How AI Search Is Recommending Antivirus Software: Monthly Trends

Executive Summary

Bitdefender GravityZone is the category leader in AI search recommendations at 69.9% valid recommendation coverage in October 2026, a 4.2-point lead over second-place Norton at 65.7%. Leadership has changed hands since July 2026, when Norton led at 68.4% against Bitdefender GravityZone's 64.2%; Bitdefender GravityZone now holds a lead of the same size in the opposite direction.

Bitdefender GravityZone is the strongest upward mover with coverage, up 5.7 points from 64.2% in July 2026 to 69.9% in October 2026, a significant rise against baseline. Its top-three rate stands at 62.4% and its rank-one rate at 49.7%, the highest rank-one share among tracked brands this month. The prior-to-current movement of 21.1 points from September 2026 is the largest single-month move recorded in the series.

McAfee is the sharpest decliner, down 12.3 points from 44.8% in July 2026 to 32.5% in October 2026, a significant fall against baseline and its third consecutive monthly decline. Kaspersky fell 6.6 points to 23.9% and Webroot fell 4.1 points to 7.4%, both significant against baseline.

Against the prior month, the category was mixed rather than uniformly moving. Bitdefender GravityZone's rise and Norton's 3.4-point recovery from September 2026 ran alongside continued declines for McAfee, Kaspersky, Trend Micro, and Webroot, while the competitive gaps separating the top of the field from the bottom continued to widen.

Each monthly benchmark run begins with 800 prompt-surface observations (602 unique questions in October 2026, versus 570 in July 2026) across the benchmark's defined AI/search surface universe. Of those, 800 mentioned a tracked brand or competitor; 787 were relevant and 13 were irrelevant in October 2026 (792 relevant and 8 irrelevant in July 2026). The public metrics use the 644 qualified observations that survive both qualification stages (643 in July 2026).

Key Findings

AI Response Inconsistency Alerts

Questions This Section Answers

• What factual inconsistency did AI platforms surface about Norton 360 this month?
• Which sources may have driven the conflicting VPN data-cap claims?

One critical or high-severity factual inconsistency was detected this month, across two AI platforms. The single flagged conflict involves Norton.

Norton

AI platforms provided conflicting information about Norton 360's VPN data allowance, a high-severity factual inconsistency with a confidence score of 0.95. When asked "What is the most recommended AntiVirus software?", Google AI Mode stated that Norton 360 includes a completely unrestricted VPN, while Copilot stated that some suites, including Bitdefender and Norton, cap VPN usage unless the user upgrades. These two claims cannot both be true.

The Google AI Mode response cited pages including CNET's "Best Antivirus 2026" roundup, Cybernews's "The Best Antivirus Software for 2026," and a Microsoft Learn community answer thread on the best antivirus software. The Copilot response referenced product listing pages on Amazon and ESET's shopping pages. A source flagged across both sides, Gizmodo's best-antivirus coverage, contains language on Norton 360's uncapped VPN alongside a note that Bitdefender's bundled VPN is capped at 200 MB a day per device unless upgraded, which may bear on how each platform formed its answer.

Highest-priority diagnostic: Which source page each platform weighed most heavily for the VPN data-cap claim, and whether the flagged third-party coverage is the common origin of the divergence.

Benchmark Context

Questions This Section Answers

• How many qualified observations underlie the October 2026 recommendation percentages?
• What changed in the benchmark-level metrics between July and October 2026?

The report separates the raw collection universe from the qualified analysis set. Brand-level recommendation percentages are calculated within the qualified benchmark set.

The qualified surface breadth held at six canonical AI/search families across the full July to October 2026 series. Intermediate months stayed within a narrow band: 643 qualified observations in August 2026 and 645 in September 2026.

Benchmark-Level Metrics

Both aggregate shares softened through August 2026 and September 2026 before recovering in October 2026, with the recommendation-shaped answer share at 52.1% and the valid recommendation shortlist share at 78.8% in August 2026, then 53.3% and 77.5% in September 2026.

AI Recommendation Trend

Questions This Section Answers

• Who leads AI recommendations across the tracked antivirus brands in October 2026?
• Which brands moved significantly against their July 2026 baseline?

