| Malwarebytes Inc. | |
| Type: | Private |
| Location City: | Santa Clara, California |
| Key People: | |
| Area Served: | Worldwide |
| Products: | Computer security software |
Malwarebytes Inc. is an American cybersecurity company that develops software to protect computers and mobile devices from malicious software and other digital threats. It was founded in 2008 by Marcin Kleczynski, who serves as chief executive officer.[1] The company is based in Santa Clara, California.[1]
In 2023, Malwarebytes separated its business security division under the new name ThreatDown, which continues to develop and maintain the company’s enterprise security products. In 2024, Malwarebytes acquired the Sweden-based virtual private network provider AzireVPN to expand its privacy-focused software portfolio.
Malwarebytes traces its origins to 2004, when Polish-born programmer Marcin Kleczynski began developing malware-removal utilities while still in high school in Illinois and was working as a technician in a computer repair shop in Chicago.[2] After encountering persistent infections while repairing computers, he created a tool named RogueRemover in 2006 to eliminate fake antivirus programs. RogueRemover proved instrumental in developing Malwarebytes Anti-Malware, and Kleczynski was able to set up a forum which enabled him to improve the software through feedback.[3] Kleczynski and one of the site's regulars, Bruce Harrison, formally launched Malwarebytes on January 21, 2008, while Kleczynski was studying computer science at the University of Illinois.[4] The company initially operated from Chicago before relocating to San Jose, California.
Harrison became the VP of Research for Malwarebytes, and further hired Doug Swanson, with experience in freeware development to work for the new company. Marcus Chung, an e-commerce expert who formerly worked for GreenBorder, was hired as chief operating officer.[5] Kleczynski and Harrison reportedly made $600,000 in their first year of selling the software, despite not having met personally at the time.[6]
In 2012, Malwarebytes acquired HPhosts, a website blacklisting company, which tracks blacklisted websites and ad servers, a necessary development to protect against new internet protocol addresses and web servers which distribute malware, and advise internet service providers to shut down those with malicious activity. That year, the company had claimed to have removed over five billion pieces of Malware in three years.[5] The following year, the company launched into the corporate market with an enterprise product aimed at desktop-based anti-malware detection and protection.[7] In 2013, Malwarebytes acquired ZeroVulnerabilityLabs, Inc., a security research and development company founded by Pedro Bustamante, which protects software applications from "known and zero-day exploits used by exploit kits, web-based vulnerability exploits and other corporate-targeted attacks".[8] They expanded their malware removal and protection to the Android platform with the launch of Malwarebytes Anti-Malware Mobile,[9] and launched a USB-based product called Malwarebytes Techbench aimed at helping technicians remove malware.[10]
By 2013, it claimed to have removed five billion malware threats from computers in its first five years.[11] In 2014, Malwarebytes received $30 million in funding from Highland Capital Partners, and by the following year, announced it had treated 250 million computers worldwide, representing about 20–25% of working business computers.[6]
In June 2015, the company announced that it was moving its headquarters from 10 Almaden Boulevard in San Jose, California to a new office space on the two top floors of the 12-story 3979 Freedom Circle in Santa Clara, California. The company reported a growth of 10 million users in just one year, from 25 to 35 million active users, and an increase in revenue by 1653% in 2014.[12] In 2015, Kleczynski was named one of Forbes Magazine's '30 Under 30'.[13]
In January 2016, Malwarebytes unveiled advanced anti-ransomware package Endpoint Security, and announced that it had raised $50 million in investment from Fidelity Management and Research Company.[14] Kleczynski stated that the funds would be used primarily for the company's hiring, product development and marketing assets.[15] In June, Malwarebytes announced a strong growth in sales of over 75 percent in the first quarter of the year compared to 2015, with billings surpassing $100 million. The corporate subscription base for the company was reported to have grown by 90%.[16] In September, Proofpoint, Inc. In October the company purchased AdwCleaner, a Windows program used to clean adware and Potentially Unwanted Programs (PUPs) from computers.[17] In February 2017 the company acquired Saferbytes, an Italian security start-up specialized in anti-malware, anti-exploit, anti-rootkit, cloud AV, and sandbox technologies.[18]
