For a company associated with alarms, McAfee’s most consequential move was quiet: it chose what to stop protecting. In 2021, it sold its enterprise-security business to Symphony Technology Group for $4 billion. Corporate products, cloud defenses and threat-response machinery eventually reappeared under the Trellix and Skyhigh Security names. McAfee kept the red shield, the household recognition and a narrower job - protecting people.
That separation explains today’s company better than any antivirus commercial. McAfee is a private consumer-subscription business headquartered in San Jose. It sells annual plans to individuals and families, combining device security with VPN access, safer browsing, identity monitoring, personal-data cleanup, financial alerts, recovery help and, increasingly, artificial intelligence that looks for scams. The user is not a security analyst. It is the person wondering whether a delivery text is real while standing in a grocery line.
The first thing that failed was the file
Classic antivirus had a tidy worldview. A suspicious program landed on a machine; the software compared it with known threats, watched its behavior and tried to quarantine it. The trouble is that modern fraud often asks the victim to do the work. No malicious attachment is required when a polite message can persuade someone to send a code, move money or call a fake support number.
McAfee’s answer is to treat the moment of doubt as the product surface. Scam Detector checks texts, email and video, explains why something looks suspicious and allows an on-demand check of a message, screenshot or link. In 2026, the company began rolling out QR-code checks and broader analysis of social messages, including the apparently harmless “Hey” that starts a longer con. Deepfake Detector listens for synthetic audio in video on selected Lenovo and HP AI PCs. It performs that analysis on the computer’s neural processing unit, keeping the media local and reducing reliance on a cloud round trip.
“The barrier to create AI-generated content has come way down.”Steve Grobman, McAfee CTO, describing the deepfake problem
This is what changed the company’s mind: the unit of danger moved from a device to a person’s judgment. McAfee says Americans receive an average of 14 scam messages a day and spend 114 hours a year sorting real from fake. Those figures come from McAfee-commissioned surveys, not a national crime census, but they describe a familiar tax on attention. The security company wants to sell relief from that tax.
The strategic break
Antivirus begins 2011
Intel buys McAfee 2021
Enterprise sold 2025-26
Scam era
One bill for five kinds of anxiety
The business model is a familiar one with a broad wrapper. McAfee advertises discounted first-term subscriptions, then renews annually at a disclosed regular rate. Exact prices move by market and promotion, so the number that matters is not merely the large introductory discount. It is the renewal price beside the checkout button, multiplied by the years a household expects to stay.
Essential is the smaller package, covering five devices with antivirus, VPN, web and scam protection and identity monitoring. Premium, Advanced and Ultimate expand to unlimited devices on many plans and layer in personal-data removal, financial and credit monitoring, identity-restoration support and insured identity-theft benefits where eligible. Family variants divide protection among adults and children. Insurance is not magic cash: limits, exclusions and eligibility rules apply.
Bundling is McAfee’s practical distinction. Microsoft Defender already gives Windows users a capable baseline. Bitdefender, Norton, Avast, Malwarebytes, Trend Micro and others compete on protection, price and usability. Aura and LifeLock lean harder into identity. McAfee’s pitch is that one household should not need a specialist for every anxiety. The trade is control for convenience: a broad suite is easier to buy, but a person who wants only lightweight malware protection may find the identity dashboards, prompts and upgrade paths unnecessary.
In daily use, the bundle is less dramatic than its feature list. A customer can scan a new laptop, switch on the VPN at an airport, ask the app to inspect a suspicious screenshot, monitor an email address for breach exposure and see whether a data broker is publishing a home address. Higher tiers can add credit or transaction alerts and connect a victim with recovery specialists after identity theft. The useful action is often a small one: close the tab, change the password, freeze the credit file or call the institution through a number found independently.
