
Avast Ultimate Business Security
Comprehensive cybersecurity and patch automation for growing businesses, combining next-gen antivirus, online privacy tools and Patch Management automation to help keep devices, data and applications updated and secure.

Built for small and growing businesses
Ultimate Business Security adds Patch Management automation to Avast’s endpoint, network and privacy protections, helping growing businesses keep supported Windows systems and third-party applications more consistently updated.
Comprehensive Protection
Endpoint, data, network, browser and privacy controls for a broad small-business security posture.
Patch Management Automation
Automates Windows and third-party software patching to reduce exposure from unpatched vulnerabilities.
Management at Scale
Use Avast Business Hub to view threats, manage services, subscriptions, policies and patch status as you grow.
What’s included
Device Protection
Core endpoint defenses against malware and suspicious behavior.
File Shield+
Real-time scanning of programs and files before they are opened, run, modified or saved.
Web Shield+
Scans web traffic in real time to help prevent malicious scripts and malware downloads.
Mail Shield+
Scans incoming and outgoing email handled by supported desktop email clients for malicious content.
Behavior Shield+
Monitors processes for suspicious behavior that may indicate malicious code.
Sandbox+
Runs suspicious applications or web activity in an isolated environment to reduce risk to the PC.
CyberCapture+
Detects rare suspicious files and can send them to Avast Threat Lab for analysis.
SmartScan+
Checks for malware, outdated applications, unsafe settings and suspicious add-ons.
Rescue Disk+
Supports pre-boot scanning when a deeper malware-removal approach is needed.
Data, Network & USB Protection
Layered defenses for business data, networks, remote access and removable devices.
Advanced Firewall+
Monitors traffic between employee devices and the internet and helps block dangerous data transmissions.
Ransomware Shield+
Helps protect sensitive files and folders against unauthorized modification, deletion or encryption.
Remote Access Shield+
Helps defend endpoints against RDP exploits and brute-force attacks.
Network Inspector+
Checks networks, connected devices and router settings for potential security weaknesses.
Data Shredder+
Irreversibly erases selected files or drives to help prevent data recovery and misuse.
SharePoint Server Protection+
Checks files uploaded to shared storage for malware.
Exchange Server Protection+
Scans and filters email at the Exchange server level to help stop threats before they spread.
USB Protection+
Helps block, control and monitor unauthorized removable storage devices to reduce data theft and malware risk.
Online Security & Privacy
VPN, browsing, webcam and web-control features for safer online work.
Real Site+
Helps users avoid fake websites and DNS hijacking designed to steal sensitive information.
Security Browser Extension+
Checks site reputation and authenticity and adds privacy-oriented browser controls.
Browser Cleanup+
Checks browsers for poorly rated add-ons and helps remove cookies containing personal information.
Browser Shield+
Helps prevent malware from stealing browser cookies and saved passwords.
Webcam Shield+
Helps stop untrusted applications from accessing a PC webcam without user consent.
Web Control+
Helps administrators control access to potentially dangerous or non-work-related websites through domain and content filtering.
VPN+
Personal VPN with no data limits encrypts internet traffic to help protect employee data, including on public Wi-Fi.
Patch Management
Automation and reporting features designed to address software vulnerabilities efficiently.
Flexible Deployment Schedules+
Schedule and deploy patches at specific times or deploy manually to groups or individual devices.
Single Dashboard+
View installed, missing and failed patches for managed devices from one dashboard.
Customizable Patches+
Choose patches by software vendor, product or severity and create exclusions for specific applications.
Thousands of Patches+
Deploy patches for Windows and thousands of supported third-party applications.
Master Agent Capabilities+
Use a master agent to download missing patches and distribute them to managed devices on the network.
Comprehensive Reporting+
Use configurable reports to assess device software health and security status.
Automatic Scans+
Schedule automatic patch scans and configure automatic deployment windows.
Avast Business Hub
Get browser-based visibility, reporting and administrative capabilities for managed Avast Business deployments. The cloud console can centralize services, subscriptions, devices, policies, alerts and commands.
Patch Management note: the supplied Avast data sheet states that Patch Management is currently available for Windows and requires the Avast Business Hub online management platform. On-premise management is not available.
Review the Avast data sheet
The detailed feature descriptions on this page are based on the official Avast Small Business Solutions data sheet supplied for this project.