Norton 360 after six weeks: strong detection, noisy sales pitch
When Norton’s Startup Scan flagged a deeply buried process that my other local checks didn’t notice, it made one thing obvious: detection still matters. Protection, though, is only one side. Over roughly six weeks of testing Norton alongside independent lab data, its technical strengths were clear, and so were the product design choices that might frustrate buyers.
Methodology and sources
What I’m summarizing combines two types of evidence: hands‑on impressions reported by ZDNET during about six weeks of use, and independent lab results from MRG Effitas’ June 2026 Consumer Assessment. Where I cite timings, quotes, or specific upgrade flows, those come from ZDNET’s hands‑on testing. Where I cite detection percentages and certification, those figures come from MRG Effitas (June 2026). For any lab metrics, readers should consult the original MRG Effitas report for full methodology, sample counts, and definitions.
Lab results in one line
MRG Effitas’ June 2026 Consumer Assessment reported that Norton blocked 98% of the malware samples it tested, produced no false positives, and recorded a 0.33% miss rate that resulted in a Level 2 certification (MRG Effitas, June 2026). Labs use different sample sets and scoring rules, so the report itself is the best place to understand how those numbers were computed and what “Level 2” signifies in that context.
Hands‑on highlights (ZDNET’s experience)
- Startup Scan: ZDNET reported the Startup Scan ran during boot (about 15 minutes in their test) and flagged a hidden Trojan that Windows Defender and Malwarebytes didn’t detect locally. That anecdote shows why a boot‑time scanner can matter. ZDNET’s article contains the screenshots and notes for readers who want to dig into the evidence.
- Layered scans: Norton provides Quick, Full, Smart, Targeted, and Startup scans, a useful spread from lightweight checks to deeper, forensic style scans.
- Scam and deepfake protections: Norton’s Scam Protection blocked malicious pages in ZDNET’s browsing tests, and the Deepfake Protection tool is presented as a runtime check for altered audio or video played inside apps.
- Daily footprint: In normal use Norton was unobtrusive. ZDNET called the product “quiet” outside of full scans and popups for upgrades.
ZDNET’s overall hands‑on verdict captured the split: “As an antivirus tool, Norton is excellent, ” but heavy upselling and gated features left the reviewer less enthusiastic overall (ZDNET score: 3/5, “Good”).
UX and upsells, the part that sours the experience
Where Norton’s detection engine shines, the commercial design can grate. ZDNET repeatedly encountered in‑app promotions and paywalls that pushed additional utilities and cleanup tools as separate purchases. Norton Utilities Ultimate was shown as an extra product in the reviewer’s experience (ZDNET reported a continuation price of about $45.73 for the remainder of the first year after trial and $70/year thereafter). ZDNET also cited example pricing for Norton plans, with promotional first‑year prices rising steeply on renewal, including Norton 360 Deluxe on sale for $50 for the first year and then listed as $125 annually after the introductory period.
This pattern, attractive introductory pricing that jumps on renewal plus separate monetized utility apps, is common in consumer security suites. It is not a technical flaw, but it changes the purchase calculus. What looks like a value buy at signup can become a recurring expense that many users find frustrating.
Genie (Norton’s AI assistant): helpful, but not infallible
Norton’s AI assistant, Genie, is meant to help triage suspicious emails, texts, and links and to answer security questions. ZDNET’s hands‑on notes were mixed: Genie successfully flagged obvious spam in some tests, but ZDNET also listed “AI assistant can be unreliable” among the cons. The honest takeaway: Genie can speed an initial triage, but treat its output as a recommended next step rather than a final verdict for high‑risk decisions.
How Norton compares to Malwarebytes and why UX matters
MRG Effitas’ June 2026 Consumer Assessment shows Norton performed very well in that lab run (98% block, no false positives, Level 2 certification). ZDNET noted that Malwarebytes detected every sample in the same MRG Effitas dataset, giving Malwarebytes an edge in that specific test and reinforcing the reviewer’s lean toward Malwarebytes for users who prefer a cleaner, less upsell heavy experience.
Put simply: if two products offer similar real world protection, the one with fewer interruptions and clearer licensing often wins the recommendation, especially for non‑technical buyers or families that prize simplicity.
