- Who makes Malwarebytes and where it's based
- What Malwarebytes does, in plain English
- The Malwarebytes 2021 security incident
- Malwarebytes pricing, trials and the money-back promise
- Using Malwarebytes safely: official downloads only
- Malwarebytes fake support calls and scareware
- Who should be cautious with Malwarebytes
- So, is Malwarebytes safe?
- Frequently asked questions
Malwarebytes is a real security company, founded in 2008 by Marcin Kleczynski and Bruce Harrison and based in Santa Clara, California, according to Wikipedia. In 2021 it said a state-linked attacker reached a small portion of its internal email, but found no sign its software or build process was compromised. Download it only from the official site or app stores.
It feels a bit odd to ask whether an anti-malware tool is safe, but it's the right question, because security software has deep access to your device. I've read Wikipedia's summary of the company, Malwarebytes' own account of its 2021 security incident and its pricing page, so here's what's on the record and what to watch for.
Who makes Malwarebytes and where it's based
According to Wikipedia, Malwarebytes was founded in 2008 in Illinois by Marcin Kleczynski and Bruce Harrison. It's privately held and headquartered in Santa Clara, California.
The company sells security software for Windows and Mac, apps for Android and iOS, Browser Guard, AdwCleaner and a VPN. Wikipedia adds that its business products are sold under the ThreatDown brand, which was spun off in 2023. So if you see two brand names, that's why.
What Malwarebytes does, in plain English
Malwarebytes is known for finding malware, adware and unwanted programs. Wikipedia says the company bought AdwCleaner, a tool for removing adware and potentially unwanted programs, in 2016. The pricing page says the software works on PC, Mac, Android and iOS, and describes its standard plan as antivirus for a single phone, tablet or PC.
It isn't a magic shield. No security tool replaces updating your system, being careful with attachments and using strong, separate passwords. I wouldn't tell anyone that one product makes them immune to anything.
The Malwarebytes 2021 security incident
This is the one thing anyone researching the brand will run into. In its own blog post, Malwarebytes said that in 2021 it was targeted by the same nation-state actor linked to the SolarWinds attack, though it said it doesn't use SolarWinds.
Malwarebytes said the attacker used a dormant email protection product in its Office 365 tenant and reached only a small portion of internal email. It said it found no evidence of unauthorized access or compromise in its on-premises and production environments, and that its source code, build and delivery processes showed no sign of compromise. Its own words were: "Our software remains safe to use."
Those are the company's statements about its own incident, so treat them as that. What I find useful is that Malwarebytes published a detailed account rather than staying quiet.
| What I checked | What the sources say |
|---|---|
| Founded | 2008, Illinois, by Marcin Kleczynski and Bruce Harrison (Wikipedia) |
| Headquarters | Santa Clara, California (Wikipedia) |
| Ownership | Privately held (Wikipedia) |
| 2021 incident | Small portion of internal email reached; no sign of product compromise (Malwarebytes) |
| Platforms | PC, Mac, Android and iOS (Malwarebytes pricing page) |
| Money-back period | 60-day money back guarantee (Malwarebytes pricing page) |
Malwarebytes pricing, trials and the money-back promise
Malwarebytes' pricing page lists a 60-day money back guarantee. The page text I could read didn't spell out trial terms or renewal conditions, so check the plan details on the checkout screen, and note the renewal date. If you decide to cancel, do it through the account you bought from.
I haven't quoted prices because they change and the page I read showed placeholders. Check the live page for the plan you want.
Using Malwarebytes safely: official downloads only
Security software is a prime target for imitators. Fake download pages and bundled installers use the Malwarebytes name to slip adware onto your computer. Go to the official website or your phone's official app store, and don't follow a link in an advert, pop-up or email.
- Type the address yourself or search for the app in your official app store.
- Ignore pop-ups that say your device is infected and tell you to call a number. A real scan runs inside the app you installed.
- Never give remote access to someone who phoned you claiming to be from Malwarebytes or any security company.
- Don't pay for support through gift cards or bank transfers.
Malwarebytes fake support calls and scareware
Tech support scammers love security brand names. If a caller or a browser warning claims to be from Malwarebytes and wants remote access, a card payment or a gift card, hang up or close the page. Real scans don't come with a phone number to call.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
If you think your accounts have already been compromised, my guide on how to know if your Facebook account was hacked walks through the signs and the first steps. If you run a website for your business, my tips for stopping hackers touching your business website covers the basics.
Before you click install, it's worth checking three things on your own device. First, confirm the publisher name shown by your system matches the company you expect. Second, read each screen of the installer rather than pressing next repeatedly, because optional extras are often pre-ticked in software from any vendor. Third, after installing, look at what the app has asked permission to do, and remove anything that doesn't fit what you wanted.
Take the same care on a phone. On Android and iOS, use the official store listing, check that the developer name is the company's, and be suspicious of near-identical names from unknown publishers.
Who should be cautious with Malwarebytes
Anyone who isn't sure what an installer is asking should read more before installing. Check the permissions and the options during setup, untick anything you don't want, and read the licence terms for your situation.
So, is Malwarebytes safe?
It's a real, long-running security company with a public account of its one well-known incident. The sensible approach is to download only from official sources, read what you're agreeing to, keep your own habits sharp and remember that no tool does everything for you.
Frequently asked questions
Is Malwarebytes safe?
Malwarebytes is a real security company founded in 2008 and based in Santa Clara, California, according to Wikipedia. Download it only from the official site or official app stores.
Was Malwarebytes hacked?
In 2021 it said it was targeted by the same nation-state actor linked to the SolarWinds attack. It said a small portion of internal email was reached and that it found no evidence its products, source code or build process were compromised.
Does Malwarebytes work on Mac and phones?
Its pricing page says it works on PC, Mac, Android and iOS.
Does Malwarebytes have a money-back guarantee?
The pricing page lists a 60-day money back guarantee. It gives no terms on that page, so check the details when you buy.
Who owns Malwarebytes?
According to Wikipedia, it's privately held. Its business products are sold under the ThreatDown brand, spun off in 2023.
