Independent Testing for Webroot

About Webroot

Webroot provides NextGen protection through the creation and deployment of Webroot Brightcloud® Threat Intelligence Services, a cloud-based platform that uses context and reputations to stop threats that have never been seen before.

MRG Effitas assessed the effectiveness of this technology with our unique ability to obfuscate malware and create new malware. We were able to create a testing scenario that is as close as possible to In the Wild conditions. Our work with Webroot, particularly in the NextGen space, is a coming together of innovative protection technology with innovative testing expertise.

MRG Effitas has enjoyed a longstanding relationship with Webroot. We are pleased to work with them regularly to assess their products and conduct comparative tests using In the Wild malware. It is significant for the efficacy of Webroot’s technology that we are able to run Time To Detect tests, phishing protection tests, SAT protection tests and simulator and botnet tests.

Our tests

For all of these tests we create completely new malware samples so that we are exposing the products to new threats. We carry out performance and remediation tests to see what happens if a PC is already infected, and how well Webroot’s products can remediate the endpoint. We also conduct some feature comparison and management interface comparison tests.

In our Webroot Secure Anywhere Business Endpoint Protection assessment, for example, we used a wide spectrum of tests to cover all possible threats that any enterprise environment faces. The most important testing metric in this comparative assessment was the Time to Detect. As endpoints get compromised on an ever greater scale, we cannot run a simple detection test to determine a product’s effectiveness.

The Time to Detect metric focuses on the time needed for a successfully running threat to be detected and neutralized. In this comparative assessment we used a 24 hour interval to measure the Time to Detect. In addition to the Time to Detect metric, we also compared the two products’ Phishing protection, Performance/System impact and Feature comparisons.

“Webroot has worked with MRG Effitas over the past several years due to their unique capacity to test efficacy functionality that goes beyond simply blocking a threat. While Effitas does understand that prevention is important, they were the first to introduce testing that looked at detection of specific malicious behaviors by using malware simulation tools to replicate what behaviors were being encountered in the wild. In addition, Effitas has shown a high level of technical capability enabling them to assist with new development and to assess products for security vulnerabilities. Webroot supports Effitas’ efforts to bring innovation and improvements to testing methodologies as well as to the products that participate in their tests.”

Grayson Milbourne, Security Intelligence Director, Webroot

The results

Webroot products perform very well in our independent tests and on many occasions have been the best overall performer in individual test cases.

We are delighted to continue to work with Webroot and applaud the company’s progressive approach to continual testing and development of its products.