{ "license": "CC BY 4.0, attribution to VPN Clue with a link", "generatedFrom": "src/data/providers/*.json and src/data/scores.json", "weights": { "privacy": 25, "security": 15, "speed": 20, "streaming": 10, "apps": 10, "price": 10, "support": 5, "transparency": 5 }, "providers": [ { "slug": "cyberghost", "name": "CyberGhost", "tagline": "Romanian VPN owned by Kape with 9,600 servers in 100 countries and a 45-day guarantee", "identity": { "website": "https://www.cyberghostvpn.com/", "owner": "CyberGhost S.R.L.", "parentCompany": "Kape Technologies", "hqCountry": "RO", "hqCity": "Bucharest", "jurisdiction": "RO", "eyesAlliance": "none", "founded": 2011, "note": "CyberGhost S.R.L., 70-72 Dionisie Lupu St, District 1, Bucharest (Trade Register J40/1278/2011; https://www.cyberghostvpn.com/imprint). The privacy policy names Kape Technologies PLC as the ultimate holding company. Founded in 2011 in Bucharest; team of 70+ in Romania and Germany (https://www.cyberghostvpn.com/about).", "verifiedAt": "2026-10-31", "sourceUrl": "https://www.cyberghostvpn.com/privacypolicy" }, "pricing": { "currency": "USD", "plans": [ { "id": "2y-plus-2m", "name": "2 Years + 4 Months", "tier": "CyberGhost VPN", "termMonths": 28, "monthly": 2.19, "total": 61.32, "renewalTotal": 61.32, "renewalMonths": 12, "extraMonths": 4, "promoLabel": "Save 83%", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.cyberghostvpn.com/buy" }, { "id": "6m", "name": "6 Months", "tier": "CyberGhost VPN", "termMonths": 6, "monthly": 6.99, "total": 41.94, "renewalTotal": 41.94, "renewalMonths": 6, "verifiedAt": "2026-11-05", "sourceUrl": "https://www.cyberghostvpn.com/buy" }, { "id": "1m", "name": "1 Month", "tier": "CyberGhost VPN", "termMonths": 1, "monthly": 12.99, "total": 12.99, "renewalTotal": 12.99, "renewalMonths": 1, "verifiedAt": "2026-11-05", "sourceUrl": "https://www.cyberghostvpn.com/buy" } ], "moneyBackDays": 45, "freeTier": { "available": false, "limits": "No free tier. CyberGhost offers a 24-hour free trial on desktop with no card. On mobile, there is a 3-day trial on Android and a 7-day trial on iOS, and both need a payment method." }, "paymentMethods": [ "Credit/debit card", "PayPal", "Apple Pay", "Google Pay", "Amazon Pay" ], "anonymousPayment": false, "summary": "CyberGhost has one VPN plan. The 2-year plan costs $61.32 for the first 28 months and renews at $61.32 a year. The 6-month plan renews at $41.94 every 6 months, and the monthly plan at $12.99. Plans of 6 months or longer have a 45-day money-back guarantee. The monthly plan has 14 days. App store purchases are not covered. A dedicated IP costs from $5 a month extra. CyberGhost lists no crypto option for US buyers.", "note": "Single VPN tier. Buy page (2026-11-05): an 'Early Access Deal: Save up to 83%' campaign (images captioned 'Pre-Black Friday 2026'; no coupon) replaced the Halloween label between 2026-11-02 and 2026-11-04. The 2-year plan is now '2 Years + 4 Months' at $2.19/mo, 'Billed $61.32 for first 2 years, then autorenews at $61.32 annually' ('IMPORTANT! The 28 MONTHS offer includes the biggest savings and is fully refundable for 45 days.'); on 2026-11-02 it was '2 Years + 2 Months', billed $56.94 for 26 months and renewing at $56.94. Hidden alternate layouts in the HTML still name '2 Years + 2 Months' and '2 Years + 3 Months'. Plan id 2y-plus-2m kept so the price history stays continuous; the 6-month plan renews at $41.94 every 6 months and the monthly plan at $12.99. 45-day money-back guarantee on plans of 6 months or longer, 14 days on the 1-month plan; app-store purchases are excluded (https://www.cyberghostvpn.com/terms). Add-ons at checkout: Dedicated IP from $5/mo, Security Suite for Windows from $4.50/mo, password manager, ID Guard. Checkout as loaded listed card, PayPal, Apple Pay, Google Pay and Amazon Pay; CyberGhost's payment-by-country help article lists no crypto option for the United States (https://support.cyberghostvpn.com/hc/en-us/articles/360013734499-Payment-Possibilities-Sorted-by-Country).", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.cyberghostvpn.com/buy" }, "network": { "servers": 9600, "countries": 100, "cities": 125, "ownedServers": "partial", "ramOnly": true, "virtualLocations": true, "note": "Server page headline: 9,600 servers, 100 countries, 125 locations, 21 dedicated-IP locations; the per-country list flags virtual server locations. NoSpy servers (44 in Bucharest) and colocated servers are self-owned and operated in-house, other servers are rented from data-centre operators (https://www.cyberghostvpn.com/features/nospy). RAM-only servers per the features and no-logs pages.", "verifiedAt": "2026-11-02", "sourceUrl": "https://www.cyberghostvpn.com/vpn-server" }, "security": { "protocols": [ "openvpn", "wireguard", "ikev2" ], "encryption": "AES 256-bit", "killSwitch": { "desktop": true, "mobile": true }, "splitTunneling": [ "windows", "android" ], "obfuscation": false, "multiHop": false, "dedicatedIp": true, "portForwarding": false, "postQuantum": null, "adBlocker": true, "dns": { "ownResolvers": true, "leakProtection": true, "ipv6": "blocked" }, "note": "Automatic kill switch in the desktop apps and