Norton Safe Web

Norton Safe Web differentiating Google web searches as safe (green) and unsafe web search (red)

In addition to actively crawling and analyzing web sites, Norton Safe Web relies on feedback from users and Norton Community participants. When a drive-by download occurs at a web site, the suspicious URL is automatically reported to Norton Safe Web for analysis. The reported site is rated as unsafe if the analysis confirms that the download is malicious.

To ensure that its site rating accurately reflects the current state of a site, Norton Safe Web performs frequent re-analysis of Web sites. Norton Safe Web employs a site rating aging algorithm which estimates how often the safety of a particular Web site will change. Some of the factors used in this analysis include the site's rating history, the site's reputation and associations, the number and types of threats detected on the site, the number of submissions received from Norton clients, and site traffic. In other words, unsafe sites that are more likely to have been cleaned up are re-analyzed often while those that might take longer to remove detected threats are re-analyzed less frequently. User reviews are also accepted, with contributors ranked by reputation. Should a site owner dispute the ranking of their site, they can submit a request for re-evaluation after completing a validation process.[2]

Norton Safe Web is complained about by many users/web administrators as websites will be classified as "unsafe" incorrectly.[3] Even if reevaluation request is submitted, the site will still be listed as "unsafe" and no reevaluation action is taken place indeed.[4]

There have been reported instances of bloggers criticizing the quality of Norton Safe Web who have since been blacklisted by the tool.[5]

Safe Web is installed alongside Norton Internet Security 2009 and Norton 360 version 3.0 as a browser toolbar. It color codes search results returned by Yahoo!, Google, and Bing Search using green, yellow, or red. Hovering over a pop-up summary will bring up a summary of the findings, and include a link to the full report of the site. Safe Web will also prompt or interrupt access to malicious sites users try to access directly via the address bar.[6]

Safe Web blocks phishing sites, overlapping in functionality with Norton Internet Security and Norton 360. Using Norton 360 v3, PC Magazine found discrepancies between Safe Web and Norton 360's built-in phishing protection. Symantec stated that phishing sites change rapidly, and one Norton service may be using older definitions than the other. Norton Safe Web has drawn some ire among Windows Live! Plus users as it shows that the Windows Live! Plus website contains malware.[7] Also, Norton Safe Web blocks numerous sites with third party extensions such as Mailgun and New Relic. The verification of site ownership keeps failing so site owners can't fix the issue.

A free version of the software, Safe Web Lite, is available free of charge. The primary difference between the version of Safe Web bundled with Norton Internet Security and Norton 360 and Safe Web Lite is that Safe Web Lite does not block malicious websites. However, Norton AntiVirus updates it with Norton SafeWeb Statics when Norton SafeWeb Lite is installed on your computer.

Green means safe. Yellow/Orange means caution. Red means warning.

• McAfee SiteAdvisor
• WOT: Web of Trust