Malwarebytes sells anti-malware and endpoint protection software, together with consumer products such as a premium antivirus, a privacy VPN, identity theft protection and mobile security. The protection software is installed on users' computers and phones, and the company also offers business endpoint security under its ThreatDown brand.
Malwarebytes is headquartered in Santa Clara, California, and has an office in Cork, Ireland. Its privacy policy names Malwarebytes Inc. as adhering to the EU-US Data Privacy Framework, and states that personal data may be transferred to and processed in the United States. It also says that files submitted to its cloud storage scanner are sent to servers controlled by the company in the United States. The policy includes a GDPR section that refers to the EU standard contractual clauses. For a European organisation, the software runs on its own devices, but personal data processed by the vendor may be transferred to and processed in the United States.