in the iOS and Android apps (https://www.cyberghostvpn.com/download/ios-vpn, https://www.cyberghostvpn.com/download/android-vpn). Split tunneling: per-app on Android, website 'Exceptions' on Windows (https://www.cyberghostvpn.com/privacyhub/split-tunnel-vpn/). IPv6 traffic is switched off automatically with built-in IPv6 leak protection (https://www.cyberghostvpn.com/privacyhub/ipv4-vs-ipv6/); DNS requests are processed on CyberGhost's own servers with leak protection (https://www.cyberghostvpn.com/privacyhub/dns-changer/). Content Blocker filters ad, tracker and malware domains. Dedicated IP is a paid add-on. Multi-hop, port forwarding, obfuscation and post-quantum encryption are not documented on official pages.", "verifiedAt": "2026-10-31", "sourceUrl": "https://www.cyberghostvpn.com/features" }, "privacy": { "loggingPolicy": { "summary": "The privacy policy states CyberGhost is '100% committed to the no-logs-policy' and does not store logs; the no-logs page lists IP addresses, browsing history, DNS queries and connection dates/durations as never logged (policy updated 18 March 2024).", "noLogsClaim": true, "sourceUrl": "https://www.cyberghostvpn.com/privacypolicy" }, "audits": [ { "auditor": "Deloitte Audit Romania", "date": "2022-09-22", "scope": [ "no-logs", "infrastructure" ], "url": "https://www.cyberghostvpn.com/privacyhub/privacy-audit/", "summary": "First ISAE 3000 (Revised) assurance engagement on the no-logs policy, server network and management systems (change, configuration and incident management, dedicated-IP token system); announced 22 September 2022, fieldwork dates not stated; the report is available only on request from Deloitte." }, { "auditor": "Deloitte Audit Romania", "date": "2024-03-06", "scope": [ "no-logs", "infrastructure" ], "url": "https://www.cyberghostvpn.com/privacyhub/privacy-audit-2024/", "summary": "Second ISAE 3000 (Revised) engagement covering the VPN network, no-logs systems, incident management and the dedicated-IP token system. Date is the announcement's publication date; the report is available in the customer account." }, { "auditor": "Deloitte Audit Romania", "date": "2025-12-08", "scope": [ "no-logs", "infrastructure" ], "url": "https://www.cyberghostvpn.com/privacyhub/privacy-audit-2025/", "summary": "Third ISAE 3000 (Revised) engagement on server infrastructure, operational controls and the dedicated-IP token system. Date is the announcement's publication date; report at https://www.cyberghostvpn.com/deloitte-privacy-policy." } ], "warrantCanary": false, "transparencyReport": { "available": true, "url": "https://www.cyberghostvpn.com/transparency-report" }, "incidents": [], "verifiedAt": "2026-10-31" }, "streaming": [ { "service": "netflix", "status": "claimed", "checkedAt": "2026-10-31", "note": "Named on the streaming page as supported by streaming-optimized servers" }, { "service": "prime-video", "status": "claimed", "checkedAt": "2026-10-31", "note": "Named on the streaming page as supported by streaming-optimized servers" }, { "service": "disney-plus", "status": "claimed", "checkedAt": "2026-10-31", "note": "Named on the streaming page as supported by streaming-optimized servers" }, { "service": "hbo-max", "status": "claimed", "checkedAt": "2026-10-31", "note": "Named on the streaming page as supported by streaming-optimized servers" }, { "service": "bbc-iplayer", "status": "claimed", "checkedAt": "2026-10-31", "note": "Named on the streaming page as supported by streaming-optimized servers" }, { "service": "youtube-tv", "status": "claimed", "checkedAt": "2026-10-31", "note": "Named on the streaming page as supported by streaming-optimized servers" }, { "service": "paramount-plus", "status": "claimed", "checkedAt": "2026-10-31", "note": "Named on the streaming page as supported by streaming-optimized servers" }, { "service": "hulu", "status": "claimed", "checkedAt": "2026-10-31", "note": "Dedicated service page linked from the streaming hub" }, { "service": "peacock", "status": "claimed", "checkedAt": "2026-10-31", "note": "Dedicated service page linked from the streaming hub" }, { "service": "crunchyroll", "status": "claimed", "checkedAt": "2026-10-31", "note": "Dedicated service page linked from the streaming hub" }, { "service": "dazn", "status": "claimed", "checkedAt": "2026-10-31", "note": "Dedicated service page linked from the streaming hub" } ], "apps": { "platforms": [ "windows", "macos", "linux", "ios", "android", "android-tv", "fire-tv", "smart-tv", "router" ], "simultaneousDevices": 7, "routerSupport": true, "browserExtensions": [ "chrome", "firefox" ], "smartDns": true, "openSourceClients": "none", "note": "Apps for Windows 10+, macOS 10.13+, Linux (command line), Android 7+, iOS 15+, Android TV and Amazon Fire TV; Apple TV, Samsung/LG smart TVs, Roku and game consoles are supported only via Smart DNS, which CyberGhost says is no longer compatible with streaming services (https://support.cyberghostvpn.com/hc/en-us/articles/360012002360-How-to-Configure-Smart-DNS); no native Apple TV app is documented (https://www.cyberghostvpn.com/download/apple-tv-vpn). Router setup via DD-WRT and OpenVPN. 