Hold up and wait up a second...;)
Best AV needs to be differentiate between either "client or network" devices and what OS and ease of deployment and reporting, if a network device ; "max through put "
Detection accuracy is a big concern if not one of the most important
AV db signatures updates and interval would be my next concen
No such thing as best exist, Review the endpoint protection and read the reviews.
!!! the cost !!!
I like Sopho ( do not consider it the best , but it's damm good )