IPVanish adds real-time malware protection – and it works even without a VPN

IPVanish has launched Threat Protection Pro, a new security feature that blocks malware, phishing attempts, and malicious downloads in real time – and brings the VPN's feature offering closer to that of the best VPNs.

Available on Windows and macOS through its Advanced plan, the tool runs continuously in the background and does not require an active VPN connection.

The feature is powered by the VIPRE antivirus engine, and introduces file scanning and page-level threat detection within the IPVanish app.

Threat Protection Pro adds file scanning and always-on protection

Threat Protection Pro runs inside the IPVanish desktop apps and analyzes webpages, downloads, and system activity in real time.

It scans URLs before pages load, inspects files before execution, and monitors network activity on Windows to detect suspicious behavior such as unexpected outbound connections. When it identifies a threat, it blocks access, prevents downloads, or isolates flagged files.

The feature uses the VIPRE antivirus engine, which has over 25 years of development behind it and is designed to detect malware, phishing attempts, and malicious files in real time.

The same engine also powers other IPVanish tools, including the Link Checker (available for free) and Secure Browser.

The Pro version extends IPVanish's existing Threat Protection feature, which relies on DNS-level filtering to block known malicious domains. It adds page-level inspection, file scanning, and quarantine capabilities, and continues running even when the VPN is turned off on Windows and macOS.

Regular Threat Protection will continued to be offered across all IPVanish plans.

VPN services expand into malware and phishing protection tools

IPVanish introduced Threat Protection Pro as online threats extend beyond malicious websites into downloads, ads, and everyday browsing activity.

The company states that phishing pages, compromised files, and "malvertising" can bypass domain-based blocking, prompting the addition of page-level analysis and file scanning in its desktop apps.

In a statement posted on IPVanish's blog, Subbu Sthanu, General Manager of Consumer Security at Ziff Davis, said:

"Our goal is to provide complete digital life protection, and Threat Protection Pro is a key step in that evolution."

"By unifying security across the browser, cloud, network, and system – core layers of modern defense – into one cohesive experience, we're transforming IPVanish into a comprehensive platform that delivers advanced protection seamlessly while giving users greater visibility and control."

How to access Threat Protection Pro

Unlike the standard Threat Protection feature, which requires users to disconnect from the VPN before enabling it, Threat Protection Pro activates after the initial setup and runs automatically in the background. It does not depend on an active VPN connection and continues working once enabled.

On Windows:

• Open the IPVanish app
• Select Threat Protection Pro from the left-hand navigation
• Allow the feature to download during first-time setup
• Let the protection enable automatically

On macOS:

• Open the IPVanish app
• Select Threat Protection Pro and click Install
• Enter your system credentials
• Enable the requested permissions, including Full Disk Access, Network Extensions, and DNS Proxy
• Let the protection activate automatically

IPVanish offers two subscription tiers, Essential and Advanced. Threat Protection Pro is only available on the Advanced plan, which starts at $3.29 per month for a two-year subscription and includes a 30-day money-back guarantee.

The feature is currently limited to Windows and macOS. On Android, iOS, Fire TV, and Apple TV, IPVanish continues to offer the standard Threat Protection feature.