Bitdefender for small business: what I pay to keep a client's office unransomed

Sue's invoice printer got hit by a fake invoice in 2023. The email said her domain renewal had failed, the attachment was a PDF, and the PDF asked to "install a printer driver." A tech installed it. Three days later every shared folder on the office computer had a note in it asking for money. She was lucky. The attack hit one machine, not the whole network, and the backups saved her books. It cost her a machine, two days of downtime, and about three years off her life.

Here's the thing. Small shops do not get attacked for their secrets. They get attacked because their guard is down and the invoice looks real. Endpoint protection is the software that sits on every machine and catches the bad install before it runs. It is seatbelts, not the brakes. You still have to drive.

I put Bitdefender on my own machines in 2023 and moved Sue's five machines onto it the week after her incident. I pay the bill myself, billed to her, and I have read the dashboard more times than I ever wanted to.

What it costs

Bitdefender's small business suite, Ultimate Small Business Security, is priced per employee, and each employee covers two devices. PCMag tested it this spring and made it their Editors' Choice for small business suites, mostly on that math.

1. Three employees: $189.99 a year. Six protected devices, plus Windows server coverage.
2. Five employees: $269.99 a year. Ten protected devices.
3. Ten employees: $399.99 a year. Twenty protected devices.
4. Twenty five employees: $799.99 a year, the ceiling for this product. Bigger shops get pushed to GravityZone, their IT department product.

Sue runs the five-pack: $269.99 a year, about $22.50 a month, for her two machines, the counter machines, and the invoice printer's computer, with two licenses to spare for the seasonal help. The suite includes the antivirus, a real VPN with no data cap, a password manager called SecurePass, and web protection that flags the fake-invoice site before the PDF loads.

What it is like to run

The dashboard is the part I actually use. Every machine shows up as a tile, green or red, and I can see whether Sue's machines are patched, whether the VPN is on, and whether the password manager is installed. One screen, no digging. When her front counter machine flagged something in March, I saw the alert on my phone before she finished saying "hey, something popped up."

It stays out of the way, which is the highest compliment you can pay antivirus. The machines are slow because they are old, not because Bitdefender is chewing them. Popups are rare. The one feature Sue's staff interact with is the warning page when somebody clicks a bad link, and it has fired on real phishing several times. The staff call it "the red screen" and treat it like a stop sign, which is exactly what it should be.

The honest downsides

The pricing page is quiet about what is really in each pack, and I had to dig through comparison tables to learn the per-employee math. Two devices per employee is generous, but count human beings first and devices second. If your five "employees" each have a desktop, a laptop, and a phone, you are shopping in the ten-pack.

It is Windows-and-Mac plus phones. There is no coverage for the Linux machine that runs some shops' point-of-sale, and the included server protection covers Windows servers only. My Hetzner box does not get Bitdefender. Different product, different bill.

Renewals go up after year one, like everything else in this business. Sue's second year was quoted higher than the first before I applied a discount code. Budget the sticker, not the teaser.

And none of it replaces the one thing that actually failed at Sue's office, which was a person being in a hurry. The training part is free and the software part is $270. Neither works alone. PCMag's reviewers liked the exposure monitoring, and the dashboard's patch warnings are the closest thing I have to a nagging safety director. I let it nag.

The smoke detector version

Endpoint protection is a smoke detector, and I mean that exactly. It does not put out the fire. It makes noise early, while the fire is small and the damage is one scorched pan instead of a gutted kitchen. Sue's 2023 incident was the fire. Bitdefender is the reason I believe there will not be a second one. Buy the detector, but stop frying things in grease.

What to do Monday

Count your machines and your people on one sheet of paper. Then price the Bitdefender pack that fits and compare it to what a single day of downtime costs you. If your current protection is nothing, or a free scanner nobody checks, buy the smallest pack tonight and install it on the machine that touches money first. That machine is the one they are coming for.