Introduction

OPSWAT releases quarterly market share reports for several

sectors of the security industry. This report includes both
worldwide and North American market share for antivirus
worldwide market share for peer-to-peer applications. The
data used was collected between March 23, 2011 and
February 15, 2012, and comparisons are made to data from
March 23, 2010 through February 15, 2011. Please note
that OPSWAT is not a research institution; this report aims to
distribute the unique data collected to inspire public
discussion, not to make any claims as to why changes have
occurred.
About OPSWAT
IT professionals with development tools and data services to
power manageability and security solutions. The companys
agship product, OESIS Framework, is a manageability
solution licensed by major technology companies like Cisco
others. As the industry standard for enabling endpoint
application manageability and compliance regulation, OESIS
has already been deployed on an estimated hundred million
endpoint systems worldwide. To learn more about OESIS,
please visit the product page at
www.opswat.com/products/oesis-framework.
Security Industry Market Share Analysis
March 2012
The Research
This report shows usage data for security applications on
Windows systems. The data was collected using OPSWATs
AppRemover tool, which utilizes the detection capabilities of
the OESIS Framework to collect information regarding the
applications installed on endpoint computers. This tool is
free for download on www.appremover.com and various
download sites around the web, and is used around the world
by home and business users, both expert and inexperienced
representative of the market for this report, based on the wide
accessibility of the tool to a large range of users.
If the user of the tool opts in, a report of the applications
installed on the computer is created. These opt-in reports
are compiled to generate the market share calculations in
this report. More than 353,000 data points were compiled for
this report.
In addition to applications detected by the OESIS
Framework, other well known applications are also included
in the P2P market share based on registry searches.
OPSWAT acknowledges that not every security application
is included in this report. Antivirus, P2P and other security
application vendors interested in inclusion in these reports
and the OESIS Framework are encouraged to contact
certification@opswat.com to learn how to partner
with OPSWAT.
AVAS1 SDl1WARE
AVRA CMBH
AVC 1ECHNDlDCES
MCRDSDl1 CDRP.
ESE1 SDl1WARE
SYMAN1EC CDRP.
KASPERSKY lABS
MCAlEE,NC
PANDA SDl1WARE
1REND MCRD, NC.
MARCH 2010 lEBRARY 2011
MARCH 2011 lEBRARY 2012
D1HERS
16.26%
11.65%
10.96%
10.0B%
10.06%
9.9/%
/./5%
4./4%
3.//%
2.22%
12.54%
AVAST
OTHERS
AVIRA
AVG
ESET
SYMANTEC
MICROSOFT
KASPERSKY
MCAFEE
PANDA
TREND
A
V
A
S
1
A
V

R
A
A
V
C
M

C
R
D
S
D
l
1
E
S
E
1
S
Y
M
A
N
1
E
C
K
A
S
P
E
R
S
K
Y
M
C
A
l
E
E
P
A
N
D
A
1
R
E
N
D
D
1
H
E
R
S
Avasl| Scfware has had a slrcng lead in lhe wcrldwide
anlivirus markel fcr lhe pasl few years, wilh !C.2C in
lhe lasl year and !7.27 lhe previcus year. Avira, AVC,
Micrcscf, and ESE1 fcllcw in lhis years rankings, each
wilh cver !u cf lhe markel. Micrcscf has made lhe
biggesl gains in lhe pasl year, increasing ils share frcm
7.27 a year agc lc !u.uB lcday. Symanlec hclds lhe
fh pcsilicn wilh _._7 cf lhe wcrldwide markel.
While scme shifing has cccurred belween 2u!! and
2u!2, lhe vendcrs lhal appear in lhe lcp !u remain lhe
same, wilh lhe exceplicn cf 1rend Micrc, whc rcse lc
push PC 1ccls frcm lhe !ulh pcsilicn.
1he percenlage cf lhe markel held by lhe lcp !u vendcrs
was B7.(C, a slighl increase frcm BC._7 in 2u!u.
VS.
WORLDWIDE
MARCH
Worldwide Antivirus Vendor Market Share
S
Y
M
A
N
1
E
C
M

