Do we like Bitdefender?
Cybersecurity software for homes and businesses (antivirus, VPN, GravityZone). Based in Bucharest, Romania.
Our score: 7 out of 10. We'd back them. They do real, useful work against ransomware and the products are well regarded. The marks against them are an auto-renewal settlement and the odd security slip.
Bitdefender is a Romanian security company, and the founder is still in charge. Florin Talpeș and his wife Mariuca started one of the first private software firms in post-communist Romania, and Bitdefender grew out of that. Talpeș is still CEO today.
On ownership, a 2026 explainer says the Talpeș family holds the majority. It says the UK-based private equity firm Vitruvian Partners bought a stake of roughly 30% in 2017. It isn't listed on a stock exchange, so there are no public shareholders to answer to. We'd treat that source as a secondary one.
The best thing about them is the ransomware work. Bitdefender has put out free decryptors, working with Europol, the No More Ransom project and police forces. The tools cover GandCrab, LockerGoga, MegaCortex and REvil. Security outlets reported that the earlier GandCrab tools helped more than 30,000 victims recover data and avoid paying over $50 million in ransom.
The less flattering side is how they sell. A class action in San Diego Superior Court accused Bitdefender and its payment provider Avangate of not properly telling customers that subscriptions renew automatically. The two agreed to pay a principal settlement of $925,000. Their current terms still say subscriptions auto-renew, though they offer refunds within 30 days of purchase or renewal.
They have had security slips too, as most security firms do. Security Affairs reported years ago that hackers leaked credentials for more than 250 customer accounts and demanded a $15,000 ransom. The outlet said Bitdefender refused to pay and fixed the flaw. It's an old incident, but it counts against a company that sells trust.
Overall, we'd say yes to this one. There's real public-interest work, a founder-led company that isn't rushing to cash out, and no regulator fines in what we found. We hold back a few points for the auto-renewal habit and the breach history.