Norton 360 Review 2026: Strong Antivirus, Rough Renewal Pricing

🟡 Trust Rating: Moderate

Norton 360's core antivirus engine is genuinely strong: independent labs give it top marks, tied with our current antivirus pick, Bitdefender, on the most recent test. The problem is everything wrapped around that engine. Norton is a Gen Digital brand, the same parent whose Avast business the FTC penalized in 2024 for years of selling users' browsing data. The bundled Secure VPN is the weak link, not a substitute for a real no-logs provider. The first-year price is a promo that snaps up hard at renewal, and Norton will not even print the renewal number on its own product page. Add persistent upsell pop-ups and the ghost of the 2021 Norton Crypto miner, and this is a competent security product from a company whose business practices earn the caution. Buy it for the engine if you want, but go in with eyes open.

💰 Affiliate Disclosure

We participate in Norton's affiliate program. If you buy through our link, this site earns a commission at no extra cost to you. It changes nothing above or below: the lab scores, the Gen Digital data record, the crypto-miner history, the weak-VPN warning, and the renewal-price criticism are exactly what we would write with no program at all. Read the Bottom Line and Final Assessment before you decide.

See Norton 360 Plans →

What Norton 360 Is

Norton 360 is the consumer security suite from Norton, one of the oldest names in antivirus. Norton started life as Symantec's consumer arm, became NortonLifeLock in 2019 after Symantec sold its enterprise business to Broadcom, then merged with the Czech antivirus firm Avast in September 2022. The combined company renamed itself Gen Digital in November 2022. That one parent now owns Norton, Avast, AVG, Avira, LifeLock, CCleaner, and more. Remember that lineage, because Norton's biggest trust problem lives on the Avast side of the family.

The product itself is a bundle: real-time antivirus, a firewall, a password manager, cloud backup, dark-web monitoring, and a VPN, sold in tiers by device count and storage. Unlike Norton's US-only LifeLock identity product, Norton 360 is sold worldwide through localized country storefronts, so it is an actual option for this site's international readers.

Independent Lab Results (The Genuinely Good Part)

Norton's malware-detection claims are not just marketing. They are backed by the same independent labs we hold every antivirus to.

AV-TEST (March-April 2026, home Windows 11): Norton 360 scored a perfect 6.0/6.0 for protection, 6.0/6.0 for performance, and 6.0/6.0 for usability, 18/18 overall, earning AV-TEST's "TOP PRODUCT" award. It caught 100% of real-world malware across 285 samples and 100% of widespread malware across 12,025 samples, with zero false website warnings and a single false detection of legitimate software across roughly 1.5 million clean samples (industry average: 3).
The Bitdefender comparison: In that same AV-TEST cycle, Bitdefender Total Security also scored 18/18 and also took TOP PRODUCT. On the most current lab data, the two are tied. There is no protection gap to point to right now.
AV-Comparatives Consumer Summary Report 2025: Norton took Gold in the Real-World Protection Test, Silver for low system impact (performance), and Silver in Advanced Threat Protection, and was named a 2025 Top-Rated product. Bitdefender, in the same report, took Silver in Real-World Protection and Gold in Advanced Threat Protection. It is a split decision, not a clean win for either.

The takeaway: if you are choosing Norton over Bitdefender, do not do it because one detects malware better. On independent testing they are neck and neck. Do it, or avoid it, on everything else.

The Privacy and Telemetry Record

⚠️ The Trust Concerns

The antivirus engine is not the reason to hesitate. The company behind it is. Three things belong on the record before you hand Norton a payment method and let it run at system level.

