NordVPN Launches Local AI Antivirus for Phishing Defense
The tool uses local models to block scams automatically, marking a shift toward on-device security against AI threats.
Updated on Oct. 15, 2026 in Cybersecurity
Live Poll
Do you trust AI-based security tools to monitor your devices and data without compromising your privacy?
NordVPN has released a next-generation antivirus (NGAV) tool designed to autonomously block ads, detect malware, and flag scam websites. The software utilizes small, locally running AI models to identify phishing attempts without processing customer data for training.
Why it matters
The tool aims to mitigate the growing threat of AI-generated social engineering attacks by automating security for non-technical users. By running models locally, NordVPN seeks to balance advanced threat detection with user data privacy.
The security software employs approximately 20 parameters that can be tuned in real-time to refine phishing detection. These small AI models execute locally on the user device rather than in the cloud, ensuring user data is not used for model training.
The players
NordVPN
A provider of consumer-focused digital security tools, including VPNs and antivirus software, currently transitioning toward local AI deployment.
Proton
A developer of privacy-focused communication and storage services that emphasizes user data sovereignty.
The details
The NGAV system functions as a background process to automate threat management, removing the need for manual configuration. Its phishing detection mechanism leverages small, in-house AI models that perform classification directly on the local hardware. To maintain data isolation, the company confirmed that internal teams managing payment systems are restricted from using these AI tools.
Timeline
October 15, 2026: The security tool was officially launched.
April 2026: Proton CEO Andy Yen discussed user security responsibilities.
The Tech Race
NordVPN is pivoting away from large-scale frontier AI models in favor of lighter, open-weight alternatives optimized for local execution. This shift places the company in direct competition with other security providers who are similarly racing to integrate autonomous, device-bound threat detection.
The NGAV tool is currently available for users who prefer security solutions that require no technical oversight. Future updates are expected to expand these local AI protections to shield AI agents running on consumer devices.
The takeaway
NordVPN is prioritizing edge-based AI to counter phishing, specifically avoiding the use of customer data for training purposes. Users should watch for future feature rollouts aimed at protecting AI agents on personal devices, as the company explores this new security layer.
Further reading
Explore ongoing trends in defensive software at Cybersecurity.
Source note: This article includes information reported by ZDNet.
Live Poll
Do you trust AI-based security tools to monitor your devices and data without compromising your privacy?
