How We Research Security Software: Our Review Method
Affiliate disclosure: This article contains affiliate links. If you click a link and make a purchase, we may earn a commission at no extra cost to you. Our editorial recommendations are never influenced by commissions — read our full disclosure policy.
TopAiAgent reviews are desk research, not laboratory testing. We build each recommendation from evidence anyone can check — independent lab results, published security audits, the vendor's own documentation and its current pricing page — and we say where that evidence runs out. Rankings are never sold, affiliate links are disclosed on every page that carries them, and the written verdict, not the score, is the actual recommendation. This page explains each source, how to read it, and its limits, so you can judge our conclusions for yourself.
Our principles
Evidence first. Every product is assessed against independent lab results, published audits, documented features and real pricing — not marketing copy.
No paid placement. Affiliate commissions differ between products; they do not affect placement or scoring.
Disclosure everywhere. Every page with affiliate links carries a disclosure. TopAiAgent earns a commission if you buy through those links, which funds the site and the research behind it.
Dated facts. Prices, plans and lab results change. Where a review quotes them, it names the source and, wherever possible, the date it was checked.
AI-assisted, human-reviewed. Articles are researched and drafted with AI assistance and reviewed by the NorwegianSpark editorial team before publication. AI drafting never replaces the source check.
The evidence we use, and its limits
| Source | What it tells you | What it cannot tell you |
|---|---|---|
| Independent antivirus labs (AV-TEST, AV-Comparatives) | How products performed against real malware samples under controlled conditions | How a product will behave on your specific device, or after the next update |
| Third-party audits (for example of a VPN's no-logs policy) | What an auditor found in the systems and period it examined | What happens outside the audit's scope or after its date |
| Vendor documentation and help pages | Which features exist, platforms supported, how settings work | Whether the feature works as well as described |
| Vendor pricing pages | The current list price in a given region | Renewal prices or offers shown to you elsewhere, unless stated |
| Reader-runnable checks (DNS and IP leak test sites) | Whether a VPN leaks on your own connection | Anything about logging or the provider's servers |
How to read an antivirus lab result: a worked example
AV-TEST describes two stages for its Windows protection testing: a real-world stage using malware it discovered no more than 24 hours earlier, delivered through web and email threats, and a reference-set stage using widespread Windows malware from the four weeks before testing. Its results award up to 6 points each for protection, performance and usability — 18 in total — and products with 17.5 points or more receive its TOP PRODUCT award.
In the July–August 2026 home-user round (checked 16 October 2026), Microsoft Defender Antivirus scored 6 for protection, 5.5 for performance and 6 for usability, a total of 17.5 — enough for TOP PRODUCT — while Bitdefender Total Security, Norton 360, Avast Free Antivirus, Malwarebytes Premium, Kaspersky Premium and ESET Security Ultimate each scored 18.
How we use that in a review:
- We quote the round and date, because a single round is a snapshot.
- We separate protection from performance. A half-point performance gap matters on an old laptop, much less on a new one.
- We do not fold lab scores silently into our own score. If a lab result drives a verdict, the review cites it.
- A tie on protection moves the decision to other factors — price, platforms, extras and support.
How we assess each category
VPNs
- Independent no-logs audits rather than marketing claims, noting the auditor and the date.
- Server architecture (RAM-only or disk-based) and the company's jurisdiction.
- Kill-switch behaviour and the protocols offered.
- Leak tests readers can run themselves at dnsleaktest.com, ipleak.net and browserleaks.com.
- Published speed and streaming information, treated as indicative because results vary by location.
Antivirus
- Recent results from independent labs, with the test round named.
- Ransomware and behaviour-based protection features as documented by the vendor.
- Performance impact and false-positive results where labs publish them.
- What each paid tier adds and how many devices it covers.
Password managers
- The encryption model and whether the provider can read your vault (zero-knowledge design).
- Published independent security audits and the provider's breach history.
- Browser and platform support, sharing, emergency access, import and export.
- What the free tier really includes.
Identity protection and dark web monitoring
- Which data types are monitored, as stated by the provider.
- Whether recovery help and insurance are included, with limits as published.
- Which countries the service is actually available in — always checked before a recommendation.
What no outside reviewer can verify
Some claims cannot be confirmed from outside a company: whether a VPN truly keeps no logs, how servers are configured, what happens to data inside a provider's systems. For those, we rely on independent audits and say clearly when a product has not been audited. We also do not claim hands-on lab testing we have not done; when we describe performance, we cite who measured it.
How you can check our work
- Follow the sources named at the end of our articles and compare the figures.
- Run a leak test yourself after connecting to any VPN.
- Look up the latest lab round — results may have moved since our review.
- If you find an error or an outdated price, tell us and we will correct it.
Frequently asked questions
Does TopAiAgent test products in its own lab?
No. Our reviews are evidence-based desk research using independent lab results, published audits, vendor documentation and pricing. Where a performance figure appears, we name the lab or source that measured it.
Do affiliate commissions affect your rankings?
No. Commissions differ between products but do not change placement or scores, and every page with affiliate links carries a disclosure.
What does the score out of 10 mean?
It is our editorial summary of the evidence in a single figure, not a hidden points formula or a third-party grade. The written verdict is the actual recommendation.
How does AV-TEST award TOP PRODUCT?
AV-TEST scores protection, performance and usability out of 6 each, 18 in total, and gives TOP PRODUCT to products with 17.5 points or more.
See the method applied
The method is applied across our antivirus comparison, best VPNs, best password managers and identity protection guide. The reviews index lists every product we cover.
About TopAiAgent
TopAiAgent is published by NorwegianSpark SA. Articles are researched and drafted with AI assistance and reviewed by the NorwegianSpark editorial team before publication. Recommendations are grounded in independent testing labs, published audits and documented product specifications, with affiliate links disclosed throughout.
NorwegianSpark SA | Org no: 834 984 172 | thomaslien@norwegianspark.com | +47 99 73 74 67
We read every email.
Sources checked 16 October 2026: AV-TEST, "Test modules under Windows — Protection" and Windows home-user results (July–August 2026).
Reviewed by NorwegianSpark Editorial — written with AI assistance and reviewed by the NorwegianSpark SA editorial team · Last updated: 16 October 2026
