A Submission Guide for Cybersecurity Companies With Referral Programs

This guide is for antivirus, anti-malware and device protection companies that want TechAmerica.ai editors to review a referral, affiliate or partner program. It starts with the practical steps for submitting, then explains how programs in this part of the security market tend to work and what readers should look for.

A quick note on independence before the steps. TechAmerica.ai holds no affiliate approvals, sponsorships, partnerships or discount codes with any security software company. Reviewing a program is an editorial exercise, and it carries no promise of coverage.

Step one: confirm the program belongs here

This section covers software and services that protect computers, phones and tablets. That includes traditional antivirus, anti-malware scanners, mobile security apps, web protection and scam blocking tools, and consumer security suites that combine several of these.

The program itself needs to be public. A refer-a-friend scheme with a terms page qualifies, as does an affiliate program anyone can apply to through the vendor or a network. A one-time influencer deal, a retailer bundle with no public rules or an internal employee incentive does not.

If your company also sells password managers, VPNs or identity monitoring, tell us which program applies to which product. Suite vendors often run a single program across several products, and we may cover it in more than one section.

Step two: gather what editors will ask for

Editors work from public documents. The more complete the first message, the faster a review moves. Please prepare the following before writing to us:

1. The URL of the program landing page and the full terms and conditions
2. A plain summary of each program type: customer referral, affiliate, retail or bundle partner, or reseller
3. Which products and plan levels qualify, including any exclusions for trials or free tiers
4. The reward or commission structure and when it is paid
5. Eligible countries and any residency checks
6. Rules on self-referral, coupon sites, paid search and incentivized traffic
7. The disclosure instructions you give to affiliates and creators
8. How your auto-renewal and cancellation terms appear to customers who arrive through a referral
9. A named contact for follow-up questions

Do not send customer data, revenue figures you would not want published or codes reserved for TechAmerica.ai. We do not publish private codes and will not enter special arrangements.

Step three: send it, then what happens

Submissions go through the TechAmerica.ai contact page. Put the product name and the phrase referral submission in the subject line.

An editor then checks the program against the vendor's public pages. If the submission and the website disagree, the website is treated as authoritative and we will ask which one needs correcting. Editors may also look at how affiliates are currently describing the product, since that is what readers actually see.

Coverage is not automatic. We may decline a program because its terms are unclear, because availability is too narrow, because of concerns about how the product is marketed, or because it offers little value to readers. We do not accept payment for placement in this section.

When terms change, send an update with the new terms and the date they took effect. Editors will review any existing coverage and correct or remove it as needed.

The antivirus and device protection market

Device protection software scans files and apps for known threats, watches for suspicious behavior, blocks dangerous websites and, increasingly, flags scam messages and fake login pages. Operating systems now ship with capable built-in protection, so paid products compete on extras and on how well they catch newer threats.

Product types

• Free antivirus tiers that cover basic scanning and lead to paid upgrades
• Paid antivirus and internet security plans for one or several devices
• Security suites that add a VPN, password manager, identity monitoring, parental controls or cloud backup
• Mobile security apps focused on scam texts, malicious links and app permissions
• Small office versions with a simple management console, which overlap with business endpoint products

Pricing and renewal

Consumer products are typically sold as annual subscriptions covering a set number of devices. Introductory pricing for the first year is common, followed by a higher renewal price, and most plans renew automatically. That structure is central to referral economics, because a vendor can reward a sale generously when it expects renewals to follow.

It also creates a consumer protection issue. A referral page that highlights a low first-year price without explaining the renewal price and how to cancel leaves readers with an incomplete picture.

Who buys device protection

Buyers range from households protecting a mix of Windows laptops, Macs and phones to freelancers and very small offices that want something simple. Older adults are a large audience, often because a relative recommends a product after a scare. Parents look for suites that include parental controls and safe browsing for children.

Many purchases are reactive. A suspicious pop-up, a hacked email account or a news story about a new scam prompts someone to buy protection quickly. That urgency is exactly when people are most vulnerable to fake offers, so the way a referral program presents itself matters more here than in calmer categories.

Built-in protection changes the conversation as well. Windows, macOS, Android and iOS all include security features, so a referral that implies a device is unprotected without paid software is misleading. Honest programs explain what the paid product adds, such as scam message filtering, web protection across browsers or identity alerts.

How programs work in device security

Customer referral

Some vendors let existing subscribers share a link that gives a friend a discount or extended trial and gives the referrer extra subscription time or account credit. These programs are less common in antivirus than in VPNs or password managers, partly because many consumer security products are bought through retailers, bundled with new PCs or renewed automatically without much new-customer marketing.

Affiliate programs

Affiliate programs are the main channel in this sector. Publishers, review sites and creators earn a commission when a reader buys through a tracked link. Many vendors run these programs through large affiliate networks, and some separate consumer and business audiences.

As one example of how that separation looks, Keeper Security's affiliate page, reviewed in October 2026, directed consumer-focused affiliates to apply through Rakuten Advertising and business-focused affiliates through PartnerStack. It described a percentage commission on consumer sales and a cost-per-lead payment for business leads who sign up for a demo or free trial.