It does not replace judgment. A clean result cannot prove that a stranger is trustworthy, and an alert cannot recover money before a bank transfer settles. Families still need unique passwords, multifactor authentication, software updates, backups and a rule that urgent financial requests get verified on another channel. McAfee is best understood as a set of extra tripwires. It can slow a bad decision and make the next step legible; it cannot make risk disappear.
The shield comes preinstalled
Distribution is the less glamorous half of the product. Samsung and McAfee marked a tenth year of collaboration in 2024, with protection available to Galaxy users through the Galaxy Store. Lenovo launched selected AI PCs with McAfee’s Deepfake Detector; HP followed on selected OmniBook Copilot+ models. Yahoo News uses McAfee’s image-detection technology to flag potentially manipulated pictures for human editorial review.
These relationships put McAfee beside the customer at setup, before that customer goes shopping for security. They also reveal a constraint. On-device deepfake detection depends on supported hardware, language and media conditions. A model reported at 96 percent accuracy still has misses and false alarms. Yahoo’s workflow gets this right: the software flags; editors review. A probability should start a question, not end an argument.
Independent antivirus testing offers a similarly mixed, useful picture. AV-Comparatives gave McAfee Gold awards for real-world protection and performance across 2024. In a March 2025 malware test reported by TechRadar, McAfee reached 99.6 percent online detection and 99.96 percent online protection, but only 79.3 percent offline detection and produced 15 false alarms. Later performance tests found very low system impact. In plain English: fast and strong when connected, less convincing in that offline test, and sometimes eager on the whistle.
A brand famous enough to counterfeit
McAfee carries one comic liability: fake McAfee renewal emails and browser alerts are themselves a durable scam genre. People who never installed McAfee see warnings that “McAfee” found five viruses. The counterfeit borrows the shield’s recognition and, at the same time, deepens suspicion of the real product. A company promising to sort authentic from fake must repeatedly prove that its own notices are authentic.
Its history does not simplify the pitch. John McAfee founded the company in 1987 and left in 1994. The business became Network Associates, returned to McAfee, sold to Intel for $7.68 billion, spent time as Intel Security, re-emerged with private-equity backing, went public again in 2020 and was taken private in a deal valued above $14 billion in 2022. The founder’s later notoriety has no operational connection to today’s company, but the name guarantees that people will keep asking.
Inside, McAfee describes a culture of customer focus, speed, debate and accountability. Its December 2024 workforce disclosure reported women at 32.9 percent globally and 25 percent of vice-president-and-above leadership. The company presents inclusion, remote work, employee communities and community-service days as operating choices, not decorative copy. As a private company, however, it publishes less current financial detail than it did during its brief return to Nasdaq.
The part worth copying
The strategic lesson is not “add AI” to an old product. McAfee did three more concrete things. It chose one buyer by selling the enterprise portfolio. It organized scattered tools around that buyer’s life rather than around security categories. And when Scam Detector arrived, it put the feature into core plans at no extra charge instead of creating another small subscription. The capability made the bundle easier to explain.
A playbook without the red shield
- Cut the customer segment that forces a second roadmap.
- Follow the problem when it moves - from files to messages and identities.
- Bundle adjacent chores around one plain-language promise.
- Use partners to meet customers at setup, not after a search.
- Make AI output advisory when mistakes carry real consequences.
It will not work everywhere. A startup cannot cheaply copy McAfee’s decades of threat data, global name recognition or routes through phone and PC makers. A bundle also collapses if the parts feel mediocre, renewal pricing surprises people, alerts become noisy or monitoring requires permissions customers will not grant. Households already satisfied with built-in protection and good digital habits may not need another annual bill. Businesses needing central administration should look to enterprise platforms, not the consumer McAfee that remained after 2021.
McAfee’s wager is ultimately modest and enormous: that people will pay a company to help them decide what to trust. The antivirus engine still matters, but it now sits inside a larger machine for identity, privacy, recovery and judgment. The red shield used to guard the computer. Its next act is trying to guard the pause before a click.