Is Malwarebytes profitable in 2026?

Malwarebytes' CEO stated the company is profitable and cash-flow positive as of August 2022, a company claim not independently audited. No public financials have been disclosed since, and the firm has cut headcount 36% from 2023 to 2025 while restructuring around SMB channel growth.

Who owns Malwarebytes?

Malwarebytes is privately held. Vector Capital, a private equity firm, made a $100 million minority investment announced September 2022 to consolidate ownership and fund MSP/channel expansion, and remains a board presence via Vector's Sandy Gill as of May 2026.

Could ChatGPT or AI replace Malwarebytes?

Malwarebytes shipped its own ChatGPT connector in February 2026 and a Claude connector in April 2026 letting users ask 'is this a scam?', embedding itself as a trust layer rather than being replaced. But generic LLM scam-checks remain a commoditization risk if OpenAI, Google, or Anthropic ship native equivalents.

Who is Malwarebytes' biggest competitor?

Microsoft Defender, bundled free into Windows, is the largest structural threat to Malwarebytes' consumer and SMB business, while CrowdStrike's Falcon Go directly targets the SMB endpoint segment. Malwarebytes' corporate endpoint market share has stayed around 1 to 1.2 percent as of 2022 per IDC estimates.

Is Malwarebytes growing or shrinking?

Malwarebytes' headcount has shrunk every year since 2022, down 36% cumulatively from 2023 to 2025 to 568 employees per Revelio Labs, even as IDC-tracked corporate endpoint revenue grew from $91.8M in 2020 to $126.7M in 2022, a slowing +6.4% pace that year.

What is Malwarebytes' ThreatDown MSP business worth?

MSP-specific channel revenue was cited at approximately $19 million in 2022, with a stated company goal to reach $100 million 'over the next few years' announced alongside the $100M Vector Capital investment in September 2022. No updated figure has been publicly disclosed since.

Cybersecurity companies · United States

Malwarebytes

malwarebytes.com ↗

Malwarebytes sells consumer and small-business malware protection plus MSP endpoint tools.

Losing its protection

Assessed 21 July 2026 · Evidence as of 21 July 2026

The structural protection is eroding.

On the recordSince 21 July 2026 · Checkable from 2026-2027 · Every call on the record Checkpoint: ThreatDown MSP revenue update toward the stated $100M goal, and next headcount report

The call

Malwarebytes stays profitable on a shrinking headcount while free Defender and cheaper CrowdStrike bundles squeeze its core consumer and SMB business.

Malwarebytes sells antivirus and security tools to individual computer users and small businesses. The problem: Microsoft includes free antivirus in Windows, and Microsoft's Defender works well enough for most people, so customers have little reason to pay Malwarebytes instead. Right now, the company is still profitable and people who use it really like it, but it has cut nearly a third of its staff since 2023, which signals trouble. The one thing that could save Malwarebytes is if its newer business selling security services to computer repair shops and managed service providers grows fast enough to become its main money-maker before artificial intelligence tools built into Windows or ChatGPT make scam-detection common and free.

Why

AI pressure: ChatGPT, Claude, Google native scam and phishing detection. Malwarebytes plugs into ChatGPT and Claude for scam checks now, but if OpenAI or Google build this natively, that connector value disappears. Could AI do the core job? Only partly.

Bigger players: Microsoft Defender (bundled free in Windows) and CrowdStrike Falcon Go. Defender ships free with every Windows PC and Falcon Go undercuts SMB pricing, squeezing the exact consumer and small-business tiers Malwarebytes depends on. Could a giant copy it? Yes, easily.

What protects it. A top-ranked NPS brand (83.40) and an MSP channel business that Microsoft's bundle doesn't directly replace, if it can scale.

What would change this call

ThreatDown/MSP revenue figures disclosed publicly crossing toward $75M-$100M ARR. Would show the MSP/channel pivot is gaining scale beyond the ~$19M 2022 base.
Net headcount growth (not just job postings) reported in 2026 after 2023-2025 cuts. Would show stabilization and reinvestment rather than continued contraction.
OpenAI, Google, or Anthropic ship native scam/phishing detection in ChatGPT, Gemini, or Claude. Would commoditize Malwarebytes' AI-connector scam-check feature.

