary dates: 2020-12-16 – 2020-12-22

    Publication date: 2020-12-16

    Published test Report

  • MRG Effitas “Q3 2020 360 Degree Assessment and Certification” (ID AMTSO-LS1-TP028) covered the following products:

    Avast Business Antivirus
    Avira Antivirus Pro Business
    BitDefender GravityZone Advanced Business Security Cloud
    Broadcom/Symantec Endpoint Protection
    ESET Endpoint Security
    F-Secure Protection Services for Buiness
    Microsoft Windows Defender
    Trend Micro Worry-Free Services with XGEN

  • Phase 1 Commentary dates: 2020-08-10 – 2020-08-19
    Phase 2 Commentary dates: 2020-12-16 – 2020-12-22

    Commentary received:

    Avast

    Vendor Status: PARTICIPANT

    Vendor Attestation Status: ALL ATTESTATIONS PROVIDED

    Commentary (Phase 1): NO COMMENTARY SUBMITTED

    Vendor Confirmation Status: ALL ITEMS MARKED AS SATISFACTORY

    Commentary (Phase 2): NO COMMENTARY SUBMITTED

    Avira

    Vendor Status: PARTICIPANT

    Vendor Attestation Status: ALL ATTESTATIONS PROVIDED

    Commentary (Phase 1): NO COMMENTARY SUBMITTED

    Vendor Confirmation Status: ALL ITEMS MARKED AS SATISFACTORY

    Commentary (Phase 2): NO COMMENTARY SUBMITTED

    Bitdefender

    Vendor Status: INCLUDED

    Vendor Attestation Status: NO ATTESTATIONS PROVIDED

    Commentary (Phase 1): NO COMMENTARY SUBMITTED

    Vendor Confirmation Status: NO RESPONSE

    Commentary (Phase 2): NO COMMENTARY SUBMITTED

    Broadcom/Symantec

    Vendor Status: INCLUDED

    Vendor Attestation Status: ALL ATTESTATIONS PROVIDED

    Commentary (Phase 1): COMMENTARY SUBMITTED as follows:

    “Financial malware simulator test methodology – A test should use real malware from the industry instead of generated samples.”

    Vendor Confirmation Status: NO RESPONSE

    Commentary (Phase 2): NO COMMENTARY SUBMITTED

    Eset

    Vendor Status: INCLUDED

    Vendor Attestation Status: NO ATTESTATIONS PROVIDED

    Commentary (Phase 1): NO COMMENTARY SUBMITTED

    Vendor Confirmation Status: NO RESPONSE

    Commentary (Phase 2): NO COMMENTARY SUBMITTED

    F-Secure

    Vendor Status: PARTICIPANT

    Vendor Attestation Status: ALL ATTESTATIONS PROVIDED

    Commentary (Phase 1): NO COMMENTARY SUBMITTED

    Vendor Confirmation Status: SOME ITEMS MARKED AS LESS THAN SATISFACTORY

    Commentary (Phase 2): COMMENTARY SUBMITTED as follows:

    On section “Feedback and Disputes”:
    “This comment is regarding the test that was conducted in MRG Effitas 360 degree assessment 2020 Q2 and 360 degree assessment 2020 Q3 Tests.
    In our opinion the sample used for clean files test were not simulating the real world scenario as experienced every day by users.
    If we want to simulate a real-world scenario for normal users, the clean set for false positive testing should be composed of common/popular applications from popular software/websites. In the case that handcrafted or newly created applications are to be used, they need to be tested with proper paramaters such as being found in locations related to code development.    “

    Microsoft

    Vendor Status: INCLUDED

    Vendor Attestation Status: NO ATTESTATIONS PROVIDED

    Commentary (Phase 1): NO COMMENTARY SUBMITTED

    Vendor Confirmation Status: NO RESPONSE

    Commentary (Phase 2): NO COMMENTARY SUBMITTED

    Trend Micro

    Vendor Status: INCLUDED

    Vendor Attestation Status: NO ATTESTATIONS PROVIDED

    Commentary (Phase 1): NO COMMENTARY SUBMITTED

    Vendor Confirmation Status: NO RESPONSE

    Commentary (Phase 2): NO COMMENTARY SUBMITTED

  • Compliance Status: Confirmed compliant with AMTSO Standard v1.3

    Compliance report