In November 2019, the company joined forces with NortonLifeLock and Kaspersky, along with the Electronic Frontier Foundation and non-profits including the National Network to End Domestic Violence and Operation Safe Escape to form the Coalition Against Stalkerware. The coalition seeks to inform, educate and combat the use of tracking apps without consent.[19]
In January 2021, Malwarebytes was targeted by the same nation-state actor implicated in the SolarWinds attack and suffered a limited access breach. Investigations confirmed that no products or services were compromised.[20] [21]
In February 2021, Malwarebytes published its 2021 State of Malware Report which shared cyberthreat research including 30 million examples of Mac malware[22] and a 1,055% increase in spyware detections in 2020.[23]
In the same year, Malwarebytes, in collaboration with Digitunity and the Cybercrime Support Network, produced a report The Demographics of Cybercrime. The study surveyed 5,000 people in the United States, the United Kingdom, and Germany. The results showed that certain demographic groups are more likely to encounter cybercrime, which is more widespread in nature, and also experience stronger emotional and financial consequences after such incidents.[24]
In August 2022, the company laid off 125 employees.[25] [26] The company announced an additional 100 layoffs in August 2023, as part of plans to separate the company into two separate business units.[27]
In November 2024, Malwarebytes acquired AzireVPN, a VPN service based in Sweden.
Kleczynski has stated that Malwarebytes, first developed in 2008, has a competitive advantage over many other traditional antivirus programs, many of which were developed in the late 1990s, before the development of many later forms of malware.[3] The New York Times has described Malwarebytes as a "hybrid of heuristics, behavior and a signature engine that is designed to detect and block malware that other vendors can't detect".[28] According to Dean Takahashi of VentureBeat, Malwarebytes complements other antivirus software from vendors such as Symantec and McAfee, with the anti-malware working alongside other anti-virus software to attack the problem from "different directions", remarking that the software both removed infections from infected machines, whilst preventing others from becoming infected in the first place.[29]
As in the early development days with RogueRemover, Malwarebytes continues to support community feedback on its products, and runs two sub-forums complementing the main forum, known as "False positives" and "Malware contribution", with the false positives being reported allowing the company to update its database within hours of posting, and the Malware contribution allowing for users to quickly report malware missed by the software.[3] [6]
In February 2025, reviewers reported that the company’s Katana engine began using advanced AI and machine-learning techniques to detect unidentified malware families, providing proactive protection against emerging threats.[30]
Later in 2025, Malwarebytes employed heuristic and machine-learning technologies to detect new and evolving malware, strengthening its behaviour-based protection across consumer products.[31] [32]
Malwarebytes develops security software for Microsoft Windows, macOS, Android, iOS, and ChromeOS platforms. Its main products include Malwarebytes for Windows and Malwarebytes for Mac, which combine malware detection, exploit mitigation, and ransomware protection.[33] The company also distributes Malwarebytes Browser Guard, a browser extension that blocks tracking scripts and malicious sites, and AdwCleaner, a standalone utility for removing unwanted software.[34]
Malwarebytes has several products, which were available in 36 different languages. Malwarebytes Anti-Malware provides two different versions, one for free download for home computers, and the other a professional version, with a 14-day free trial in advance, which provides "real-time protection against malware, automated scanning, and automatic updating".[28] Malwarebytes Anti-Malware Mobile is a free Android app which protects smartphones from mobile malware, preventing unauthorized access to personal data identifying tracking applications.[35] As of December 2025, it has a rating of 4.7 on the Google Play store.[36]
