eScan (MicroWorld Technologies)
eScan is a bootstrapped Indian antivirus and endpoint security vendor from Mumbai.
eScan holds a technical certification and a government-linked distribution channel, but two supply-chain breaches in its own update system have already dented the trust that channel depends on.
eScan makes antivirus and security software for computers and networks, mostly selling to customers in India. It is nearly impossible for eScan to compete because Microsoft gives its antivirus protection away free to Windows users, and larger rivals like CrowdStrike and SentinelOne offer smarter AI-powered tools that catch threats faster. The real problem is worse: eScan's own software update system was hacked twice in one year (2024 and 2026), turning the company itself into a security liability and destroying customer trust. Whether regulators in India take action, whether major customers leave, or whether lawsuits reveal eScan was careless about security will determine whether the company can recover or becomes a cautionary tale.
Morphisec and eScan's dispute produces litigation filings or discovery within 6 months of the breach. would reveal the real scope of the compromise and eScan's legal exposure.
eScan reports or loses named enterprise/government contracts in 2026 press or filings after the breach. would confirm whether the breach is causing visible customer attrition, not just reputational noise.
- eScan Enterprise EDR won AV-TEST 'Best Advanced Protection' 2025
- Second update-channel breach in about 20 months (Jan 2026)
- Roughly 100-500 employees, mostly in Mumbai and Pune
- Two update-channel supply-chain breaches in about 20 months (April 2024, January 2026) undermine trust.
- Free Microsoft Defender bundling structurally erodes consumer antivirus demand.
- No independent financial disclosure; conflicting revenue estimates across data brokers.
- Government distribution channel (Cyber Swachhta Kendra) is shared with Quick Heal and K7, not exclusive.
- Public dispute with Morphisec over January 2026 breach scope could escalate into litigation.
| Rival | Direction | Evidence |
|---|---|---|
| Microsoft | losing to | Windows Defender bundled free, squeezing eScan consumer AV demand, per 2026-07-26 Microsoft support docs |
| CrowdStrike | contesting | Matched eScan's AV-TEST 2025 Best Advanced Protection score but operates at far greater global scale |
| Quick Heal | losing to | Publicly listed on BSE/NSE with more capital, shares eScan's Cyber Swachhta Kendra government channel |
| SentinelOne | contesting | AI-native cloud EDR/XDR platform competing directly with eScan's Vision Core XDR launched Dec 2024 |
| OpenText (with Microsoft Security Copilot) | gaining on | Shipped AI-powered Core TDR XDR integrating Security Copilot around Feb-May 2025 |
- Is eScan (MicroWorld Technologies) profitable?
- No audited financials are public. eScan is privately held and self-funded with no outside investment on record as of 2024-12-22, founded in 1993 by Govind Rammurthy. Revenue estimates from data brokers vary wildly ($4.3M to $32.2M across different legal entities), with none independently confirmed.
- Has eScan had a data breach or supply chain attack?
- Yes, twice. In April 2024, Kimsuky hackers exploited an unencrypted HTTP update flaw dating to 2018 to spread GuptiMiner malware. On January 20, 2026, eScan's update infrastructure was compromised again, pushing malicious Reload.exe payloads; eScan disputed the severity and cited legal counsel.
- Who owns eScan antivirus?
- eScan is a product of MicroWorld Technologies Inc, operating in India as MicroWorld Software Services Pvt Ltd, headquartered in Mumbai. It is privately held and bootstrapped, founder-led by Govind Rammurthy since 1993, with no disclosed outside investors or acquisitions as of 2024-12-22.
- Could AI replace eScan's antivirus products?
- eScan's core signature-based consumer antivirus sits in the segment most exposed to AI-native cloud EDR/XDR platforms like CrowdStrike and SentinelOne, plus Microsoft's free bundled Defender and its Security Copilot-integrated Core TDR (shipped by OpenText/Microsoft around Feb-May 2025). eScan's own 'neural intelligence' XDR, launched December 2024, is unvalidated marketing.
- Who is eScan's biggest competitor?
- Microsoft Defender, bundled free with Windows, pressures eScan's consumer base, while CrowdStrike, SentinelOne and Trend Micro compete at the same AV-TEST benchmark level in enterprise EDR. Domestically, publicly listed Quick Heal shares eScan's government distribution channel but has far more capital, per a 2026-07-26 Wikipedia profile.
- Has eScan won any independent security awards?
- Yes. In April 2026, eScan's Enterprise EDR won the AV-TEST 2025 'Best Advanced Protection' award for Corporate Users, one of only two products globally to receive it, per AV-TEST Institute testing reported 2026-04-20. CrowdStrike, Sophos and Trend Micro achieved comparable scores in the same tests.
- 2026-04-20eScan Enterprise EDR wins AV-TEST 2025 Best Advanced Protection award, one of two global recipients
- 2026-02-02TheHackerNews reports eScan update servers compromised delivering multi-stage malware
- 2026-01-31SecurityWeek reports eScan antivirus supply-chain attack via update mechanism
- 2026-01-29Morphisec and Help Net Security disclose eScan update channel compromise; eScan disputes scope
- 2024-12-13eScan launches Vision Core XDR with neural intelligence AI/ML marketing
- 2024-04-24Avast and TheHackerNews reveal Kimsuky exploited eScan HTTP update flaw for GuptiMiner malware
- 2023-07eScan patches underlying unencrypted-update flaw later shown exploited since 2018
- $5.9M Est. ARR (Bootstrapped) (2024-12-22)
- MicroWorld Technologies Company Profile
- MicroWorld Technologies Inc Information
- Times of India (via Quick Heal)
- eScan Enterprise EDR Wins AV-TEST Award 2025 for Best Advanced Protection (2026-04-20)
- eScan launches Vision Core XDR: Advanced threat detection for cyber resilience (2024-12-13)
- eScan Antivirus Delivers Malware in Supply Chain Attack (2026-01-31)
- eScan AV users targeted with malicious updates (2026-01-29)
- eScan Antivirus Update Mechanism Exploited to Spread Backdoors and Miners (2024-04-24)
- Can OpenText's Core TDR Stand Out in a Crowded XDR Market? (2025-02-24)
- Quick Heal (Wikipedia) (2026-07-26)
- ESCAN VISION CORE XDR (2026-04-06)