C
R
D
S
D
l
1
A
V
C
A
V
A
S
1
E
S
E
1
M
C
A
l
E
E
A
V

R
A
K
A
S
P
E
R
S
K
Y
P
A
N
D
A
1
R
E
N
D
D
1
H
E
R
S
SYMAN1ECCDRP.
MCRDSDl1CDRP.
AVC 1ECHNDlDCES
AVAS1
ESE1 SDl1WARE
MCAlEE, NC.
AVRA CMBH
KASPERSKYlABS
PANDA SDl1WARE
1REND MCRD, NC.
16.09%
14.92%
13.22%
11.96%
/.06%
6./6%
4.41%
4.03%
3.49%
3.10%
D1HERS 14.96%
SYMANTEC
MICROSOFT
AVG
ESET
AVAST
MCAFEE
AVIRA
KASPERSKY
PANDA
TREND
OTHERS
VS.
NORTH AMERICA
MARCH
North America Antivirus Vendor Market Share
Symanlec ccnlinues lc lead lhe Ncrlh American
anlivirus markel al lhe beginning cf 2u!2 wilh
!C.u_, a slighl decrease frcm lheir !C.C_ in 2u!!.
Micrcscf leaped frcm fcurlh lc seccnd place in lhis
years ranking wilh an increase frcm _._( lc !(._2
cver lhe lasl year. 1his increase by Micrcscf
pushed AVC inlc lhird place despile an increase in
markel share fcr AVC as well. Avasl| drcpped frcm
!2.__ lc !!._C and lcwered ils rank frcm lhird lc
fcurlh. 1rend Micrc knccked PC 1ccls c lhe lcp
len, while Avira and Kaspersky made gains frcm lasl
year.
1he lcp fcur vendcrs in lhis repcrl ccnlrcl _C.!_
cf lhe markel, and individually hcld ccnsiderably
higher shares cf lhe markel lhan lhe fh largesl
vendcr [ESE1 wilh 7.uC).
MARCH 2010 lEBRARY 2011
MARCH 2011 lEBRARY 2012
1he lcp len individual anlivirus prcducls wcrldwide,
[A1 in lhe graph lc lhe righl) lcgelher ccnlrcl C(._(
cf lhe wcrldwide AV markel. n Ncrlh America, lhe lcp
len prcducls hcld C_.uB cf lhe markel [A1 in lhe
graph belcw). Micrcscf Securily Essenlials has a
slrcng lead in lhe Ncrlh American markel, while avasl|
lree Anlivirus leads wcrldwide, ahead cf Micrcscf
Securily Essenlials by abcul 2 percenlage pcinls.
Antivirus Product Market Share
Ccnclusicns
n Ncrlh America, B! dierenl anlivirus vendcrs and 2_7
anlivirus prcducls were delecled in lhis repcrl. A lclal cf
B7 vendcrs and _C7 prcducls were delecled wcrldwide. A
large percenlage cf lhe markel is ccnlrclled by a small
grcup cf vendcrs, wilh lhe lcp ve ccnlrclling __.u! cf lhe
wcrldwide markel.
As in cur previcus repcrls, free sclulicns remain al lhe lcp
cf lhe markel wilh lhe highesl numbers cf inslallalicns. 1he
lcp lhree prcducls in Ncrlh America and wcrldwide are
available free fcr dcwnlcad.
MCRDSDl1SECR1YESSEN1AlS
AVAS1| lREEAN1VRS
AVCAN1VRSlREEED1DN
NDR1DN AN1VRS [SYMAN1EC CDRP.)
ESE1 NDD32 AN1VRS
MCAlEE VRSSCAN
AVC AN1VRS
AVRA AN1VR PERSDNAl lREE AN1VRS
NDR1DN 360 [SYMAN1EC CDRP.)
SYMAN1EC ENDPDN1 PRD1EC1DN
14.5B%
9.15%
B.B3%
/.20%
5.29%
4.B0%
4.43%
3.44%
2.96%
2.40%
D1HERS 36.92%
A
B
C
D
E
l
C
H

1
K
A
B
C
D
E
F G
H
I
J
K
NORTH AMERICA
MARCH
AVAS1| lREEAN1VRS
MCRDSDl1SECR1YESSEN1AlS
AVRAAN1VRPERSDNAllREEAN1VRS
AVC AN1VRS lREE ED1DN
ESE1 NDD32 AN1VRS
NDR1DN AN1VRS
KASPERSKY N1ERNE1 SECR1Y
AVC AN1VRS
MCAlEE VRSSCAN
ESE1 SMAR1 SECR1Y
11.91%
9.96%
9./5%
6.B3%
6./5%
5.00%
4.62%
4.19%
3.34%
2.59%
D1HERS 35.06%
A
B
C
D
E
l
C
H

