PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.
You can install a security suite on all your devices to protect them from attack, but such an app can do little against identity theft. Webroot Premium combines device-level protection with identity theft tracking and remediation. However, that device-level protection offers little more than Webroot’s antivirus, and the identity component lacks features found in the best competitors. We recommend Norton 360 With LifeLock or Bitdefender Ultimate Security if you need this kind of dual protection. Both are Editors’ Choice winners that excel in protecting your devices and comprehensive identity theft remediation.
How Much Does Webroot Premium Cost?
At 9.99 per year, Webroot Premium is priced competitively compared to most suites that combine security technology with identity theft protection. For instance, Bitdefender Ultimate Security costs 9.99 annually, while McAfee+ is priced at 9.99 for the tier that includes identity protection, and Avast One Platinum reaches 9.99 per year. The basic Webroot subscription secures five devices and one identity. If you opt for the family edition at 9.99, the price nearly doubles, but it also doubles the number of protected devices to ten, significantly expanding identity protection to cover up to ten identities.
In comparison, Bitdefender’s subscription covers ten devices and one identity, while Avast One Platinum allows protection for up to thirty devices and includes family coverage (two adults and four children). McAfee+ extends coverage to every device in your household, regardless of the operating system, and offers an upgrade option for family identity protection for an additional .
Norton provides a bewildering array of protection levels. The 9.99 Select tier includes five device and VPN licenses, 100GB of online backup storage, and basic identity theft protection. For 0 more, the Advantage tier offers ten licenses, 250GB of storage, and enhanced identity theft features. The Ultimate+ tier, priced at 9.99, provides unlimited devices, 500GB of backup storage, and top-tier identity protection. Family editions are available, with costs soaring to 9.99 annually for Ultimate+ protection for a family of seven.
Aura also presents multiple tiers, costing 4, 4, and 4 per year, which include 10, 20, and 50 device-level security licenses, respectively, covering one, two, and five identities. IDX Complete, on the other hand, integrates a suite of security and privacy tools, including password management and a data broker opt-out system, but requires separate antivirus protection. IDX Complete is priced at 5.32 per year, or 1.88 if you want identity protection for your partner and kids.
As evident, Webroot stands out as one of the more affordable options in this category. However, with higher costs often comes enhanced features, ranging from modest improvements to substantial upgrades.
What Happened to Webroot Internet Security?
In the latest product line update, Webroot AntiVirus has been rebranded as Webroot Essentials. Consequently, Webroot Internet Security Plus and Webroot Internet Security Complete have been phased out. Now, if users wish to upgrade from Webroot Essentials, they must transition directly to Webroot Premium. A similar move was made by Bitdefender, which plans to retire Bitdefender Internet Security by 2025.
This restructuring may not be a significant loss, as previous iterations of the Webroot suites have been criticized for lacking sufficient features across their tiers.
Getting Started With Webroot Premium
To begin using Webroot Premium, users must create a Webroot account online, download the app, and enter the activation code when prompted. Following installation, the app performs a series of startup tasks, checking for malware and optimizing performance tailored to the user’s system configuration. Despite these additional tasks, the installation process remains swift.
While Webroot AntiVirus has transitioned to Webroot Essentials, this review focuses on Webroot Premium. The main window retains the title Webroot SecureAnywhere, appearing almost identical to Webroot Essentials, except for an added tab on the Utilities page and some additional options in Advanced Settings.
The main interface features a green gradient background with a lighter panel displaying statistics from recent scans and a button to initiate an on-demand scan. Notably, Webroot conducts a full scan during installation and continues daily scans, ensuring ongoing protection.
Shared Antivirus Protection for Windows
The antivirus protection for Windows PCs within this suite closely mirrors that of Webroot Essentials. On my standard test system, the initial full scan took about four minutes, with subsequent scans becoming progressively quicker, ultimately reducing to approximately one and a half minutes. This efficiency starkly contrasts with the average scan time of over an hour and a half for recently reviewed antivirus applications.
Webroot effectively identifies and quarantines known malicious programs while employing a behavior-based detection system in the cloud for unknown programs. It journals all actions taken by unidentified processes, allowing for online analysis. Should the cloud determine a program poses a threat, the local agent is instructed to eliminate it and reverse any actions taken. This system can even reverse ransomware attacks in certain instances.
Independent lab tests, such as those conducted by AV-Test Institute and AV-Comparatives, typically assume that antivirus solutions will instantly recognize and eliminate malware. However, Webroot’s journal-and-rollback system relies on cloud responses, which may not align with these testing methodologies. Historically, Webroot has performed well in MRG-Effitas tests that allow 24 hours for malware remediation, although it has not appeared in recent reports. It did, however, achieve AAA certification in the latest SE Labs report, a commendable feat shared by other tested antivirus solutions.
