How this site is paid for
Avalon Base carries paid affiliate links. When you open the TotalAV website through a link on this site and go on to buy a subscription, the vendor's affiliate programme pays MP DOBRA s.r.o. a commission. You pay the same price you would pay by typing the vendor's address into your browser yourself — the commission comes out of the vendor's margin, not your wallet. That payment buys a link, not an opinion: it does not set what these pages say, it does not change the order things are listed in, and nothing here is presented as a test result or a ranking. The full arrangement, including what commission does and does not influence, is set out on the affiliate disclosure page.
Most of this decision is made before you compare products
Mobile security is sold as a single product, but it is really four or five separate jobs bundled together: blocking malicious files, warning you about dodgy links, managing passwords, encrypting traffic on networks you do not control, and helping you find or wipe a handset that has gone missing. Different people need different subsets of that list. A reader who has never sideloaded an app and keeps automatic updates switched on faces a different set of problems from someone running an older Android tablet that stopped receiving updates two years ago.
That is why this guide is organised around the decision rather than around vendors. The pages below work through what each feature means in practice, how the two mobile platforms differ in what they permit a security app to do, what your rights look like when a subscription renews, and where to report something when it has already gone wrong. Product coverage sits at the end of that sequence, not the beginning.
The Australian Signals Directorate's Australian Cyber Security Centre publishes free guidance for individuals and small businesses, and it is a reasonable baseline to read before spending anything. Nothing on this site should be read as a suggestion that you are legally required to buy security software, or that your device is currently compromised. Neither claim would be true, and both are the hallmark of advertising that deserves to be ignored.
Quick answers
- Does a modern phone need a separate security app?
- It depends on the handset and how it is used. A current phone that still receives operating system updates, installs apps only from the official store and is backed up already covers a large share of the risk. Paid products are most useful where one of those conditions does not hold, or where the extra features — password management, link filtering, family controls — are the actual reason for buying.
- Do these apps work the same way on iPhone and Android?
- No. The two platforms give security apps very different levels of access, which changes what a subscription can deliver on each. This is explained on the Android and iOS page.
- What is the most common complaint about this category?
- Billing after the first term. Introductory pricing, automatic renewal and cancellation routes that differ depending on whether you paid the vendor directly or through an app store account for most of the frustration. See subscriptions and your rights.
- Where do I report a scam message or a hacked account?
- Scam reports go to the National Anti-Scam Centre through Scamwatch; cybercrime reports go through the Australian Cyber Security Centre. The reporting page sets out which body handles what.
Five ways people cover the same set of risks
Before comparing paid products it helps to see where each one fits. The table below describes categories of protection in general terms, not specific vendors, and deliberately avoids numbers: effectiveness figures published by vendors are marketing material, and this site does not run its own laboratory.
| Approach | Generally covers | Generally does not cover | Where it comes from |
|---|---|---|---|
| Built-in platform protections | App store review, sandboxing between apps, permission prompts, device encryption, remote find and erase | Anything outside the handset, such as a password reused on a website, or a scam call | Included with the operating system; kept current through updates |
| Paid mobile security app | Varies by product and platform; commonly malware scanning on Android, link and web filtering, plus bundled extras | Poor password habits, unpatched devices, and anything the platform does not let an app see | Subscription, usually annual, from a vendor such as TotalAV |
| Password manager | Unique credentials per site, phishing resistance through domain matching, shared recovery planning | Malicious files, network interception, device loss without a backup | Standalone subscription, a platform feature, or part of a bundle |
| VPN | Encrypting traffic between your device and the VPN provider's server | Malware, scams, tracking by accounts you are signed in to, and anything after the traffic leaves the provider | Standalone subscription or a suite component |
| Backup and recovery plan | Recovering photos, messages and settings after loss, theft or a wipe | Preventing the loss in the first place | Cloud storage from the platform, or a local copy you control |
Nine things to settle before you subscribe
Every one of these can be checked on the vendor's own site in a few minutes, and each of them is a point people commonly discover only after paying.