1
K
A
B
C
D
E
F G
H
I
J
K
WORLDWIDE
MARCH
6.01%
Windows Operating System Deployments
DPSWA1s dala fcr lhis repcrl shcw lhal Windcws XP
remains lhe mcsl pcpular Windcws cperaling syslem in
bclh Ncrlh America and wcrldwide, wilh slighlly under
half cf ccmpulers using XP. Windcws 7 usage is slrcng in
bclh Ncrlh America and wcrldwide, apprcaching lhe
pcpularily cf XP, while Windcws Visla is much less
ccmmcn . Dlher cperaling syslems represenl less lhan
cne percenl cf lhe dala fcr bclh regicns. Cenerally,
dierences belween wcrldwide and Ncrlh American
Windcws users were small, wilh wcrldwide users lending
lc use XP slighlly mcre and Visla slighlly less lhan Ncrlh
American users did.
WNDDWS XP
WNDDWS 7
46.B4%
46.5B%
1.00%
WNDDWS VS1A
D1HERS
VISTA
XP
NORTH AMERICA
MARCH
WNDDWS XP
WNDDWS 7
4B.B6%
46.1B%
4.33%
1.00%
WNDDWS VS1A
D1HERS
VISTA
XP
MARCH
WORLDWIDE
XP
1DRREN1
ARES
eMlE
B11DRREN1
PANDD
llASHCE1
BEARSHARE
iMESH
lREEDDWNlDADMANACER
B1CDME1
36.B6%
14./9%
/.61%
/.30%
4.96%
3.B0%
3.B0%
3./3%
3.62%
2.11%
lMEWRE
DC--
lRDS1WRE
VZE
2.04%
1.B3%
1./4%
1.14%
D1HERS 4.6/%
P2P APPLICATION MARKET SHARE
MARCH
TORRENT
ARES
eMULE
BITTORENT
PANDO
FLASHGET
BEARSHARE
iMESH
OTHERS
Peer to Peer Application Market Share
A lclal BC,2_7 inslallalicns cf peerlcpeer [P2P)
applicalicns were delecled. lcr lhe purpcse cf lhis
repcrl, we dene a P2P applicalicn as a prcducl wilh
public le sharing as ils primary funclicn. Based cn
lhis denilicn, we have excluded Skype, Dpera, and
Reel1ime frcm lhe charl belcw.
While scme ccnsider Skype a P2P applicalicn, le
sharing is cnly pcssible belween ccnlacls, ralher lhan
publicly, belween peers. Dpera has P2P capabililies,
bul il wculd be impcssible lc delermine frcm cur
repcrls whelher il was being used fcr P2P funclicns,
cr |usl as a brcwser. f added lc lhe dala, Skype wculd
have 2_.7u cf lhe markel and Dpera wculd have
_(.Cu. ncluding Skype, Dpera, and clher eliminaled
applicalicns wculd reduce lhe share cf 1crrenl
users lc 22.BC.
Conclusions
Much mcre dcminanl lhan lhe lcp lwc anlivirus
vendcrs, lhe lcp lwc P2P applicalicns ccnlrcl mcre
lhan half cf lhe markel, wilh a ccmbined _!.C_. 1he
lcp !u ccnlrcl BB._B cf lhe markel.