7 simultaneous connections. No app source code is published.", "verifiedAt": "2026-10-31", "sourceUrl": "https://support.cyberghostvpn.com/hc/en-us/articles/213898525-What-Devices-and-Platforms-Do-You-Support" }, "support": { "liveChat": "24/7", "email": true, "knowledgeBase": true, "measuredResponseHours": null, "verifiedAt": "2026-10-31", "sourceUrl": "https://support.cyberghostvpn.com/hc/en-us/articles/360013667240-What-Payment-Methods-Do-You-Offer" }, "commercial": { "affiliateProgram": true, "notes": "Affiliate programme at https://www.cyberghostvpn.com/affiliate; the checkout page advertises a referral bonus of 30 free days. Support channels: 24/7 live chat, email (support@cyberghost.ro) and web tickets, plus the help centre at support.cyberghostvpn.com." }, "sourceUrls": { "pricing": "https://www.cyberghostvpn.com/buy", "servers": "https://www.cyberghostvpn.com/vpn-server", "features": "https://www.cyberghostvpn.com/features", "privacyPolicy": "https://www.cyberghostvpn.com/privacypolicy", "refund": "https://www.cyberghostvpn.com/terms", "audits": "https://www.cyberghostvpn.com/privacyhub/privacy-audit-2025/", "blog": "https://www.cyberghostvpn.com/privacyhub/" }, "score": { "total": 8, "rank": 5, "coverage": 80, "dimensions": { "privacy": { "score": 8.8, "inputs": { "eyesAlliance": "none", "newestNoLogsAudit": "2025-12-08", "auditAgeMonths": 10, "ramOnly": true, "noLogsClaim": true, "anonymousPayment": false, "incidentPenalty": 0 } }, "security": { "score": 7.4, "inputs": { "protocols": "openvpn, wireguard, ikev2", "killSwitchDesktop": true, "killSwitchMobile": true, "obfuscation": false, "multiHop": false, "postQuantum": null, "ownDns": true, "ipv6": "blocked", "newestTechnicalAudit": "2025-12-08" } }, "speed": { "score": null, "inputs": { "labData": null } }, "streaming": { "score": 9.3, "inputs": { "servicesTestedWorking": 0, "servicesClaimed": 11, "smartDns": true } }, "apps": { "score": 6.8, "inputs": { "platforms": 9, "simultaneousDevices": 7, "routerSupport": true, "browserExtensions": 2, "openSourceClients": "none", "splitTunnelingPlatforms": 2 } }, "price": { "score": 7.5, "inputs": { "lowestEffectiveMonthly": 2.19, "monthlyPlanPrice": 12.99, "moneyBackDays": 45, "freeTier": false, "renewalPolicy": "stated", "renewalRatio": 1, "paymentMethods": 5 } }, "support": { "score": 10, "inputs": { "liveChat": "24/7", "email": true, "knowledgeBase": true, "measuredResponseHours": null } }, "transparency": { "score": 5, "inputs": { "transparencyReport": true, "warrantCanary": false, "openSourceClients": "none", "audits": 3 } } } } }, { "slug": "expressvpn", "name": "ExpressVPN", "tagline": "BVI-based VPN with the Lightway protocol, RAM-only servers and KPMG-audited no-logs policy", "identity": { "website": "https://www.expressvpn.com/", "owner": "Express Technologies Ltd.", "parentCompany": "Kape Technologies", "hqCountry": "VG", "jurisdiction": "VG", "eyesAlliance": "none", "founded": 2009, "note": "About page: founded 2009, 'operates from the British Virgin Islands', joined the Kape Technologies family in 2021. The terms of service (2026-07-27) and privacy policy (2026-10-02) name Express Technologies Ltd. as the operating entity under BVI law (the entity was previously cited as ExpressVPN International Ltd.). HQ city not stated.", "verifiedAt": "2026-10-31", "sourceUrl": "https://www.expressvpn.com/about-us" }, "pricing": { "currency": "USD", "plans": [ { "id": "basic-2y", "name": "Basic 2 Years + 4 Months", "tier": "Basic", "termMonths": 28, "monthly": 2.99, "total": 83.72, "renewalTotal": 99.95, "renewalMonths": 12, "extraMonths": 4, "promoLabel": "Save 80%", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.expressvpn.com/order" }, { "id": "advanced-2y", "name": "Advanced 2 Years + 4 Months", "tier": "Advanced", "termMonths": 28, "monthly": 4.49, "total": 125.72, "renewalTotal": 119.95, "renewalMonths": 12, "extraMonths": 4, "promoLabel": "Save 73%", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.expressvpn.com/order" }, { "id": "pro-2y", "name": "Express Pro 2 Years + 4 Months", "tier": "Express Pro", "termMonths": 28, "monthly": 7.49, "total": 209.72, "renewalTotal": 199.95, "renewalMonths": 12, "extraMonths": 4, "promoLabel": "Save 67%", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.expressvpn.com/order" } ], "moneyBackDays": 30, "freeTier": { "available": false, "limits": "No free tier. ExpressVPN offers a 3-day free trial in its iOS and Android apps, through the app stores. On the website, first-time buyers get a 30-day money-back guarantee instead, which does not cover App Store or Google Play purchases." }, "paymentMethods": [ "credit/debit cards (Visa, Mastercard, American Express, Discover, JCB, Diners Club, Delta, OneCard, Hipercard)", "PayPal", "Apple Pay", "Google Pay", "in-app purchase (Apple App Store, Google Play)" ], "anonymousPayment": false, "summary": "The pricing page lists only 2-year plans with 4 extra months, so 28 months in total. Basic costs $83.72 for the first 28 months and then renews at $99.95 a year. Monthly and 1-year plans exist, but their prices appear only at checkout. Basic covers 10 devices, Advanced 12 and Express Pro 14. The 30-day