Leadership changed hands: Bitdefender GravityZone now leads Norton by 4.2 points

Bitdefender GravityZone's 5.7-point baseline-to-current rise exceeded normal month-to-month variation, and McAfee's, Kaspersky's, and Webroot's declines did the same in the opposite direction. The remaining category-level change came from the combination of several smaller movements rather than any single dominant one, with the four brands directly below the top two all registering modest baseline-to-current declines.

What Changed This Month

Questions This Section Answers

• Which prompts stopped surfacing McAfee as its coverage declined?
• How did Bitdefender GravityZone's rank-one share compare to Norton's?
• Did the widening competitive gaps reflect sustained prompt-level shifts?

Bitdefender GravityZone: A one-month reversal that restored leadership

Bitdefender GravityZone's valid recommendation coverage rose 5.7 points, from 64.2% in July 2026 to 69.9% in October 2026, a significant rise against baseline. The movement is concentrated almost entirely in the most recent month: coverage stood at 48.8% in September 2026, so the prior-to-current change is 21.1 points, the largest single-month move in the series and a reversal that more than offset the August-to-September decline.

Placement metrics moved with coverage. Its top-three rate stands at 62.4%, up 4.4 points from 58.0% in July 2026, and its rank-one rate is 49.7%, up 6.3 points from 43.4% and a significant rise against baseline. Its rank-one count rose from 279 in July 2026 to 320 in October 2026. Raw mention presence also climbed 5.1 points, from 72.5% to 77.6%, a significant rise.

The distinction worth noting is that Bitdefender GravityZone now leads on both breadth and depth: it is surfaced more often than in July 2026 and is far more likely to hold the number-one slot, with a rank-one rate nearly five times Norton's 9.9%. Net sentiment held steady at 0.9 in both months, so the change is one of placement frequency rather than tone.

Highest-priority diagnostic: Which surface families drove the September-to-October recovery, and whether the earlier two-month decline and this rebound shared a common set of prompts.

McAfee: A three-month slide into the bottom half of the field

McAfee's valid recommendation coverage fell 12.3 points, from 44.8% in July 2026 to 32.5% in October 2026, a significant decline against baseline and the third consecutive monthly decrease. The prior-to-current movement of 2.9 points from September 2026 is smaller than the cumulative fall, indicating the erosion has been steady rather than concentrated.

Its raw mention presence fell 7.5 points, from 62.5% to 55.0%, a significant decline against baseline, while its top-three rate edged up 1.4 points to 11.8%. Its rank-one rate remains low at 0.3%, with a rank-one count of 2. Valid recommendation count fell from 288 in July 2026 to 209 in October 2026.

The pattern separates visibility from placement: McAfee is being surfaced in fewer answers overall, and among the answers where it appears, the top-three rate has not fallen. Net sentiment weakened from 0.8 in July 2026 to 0.6 in October 2026, among the lowest readings among tracked brands this month, alongside Webroot.

Highest-priority diagnostic: Which prompts stopped surfacing McAfee, and whether the weakening sentiment traces to specific evidence sources.

Kaspersky: A significant coverage decline with placement holding flat

Kaspersky's valid recommendation coverage fell 6.6 points, from 30.5% in July 2026 to 23.9% in October 2026, a significant decline against baseline. The prior-to-current movement of 1.2 points from September 2026 was within normal variation, so the bulk of the fall occurred earlier in the series.

Its raw mention presence fell 3.3 points, from 39.8% to 36.5%, while its top-three rate rose 0.5 points to 11.5% and its rank-one rate rose 0.3 points to 0.5%. Valid recommendation count fell from 196 in July 2026 to 154 in October 2026.

The distinction here is that Kaspersky's placement metrics held or improved slightly even as its coverage declined, which points to reduced surfacing rather than weaker positioning where it does appear. The absolute counts are small, so single-prompt shifts can move the percentages, but the direction is consistent across coverage and presence.

Highest-priority diagnostic: Which prompts stopped surfacing Kaspersky, and which brand absorbed those placements.

