Reference

Mobile security features explained

Vendor feature lists are written in a shared vocabulary that is rarely defined. This page defines the terms you will meet, and gives the one question worth asking about each before you pay for it.

Two products can advertise the same twelve words and deliver different things. The words are not lies; they are categories, and the detail sits underneath them. Working through this page with a vendor's feature list open beside it turns a marketing page into something you can actually evaluate.

The three questions that apply to every feature

Whatever the feature is called, ask: does it exist on my platform, does it work without me having to remember to run it, and what does it send off my device to work. A feature that fails the first is not being bought at all; one that fails the second will be used twice and forgotten; one that fails the third is a privacy decision as well as a security one.

Detection and scanning

Real-time protection: A component that runs continuously and inspects files or apps as they arrive, rather than waiting for you to start a check. On Android this is the core function of the product. What to check: whether it runs on your platform at all, and what happens to battery life on an older handset.
On-demand scan: A check you start yourself, over installed apps, downloads or the whole storage area. Useful after installing something from an unusual source. What to check: whether a scan can be scheduled, since a manual-only scan depends on you remembering.
Signature and behavioural detection: Two ways of recognising malicious software: matching against a list of known bad items, and watching for patterns typical of malicious behaviour. Most products use both. What to check: how often the definitions update, and whether updates continue if the subscription lapses. They normally do not.
Quarantine: Isolating a suspicious item rather than deleting it, so that a false positive can be reversed. What to check: whether you can review and restore items yourself.

Web, link and message filtering

Web protection or safe browsing: Checking the address you are about to open against a list of known malicious or fraudulent sites and blocking it before the page loads. What to check: which browsers it covers. A filter that only works inside the vendor's own browser protects nothing when you tap a link in a messaging app that opens elsewhere.
Anti-phishing: The same mechanism, aimed specifically at pages impersonating banks, delivery companies, government services and email providers. What to check: whether it applies to links opened from SMS and messaging apps, which is where most of them arrive.
Call and message screening: Flagging or blocking calls and texts that match known nuisance or fraud patterns. What to check: whether it covers Australian numbers usefully, and whether your carrier already provides something similar at no extra cost.
Ad and tracker blocking: Preventing advertising and tracking scripts from loading. This is a privacy and performance feature rather than a security one, though blocking fewer third-party scripts does reduce exposure. What to check: whether it works outside the vendor's browser.

Account and identity features

Password manager: A vault that generates and stores a different password for every site and fills them in for you. For most people this changes their actual security posture more than anything else in a bundle, because password reuse is what turns one company's breach into a problem with your accounts. What to check: whether you can export your data if you ever leave, and how recovery works if you forget the master password.
Data breach monitoring: Checking your email address against datasets published after breaches at other organisations, and notifying you when it appears. Useful as a prompt to change a password. What to check: what the notification actually tells you, and that it does not require handing over more personal information than the address itself.
Identity monitoring: A broader version of the same idea, sometimes extended to documents and financial identifiers. Coverage of Australian identifiers varies considerably between products sold internationally. What to check: whether the service covers Australia specifically, and what it does beyond notifying you.
Multi-factor authentication: Not usually a paid feature: it is a setting on your accounts, and it is the single most effective step most people can take. Turn it on for email and banking first, since email is the reset path for everything else.

Network features

VPN: Encrypts traffic between your device and a server run by the VPN provider, then sends it on from there. It hides your browsing from whoever runs the local network and from your internet provider, and it changes the apparent origin of your traffic. It does not make you anonymous, does not stop malware, and does not hide activity from services you are signed in to. What to check: the logging policy, whether there is a data cap, and how many devices are included.
Wi-Fi network checking: A warning when you join an open or poorly configured wireless network. What to check: whether it does anything beyond warning, because in most cases the advice is simply to use mobile data instead.
DNS filtering: Blocking at the point where a domain name is looked up, so the device never connects. It is efficient and applies across all apps. What to check: whether enabling it interferes with your workplace or school network configuration.

Device features

Find, lock and wipe: Locating a missing device, locking it remotely and erasing it if it is not coming back. Both mobile platforms include this at no cost, and the built-in version is generally the more reliable one because it is part of the operating system. What to check: whether you have already set up the platform's own service, before paying for a duplicate.
Cleanup and optimisation tools: Removing cached files and identifying large or duplicate items. This is housekeeping, not security. What to check: nothing in particular, other than not letting it be the reason for the purchase.
App permission review: A consolidated list of which apps hold which permissions, so you can revoke the ones that do not need them. Genuinely useful, and the underlying controls exist in your device settings for free. What to check: whether the product just reads the list, or actually helps you act on it.
Parental and family controls: Content filtering, time limits and activity summaries on a child's device. Both platforms include family controls, and the eSafety Commissioner publishes independent guidance on their use alongside the conversations that matter more. What to check: which platforms the vendor's version supports, since this feature is frequently Android-only.

Reading a feature list without being misled

Count the features that are simply the platform's own capability with a new name. Find, lock and wipe is the usual example.
Look for the platform column. If there is not one, look for the footnotes.
Separate security features from housekeeping features before judging value.
Note which features stop working if you let the subscription lapse. Detection updates generally do.
Treat any percentage or award badge without a named, dated, independent source as decoration.

Applying this to the product covered here

TotalAV is an antivirus product, and the mobile offer Avalon Base links to is listed by the vendor for mobile devices and tablets on Android, iOS and Windows. Which of the features defined above are included, on which platform, and on what terms is set by the vendor and changes over time, so this site does not restate it. Take the three questions at the top of this page to the vendor's own current feature documentation and the answers will be the accurate ones.

Visit the TotalAV website

Paid affiliate link. MP DOBRA s.r.o. earns a commission on subscriptions started through it, which does not affect your price or what this page says.