money-back guarantee is for first-time buyers only. ExpressVPN no longer accepts cryptocurrency.", "note": "Order page loaded 2026-10-31 shows only the 2-year introductory offer ('2 Years + 4 Months', billed for the first 28 months, 'Then autorenews at $X annually') for Basic, Advanced and Express Pro; the support page 'What subscriptions are available' (updated 2026-10-30) confirms monthly and 12-month plans exist for all tiers but their prices are shown at checkout and were not rendered in the page. Devices: Basic 10, Advanced 12, Express Pro 14; Advanced/Pro bundle ExpressKeys, Identity Defender (US) and an eSIM. Sales tax applied at checkout where applicable. Cryptocurrency (incl. BitPay) is no longer accepted (support article, 2026-08-11). Re-checked 2026-10-31 on expressvpn.com/pricing: only the three '2 Years + 4 Months' plans are listed ('Billed $83.72 for the first 28 Months. Then autorenews at $99.95 annually.' for Basic), no monthly price is shown.", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.expressvpn.com/order" }, "network": { "servers": null, "countries": 113, "cities": null, "ownedServers": "unknown", "ramOnly": true, "virtualLocations": true, "note": "No server count is published. Server list page: 'Servers in 113 Countries' and 'ExpressVPN's 214 server locations'; locations are not a city count (several per metro area, many marked 'Virtual Server Location'), so cities is null. TrustedServer page: every server runs entirely in RAM and is wiped on reboot. Server ownership is not stated.", "verifiedAt": "2026-11-02", "sourceUrl": "https://www.expressvpn.com/vpn-server" }, "security": { "protocols": [ "proprietary", "wireguard", "openvpn", "ikev2" ], "proprietaryProtocol": "Lightway", "encryption": "AES-256. Lightway, ExpressVPN's own protocol, is written in Rust on wolfSSL and uses hybrid post-quantum ML-KEM key exchange.", "killSwitch": { "desktop": true, "mobile": true }, "splitTunneling": [ "windows", "macos", "linux", "android", "ios" ], "obfuscation": true, "multiHop": false, "dedicatedIp": true, "portForwarding": false, "postQuantum": true, "adBlocker": true, "dns": { "ownResolvers": true, "leakProtection": true, "ipv6": "blocked" }, "note": "Internet Kill Switch (Network Lock) is on by default on Windows, macOS, Linux and Android and always on for iOS; it blocks IPv4, IPv6 and DNS traffic outside the tunnel (features/network-lock). Split tunneling: Windows (apps and websites), Mac, Linux (apps, IPs, subnets), Android (per app), iOS (IPv4 address exclusions). Automatic obfuscation on every server. No multi-hop feature is documented. Dedicated IP add-on (included with Express Pro). Port forwarding exists only on the router app/Aircove and runs outside the VPN tunnel. Lightway core is open source and uses ML-KEM post-quantum protection by default (blog 2025-01-15); the server list page also offers WireGuard, OpenVPN and IKEv2. Advanced Protection blocks ads, trackers and malicious sites; own zero-knowledge DNS on every server. IPv6 is not tunnelled; the apps block it.", "verifiedAt": "2026-10-31", "sourceUrl": "https://www.expressvpn.com/features" }, "privacy": { "loggingPolicy": { "summary": "Express Technologies Ltd. (BVI) states it never collects activity logs (browsing history, traffic destination, data content, DNS queries) or connection logs (IP address, outgoing VPN IP address, connection timestamps or session duration); it collects aggregated usage statistics only: apps and versions activated, whether a VPN connection succeeded on a given day, the VPN location chosen and total data transferred. Privacy policy last updated 2026-10-02.", "noLogsClaim": true, "sourceUrl": "https://www.expressvpn.com/privacy-policy" }, "audits": [ { "auditor": "KPMG", "date": "2025-06-01", "scope": [ "no-logs" ], "url": "https://www.expressvpn.com/blog/kpmg-2025-no-logs-policy-audit/", "summary": "Third KPMG audit of ExpressVPN's privacy (no-logs) commitments, June 2025 (first of month used)." }, { "auditor": "KPMG", "date": "2023-12-01", "scope": [ "no-logs" ], "url": "https://www.expressvpn.com/security-audit-reports/kpmg-privacy-policy-2023", "summary": "KPMG assurance of privacy policy claims, December 2023 (first of month used)." }, { "auditor": "KPMG", "date": "2022-09-01", "scope": [ "no-logs" ], "url": "https://www.expressvpn.com/news-pr/kpmg-privacy-policy-cure53-trustedserver-audit", "summary": "KPMG ISAE 3000 Type 1 audit of the no-logs policy, September 2022 (first of month used)." }, { "auditor": "PwC Switzerland", "date": "2019-06-01", "scope": [ "no-logs", "infrastructure" ], "url": "https://www.expressvpn.com/blog/pwc-audits-expressvpn-servers-to-confirm-essential-privacy-protections/", "summary": "PwC audit of privacy policy compliance and TrustedServer technology, June 2019 (first of month used)." }, { "auditor": "Cure53", "date": "2022-05-01", "scope": [ "infrastructure" ], "url": "https://www.expressvpn.com/news-pr/kpmg-privacy-policy-cure53-trustedserver-audit", "summary": "Cure53 audit of TrustedServer, May 2022 (first of month used)." }, { "auditor": "Cure53", "date": "2024-10-01", "scope": [ "protocol" ], "url": "https://cure53.de/pentest-report_expressvpn-lightway_2024.pdf", "summary": "Fourth Lightway audit (Rust implementation), October 2024 (first of month used)." }, { "auditor": "Praetorian", "date": "2024-09-01", "scope": [ "protocol" ], "url": "https://www.expressvpn.com/wp-ws-cache/uploads-expressvpn/2025/02/Praetorian-ExpressVPN-ExpressVPN-Lightway-Security-Assessment-Retest-Final-Version.pdf", "summary": "Third Lightway audit, September 2024 (first of month used)." }, { "auditor": "Cure53", "date": "2022-11-01", "scope": [ "protocol" ], "url": "https://www.expressvpn.com/blog/cure53-lightway-audit/", "summary": "Second Lightway audit, November 2022 (first of month used)." }, { "auditor": "Cure53", "date": "2021-08-01", "scope": [ "protocol" ], "url": "https://www.expressvpn.com/blog/lightway-open-source-security-audit/", "summary": "First Lightway audit alongside open-sourcing of Lightway core, August 2021 (first of month used)." }, { "auditor": "Cure53", "date": "2022-09-01", "scope": [ "apps" ], "url": "https://www.expressvpn.com/news-pr/cure53-ios-android-audit", "summary": "iOS app audit, September 2022, and Android app audit, August 2022 (first of month used)." }, { "auditor": "Cure53", "date": "2022-08-01", "scope": [ "apps" ], "url": "https://www.expressvpn.com/news-pr/mac-linux-windows-v12-audits", "summary": "Linux app audit, August 2022, and macOS app audit, July 2022 (first of month used)." }, { "auditor": "F-Secure", "date": "2022-04-01", "scope": [ "apps" ], "url": "https://www.expressvpn.com/news-pr/mac-linux-windows-v12-audits", "summary": "Windows v12 app audit, April 2022; F-Secure also audited the Windows v10 app in March 2022 (first of month used)." }, { "auditor": "Nettitude", "date": "2024-04-01", "scope": [ "apps" ], "url": "https://www.expressvpn.com/research/audit-report-research-paper-windows-dns-leaks", "summary": "Penetration test of the Windows apps in March-April 2024 confirming remediation of the split-tunneling DNS issue (first of month used); one medium finding, remediated." }, { "auditor": "Cure53", "date": "2024-06-01", "scope": [ "apps" ], "url": "https://www.expressvpn.com/blog/expressvpns-browser-extension-security-validated-by-independent-audit/", "summary": "Second browser extension audit, June 2024 (first of month used)." }, { "auditor": "Cure53", "date": "2022-10-01", "scope": [ "apps" ], "url": "https://cure53.de/pentest-report_expressvpn-vpn-extension.pdf", "summary": "Browser extension and ExpressKeys extension audits, October 2022 (first of month used)." }, { "auditor": "Cure53", "date": "2018-11-01", "scope": [ "apps" ], "url": "https://www.expressvpn.com/news-pr/browser-extension-audit-and-open-sourcing", "summary": "Chrome browser extension audit with full source access, October-November 2018 (first of final month used); source published under GPLv2." }, { "auditor": "Cure53", "date": "2024-11-01", "scope": [ "apps" ], "url": "https://cure53.de/pentest-report_expressvpn-aircove_2024.pdf", "summary": "Second Aircove router audit, November 2024 (first of month used)." }, { "auditor": "Cure53", "date": "2022-07-01", "scope": [ "apps" ], "url": "https://www.expressvpn.com/blog/cure53-audits-expressvpn-aircove-confirming-the-routers-security-excellence/", "summary": "First Aircove router audit, July 2022 (first of month used)." } ], "warrantCanary": false, "transparencyReport": { "available": true, "url": "https://www.expressvpn.com/trust" }, "incidents": [ { "date": "2017-01-01", "summary": "Turkish authorities seized an ExpressVPN server in January 2017 during the investigation into the assassination of Russian ambassador Andrei Karlov; ExpressVPN stated it has never possessed customer connection or activity logs, the seized server yielded no useful information, and it stopped using physical servers in Turkey (reported 2017-12-19).", "severity": "low", "sourceUrl": "https://torrentfreak.com/vpn-server-seized-to-investigate-russian-ambassadors-assassination-1171219/" }, { "date": "2021-09-16", "summary": "ExpressVPN acknowledged news reports about CIO Daniel Gericke's earlier work on the UAE surveillance operation Project Raven, resolved in an investigation that month; it said it hired him in December 2019 knowing his background, did not condone Project Raven, and would increase the frequency of third-party audits.", "severity": "low", "sourceUrl": "https://www.expressvpn.com/blog/daniel-gericke-expressvpn/" }, { "date": "2024-02-08", "summary": "In the Windows v12 app, the split-tunneling mode 'Only allow selected apps to use the VPN' sent some DNS requests to the ISP's resolver instead of ExpressVPN's; found by CNET's Attila Tomaschek, split tunneling was disabled, fixed and restored (estimated under 1% of Windows users affected) and the fix was verified by Nettitude.", "severity": "medium", "sourceUrl": "https://www.expressvpn.com/blog/windows-app-dns-requests/" }, { "date": "2025-07-18", "summary": "Debug code shipped in Windows app versions 12.97 to 12.101.0.2-beta let TCP port 3389 (RDP) traffic bypass the VPN tunnel; a bug-bounty researcher reported it on 25 April 2025 and version 12.101.0.45 fixed it five days later, with ExpressVPN rating real-world