Practical guidance, what to do next
- Check the lab reports yourself. Read the MRG Effitas June 2026 Consumer Assessment (and other labs such as AV‑Comparatives or AV‑TEST) to understand sample counts, delivery vectors, and how certification tiers work.
- Map features to needs. Norton bundles VPN, backup, password manager, and identity monitoring in higher tiers. If you don’t need every add‑on, a leaner product or single purpose tool may be cheaper and less noisy.
- Plan for renewals. Introductory pricing can look attractive. Set calendar reminders to review auto‑renew charges and compare year two pricing across vendors.
- Treat AI features as assistants. Use Genie and Deepfake Protection as part of a layered workflow, not the sole arbiter for removing or trusting critical content.
- Keep a second opinion. For high‑risk environments, run periodic scans with an alternate engine or maintain an endpoint detection solution to catch anything a single product may miss.
- Compare alternatives. If you prioritize a smoother UI and fewer upsells, consider alternatives and compare renewal costs before committing.
Key questions, concise answers
- Is Norton good at blocking malware?
MRG Effitas’ June 2026 Consumer Assessment reported Norton blocked 98% of tested malware samples and produced no false positives, with a 0.33% miss rate that resulted in a Level 2 certification (MRG Effitas, June 2026). For full context and methodology, consult the MRG Effitas report. - Did Norton find anything my other tools missed?
ZDNET’s hands‑on review reported a Startup Scan that flagged a hidden Trojan other local scans (Windows Defender and Malwarebytes) did not detect in that reviewer’s checks. That’s an illustrative anecdote. Consult the reviewer’s screenshots and logs for details or ask for the sample hash to validate independently. - Are important features locked behind extra payments?
Yes. ZDNET’s hands‑on experience found cleanup utilities and some advanced features presented as separate purchases (for example, Norton Utilities Ultimate). Promotional first‑year pricing examples were cited, with notable renewal increases afterward. - Should I buy Norton 360 Deluxe?
It depends on priorities. Norton 360 Deluxe bundles antivirus, VPN, cloud backup, and a password manager and can be a strong family value at promotional prices. If you prefer a smoother UI and fewer upsells, consider alternatives and compare renewal costs before committing. - How does Norton compare to Malwarebytes?
In the MRG Effitas run cited by ZDNET, Malwarebytes detected every sample in that dataset while Norton recorded a 98% block rate in the same report. Combined with ZDNET’s preference for Malwarebytes’ cleaner UX, many users may prefer Malwarebytes if they want straightforward protection without frequent upsell prompts.
Decision checklist for teams (prioritized)
- Must do: Download and read the MRG Effitas June 2026 Consumer Assessment and the ZDNET hands‑on review to verify the figures and screenshots cited.
- Must do: Audit renewal pricing for the exact Norton plan you’ll buy (Standard, 360 Deluxe, Select Plus) and identify which features require separate purchases (e.g., Norton Utilities Ultimate).
- Home/family buyer: If you want a bundled set of tools (VPN, backup, password manager), Norton 360 Deluxe on promotion can be a cost effective choice, but disable auto‑renew or calendar the renewal review.
- SMB with limited IT: Consider whether bundled identity and backup features are worth the renewal risk. If simplicity matters, compare Malwarebytes or single vendor stacks that are less upsell heavy.
- High‑risk or enterprise‑grade needs: Don’t rely on consumer suites alone. Use endpoint detection and response (EDR) tools and run independent periodic scans.
- Optional but recommended: If the Startup Scan anecdote matters to you, request the sample hash or scan logs from the reviewer (or replicate on a test machine) and submit to VirusTotal or a lab for independent verification.
“It is still highly capable, but it did sour me on an otherwise great antivirus solution.”, ZDNET reviewer
Norton remains a heavyweight on detection and offers practical tools like startup scanning, layered scans, and scam and deepfake protections. The tradeoff is the product experience: frequent upgrade prompts and separate monetized utilities that can turn a promising initial value into a recurring cost. For buyers, the right call is pragmatic: if you need the bundle and accept the renewal economics, Norton delivers strong protection, but shop renewals, verify lab details, and consider alternatives if you prefer a cleaner, less commercialized UX.