ThreatDown by Malwarebytes

ThreatDown is not a company but the business brand Malwarebytes Inc. launched on 7 November 2023 for what had been Malwarebytes for Business; the UK entity became ThreatDown UK Limited (Companies House 09987777) in April 2026. Malwarebytes was founded in 2008 by Marcin Kleczynski, who remains chief executive, is privately held with a $100 million investment from Vector Capital in 2022, and lists offices in Santa Clara, Florida, Cork, Tallinn, Italy, Lisbon, Bilbao and Tel Aviv. We found no Russian or Chinese link.

Prices are in pounds, read on 9 September 2026 at threatdown.com and in the Cleverbridge-run checkout with a UK address. Whether they include VAT is not stated; the checkout takes a VAT number, so we record them as ex VAT and flag it. The four bundles are Core (£57.04 a device a year), Advanced (£65.31) with EDR, Elite (£81.84) with MDR and Ultimate (£110.57) with MDR Plus, identity threat detection and Premium Support built in, with 20 per cent off for a three-year term. Core is the tier we score because it is the cheapest with a cloud console covering Windows, macOS and Linux; servers are an add-on at every tier, so a mixed estate costs more than the headline. The store sets a hard limit of 20 devices per line item: typing 25 snapped back to 20 every time, so our 25-device benchmark needs two lines or the partner route the pricing page also offers. Email security, DNS filtering, mobile security and Premium Support are unpriced add-ons. No trial or renewal terms were found on the pages we read.

The feature ladder is honest. Ransomware rollback (up to seven days of encrypted files), browser phishing protection, device control, vulnerability assessment and an application blocklist are on every tier; host firewall management, patch management and Windows disk encryption management start at Advanced; EDR at Advanced; MDR at Elite, with no MDR option at all on Core. The Nebula console is browser-based, with OneView for multi-tenant MSP use, generic installer and RMM deployment, and a long integration list: Syncro, SuperOps, ConnectWise Asio, Automate and Manage, Kaseya VSA and BMS, Datto RMM and Autotask, Atera; Splunk, Microsoft Sentinel and Google Chronicle for SIEM. NinjaOne and N-able are not on it. No MCP server was found.

The independent record is thin and dated. Malwarebytes was Approved in AV-Comparatives' August to November 2022 business test and has not appeared since; it is not in AV-TEST's June 2026 business round; we found no SE Labs or MITRE result; the "14 consecutive quarters" MRG Effitas claim is the vendor's. In January 2021 Malwarebytes disclosed that the SolarWinds-era attackers had read a subset of its internal email through a dormant Office 365 protection product, with no access to its source code or products. ThreatDown's own Trustpilot profile has one review; the 4.4 on 5,416 for malwarebytes.com is the consumer product. G2 gives it 4.6, by ThreatDown's own homepage badge. Not yet tested by Saaskly: assessed on published pricing, the independent test labs, vendor documentation and third-party reviews.