Bitdefender

Bitdefender software was originally developed by SOFTWIN, a company founded in 1990 in post-communist Romania. It was originally sold as AVX (Antivirus Expert) from 1996 until 2001, when the Bitdefender subsidiary was created and AVX was rebranded under the Bitdefender name. In 2007, Bitdefender became a separate business entity with external capital entry, with Axxess Capital Investment Fund as a key shareholder.

From 2004 to 2015, the company expanded with offices in the United States, Germany, United Kingdom, Denmark, and the Middle East.

In 2017, the company acquired French partner Profil Technology. British fund Vitruvian Partners would then buy a 30% stake in the company, putting its valuation over $600 million.

In 2018, Bitdefender opened a new subsidiary in Australia through acquisition of assets from SMS eTech. That year, the company also acquired behavioral and network security analysis company RedSocks.

Bitdefender opened a Security Operations Center in San Antonio, Texas in 2019. The SOC serves as a headquarters for the company's managed detection and response services, and operates as part of a global network with additional SOCs in Romania and Singapore. Bitdefender analysts use telemetry from the company’s threat intelligence engines to identify, investigate, and respond to threats.

Bitdefender signed a multi-year partnership deal with Scuderia Ferrari on September 28, 2022. The partnership expanded in 2023 to include integration of Bitdefender Advanced Threat Intelligence into all of Ferrari’s operational systems. In October 2025, Bitdefender extended its partnership with Scuderia Ferrari HP through 2028.

In August 2023, Bitdefender acquired Singapore-based Horangi Cyber Security, expanding its managed detection & response services and absorbing Horangi's team of experts.

Bitdefender announced the launch of Bitdefender Voyager Ventures, a corporate venture capital unit, in April 2024. The venture invests in early-stage cybersecurity and AI startups, including Validaitor, a spinoff of the Karlsruhe Institute of Technology.

Bitdefender's original antivirus software was sold as Antivirus Expert until 2001, when it was rebranded under the Bitdefender name.In 2011, Bitdefender expanded and split its service lines into consumer and enterprise security products.

Consumer

Bitdefender's consumer products are offered for individual users, families, and small businesses, and cover Windows, Mac OS, iOS, and Android.They are sold in tiers, including Bitdefender Ultimate Security, which combines device security, scam protection, privacy tools including a VPN, and identity protection.Family plans cover multiple users through separate accounts and include parental controls. Subscriptions are managed through an online portal, called Bitdefender Central.

Identity theft protection, included in the highest tier and offered in the United States, monitors public records, data broker listings, and sources of breached data for a subscriber's personal information, and provides credit monitoring, assistance with restoring a stolen identity, and reimbursement for certain losses. Personal information exposed in data breaches is frequently used to make fraudulent messages appear legitimate, a technique associated with targeted phishing.

In December 2023, Bitdefender released Scamio, a free chatbot that uses artificial intelligence to assess messages, links, and images for signs of fraud. It was subsequently integrated into Facebook Messenger, WhatsApp, and Discord.

Controversies and incidents

Trojan.FakeAlert.5

On March 20, 2010, computers running Bitdefender under 64-bit versions of Windows were affected by a malfunctioning update that classified every executable program as well as DLL files as infected. These files were all marked as 'Trojan.FakeAlert.5' and were moved into quarantine. This action led to software and systems malfunctions that affected users globally. Bitdefender representatives announced the removal of the faulty update and a workaround for the users affected, except for those using the 2008 version.

DarkSide ransomware

In 2020, hacker group DarkSide switched its main encryption ransomware product over to an "affiliate" model wherein other attackers could download and use its software in exchange for a portion of the profits. However, it introduced a bug in the process where affiliate hackers would all use the same private RSA key - meaning that a decryption package for a single target who paid the ransom would work on any target that had the ransomware installed. Security researchers noticed and were quietly already helping victims of the software, but with no public notice, making it so that the attackers would only see an inexplicable decrease in ransom payments that could be written off as chance.

Months later, Bitdefender publicly released a decryptor of its own development and issued a blog post describing the flaw. Security researchers studying the Colonial Pipeline cyberattack in May 2021 criticized Bitdefender for using the bug as a brief burst of publicity, though they acknowledged that DarkSide would’ve eventually noticed and fixed the issue. Bitdefender defended its actions, saying it only wished to notify as many organizations as possible, triggering a discussion among cybersecurity professionals about the pros and cons of publicly disclosing such vulnerabilities in malware: while the provision of free decryption tools may provide relief for some ransomware victims (who might otherwise not receive free and timely help from experts), their usefulness is short-lived as hackers use these same tools to improve and develop new ransomware software.

Since the creation of its free Darkside Ransomware Decryption Tool, Bitdefender has continued to provide free decryption and recovery tools to the general public on 'multiple occasions', the latest being February 2023.