Gen Digital's Avast business sold browsing data. A 2020 Motherboard and PCMag investigation revealed that Avast's antivirus was harvesting granular browsing data, searches, map lookups, video views, and selling it through a subsidiary called Jumpshot to more than 100 companies. The FTC's complaint traces the practice from at least 2014 until Jumpshot's shutdown in January 2020. On February 22, 2024 the FTC ordered Avast to stop selling browsing data for advertising and to pay $16.5 million for consumer redress. That conduct was in the Avast product line, not Norton 360. But it is the data-handling record of the exact parent company running security software on your machine.
The Norton Crypto miner. In June 2021, Norton shipped an opt-in feature called Norton Crypto that let Norton 360 customers mine Ethereum through a Norton-run pool using their own GPU. Norton took a 15% cut of everything mined, against roughly 1% at a typical mining pool. The backlash peaked in January 2022 when Krebs on Security reported that the miner's binary, NCrypt.exe, installed alongside Norton 360 and was awkward to remove, requiring users to disable Norton's own Tamper Protection and delete the file by hand. Antivirus that quietly ships a crypto miner is a strange product decision from a company selling trust.
The bundled VPN is the weak link. Norton Secure VPN is fine as a checkbox and poor as a privacy tool. More on that below, but treat it the way we treat every bundled VPN on this site: not a reason to buy, and not a replacement for a dedicated no-logs provider.

To be fair on the crypto miner: it is dead. Norton's own support page says GPU mining stopped working after Ethereum moved from proof-of-work to proof-of-stake in September 2022, and the feature has not returned. You will not be handed a miner if you install Norton 360 in 2026. We include it because it is the clearest example of Norton's willingness to bolt questionable extras onto a security product, and that pattern outlives any single feature.

The bundled VPN, in detail

Norton Secure VPN ships with the 360 tiers, and independent reviewers are mixed-to-negative on it: an unreliable kill switch (and none at all on macOS/iOS), P2P traffic blocked on all but a single P2P-optimized server region, a thin feature set, and inconsistent speeds across testers and dates. Give Norton one real point of credit here: it commissioned the security firm VerSprite to audit its no-log claim, and the second annual audit, published around September 30, 2025, gave the VPN a "None" privacy-impact rating, meaning no logging of browsing history, DNS requests, or IP addresses. The catch is that only an executive-summary version of that audit is public, and reviewers note the VPN still collects operational data like device name and type and aggregate bandwidth (Norton says it eliminated connection timestamps entirely in the same 2025 update). An audited no-log claim is better than an unaudited one. It is still not a reason to pick Norton's VPN over a provider built to be a VPN first.

The 2023 Credential-Stuffing Incident

⚠️ Roughly 925,000 Accounts Targeted

Around December 2022, Gen Digital detected attackers logging into Norton accounts using username and password pairs bought from other breaches (credential stuffing, not a breach of Gen Digital's own systems). The company's breach notice, dated January 9, 2023, was filed with the Vermont Attorney General and became public in mid-January 2023; the company said it secured roughly 925,000 accounts that may have been targeted, and TechCrunch reported it notified about 6,450 customers whose accounts were compromised. Because many of those were Norton Password Manager users, the contents of their password vaults could have been exposed.

The lesson is not "Norton got hacked", because its own servers did not. The lesson is that a reused password will get your Norton account, and your Norton vault, opened by someone else. Turn on two-factor authentication, which Norton already offers, and never reuse the master password.

What Each Tier Includes

Norton sells a ladder of plans that add devices, storage, and features as the price climbs. Feature sets shift with promotions, so confirm the current contents at signup, but the 2026 US lineup on norton.com breaks down like this:

Norton AntiVirus Plus: the entry point. One device, the antivirus engine, firewall, and password manager, no VPN. This is the plan for someone who wants only the tested engine.
Norton 360 Standard: 3 devices, 2GB cloud backup, the VPN, password manager, and dark-web monitoring. No parental controls.
Norton 360 Deluxe: 5 devices, 50GB cloud backup, everything in Standard plus parental controls, Norton's AI-branded scam and deepfake protection, Privacy Monitor, and up to $10,000 of online-scam coverage. This is the tier most reviews and Norton itself push hardest.
Norton 360 Premium: 10 devices, 100GB or more cloud backup, the same feature set as Deluxe with higher device and storage ceilings.
Norton 360 with LifeLock (Select, Advantage, Ultimate Plus): the 360 security stack plus US-only LifeLock identity-theft monitoring, credit monitoring, and restoration. If you are weighing the identity side, read our full LifeLock review first, because that add-on carries its own FTC history and its own renewal jump.