My own hands-on malware protection test commenced with the opening of several folders containing malware samples. Merely opening the folders did not trigger Webroot’s real-time scanner, but transferring the contents to a new folder activated it. The software successfully detected around 80% of the samples at this stage and prompted a scan to confirm cleanup. A subsequent scan identified additional malware, while a third scan returned a clean slate. Ultimately, Webroot achieved 100% detection, scoring 9.9 out of 10 points. Other competitors, including Avast, AVG, Norton, and UltraAV, also scored 9.9 points, but only Webroot managed to detect all current samples.
To assess how well each antivirus handles prevalent malware, I utilized a feed of malware-hosting URLs provided by MRG-Effitas. In testing, Webroot blocked access to 76% of these URLs and quarantined an additional 21% of the malware payloads, resulting in a total protection score of 97%, an improvement from its previous 93%. While this score is commendable, other competitors such as Avira, Bitdefender, Guardio, Sophos, and Trend Micro achieved 100% in their respective malicious URL blocking tests.
Phishing websites, which do not require active malware, pose another threat. I tested Webroot on both Windows and macOS, and it achieved a perfect 100% detection rate on both platforms. Other competitors, including Avira, Guardio, and McAfee, matched this performance, as did VPN providers NordVPN Plus and Surfshark One.
Other Features Shared With Webroot Essentials
Unlike many security companies that reserve firewall protection for their suites, Webroot includes it in its basic antivirus offering. The firewall component does not protect against external attacks, leaving that task to the built-in Windows Firewall. Instead, Webroot monitors network activity by unknown programs, preventing them from misusing their connections—something Windows Firewall does not address. If malware is detected, the firewall restricts all network access for untrusted programs.
When there is no immediate threat, the firewall allows programs to access the network without interference. Users can opt to require confirmation for internet access by untrusted programs even in the absence of an active infection or set it to demand confirmation for every access attempt unless permission has been granted.
From the Webroot online console, users can activate the LastPass subscription included with both Webroot Essentials and Webroot Premium. For further details, refer to our separate review of LastPass Premium.
While many of the remaining shared features may not be utilized by the average user, they can be beneficial when working with tech support. Tools are available to repair damage caused by malware, reboot into Safe Mode, and manually rectify malware damage. An active process list displays which processes are trusted and which ones Webroot is monitoring. Additionally, the SafeStart Sandbox allows advanced users to launch suspect programs in a controlled environment. However, these advanced features may be beyond the reach of typical users.
System Analyzer and Optimizer
Despite the lack of visible differences between Webroot Premium and Webroot Essentials, the Utilities section reveals new features. The Plus version includes buttons for Reports and System Control, while the Complete version replaces these with Optimize Now and Run System Analyzer buttons. The gear icon next to Utilities leads to a new System Optimizer tab, which is also present in Webroot Essentials for Mac.
The performance optimizer is straightforward; clicking Optimize Now removes unnecessary files, recovering the space they occupied. However, there is no preview of what will be deleted, nor is there a completion report. Users can view a log of the optimizer’s actions, but it is simply a raw list of what Webroot removed. The optimizer can also be scheduled to run daily, weekly, or at intervals of up to 24 hours.
Delving into Advanced Settings reveals that the optimizer primarily clears temporary files and empties the Recycle Bin. Most users may not venture into these settings, but those who do can configure it to remove additional data types, including user login history and memory dump files.
The System Analyzer scans for potential system-level issues and checks for malware. On my virtual machine test system, the Hardware section reported almost all components as functioning well, with only a minor concern regarding graphics RAM. The Software section flagged a potential memory leak in searchapp.exe and a handle leak in explorer.exe. Under Threats, it confirmed no malware was present and that both antivirus and firewall were enabled.
If the System Analyzer identifies issues, users must troubleshoot independently. Some problems may be straightforward, such as updating Windows, but others, like frequent crashes, may require more in-depth knowledge to resolve.
Secure Erase
Webroot introduces a secure deletion tool accessible via right-clicking any file or folder in Windows, labeled Permanently Erase With Webroot. This feature is particularly useful for ensuring that sensitive files cannot be recovered using forensic methods, especially when paired with encryption software. While Webroot does not offer encryption, the secure deletion tool can still be valuable.
When a file is deleted in Windows, it typically moves to the Recycle Bin. Even if bypassed or emptied, the file’s data remains intact on the disk. Forensic software can often recover these files, making secure deletion necessary for sensitive data. Webroot’s Secure Erase, however, does not perform secure deletion by default; it merely deletes the selected file or folder without sending it to the Recycle Bin. To enable actual secure deletion, users must adjust the settings to raise the security level to at least Medium, which overwrites the data three times before deletion. For those handling highly sensitive data, the Maximum security level overwrites data seven times, ensuring no possibility of recovery, albeit at the cost of longer processing times.
Mac Protection
Webroot licenses can also be utilized for macOS devices, providing the same level of protection as Webroot Essentials for Mac. While the macOS edition lacks some high-end features present in the Windows version, these advanced options may be too technical for the average user. Testing results indicate that Webroot’s phishing detection capabilities align perfectly with the Windows edition, achieving a flawless 100% detection rate. Furthermore, it successfully quarantined 99% of Windows malware samples, outperforming most competitors.
