In a previous article, we discussed the different forms of cyberattacks and how to deal with them. This included malware infections, hacking, and social engineering, which can be avoided in different ways — such as keeping passwords secure, keeping data backups, and being cautious with links and attachments.
There is also a wide range of software you can download, some free and some paid, which can help you feel more protected from the digital threats out there. This guide walks through the main categories of security software, what each one actually does, and some well-known examples of each.
Core Protection
These are the tools most people should have as a baseline — they defend against malicious software and unauthorised network access before either can gain a foothold on your device.
Antivirus / Anti-malware
Antivirus (also known as "anti-malware") software is a program which scans for and removes viruses, trojans, worms, spyware, and other malicious software. Most modern versions combine signature-based detection with behavioural analysis to catch new threats. They constantly run in the background and often have some of the other software mentioned in this guide built in, such as firewalls and VPNs.
Examples: Windows Defender, Bitdefender, Norton 360
Firewalls
These are apps which monitor and control incoming and outgoing network traffic based on a set of rules. Software firewalls run on your device (like Windows Firewall), while hardware firewalls sit at the network level, often built into routers. They block unauthorised access attempts, denial of service attacks, and data leaks.
Examples: Windows Firewall, pfSense, ZoneAlarm
VPNs (Virtual Private Networks)
These are apps which encrypt your internet traffic and route it through a separate remote server, hiding your IP address and protecting data on public Wi-Fi. This makes it harder for your devices to be tracked and attacked via wireless connections.
Examples: NordVPN, ExpressVPN, ProtonVPN
Identity & Access
This category covers the tools that protect who can get into your accounts — and that warn you when someone else already has.
Password Managers
Generate, store, and autofill strong, unique passwords, reducing the risk that comes from password reuse. Using a unique password for each account reduces the risk of a single breach compromising multiple accounts. It also means saving passwords in text files or on physical paper notes isn't needed, which can itself be a security risk.
Examples: Bitwarden, 1Password, Dashlane
Two-Factor Authentication (2FA) Apps
A form of login security that acts as a secondary check whenever access is attempted to a secure account — for example, logging in or authorising a bank transfer. After you enter your password, 2FA sends a one-time code to a separate device or app, such as via email, text message, or an authenticator app, before granting access. These apps also provide features like one-time passcodes that change every minute, and notifications of login attempts that let you accept or deny access.
Examples: Google Authenticator, Microsoft Authenticator, Authy
Identity Theft / Dark Web Monitoring
Alerts you if your credentials or personal information appear in a data breach. These services do this by continuously scanning hidden online marketplaces, forums, and data dumps for your leaked personally identifiable information (PII). When they detect your compromised data, they issue real-time alerts so you can change passwords, freeze credit lines, and secure your accounts before criminals can exploit them.
Examples: Have I Been Pwned, IdentityForce, Norton LifeLock
Data & Device Defence
These tools are less about stopping an attacker from getting in, and more about making sure that if they do, your data stays safe, unreadable, or recoverable.
Anti-Ransomware Tools
Specialised protection that monitors for suspicious file-encryption behaviour and can roll back changes. They do this by checking for unusual file-locking activity in real time to stop it, and restoring encrypted documents to a safe, uninfected state. This blocks ransomware attacks from succeeding, helping ensure data integrity and regulatory compliance.
Examples: Malwarebytes Ransomware Protection, Acronis Cyber Protect, ZoneAlarm Anti-Ransomware
Encryption Software
Scrambles readable data into an unreadable code using a mathematical algorithm and a unique key, ensuring that only people with the correct password or digital key can read it. This can be either full-disk encryption or file/folder-level tools. It's especially useful when data is stored in a shared space or when data is in transit, such as between a browser and a web server, or between two people emailing each other.
Examples: BitLocker, FileVault, VeraCrypt
Backup Software
Automated backups to the cloud or an external drive that regularly back up your chosen folders. This isn't quite "security" in the traditional sense, but it's important for ransomware resilience — it lets you recover locked files without paying attackers.
Examples: Backblaze, Acronis True Image, Dropbox
Browsing & Email Safety
A large proportion of attacks arrive through a browser tab or an inbox, so this category focuses on filtering out the threat before it ever reaches you.
Ad Blockers / Anti-Tracking Extensions
Block malicious ads — a common malware delivery method — and reduce tracking scripts. These are typically available as web browser extensions. In addition to removing annoying video ads, they also stop hidden data trackers, speed up webpage loading times, and reduce the risk of malware from bad ads.
Examples: uBlock Origin, AdBlock Plus, Ghostery
Email Security / Anti-Phishing Tools
Filter spam and flag phishing attempts, either built into your email provider or added as a browser extension. This includes inspecting and blocking malicious links, AI-powered behavioural analysis, checking the content of a message for suspicious language, and scanning any attachments. It can also quarantine the email or block the original sender if needed.
Examples: Proofpoint, Mimecast, Ironscales
Closing Summary
No single app can protect you from every digital threat, which is why layering these tools together offers the strongest defence. A good starting point is pairing an antivirus program with a password manager and 2FA, then adding a VPN, ad blocker, and backup software as your needs grow.
The right combination will depend on how you use your devices — someone handling sensitive work files will want stronger encryption and dark web monitoring, while a casual browser may only need the basics. Whatever combination you choose, staying protected isn't about finding one perfect tool, but building habits and using software that work together to keep your data, accounts, and devices secure.