Key numbers

Headcount fell 36% from 2023 to 2025 (2025-Q4)
MSP revenue ~$19M in 2022, goal $100M (2022)
PCMag top NPS score, 83.40 (2026-05-28)

Named risks

Free bundled Microsoft Defender structurally erodes consumer and SMB AV revenue. Severity: high
Headcount down 36% cumulative 2023-2025 signals sustained contraction, not stabilization. Severity: high
Vector Capital PE ownership since 2022 creates exit/sale/recapitalization uncertainty. Severity: medium
Corporate endpoint market share stuck near 1-1.2% since 2022 despite revenue growth. Severity: medium
Native scam-check features from OpenAI, Google, or Anthropic could commoditize Malwarebytes' AI connector value. Severity: medium

Rivals, as read in July 2026

Rival	Direction	Evidence
Microsoft (Defender)	losing to	Free Defender bundled into Windows erodes consumer/SMB share, ongoing as of 2022-2026
CrowdStrike (Falcon Go)	losing to	Falcon Go directly targets SMB endpoint segment where Malwarebytes has ~1-1.2% share (2022)
Bitdefender	contesting	GravityZone competes directly in SMB endpoint with aggressive pricing, per 2026 buyer guides
Norton LifeLock (Gen Digital)	contesting	Offers same insurance-backed identity remediation at scale, undercutting Malwarebytes' differentiation, 2026-05

Questions people ask

Is Malwarebytes profitable in 2026?: Malwarebytes' CEO stated the company is profitable and cash-flow positive as of August 2022, a company claim not independently audited. No public financials have been disclosed since, and the firm has cut headcount 36% from 2023 to 2025 while restructuring around SMB channel growth.
Who owns Malwarebytes?: Malwarebytes is privately held. Vector Capital, a private equity firm, made a $100 million minority investment announced September 2022 to consolidate ownership and fund MSP/channel expansion, and remains a board presence via Vector's Sandy Gill as of May 2026.
Could ChatGPT or AI replace Malwarebytes?: Malwarebytes shipped its own ChatGPT connector in February 2026 and a Claude connector in April 2026 letting users ask 'is this a scam?', embedding itself as a trust layer rather than being replaced. But generic LLM scam-checks remain a commoditization risk if OpenAI, Google, or Anthropic ship native equivalents.
Who is Malwarebytes' biggest competitor?: Microsoft Defender, bundled free into Windows, is the largest structural threat to Malwarebytes' consumer and SMB business, while CrowdStrike's Falcon Go directly targets the SMB endpoint segment. Malwarebytes' corporate endpoint market share has stayed around 1 to 1.2 percent as of 2022 per IDC estimates.
Is Malwarebytes growing or shrinking?: Malwarebytes' headcount has shrunk every year since 2022, down 36% cumulatively from 2023 to 2025 to 568 employees per Revelio Labs, even as IDC-tracked corporate endpoint revenue grew from $91.8M in 2020 to $126.7M in 2022, a slowing +6.4% pace that year.
What is Malwarebytes' ThreatDown MSP business worth?: MSP-specific channel revenue was cited at approximately $19 million in 2022, with a stated company goal to reach $100 million 'over the next few years' announced alongside the $100M Vector Capital investment in September 2022. No updated figure has been publicly disclosed since.

Timeline

2026-05-06Appointed Chung Ip as CFO, framed as supporting next phase of growth
2026-04Shipped Claude connector for scam checks; completed X41 D-Sec Privacy VPN no-log audit
2026-02Shipped ChatGPT connector for scam/phishing checks
2026-01Launched US Student Protection Program with discounted 2-year subscriptions
2025-10Overhauled consumer plans for simpler, more affordable pricing
2025-02Introduced Katana AI/ML detection engine; CMS Distribution partnership announced
2024-12Expanded corporate go-to-market leadership with new SVP Marketing and CRO
2024-11Acquired Sweden-based AzireVPN via buyout
2023-11ThreatDown spun out as distinct business/SMB brand
2023-08Cut at least 100 staff; CPO, CIO, CTO departed amid consumer/corporate split
2022-09Vector Capital announced $100M minority investment for MSP/channel expansion
2022-08Laid off 125 employees, 14% of staff, to narrow SMB focus

Revision history

21 July 2026

First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.

In the same band

Seqrite Meiya Pico NSFOCUS