Mobile Security
Previously, mobile security was a distinguishing feature of the suites compared to standalone antivirus. Now, even Webroot Essentials includes mobile security, provided users subscribe at the three-device tier or higher. However, the current Webroot Mobile Security app remains underwhelming, and it is advisable not to allocate a license to it unless you have extras.
Installation is straightforward, but adding it to your subscription can be unnecessarily complicated. Users must create a separate login for the mobile apps, using the same email address and activation code, but with specific password requirements that can be cumbersome.
In the past, Webroot Mobile Security offered a variety of useful features, including Lost Device Protection, App Protection, Battery Monitor, and Network Monitor. Unfortunately, these features are absent in the current app. Users can run a malware scan at any time and view a safety score based on their web activity. The Secure Browser allows safe browsing, but users must exit it to access other Webroot features. Enabling Webroot for Chrome may provide similar protection without the need for the mobile app.
In summary, the Android app offers limited functionality, and for those seeking a robust Android antivirus solution, it may be prudent to explore other options.
Identity Protection
To install Webroot protection on devices, users begin at the online console, where they can download the appropriate app. Identity protection is managed entirely from the console, eliminating the need for a local app.
Upon accessing the Webroot app on a Mac, users will find a button labeled Identity Protection, which is unrelated to the actual identity protection service. The Windows edition more aptly refers to it as Privacy Protection.
Logging In and Setting Up ID Theft Protection
To connect with the identity protection system, users must log in to their Webroot account online. Clicking on Identity Protection in the left menu directs them to the Allstate Identity Protection page, as Webroot partners with Allstate for this service. After logging in with Webroot credentials, users may encounter difficulties if using a password manager, as the identity protection page operates under a different domain.
Once logged in, users will be prompted to enter basic personal information, including name, phone number, and address. Some fields may be pre-filled based on account details. After completing this step, users can access the Identity Protection console.
However, if the session times out or the user logs out, they will face another login page, requiring them to return to the main Webroot account page to link back to identity protection. This cumbersome process has been acknowledged by Webroot representatives as a standard, albeit less-than-ideal experience.
Upon first visiting the identity protection dashboard, users will see their identity health status and any alerts related to dark web exposure. The status display is simple, indicating low risk, at risk, or exposed. Recommendations for actions, such as reviewing alerts and updating profile data, are also provided.
Credit Monitoring
To initiate credit monitoring, users must provide their Social Security Number and date of birth, followed by answering typical verification questions. Once verified, Webroot begins monitoring credit through TransUnion, alerting users to any issues.
However, Webroot’s credit monitoring service is relatively basic compared to competitors. Many services offer three-bureau monitoring, monthly credit score updates, and assistance with credit freezes. In contrast, Webroot lacks these additional features.
Transaction Monitoring
Webroot’s transaction monitoring aims to detect identity theft early by monitoring financial accounts. Users can connect their accounts through the online console, allowing Webroot to access transaction details.
Alerts can be customized based on transaction types, but users cannot apply different thresholds for different accounts. Competing services often provide more flexibility in setting alerts and monitoring options.
Dark Web Monitoring
Webroot offers dark web monitoring to check if personal information appears for sale. Users specify what data to monitor, including credit/debit card numbers, driver’s licenses, and email addresses. While Webroot does not limit the number of entries for each type, its selection of monitored data is narrower than that of competitors, which often include additional categories like bank accounts and Social Security numbers.
When Webroot detects compromised data, it generates notifications and provides generic advice on how to respond. However, the level of detail offered is less comprehensive than that of competing services.
Features to Prevent Identity Theft
Under the Prevention category, the identity dashboard includes Security Training and Solicitation Reduction. However, the latter does not directly assist users in opting out of data broker sites but instead guides them to third-party resources for reducing unsolicited communications.
Webroot also provides animated training videos through a partner, Ninjio, covering various security topics. While the collection is limited, users can complete the training in about half an hour.
Identity Restoration
While real-world testing of identity restoration capabilities is not feasible, Webroot offers 24/7 support for users needing assistance. The Guardian questionnaire helps users determine when to contact support, providing guidance for various scenarios.
Webroot’s monetary guarantee for remediation services now stands at up to million for up to ten family members, aligning with industry standards. However, similar services often provide separate limits for specific types of reimbursement, which Webroot does not appear to do.
Verdict: Good Antivirus, Limited Identity Protection
Webroot Premium offers solid device-level protection, incorporating Webroot Essentials antivirus along with a few additional features. While effective, its antivirus capabilities do not match the comprehensive security suites offered by Norton 360 With LifeLock or Bitdefender Ultimate Security. Similarly, Webroot’s identity protection features fall short compared to those of its competitors. As a result, Norton and Bitdefender remain our Editors’ Choice selections for security suites that provide robust identity protection, justifying their higher price points.
