NordVPN’s CTO on redefining antivirus for the AI era, and his dream security tool

NordVPN is making significant strides in adapting its products to address the evolving landscape of cybersecurity threats, particularly those posed by artificial intelligence. The company has introduced a new offering termed “next-gen antivirus” (NGAV), designed to serve as a comprehensive security solution for users navigating the complexities of online threats.

Redefining antivirus

In a world where traditional antivirus solutions are becoming increasingly inadequate, NordVPN’s NGAV seeks to redefine what it means to be secure online. As the nature of threats has shifted from simple malicious files to more sophisticated socially engineered scams and phishing attacks, the company recognizes that the internet has become the primary battleground for cybersecurity.

According to NordVPN’s CTO, Briedis, “We don’t believe that viruses right now are coming through floppy disks and CDs. All the protection that you need right now, basically, is on the internet.” This insight underscores the necessity for a security system that not only protects against traditional threats but also proactively addresses the new challenges posed by AI-driven scams.

NGAV is designed to operate seamlessly in the background, alerting users to potential scams, blocking intrusive ads and trackers, and quietly removing malware without requiring extensive technical knowledge from the user. Briedis emphasizes that as AI-enabled threats become more sophisticated, the best security solutions will be those that function invisibly, encouraging users to adopt better security practices without overwhelming them.

Agents as the next attack surface

As personal AI agents gain traction, they present a new frontier for cybersecurity. Briedis acknowledges that protecting these agents is essential, stating, “We are looking into how to protect agents as well, because we see that agents could be attacked on your computer.” This proactive approach reflects a broader trend in cybersecurity, where the focus is shifting towards securing not just the devices but also the software that operates on them.

This feature is still under development and will be integrated into the NordVPN app upon its release, showcasing the company’s commitment to staying ahead of emerging threats.

Using AI at NordVPN

NordVPN has incorporated bespoke AI solutions into its offerings, leveraging both in-house developed models and frontier models from leading research labs. For its NGAV feature, the company has created small, efficient models capable of identifying phishing attempts and other scams. Briedis notes that these models can run locally on user devices, minimizing hardware requirements and enhancing performance.

Internally, NordVPN has transitioned to utilizing open-weight models, a shift that has allowed the company to maintain capabilities while reducing costs associated with proprietary models. Despite the increased volume of code produced, Briedis assures that a rigorous review process is in place to ensure security and quality.

However, he emphasizes that certain sensitive areas, such as payment processing, remain untouched by AI, reflecting a cautious approach to innovation in critical functions.

Privacy and AI at odds

With growing concerns about privacy and the implications of AI, some users may feel apprehensive about integrating AI into security tools. Yet, Briedis points out that the use of AI is already prevalent, and NordVPN has not faced significant pushback from customers regarding its AI-driven features. He believes that maintaining customer trust hinges on a commitment to not using their data for model training, a principle that NordVPN stands firmly by.

While regulatory frameworks like the EU’s GDPR provide some assurance, Briedis warns that over-regulation could stifle innovation, complicating the development of new software solutions.

The future of secure AI use

When envisioning a future security tool for an AI-embedded world, Briedis imagines a comprehensive application that monitors a user’s digital environment, ensuring data safety and security. He envisions a system that not only safeguards information but also actively manages its presence online, potentially deleting unnecessary data to enhance privacy.

While consumer hardware is evolving to support on-device AI capabilities, Briedis clarifies that NordVPN does not plan to venture into hardware development in the immediate future. Instead, he believes the focus should remain on creating smaller, localized solutions that empower users to take control of their cybersecurity.

In conclusion, as the landscape of cybersecurity continues to evolve, NordVPN is positioning itself at the forefront of innovation, striving to provide users with the tools they need to navigate an increasingly complex digital world.

Tech Optimizer
NordVPN's CTO on redefining antivirus for the AI era, and his dream security tool