Distinguish Antivirus One’s Safari permission prompt from a threat warning
Safari’s request to grant website access is an extension permission prompt, not a malware verdict.
Publication & corrections: infostoa · Editorial standards
Individual author and specialist reviewer information is not provided for this article.
Identify which message you see
When enabling Antivirus One, Safari may ask whether its extension can access websites. That is a permission request so the extension can work on pages; it does not say Safari has found malware on the current page. Antivirus One’s Web Threat Protection is a separate feature for checking known risky sites.
Trend Micro’s guide says to open Web in Antivirus One and choose Enable, then turn on Antivirus One Extension in Safari > Settings > Extensions. Review the website access shown on that screen. Check site-specific choices in the permission prompt and settings available in your current macOS version, since labels and controls can vary. After setup, check the app and extension status on a site you already trust. This is a documentation-based procedure, not a product test.
Disabling or removing the app does not cancel a subscription
If needed, turn off Antivirus One Extension in Safari > Settings > Extensions; remove the app separately from Finder’s Applications folder. Do not assume either action cancels an App Store subscription. Open your App Store account’s subscription management to check renewal and cancel separately.
If a threat alert appears
Check the domain and destination address shown by the alert. If a link was unexpected, close the page and type a known official address yourself. No warning cannot guarantee safety. Never visit a real malicious URL to test protection. Check your local App Store for current price and subscription terms before purchase.
Sources: Trend Micro: Enable Web Threat Protection · Apple Developer: Safari extension permissions · Apple Support: Use Safari extensions on Mac