Avast: A three-month decline that remains within normal variation

Avast's valid recommendation coverage fell 4.3 points, from 56.8% in July 2026 to 52.5% in October 2026, which is inside the significance threshold for the brand. It shares with McAfee the longest active decline streak in the series at three consecutive monthly declines, though its cumulative move remains within normal variation; the prior-to-current movement from September 2026 was 0.4 points.

Its raw mention presence was effectively flat at 73.8% against 74.2% in July 2026, while its top-three rate rose 3.8 points to 22.2% and its rank-one rate fell 0.9 points to 1.7%. Valid recommendation count fell from 365 in July 2026 to 338 in October 2026.

The distinction is between a slow drift and a break: Avast continues to convert its prominent presence into top-three placements at a rising rate even as its overall coverage slips. Net sentiment held at 0.8 in both months, and the movement remains within the range the benchmark treats as normal variation.

Highest-priority diagnostic: Whether the three-month drift is concentrated in a specific surface family or is spread evenly across the benchmark.

Competitive repositioning: Gaps at the top and in the middle widened over the series

The gap between Bitdefender GravityZone and McAfee widened by 18.0 points across the series, from 19.4 points in July 2026 to 37.4 points in October 2026, without widening every month. The gap between Bitdefender GravityZone and Kaspersky widened by 12.3 points, from 33.7 to 46.0, also without widening every month. The gap between Malwarebytes and McAfee widened by 11.6 points, from 15.1 to 26.7, and widened in every month of the series.

These are category observations about the field's internal spacing rather than a single brand's problem. The middle of the field is separating from the bottom, and the top is separating from the middle, with the widest and most consistent movement occurring between Malwarebytes and McAfee.

Highest-priority diagnostic: Whether the widening gaps reflect sustained prompt-level shifts or a small number of high-frequency prompt families moving each month.

Buyer-Intent Interpretation

All 644 qualified observations in October 2026 fell into the Brand Recommendation cluster. The benchmark did not capture qualified observations in the Pricing & Value or Multi-Brand Comparison clusters, so the public data cannot yet answer questions about how price sensitivity or direct brand-versus-brand comparisons shape AI recommendations. The commercial implication is that the benchmark measures which brand AI names as the answer, but not why it wins on cost, plan structure, or feature comparisons.

Brand Opportunity Summary

The benchmark identifies where attention is warranted; a company-level analysis is needed to explain why.

Evidence Behind the Benchmark

The aggregate metrics are built from prompt-level observations (query, surface, recommendation outcome, rank, sentiment, and citations where exposed). Company-level analysis can go deeper into prompt, competitor, surface, and evidence patterns. Source presence is not automatically treated as proof of causation.

About This Benchmark

This report is part of the AI Visibility Industry Market research program.

• AI Visibility Industry Market Methodology
• AI Visibility Industry Market Metrics
• AI Visibility Industry Market Standards

Report-Specific Interpretation Notes

• Brand-level percentages are calculated within the qualified benchmark set, not the raw prompt total, so the qualified denominator differs from the collection volume in each month.
• Small-count brands show movement from low bases; for example, Webroot's rank-one count moved from 0 in July 2026 to 1 in October 2026, and absolute counts should be read alongside percentages for Kaspersky, Trend Micro, and Webroot.
• Movement between months identifies changes worth investigating; it does not by itself establish the cause of those changes.
• The benchmark describes the output distribution AI systems produced this month; it cannot on its own distinguish platform behavior from measurement effects.

Next Step

The Public Benchmark Shows Where a Brand Is Winning or Losing. A Company-Level Audit Shows Why.

Beneath the aggregate percentages sit the questions that matter for strategy: which high-intent prompts are won, which competitor takes the recommendation when a brand loses, what attributes AI associates with each option, and which external sources shape those answers. For Bitdefender GravityZone, the audit question is which prompt families drove both the two-month decline and the October reversal; for McAfee, it is which prompts stopped surfacing the brand; for every brand, it is what the AI systems actually say and cite.

A company-specific AI visibility audit maps those prompt, surface, competitor, ranking, sentiment, and evidence-source patterns into a prioritized visibility strategy.

Request an AI visibility audit