Avast

What Is Avast?

When your “antivirus” is really just a virus scanner plus a pile of upsells, the day-to-day experience gets old fast: pop-ups, confusing feature names, and settings that feel designed to push you into a subscription. Avast is most useful when you want one install that covers real-time malware blocking, web protection, and (optionally) add-ons like firewall controls, ransomware folder protection, and a VPN — without having to assemble a toolkit yourself.

Avast’s current consumer lineup is centered on Avast One (an all-in-one security app) and Avast Free Antivirus / paid upgrades. The product angle is straightforward: real-time malware defense plus “shields” for risky areas (web traffic, email, ransomware-protected folders), with privacy features that can include a VPN depending on the specific plan and platform.

If you’re evaluating Avast specifically for privacy tooling, it’s impossible to ignore the company’s history: Avast shut down its data-selling subsidiary Jumpshot in January 2020, and the FTC later documented allegations around Avast’s past collection and sale of browsing data through that pipeline. That’s not a footnote; it’s the main trust hurdle for privacy-minded users.

Avast Features and Performance

Avast’s core value is layered, always-on protection. In practical terms, that means background shields monitoring files and processes, plus web traffic scanning aimed at blocking malicious scripts and downloads before they land. Avast documents multiple “Core Shields” concepts (including real-time scanning of internet activity via Web Guard/Web Shield, plus ransomware folder protection via Ransomware Shield).

Ransomware Shield is one of the clearer, more concrete features: it focuses on preventing untrusted apps from modifying protected folders (documents, photos, etc.), with the option to add folders and manage allowed/blocked apps. Importantly, Avast’s own support docs explicitly say it is not a decryption tool; it’s preventive.

Avast also promotes DNS-hijack protection under Real Site, positioning it as a defense against malicious redirection (DNS hijacking) that tries to trick you into entering credentials on fake sites. That’s relevant for banking and login safety, and it’s distinct from classic “virus scanning.”

VPN capability (SecureLine / Avast VPN)

Avast’s VPN product (often branded Avast SecureLine VPN or presented inside Avast One as the VPN module) is the piece most privacy-tool shoppers care about.

From your verified database specs (and supported by Avast materials), the VPN supports WireGuard, OpenVPN, and Avast’s proprietary Mimic protocol, and allows 10 simultaneous connections. Avast also markets the ability to switch protocols and explicitly names those three options.

Protocol behavior matters because it tells you how much control you actually get:

• Avast’s FAQ indicates that if OpenVPN fails, the app can automatically switch to Mimic.
• Avast’s support content also describes an “Automatic” mode that selects the best protocol for speed/security.

On practical safety controls, Avast’s VPN supports:

• a Kill Switch (block internet if the VPN drops), and
• Split tunneling (choose which apps use the VPN and which bypass it).
  These are table-stakes for a modern VPN, but they’re still worth confirming because some AV-bundled VPNs omit them.

Performance reality check

Avast’s marketing leans hard on speed (“fastest VPN yet”), but speed is always location-dependent and hard to generalize without controlled testing. Avast does state the VPN is designed for “blazing-fast” speeds and frames protocol choice (WireGuard vs OpenVPN vs Mimic) as a way to balance speed and reliability. Treat that as intent, not proof.

What you can verify is that Avast positions SecureLine as a relatively simple, app-based VPN (not a tinkerer’s service), and third-party coverage commonly characterizes its network as smaller than top-tier VPN specialists. For example, TechRadar describes SecureLine as “built on HMA technology” with a relatively small network footprint (numbers vary by source and time).

Pricing and Plans

Avast’s consumer security products use a freemium model: there’s a free tier (Avast One Basic / Avast Free Antivirus) and paid tiers that unlock additional features. Avast’s own product pages and support materials explicitly describe a free base and paid levels (for example, Avast One “Basic” as free, and higher tiers such as “Silver” and “Gold” with starting monthly pricing shown on the marketing page).

For the VPN specifically, Avast markets paid subscription pricing and runs discounts that compare promotional pricing to renewal pricing. Because these promos change constantly, any exact “$X per month” number is only safe to quote if it’s pinned to an official page at the time you’re reading it. Avast’s VPN page shows promotional pricing and references renewal comparison (example: savings compared to a stated annual renewal price).

Refund rules are clearer and more stable because Avast publishes them as policy:

• Monthly subscriptions: eligible for a full refund if requested within 14 days of purchase.
• Annual subscriptions (including the first annual charge after a trial): eligible for a full refund if requested within 30 days of being charged.
  These are Avast’s published terms, not reviewer interpretation.