exploitation likelihood as extremely low.", "severity": "low", "sourceUrl": "https://www.expressvpn.com/blog/expressvpn-rdp-leak-fixed/" } ], "verifiedAt": "2026-10-31" }, "streaming": [ { "service": "netflix", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in the support guide \"How to stream content with ExpressVPN\" as a service you can securely access." }, { "service": "hulu", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in the support streaming guide." }, { "service": "disney-plus", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in the support streaming guide." }, { "service": "bbc-iplayer", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in the support streaming guide." }, { "service": "prime-video", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in the support streaming guide." }, { "service": "hbo-max", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed as \"HBO\" in the support streaming guide. \"Max\" has a troubleshooting entry and a dedicated page." }, { "service": "youtube-tv", "status": "claimed", "checkedAt": "2026-10-31", "note": "A dedicated page says ExpressVPN \"is designed to work reliably with major streaming platforms like YouTube TV\"." }, { "service": "dazn", "status": "claimed", "checkedAt": "2026-10-31", "note": "A dedicated page says \"DAZN works with ExpressVPN\"." }, { "service": "paramount-plus", "status": "claimed", "checkedAt": "2026-10-31", "note": "A dedicated page says \"ExpressVPN is the best VPN for Paramount Plus\"." }, { "service": "espn-plus", "status": "claimed", "checkedAt": "2026-10-31", "note": "A dedicated page says ExpressVPN \"works seamlessly with ESPN+\"." }, { "service": "crunchyroll", "status": "claimed", "checkedAt": "2026-10-31", "note": "A dedicated page says \"Stream reliably on Crunchyroll\"." }, { "service": "peacock", "status": "claimed", "checkedAt": "2026-10-31", "note": "A dedicated page says \"ExpressVPN works well with Peacock TV\"." } ], "apps": { "platforms": [ "windows", "macos", "linux", "ios", "android", "android-tv", "fire-tv", "apple-tv", "router" ], "simultaneousDevices": 10, "routerSupport": true, "browserExtensions": [ "chrome", "firefox", "edge" ], "smartDns": true, "openSourceClients": "partial", "note": "Device limit depends on tier: Basic 10 (recorded), Advanced 12, Express Pro 14. Apps for Windows, Mac, Linux, iOS, Android, Apple TV, Fire TV Stick and Android TV; Samsung, Roku and Chromecast use MediaStreamer DNS rather than a native app; router app plus Aircove and Fortify routers. Browser extensions for Chrome, Firefox, Edge (and Brave). The browser extension was open-sourced under GPLv2 in 2019 and Lightway core is open source; the main apps are closed source.", "verifiedAt": "2026-10-31", "sourceUrl": "https://www.expressvpn.com/vpn-software" }, "support": { "liveChat": "24/7", "email": true, "knowledgeBase": true, "measuredResponseHours": null, "verifiedAt": "2026-10-31", "sourceUrl": "https://www.expressvpn.com/features" }, "commercial": { "affiliateProgram": true, "notes": "Trust Center lists 28 audits including 2026 Cure53 assessments of non-VPN products (ExpressMailGuard, Identity Defender, EventVPN, ExpressKeys, ExpressAI) and ISO 27001/9001/18295 certifications; the biannual transparency report is embedded in the Trust Center page and states no request resulted in disclosure of user data." }, "sourceUrls": { "pricing": "https://www.expressvpn.com/order", "servers": "https://www.expressvpn.com/vpn-server", "features": "https://www.expressvpn.com/features", "privacyPolicy": "https://www.expressvpn.com/privacy-policy", "refund": "https://www.expressvpn.com/support/troubleshooting/money-back-guarantee/", "audits": "https://www.expressvpn.com/trust", "blog": "https://www.expressvpn.com/blog/" }, "score": { "total": 8.4, "rank": 1, "coverage": 80, "dimensions": { "privacy": { "score": 7.6, "inputs": { "eyesAlliance": "none", "newestNoLogsAudit": "2025-06-01", "auditAgeMonths": 16, "ramOnly": true, "noLogsClaim": true, "anonymousPayment": false, "incidentPenalty": 1 } }, "security": { "score": 9.5, "inputs": { "protocols": "proprietary, wireguard, openvpn, ikev2", "killSwitchDesktop": true, "killSwitchMobile": true, "obfuscation": true, "multiHop": false, "postQuantum": true, "ownDns": true, "ipv6": "blocked", "newestTechnicalAudit": "2024-11-01" } }, "speed": { "score": null, "inputs": { "labData": null } }, "streaming": { "score": 10, "inputs": { "servicesTestedWorking": 0, "servicesClaimed": 12, "smartDns": true } }, "apps": { "score": 8.4, "inputs": { "platforms": 9, "simultaneousDevices": 10, "routerSupport": true, "browserExtensions": 3, "openSourceClients": "partial", "splitTunnelingPlatforms": 5 } }, "price": { "score": 7, "inputs": { "lowestEffectiveMonthly": 2.99, "monthlyPlanPrice": null, "moneyBackDays": 30, "freeTier": false, "renewalPolicy": "stated", "renewalRatio": 1.19, "paymentMethods": 5 } }, "support": { "score": 10, "inputs": { "liveChat": "24/7", "email": true, "knowledgeBase": true, "measuredResponseHours": null } }, "transparency": { "score": 6.5, "inputs": { "transparencyReport": true, "warrantCanary": false, "openSourceClients": "partial", "audits": 