Pricing and the Renewal Jump

Norton runs the antivirus category's oldest trick: a discounted first year, then a renewal that lands far higher. Independent price trackers put Norton's first-year discount in the range of 47% to 60% off, which means the renewal is roughly 1.9 to 2.5 times what you paid at signup, depending on the tier. As an illustration, third-party trackers had Norton 360 Deluxe near $49.99 for the first year and renewing around $119.99 to $124.99 a year in 2026. Treat that as a snapshot, not a quote.

Here is the part that should bother you more than any single number. Norton does not print the renewal price on its own product pages. When we looked, the Deluxe and Standard pages showed a templated "savings compared to the renewal price" line that was never filled in with an actual renewal figure. A security company that will not show you what it will charge next year on the page where it takes your money is telling you something. Budget for the renewal, not the sticker. Auto-renewal is on by default, annual plans carry a 60-day money-back guarantee, and the only reliable defense is a calendar reminder set before the renewal date, not after.

Norton 360 vs. Bitdefender

These are the two obvious picks in this category, and the honest comparison is closer than the marketing on either side suggests.

Malware detection: a tie. Both hit 18/18 on the latest AV-TEST cycle, and AV-Comparatives' 2025 report splits the awards between them. Do not choose on the engine.
Jurisdiction: Bitdefender is Romanian, so EU data-protection law and courts, while Norton is a US-based Gen Digital brand with the Avast data record attached. For a privacy-minded buyer, that is a real point in Bitdefender's column.
The bundled VPN: both suites bundle a VPN we tell you to ignore. Bitdefender's logs identifiable data; Norton's is weak on features but has an audited no-log claim. Neither should be your VPN.
Business practices: Norton's renewal opacity, upsell pop-ups, and crypto-miner history give it more baggage on the trust side, which is why Bitdefender remains this site's antivirus pick. See our full Bitdefender review for the other half of this comparison.

When Norton 360 Makes Sense

✅ You want lab-verified antivirus and price the renewal in. The engine is genuinely top-tier, and if the year-two price still fits your budget, it does the core job well.

✅ You are outside the US and want a suite, not just an engine. Norton 360 sells worldwide, and the bundled backup, password manager, and parental controls are a reasonable all-in-one for a household that will actually use them.

✅ You are already committed to the Norton or LifeLock ecosystem and a bundle makes the combined price competitive with buying pieces separately.

Not Recommended For

❌ Anyone buying it for the VPN. Use a dedicated no-logs provider (see our VPN Strategy Guide). Norton's is the weak part of the bundle.

❌ Bargain hunters who only read the first-year price. The renewal, not the promo, is what you will actually pay, and Norton hides it.

❌ Anyone who wants EU jurisdiction over their security vendor. That is Bitdefender, not a Gen Digital brand carrying the Avast data record.

❌ People who hate upsell pop-ups. Norton's own community forums carry a long-running complaint pattern about post-purchase upsell prompts framed as notifications. If that will drive you up the wall, it is a real, recurring gripe.

The Bottom Line

Consider Norton 360 if:

You want antivirus with real, independently verified detection rates and will not use the bundled VPN for anything privacy-sensitive
You have priced the renewal, not just the first-year discount, and it still fits
You want a worldwide-available suite and will actually use the backup, password manager, and parental controls

Skip Norton 360 if:

You are buying it for the VPN, use a dedicated no-logs provider instead
You want EU jurisdiction and the cleaner corporate record, Bitdefender is the pick there
You will forget to cancel before the renewal snaps up, or the year-two price does not fit

⚠️ Final Assessment

Norton 360's engine is the real deal: the AV-TEST and AV-Comparatives numbers are independently produced and put it level with Bitdefender on pure detection. If antivirus were the whole story, this would be a green rating. It is not the whole story. Norton is a Gen Digital brand, the same parent the FTC fined $16.5 million in 2024 over Avast selling browsing data. It shipped a crypto miner into a security product in 2021, it hides its renewal price on its own product page while the year-two bill jumps well past the promo, and it nags paying customers with upsell pop-ups. Buy it for the engine if you want a full suite and you go in clear-eyed about the renewal. If you mainly want tested antivirus with a cleaner corporate record and EU jurisdiction, our pick is still Bitdefender. We carry the link either way, and the criticism does not soften because it pays.