Provider security add-ons: what you already have

A network tool sits on your broadband connection rather than on any one gadget. BT says Web Threat Protect works on any device connected to the BT Hub, and Vodafone says Secure Net Home protects up to 128 connected devices within the home. TalkTalk says its Virus Alerts cover games consoles, tablets and smartphones on your home broadband, with no software to install.

The catch is where it stops working. Virgin Media is the clearest here: it says Essential Security protects your devices only while they're connected to your home network. BT and Sky describe their tools in terms of devices on your home connection, and the pages we checked don't say they follow a phone onto mobile data or someone else's Wi-Fi, so don't count on that.

A device app is security software you install on each phone, tablet or computer. Virgin Media says its Advanced Security protects the device it's installed on wherever you are. They work like a traditional antivirus suite and may come with a set number of licences.

Virgin Media and TalkTalk both recommend having both layers. TalkTalk's reasoning: the network tool covers devices like tablets that can't run anti-virus, while anti-virus keeps a PC or Mac protected outside your home and lets you remove malware. Whether you need a provider's app for that second layer depends on what your devices already do.

When we checked on 25 October 2026 we found no current BT page for a product called BT Virus Protect. BT's security page lists three products at no extra cost: BT Parental Controls, Web Threat Protect and Cyber Threat Protect.

• Web Threat Protect blocks harmful or fake websites, including ones linked to scams, phishing (fake sites and messages designed to steal your details) and viruses.
• Cyber Threat Protect warns about email phishing scams, protects your information from online attacks and uses a traffic-light system to help you browse safely. BT describes Cyber Threat Protect as antivirus software that you install on each device and use to run scans, and says it comes with 15 licences; its malware help page says a full scan can take a few hours. The pages we opened don't list which operating systems it supports, so check with BT.

Sky says Broadband Shield protects against virus, phishing and malware-infected websites and adds Safe Search filtering. It can't be set per device, though age-rating and scheduling settings can be changed in your Sky account; see parental controls on home broadband for family options. Separately, Sky's WiFi Max add-on includes what Sky calls security alerts and monitoring with Advanced Security; WiFi Max carries a monthly charge unless it comes with a Full Fibre 2.5 or 5 Gigafast+ package.

Virgin Media says Essential Security blocks dodgy sites and stops devices downloading malicious content. You change it in My Virgin Media under Account Settings, then Online Security. Advanced Security (formerly Virgin Media Internet Security) is installed on a device; Virgin Media says it scans for and removes viruses, spyware and other harmful files, and adds per-child parental controls and online banking protection. See Virgin Media broadband deals for current packages.

HomeSafe's security parts are Virus Alerts, which warn you before you open a possibly infected site, and Scam Protection, which blocks sites scammers misuse and switches on Safe Search. TalkTalk is unusually open about the limits: HomeSafe can't detect viruses hidden in files you receive or download, no web filter is 100% foolproof, and no security service can stop every virus because new infections take a while to spot. On eero-equipped TalkTalk packages, filtering is set up in the eero app (eero Secure) instead.

Secure Net Home adds parental controls, content filters, Wi-Fi pause and Focus Time for children's devices, managed in the My Vodafone or Secure Net app. Secure Net Mobile is separate: it protects a smartphone on Vodafone's mobile network against viruses, malware and phishing, with 24/7 ID monitoring and scam call protection. See Vodafone broadband deals.

EE's broadband page also lists WiFi Controls in the EE app to pause a device's connection, and Advanced Web Protect on its entertainment bundles (without explaining how that differs). EE Cyber Security provides email and anti-virus security. Some smaller providers offer a third-party security suite as an optional extra instead: Trooli, for example, described Trooli Protect as an optional security add-on powered by F-Secure when we checked its page on 8 October 2026. If your provider isn't listed here, its help pages or the broadband providers hub are the place to start.

Microsoft says the Windows Security app is built into Windows and includes Microsoft Defender Antivirus, Windows Firewall and Smart App Control, protecting the device from the moment it starts up. Defender's real-time protection scans continuously for threats. If you switch real-time protection off, files you open or download aren't scanned while it's off, and Microsoft says it turns itself back on automatically.

The key detail is what happens when you install a second antivirus. Microsoft says that on Windows 10 and 11, when another company's antivirus becomes the main one, Defender Antivirus switches itself off automatically (on Windows 11 with Smart App Control on, it may go into a passive mode instead). If that other product later expires, is uninstalled or stops giving real-time protection, Defender can switch itself back on.

To see which antivirus is in charge: open Windows Security, go to Virus & threat protection, and under "Who's protecting me?" choose Manage providers. The list shows the antivirus currently in use.

If you pay for Microsoft 365 Family or Personal, Microsoft says that includes Microsoft Defender security software for Windows, Mac, iOS and Android, so you may already have a cross-device app.

Windows also warns about some dangerous websites itself. Its reputation-based protection (Microsoft Defender SmartScreen), under App & browser control, checks websites and downloads against known malicious sites and files; Microsoft says that in Microsoft Edge it can flag sites known to be malicious, such as phishing sites or tech support scams.

If a computer still runs Windows 10: Windows 10 reached end of support on 14 October 2025. Microsoft's Extended Security Updates (ESU) programme still sends security updates through Windows Update to eligible Windows 10 PCs that are enrolled, until it ends on 12 October 2027. A PC that isn't enrolled gets no security fixes. An eligible PC shows a link to enrol under Settings, then Update & Security, then Windows Update. Microsoft recommends moving to Windows 11. No provider add-on replaces those fixes.

Apple describes three layers of malware defence in macOS: stopping malicious software launching (the App Store, and Gatekeeper with Notarisation, where Apple checks software for known malware and can revoke approval later), blocking known malware (Gatekeeper, Notarisation and XProtect) and removing malware that gets through (XProtect).

XProtect uses signatures (fingerprints of known malware) to detect and block it, moves it to the Bin and alerts you. Apple says it updates XProtect automatically and that macOS checks for those updates every day by default. Nothing needs installing; keep macOS itself up to date as well.

The NCSC says you don't need antivirus on a smartphone or tablet as long as you only install apps from official stores such as Google Play and the Apple App Store, and you set apps and the device itself to update automatically.

On Android, Google says Play Protect is on by default. It checks Play Store apps before you download them and looks for harmful apps from elsewhere, and may tell you to uninstall one, disable it or remove it automatically.

A provider's network tool still adds website warnings for phones while they're on your home Wi-Fi.