If you’re buying Avast primarily for VPN use, pay attention to packaging: Avast often sells the VPN as its own product (SecureLine) and also offers VPN functionality as part of broader “Avast One” bundles. The feature set and limits can vary by plan and platform, so you should confirm the exact bundle you’re considering before assuming “AV plan includes VPN” or “VPN includes AV.”

Privacy and Security Assessment

Jurisdiction and what it implies

Your verified data lists Avast’s jurisdiction as the Czech Republic. Jurisdiction matters less than actual technical/logging controls, but it does shape legal exposure and how you evaluate trust.

VPN logging posture (what’s stated)

Avast publishes a VPN Policy (PDF) that spells out what it says it does and does not collect. That’s your baseline for evaluating “no logs” claims — and it should be read literally, because VPN providers often use “no logs” as a marketing label while still keeping some connection metadata.

There’s also older independent testing/research coverage that described SecureLine as storing connection logs while not collecting traffic logs (i.e., not recording what you do inside the tunnel). AV-Comparatives’ 2020 VPN report explicitly states that Avast “clearly states” it stores connection logs including timestamps, partial originating IP, VPN-assigned IP, and data transmitted, while not gathering traffic logs. That’s not inherently disqualifying, but it’s a real trade-off for privacy purists.

The big trust issue: Jumpshot

Avast’s reputation in privacy circles is dominated by the Jumpshot episode.

Avast’s own support page states it closed Jumpshot and ceased the associated data collection operation in January 2020, and that certain Avast/AVG products (including Avast Free Antivirus and Avast Premium Security, among others) may have shared browsing data with Jumpshot during a defined period unless users opted out.

Separately, the FTC complaint and consent materials describe allegations that Avast collected and sold browsing information through Jumpshot, with detailed discussion of disclosure and privacy-setting defaults. Whether or not you think the allegations are “fair,” the documentation makes clear that this was not a minor incident and that it involved browsing data at scale.

This matters for how you score Avast today:

• If you’re buying antivirus mainly for malware defense, Jumpshot may be “history.”
• If you’re buying a privacy tool (VPN, tracking prevention), the company’s past willingness to monetize browsing data is a direct trust hit.

Open-source and audits

In the sources reviewed here, there is no clear, authoritative evidence that Avast’s consumer antivirus or VPN clients are open source, nor a confirmed, current independent no-logs audit for SecureLine on par with what some dedicated VPN providers publish. If you require open-source clients or third-party audits as a must-have, you should treat Avast as “unproven” on that point unless Avast publishes new evidence.

Strengths and Limitations

Strengths

• Real, named ransomware folder protection (Ransomware Shield) with explicit allow/deny behavior and clear limitations (prevention, not decryption).
• DNS hijack protection (Real Site) aimed at preventing stealth redirection to credential-harvesting sites.
• VPN includes modern protocols (WireGuard/OpenVPN) plus a proprietary “Mimic” option intended to improve connectivity where OpenVPN struggles.
• Kill switch + split tunneling are supported, which is the minimum bar for a VPN you’d trust on unstable networks.
• Refund policy is published and specific (14 days for monthly, 30 days for annual charges), which makes trial-and-test less risky.

Limitations

• Trust deficit from Jumpshot: Avast’s past browsing-data monetization is documented by Avast itself and the FTC; privacy-focused users may not want to “move on.”
• VPN network appears smaller than leading standalone VPNs, based on third-party reporting; that can affect location coverage and congestion.
• Potential connection metadata logging trade-offs are documented in independent reporting (connection logs vs traffic logs). If you want a “zero metadata” posture, this is a concern.
• Packaging can be confusing: Avast sells security suites and VPN products in overlapping ways, so you have to verify what’s included in the exact plan you buy.

Who Should Use Avast?

Good fit if you are:

1. A mainstream Windows/macOS user who wants one vendor covering malware protection, ransomware folder protection, and safer browsing features — with simple defaults and minimal configuration.
2. A “one app” buyer who wants antivirus plus an optional VPN in the same ecosystem, including kill switch and split tunneling, and doesn’t want to manage separate providers.
3. Someone who values a clear refund window and plans to test-drive the paid tier(s) before committing long-term.

Not a great fit if you are:

1. A privacy maximalist who won’t use products from companies with a documented history of browsing-data monetization (Jumpshot), regardless of current promises.
2. A VPN power user who wants router installs, full manual configuration, or a provider known for extensive server networks and deep transparency/audit culture. (SecureLine is primarily an app-centric VPN with a smaller footprint in third-party comparisons.)
3. Someone who requires verified independent audits (no-logs audits, reproducible builds, open-source clients) as a hard requirement; those claims aren’t clearly substantiated in the sources reviewed.