- Which devices the licence covers, and whether tablets count separately from phones.
- Whether the features you care about exist on your platform, or only on the other one.
- What the price becomes at renewal, as distinct from the first term.
- How to cancel, and whether that happens with the vendor or through your app store account.
- Whether the subscription renews automatically by default, and how much notice you get.
- What the refund position is, and how it sits alongside your consumer guarantees.
- Which of the bundled extras you would genuinely use in the next twelve months.
- Where support is provided from, and in what hours relative to Australian time zones.
- What the product does with your data — the vendor's privacy policy, not the marketing page.
The guides on this site
How to choose mobile security software
A decision procedure: define the risk, check the platform, weigh the bundle, read the renewal terms, then buy.
What security apps can do on Android and iOS
Why the same subscription behaves differently on each platform, and what the limits mean for what you are buying.
Mobile security features explained
Plain definitions of the terms on vendor feature lists, with the question to ask about each one.
Subscriptions, renewals and your rights
Trials, automatic renewal, cancellation routes and the Australian Consumer Law backdrop.
Scams on mobile devices and where to report them
How these approaches usually arrive, what to do first, and which Australian body handles which report.
TotalAV: what this site can and cannot tell you
The product covered by the affiliate arrangement, described strictly from what the vendor states.
Questions readers ask
Short answers to the questions that come up most often about this category in Australia.
The product this site links to
TotalAV is an antivirus product, and it is the product Avalon Base has a commercial relationship with. The offer this site links to is the mobile one: the vendor lists it for mobile devices and tablets running Android, iOS and Windows. Anything beyond that — pricing in Australian dollars, the feature set on each platform, trial terms, renewal terms — is set by the vendor and changes over time, so this site does not restate it. Read it on the vendor's own site, where it is current and where the vendor is accountable for it.
Paid link: MP DOBRA s.r.o. earns a commission if you subscribe after following it. Your price is unaffected.
The TotalAV coverage page explains exactly what is known here, what is not, and why this site does not publish scores for it.
Australian services worth knowing about
These are the public bodies that deal with the problems this category is sold against. All of them are free to use, none of them sell anything, and each is described here in its actual role.
- Australian Cyber Security Centre
- Part of the Australian Signals Directorate. Publishes practical guidance for individuals, families and small businesses, and takes cybercrime reports through ReportCyber.
- Scamwatch, National Anti-Scam Centre
- Run by the ACCC. Collects scam reports and publishes information about approaches currently circulating in Australia.
- eSafety Commissioner
- Australia's online safety regulator. Handles complaints about cyberbullying of children, adult cyber abuse and image-based abuse, and publishes advice for parents and carers.
- Office of the Australian Information Commissioner
- The federal privacy regulator. Oversees the Privacy Act 1988 and the Australian Privacy Principles, and receives privacy complaints and data breach notifications.
- Australian Competition and Consumer Commission
- Administers the Australian Consumer Law, which governs consumer guarantees and misleading conduct by businesses selling to Australians.
What to watch out for in this category
Advertising for security software leans on worry more heavily than most categories. A few patterns are worth recognising, whoever is using them:
- A page that appears to scan your device, or reports a problem with it, before you have installed anything. A web page cannot inspect your phone for malware.
- Claims of total, guaranteed or complete protection. No product can offer that, and under the Australian Consumer Law a seller has to be able to stand behind what it says.
- A headline price that is an introductory rate, with renewal terms further down the page or on another page entirely.
- Feature lists that do not distinguish between platforms, leaving you to discover after purchase that half of them are Android-only.
How coverage here is decided
Avalon Base covers one product in depth — TotalAV — because that is the vendor MP DOBRA s.r.o. has an affiliate arrangement with. That is a narrow scope and this site states it rather than implying a survey of the whole market. Everything else published here is category guidance that stands on its own: the feature definitions, the platform explanations, the consumer law material and the reporting routes would be equally useful to a reader who never follows a single link to a vendor. If the guidance stopped being useful once the paid links were removed, it would not be worth publishing. The reasoning behind that approach is set out on the About page.