NordVPN adds CrowdStrike Threat Intelligence to its next-gen antivirus

What’s happening?

We’re excited to announce a new partnership with global cybersecurity leader CrowdStrike. With this partnership, our scam, phishing, and malware protection* now integrates CrowdStrike Threat Intelligence, an enterprise-grade threat intelligence feed trusted by organizations and governments worldwide, into the service.

This update gives NordVPN’s next-gen antivirus additional, highly accurate insights into active online threats. It strengthens the tool’s ability to detect and block malicious websites, harmful files, and other cyber risks before they reach your device.

*Please note that Threat Protection Pro™ is now referred to as scam, phishing, and malware protection in the NordVPN app. Its capabilities and functionality have not been affected.

What will this partnership mean for users?

New types of malware, phishing, and scam websites appear every day. Our goal is to protect users from those risks the moment they surface. And staying ahead requires not only strong defenses but also access to the most current, reliable intelligence about active threats.

While our next-gen antivirus is already a powerful solution, by integrating CrowdStrike’s Threat Intelligence, we’re adding one of the most accurate, frequently updated intelligence sources available, traditionally used by large enterprises. CrowdStrike Threat Intelligence is powered by CrowdStrike Counter Adversary Operations, which tracks more than 265 of the world’s most sophisticated nation-state, eCrime, and hacktivist groups, providing deep visibility into adversary behavior and emerging threats.

Here’s what CrowdStrike brings to the table:

• Additional trusted data. Threat indicators are sourced from CrowdStrike’s global sensor network and research teams.
• Context-rich intelligence. Entries include insight into adversary behavior and related metadata to help identify and block related threats faster.
• Continuous updates. Intelligence is refreshed continuously to help protect users from emerging threats as they appear.

By combining enterprise-grade threat intelligence with NordVPN’s own technology, we’re bringing advanced adversary insight and protection to everyday users in a simple, privacy-focused way.

Adding this feed enhances our existing protection without changing how you interact with the tool or how your data is processed. NordVPN remains responsible for the system’s technology, detection logic, and privacy standards.

What can our users expect?

For users, nothing changes in setup or use. You don’t need to turn anything on or install anything new, as long as the scam, phishing, and malware protection feature is enabled. The improvement operates automatically, making your protection smarter and faster without any extra effort on your part.

Knowing how to tell if a website is safe or which email attachments are safe to open are good cyber hygiene practices, but automatic protection adds a stronger layer of defense. Simply open the NordVPN app, click the shield icon in the left-hand menu, , and turn on scam, phishing, and malware protection.

We’ll continue to refine our next-gen antivirus and expand its protection layers, ensuring NordVPN users stay safer wherever they go online.