Retail, bundle and carrier partnerships

Security software also reaches buyers through electronics retailers, PC makers and mobile carriers. These arrangements are commercial partnerships rather than referral programs, but they shape pricing. A product sold through a retailer bundle may have different renewal terms from one bought directly, and referral rewards may not apply to it.

Business and reseller channels

Vendors that also sell endpoint protection to companies often run reseller and managed service provider programs with margins, deal registration and technical training. Those programs belong in our IT reseller coverage, but we still want to know about them when a consumer submission comes in, because a single affiliate may promote both sides.

Some vendors also pay technology partners, such as router makers or device manufacturers, to preinstall or recommend their software. That arrangement is closer to distribution than referral, but readers deserve to know when a recommendation inside a device setup screen is paid.

Terms readers should check before sharing a link

Program terms in this category reward a careful read. The points below are the ones that most often surprise people:

• Qualifying purchases: whether trials, free tiers, monthly plans or retailer purchases count
• Payment timing: rewards are often held until the refund period ends
• Clawbacks: refunds, chargebacks and early cancellations can reverse a reward
• Stacking: whether a referral discount can combine with an introductory price or seasonal sale
• Geography: many programs are limited to particular countries
• Self-referral: nearly every program bans it, along with duplicate accounts
• Device limits: a referral may apply only to a specific plan size

Consumer protection: renewals, impersonation and disclosure

Auto-renewal clarity

Readers who sign up through a referral should see the same renewal price, renewal date and cancellation steps as anyone else. Vendors should make sure that discount landing pages for referrals do not hide those details behind extra clicks.

Data collected through referrals

Security software sees a great deal about a device: installed apps, visited sites flagged as risky and sometimes the content of suspicious messages. Referral tracking should stay separate from that telemetry. A program page should state that the referrer learns only whether a reward was earned, not anything about the friend's device or activity.

Vendors that use third-party affiliate networks should also explain what those networks receive. Typically that is a click identifier and a purchase event, but readers are entitled to know whether any additional data, such as an email address or device type, travels to the network.

Mobile apps add another layer. If a referral link opens an app store listing, the app store and the vendor's attribution tools may each record the install. A short plain-language note on the program page about which companies receive referral data helps readers make an informed choice.

Impersonation scams

Antivirus brands are among the most impersonated names in consumer fraud. The Federal Trade Commission's guidance on tech support scams describes fake subscription renewal notices that use the names of well-known security companies, urge people to call a phone number and then push them toward remote access or payment by gift card, wire transfer or cryptocurrency.

That history makes clarity in referral programs more important. A vendor's official referral emails should come from recognizable domains, never ask for remote access or card details by phone, and point people to the vendor's own website. Recent attacks that trick people into running commands on their own machines, such as the ClickFix campaigns targeting Mac and Windows users, show how quickly attackers borrow trusted formats.

Accurate claims

The FTC's malware guidance tells consumers that security software may miss some threats, at least for a while, and advises looking for recommendations from independent review sources. Referral and affiliate copy should reflect that reality. Claims that a product blocks every virus or makes a phone impossible to hack should not appear in program materials.

Endorsement disclosure

Anyone paid to recommend a security product, whether through commission, free licenses or account credit, should disclose that connection clearly and close to the recommendation. FTC guidance says labels such as affiliate link on their own may confuse readers and that advertisers should train and reasonably monitor the people promoting them.

What separates a strong submission

The submissions editors find most useful share a few traits. They explain the program in a few sentences without marketing language, they link directly to the governing terms rather than a promotional page, and they acknowledge limits, such as countries where the program does not run or plans that do not qualify.

Strong submissions also show how the vendor polices its affiliates. A short description of how you review affiliate content, how often you check for missing disclosures and what happens when someone makes an unsupported claim tells us more about the program's quality than any reward figure.

Finally, they make the renewal story clear. If a referred customer will pay one price this year and another next year, say so in the submission and on the program page. Readers notice when a vendor is direct about money, and so do editors.

Editors also value submissions that are candid about overlap with built-in protection. A short note on what the product does beyond the security already included in Windows, macOS, Android or iOS helps us describe the program fairly to readers who are unsure whether they need anything extra.

Red flags in device security programs

Some warning signs are specific to this category. Treat these with caution:

• Referral pages hosted on domains that do not match the vendor's main site
• Pop-ups or messages claiming your device is infected and offering a referral discount to fix it
• Requests to install a separate helper tool before a referral reward can be claimed
• Affiliate pages that say a product is free when the free version has major limits or converts to paid
• Programs that pay for installs without any check on whether users understood what they installed
• Terms that let the vendor change commissions for sales already made

Readers can follow broader malware and scam reporting in our security section, which regularly covers the tactics that make device protection products relevant in the first place.

For vendors, the best submissions read like the material a cautious customer would want: the terms in plain language, the renewal math spelled out and a clear statement of what the product can and cannot do. Those are also the programs editors are most likely to explain in detail.