June Instant Messenger Report Details
Dont miss our next quarterly market share report, coming in
June! The next report will cover antivirus market share,
Windows OS usage and instant messenger (IM) application
market share.
Visit www.opswat.com/about/media/reports to see
all of OPSWATs reports, including last Junes report,
which also covered instant messenger applications.
Follow OPSWAT
www.facebook.com/opswat
www.twitter.com/opswat
www.linkedin.com/company/opswat
www.opswat.com/blog
Check out the newly released demo of OPSWATs Secure Virtual Desktop technology!
Secure Virtual Desktop allows users to browse privately and anonymously from any
computer, and protects sensitive data by ensuring that no traces of your activities are le on
the machine when you exit the secure session. Learn more about how Secure Virtual Desktop
can help prevent data leaks, and try the free, ve-minute demo at
www.securevirtualdesktop.com!
OPSWAT recently launched a demo of GEARS, a white-labeled, cloud-based solution for
monitoring and managing computers, servers, and switches. GEARS quickly exposes
unpatched computers that may put an organization at risk by monitoring whether machines
have the latest OS security patches and latest antivirus, rewall, and antispyware soware
updates. See how GEARS enables simple network management through the demo at
www.opswatgears.com.
GEARS
Secure Virtual
Desktop
New from OPSWAT
Get updates about the latest reports as well as company
and product information by connecting with us online. Sign
www.opswat.com/mailing-lists, or follow OPSWAT:
Company and Reproduction Information
Please contact sales@opswat.com for more information on
the OESIS Framework. For more information about this
report, please contact marketing@opswat.com.
Parties interested in hosting this report are free to do so as
long as credit is given to OPSWAT, Inc., and a link is provided
to www.opswat.com/about/media/reports.
About OPSWAT
Founded in 2002, OPSWAT is the industry leader in soware
management SDKs, interoperability certication, and
multiple-engine scanning solutions. With both soware
manageability and multi-scanning products, OPSWAT oers
simplied and comprehensive SDKs that reduce time and
costs for your engineering and testing teams.
OPSWAT Certication
The OPSWAT Certication Program is a free interoperability
program designed to enable technology partnerships
between independent soware vendors and leading network
and technology solution vendors, by verifying that their
security applications will work seamlessly with solutions
employing the OESIS Framework. Additional information is
available at www.opswat.com/certified.
Multi-scanning
OPSWAT oers several multi-scanning solutions to enable
fast, powerful content scanning. Because no single antivirus
engine is perfect, using multiple engines signicantly
improves the likelihood of detecting malware.
Metascan technology powers each of OPSWATs
multi-scanning solutions, enabling IT professionals and
soware engineers to enhance network security by scanning
with up to 30 built-in antivirus engines from market leaders
such as ESET, Norman, AVG and many others. Metascan
allows for custom implementations, such as integration with
other engines of your choice, and can be used for rapid
malware analysis and to implement sophisticated data loss
prevention systems.
For specic multi-scanning needs, OPSWAT also oers
MetaDefender for Secure Access (MD4SA), which quickly
scans endpoints running processes and memory for key
loggers, viruses and other malware, and MetaDefender for
Media (MD4M), which scans removable media such as USB
drives, CDs, DVDs, and memory cards.
A free demo of Metascan technology is available at
www.metascan-online.com.
GEARS
OPSWAT GEARS provides cloud-based endpoint
management and monitoring to help IT managers prevent
security compromises caused by missing patches and
out-of-date or ineective security soware (such as
antivirus, antispyware and desktop rewalls). GEARS is
available as a white label solution ideal for wireless access
point and storage vendors, and a free demo is available at
www.opswatgears.com.
Secure Virtual Desktop
Browse securely and privately from any computer using
Secure Virtual Desktop (SVD). By creating an isolated
environment, SVD ensures that no trace of le creation, le
modication, or other activities remain on the computer
when you leave the private session. SVD is an ideal solution
for protecting data accessed from public computers or guest
laptops. To learn more, visit www.securevirtualdesktop.com.
Products
OESIS
OESIS Framework is a cross platform, open development
framework that enables soware engineers and technology
vendors to develop products that detect, classify and manage
thousands of third-party soware applications. OESIS is
perfect for SSL VPN, network access control (NAC) and other
manageability solutions, and is already deployed on an
estimated 100 million endpoints worldwide.
AppRemover
The free AppRemover utility enables the thorough
uninstallation of security applications like antivirus and
antispyware from your computer. AppRemover is available
for commercial licensing if you wish to deploy multiple copies
of AppRemover within an organization or entity, or if you wish
to bundle AppRemover with hardware, soware or other
services. More information is available at
www.appremover.com.
Disclaimer of Warranty
OPSWATInc. makes no representation or warranties, either express or implied by or with respect to
anything in this document, and shall not be liable for any implied warranties of merchantability or
tness for a particular purpose or for any indirect special or consequential damages.
Copyright Notice
OPSWAT, OESIS, Metascan, MetaDefender, AppRemover and the OPSWATlogo are trademarks and
registered trademarks of OPSWAT, INC. All other trademarks, trade names and images mentioned
and/or used herein belong to their respective owners. No part of this publication may be reproduced,
stored in a retrieval system or transmied, in any form or by any means, photocopying, recording or
otherwise, without prior wrien consent of OPSWATInc. No patent liability is assumed with respect to
the use of the information contained herein. While every precaution has been taken in the preparation
of this publication, OSPWATInc. assumes no responsibility for errors or omissions. This publication and
features described herein are subject to change without notice.
B R O N Z E C E R T I F I E D
Product Type
S I LV E R C E R T I F I E D
Product Type
G O L D C E R T I F I E D
Product Type