In 2014, the company launched Malwarebytes Anti-Malware 2.0 with an improved user interface and dashboard.[37] The company also launched Malwarebytes Anti-Exploit in the same year, which shields selected applications from attacks by "exploit mitigation to protect vulnerable programs".[38] Anti-Exploit also comes in a free and paid for version for Windows computers. The free version stops exploits in browsers and Java, whilst the paid product adds protection for a wider range of software applications.[39] Anti-Exploit received four stars from PC Magazine in 2015[40] and won V3 magazine's "Security Innovation of the Year" award in 2014.[41]
In 2016, Malwarebytes Anti-Exploit was merged into the premium version Malwarebytes version 3.0, and the standalone application has since remained in perpetual beta.[42]
In January 2016, Malwarebytes unveiled Malwarebytes Endpoint Security, advanced anti-ransomware technology which is described as the "first solution to offer multiple layers of protection against unknown ransomware". The company sponsored a survey with Osterman Research into 540 firms in the United States, United Kingdom, Canada and Germany and found that nearly 40% of companies had experienced ransomware incidents, of which 34 percent had accounted for loss of revenue.[43] The Guardian reported that one-fifth of British companies had been charged over $10,000 to unlock their files and that there was an increasing demand for anti-ransomware technology.[44]
In 2017, Malwarebytes expanded its portfolio to include mobile products for Mac and Android including Malwarebytes for Android and Malwarebytes for Mac. Malwarebytes also can be run on ChromeOS, but mainly provides protection against Android threats.[45] Malwarebytes also released Malwarebytes for iOS in 2018 to deliver secure and private mobile experiences for its users. Due to Apple's security restrictions, Malwarebytes for iOS can not remove malware, but does provide basic web protection and spam blocking.[46]
In 2018, Malwarebytes expanded its business portfolio by launching Malwarebytes Endpoint Protection and Response to monitor, identify and remediate attacks. This product line was expanded in 2020 to include server protection for enterprise customers with Malwarebytes Endpoint Detection and Response for Servers and Malwarebytes Endpoint Protection for Servers. In 2020, Malwarebytes also launched Malwarebytes Nebula, a cloud platform for enterprise customers to simplify endpoint management and reporting.[47]
Malwarebytes also has numerous tools such as a Junkware Removal Tool to remove adware, an Anti-Rootkit Beta to remove and repair rootkits, StartUpLITE to boost the speed of the Windows reboot, FileASSASSIN to prevent locked files and a Malware Removal Service to support organizations under an active malware attack.
In 2020, Malwarebytes launched Malwarebytes Privacy, a virtual private network (VPN) service.[48] [49]
In 2023, Malwarebytes acquired the leading online privacy company, Cyrus, adding the digital footprint scanner and personal data removal services to its software.[50] [51]
In the same year, Malwarebytes added Identity Theft Protection, which can be added to any Malwarebytes plan.[52]
Business-oriented products, distributed under the ThreatDown brand since 2023, include tools for managed and endpoint threat detection.[53]
In 2024, the company expanded its consumer privacy software by acquiring the virtual private network service AzireVPN.[54]
In the same year, the company launched Personal Data Remover, a consumer tool that scans data brokers and people-search sites, helps users request the removal of their personal information, and provides ongoing monitoring to support online privacy.[55] In 2024,Malwarebytes also launched the free Digital Footprint Portal. This tool scans a wide range of online sources to show users what personal data connected to their email address has been exposed and provides recommendations for enhancing their online privacy.[56]
In 2025, Malwarebytes announced Scam Guard, an AI-based tool for smartphones designed to help users identify and avoid scams.[57]
Malwarebytes provides both free and paid editions of its security software. According to PCMag, the free version performs manual malware scans and removals, while the paid edition adds real-time monitoring, scheduled scans, and automatic updates.[58]
The company states that the service does not log browsing activity, DNS requests, source IP addresses, or bandwidth usage.[59] The information collected is limited to payment details, account credentials, and basic diagnostic data for troubleshooting purposes. Malwarebytes also publishes a transparency report detailing the law enforcement requests it receives. As of 2025, it has begun preparing for an independent third-party audit of the AzireVPN infrastructure.[59]