18 } } } } }, { "slug": "hide-me", "name": "hide.me", "tagline": "Malaysia-based VPN with an uncapped free plan and a Securitum-audited no-logs policy", "identity": { "website": "https://hide.me/", "owner": "eVenture Ltd.", "parentCompany": null, "hqCountry": "MY", "hqCity": "Labuan", "jurisdiction": "MY", "eyesAlliance": "none", "founded": 2012, "note": "Owned and operated by eVenture Limited, registered in Malaysia under company number LL09685 with registered office at Financial Park Labuan, F.T. Labuan (Terms of Service updated 2026-08-25 and privacy policy effective 2023-01-10); governing law Malaysia. Founded and launched in 2012 (about and press pages). No parent company is stated on any official page.", "verifiedAt": "2026-10-31", "sourceUrl": "https://hide.me/en/legal" }, "pricing": { "currency": "USD", "plans": [ { "id": "monthly", "name": "1 Month", "termMonths": 1, "monthly": 11.99, "total": 11.99, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://hide.me/en/pricing" }, { "id": "14-months", "name": "12 Months + 4 Months Extra", "termMonths": 16, "monthly": 3.44, "total": 54.99, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "extraMonths": 4, "promoLabel": "+4 extra months", "verifiedAt": "2026-11-05", "sourceUrl": "https://hide.me/en/pricing" }, { "id": "28-months", "name": "24 Months + 6 Months Extra", "termMonths": 30, "monthly": 2.33, "total": 69.99, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "extraMonths": 6, "promoLabel": "+6 extra months", "verifiedAt": "2026-11-05", "sourceUrl": "https://hide.me/en/pricing" } ], "moneyBackDays": 30, "freeTier": { "available": true, "limits": "Free forever, with no sign-up or card. No data cap, but speeds are not unlimited. 8 server locations and 1 connection. No streaming servers, Multihop, Bolt or SmartGuard, which are Premium only. The free plan does not auto-renew." }, "paymentMethods": [ "Visa", "Mastercard", "American Express", "Diners Club", "PayPal", "Google Pay", "Apple Pay", "SEPA", "SOFORT", "Bank transfer", "Bitcoin", "Dogecoin", "Ethereum", "Litecoin", "Polygon", "Solana", "Tether (USDT)", "TrueUSD (TUSD)", "USD Coin (USDC)", "Apple App Store", "Google Play" ], "anonymousPayment": true, "summary": "The 1-month plan costs $11.99. The 12 months plus 4 extra plan costs $54.99 every 16 months. The 24 months plus 6 extra plan costs $69.99 every 30 months. hide.me promises that your plan always renews at the same price and length. You can get a full refund within 30 days on your first order only. Renewals are not refunded. hide.me accepts cryptocurrency.", "note": "Pricing page (2026-11-05): 1 month billed $11.99 monthly; 12 months + 4 extra billed $54.99 every 16 months ($3.44/mo); 24 months + 6 extra billed $69.99 every 30 months ($2.33/mo), with a 'Pricing Guarantee: your plan always renews with the same price and duration', so renewal equals the introductory total. A promotion started between 2026-11-02 and 2026-11-04: the site banner reads 'Get 30 months for $2.33/mo!' and the checkout links carry coupon T28-S16-OFR (utm campaign blackfriday2026). On 2026-11-02 the same totals bought 13 and 26 months with no promotion, and until a Halloween campaign ended between 2026-11-01 and 2026-11-02 they bought 14 and 28 months (banner '28 months for $2.50/mo', coupon HAL-LOW-E26). Plan ids 14-months and 28-months were kept so the price history stays continuous. 3-, 6- and 36-month plans are offered through checkout links (coupon EWA-B7R-PLA) but their prices are not shown on the pricing page and the checkout is JavaScript-rendered, so they are omitted. Amounts in USD, VAT may apply. Refund (help article updated 2026-03-24, ToS section 7): full refund within 30 days for a first order only; renewals do not qualify; App Store and Google Play purchases follow store policies. The ToS lists billing cycles of 30/180/365/730/1095 days, which differs from the 16- and 30-month cycles on the pricing page. Cryptocurrency payments are accepted (via Coinpayments per the privacy policy).", "verifiedAt": "2026-11-05", "sourceUrl": "https://hide.me/en/pricing" }, "network": { "servers": 2600, "countries": 57, "cities": 82, "ownedServers": "unknown", "ramOnly": null, "virtualLocations": null, "note": "Pricing page comparison: '92+ Locations / 2600+ Servers' for Premium (free plan: 8 locations); servers recorded as the stated 2600+. The network page lists 82 city locations in 57 countries (counted 2026-10-31), fewer than the 92+ headline. The network page says servers are 'hand-picked, security-hardened and self-maintained' but does not state ownership, RAM-only operation or use of virtual locations.", "verifiedAt": "2026-11-02", "sourceUrl": "https://hide.me/en/network" }, "security": { "protocols": [ "wireguard", "openvpn", "ikev2", "proprietary" ], "proprietaryProtocol": "Bolt (hide.me's own TLS 1.3 TCP transport, Windows app, Premium only)", "encryption": "AES-256 on OpenVPN, IKEv2, SoftEther and SSTP. ChaCha20-Poly1305 on WireGuard. Bolt uses TLS 1.3 with AES-GCM or ChaCha20-Poly1305.", "killSwitch": { "desktop": true, "mobile": true }, "splitTunneling": [ "windows", "macos", "android" ], "obfuscation": true, "multiHop": true, "dedicatedIp": false, "portForwarding": true, "postQuantum": false, "adBlocker": true, "dns": { "ownResolvers": true, "leakProtection": true, "ipv6": "supported" }, "note": "Protocols page also lists SoftEther and SSTP (not in the protocol enum); SSTP reached iOS, macOS and tvOS in March 2026 (blog). Obfuscation: no dedicated obfuscation toggle; the protocols page says SoftEther and SSTP tunnel over HTTPS to penetrate firewalls and ISP throttling, and Bolt runs over TLS 1.3 on Windows; Multihop is also offered for regions where the network is blocked. Kill switch: firewall-based in the Windows and macOS apps (enabled by default; custom network driver on Windows); on mobile implemented as an always-on VPN connection; StealthGuard additionally binds selected apps or the whole connection to the VPN. Split tunneling (normal and inverse) on Windows, macOS and Android. Dynamic port forwarding (UPnP/NAT-PMP) in the desktop apps. 'Fixed IP Address' servers are included in Premium (pricing comparison; the network page describes a pool of shared and fixed IPs) but no personal dedicated IP is offered. Post-quantum: no official page claims post-quantum key exchange; the October 2026 blog says WireGuard's default configuration is not post-quantum secure and that hide.me's per-connection pre-shared key is delivered over a classically protected channel. SmartGuard (DNS filtering of ads, trackers and malware with parental controls) is Premium-only on Windows, macOS, Android and iOS. The Windows app uses hide.me's own DNS servers with DNS leak protection; IPv6 is tunneled dual-stack on all servers.", "verifiedAt": "2026-10-31", "sourceUrl": "https://hide.me/en/features/vpn-protocols" }, "privacy": { "loggingPolicy": { "summary": "Privacy policy (effective 2023-01-10): no logs of VPN sessions, browsing behaviour or websites visited, and no connection logs or timestamps matching incoming/outgoing IP addresses or session duration; a non-persistent troubleshooting log containing the randomly generated username and an internal non-public IP is erased every few hours; aggregated monthly traffic volume is counted for billing and quality of service; only an email address is collected at sign-up (removable on paid plans) and all account data is deleted on termination.", "noLogsClaim": true, "sourceUrl": "https://hide.me/en/privacy" }, "audits": [ { "auditor": "Securitum", "date": "2024-06-06", "scope": [ "no-logs" ], "url": "https://hide.me/downloads/Securitum_Hide.me_no-log-policy_20240607.pdf", "summary": "Audit of hide.me's no-log policy compliance conducted 19 March to 6 June 2024 (report dated 7 June 2024): threat modelling, review of VPN configuration files, a snapshot of the production VPN container image, the deployment process and team interviews; confirmed the no-logs policy is applied and found no issues on the VPN container; refers to the product state as of 15 March 2024." }, { "auditor": "DefenseCode Ltd. (Leon Juranic)", "date": "2015-01-01", "scope": [ "no-logs" ], "url": "https://hide.me/en/features/no-logs-policy", "summary": "hide.me states it was certified as a no-log service by Leon Juranic of DefenseCode in 2015; official pages give only the year (date recorded as 1 January 2015) and no report is linked." } ], "warrantCanary": false, "transparencyReport": { "available": true, "url": "https://hide.me/downloads/hide.me-transparency-report-2025.pdf" }, "incidents": [], "verifiedAt": "2026-10-31" }, "streaming": [ { "service": "netflix", "region": "US", "status": "claimed", "checkedAt": "2026-10-31", "note": "The press page promises \"optimised support for US streaming services such as Netflix, Disney+, Amazon Prime Video\". The Linux app page lists Netflix. Streaming servers are Premium only." }, { "service": "disney-plus", "status": "claimed", "checkedAt": "2026-10-31", "note": "Named on the press page and the Linux app page." }, { "service": "prime-video", "status": "claimed", "checkedAt": "2026-10-31", "note": "Named as \"Amazon Prime Video\" on the press page and \"Amazon Prime\" on the Linux app page." }, { "service": "hulu", "status": "claimed", "checkedAt": "2026-10-31", "note": "Named on the Linux app page." }, { "service": "bbc-iplayer", "region": "UK", "status": "claimed", "checkedAt": "2026-10-31", "note": "The press page announces BBC iPlayer support, and a help article explains how to stream it." }, { "service": "youtube-tv", "region": "US", "status": "claimed", "checkedAt": "2026-10-31", "note": "The YouTube VPN page says US servers \"usually work\" for US subscribers travelling abroad. hide.me warns it may not work consistently for permanent use outside the US." } ], "apps": { "platforms": [ "windows", "macos", "linux", "ios", "android", "android-tv", "fire-tv", "apple-tv", "router" ], "simultaneousDevices": 10, "routerSupport": true, "browserExtensions": [ "chrome", "firefox", "edge" ], "smartDns": false, "openSourceClients": "partial", "note": "Apps for Windows, macOS, Linux, iOS, Android, Apple TV, Android TV and Amazon Fire TV, extensions for Chrome, Firefox and Edge, and router/NAS guides for GL.iNet, Asus, MikroTik and FRITZ!Box (plus the Vilfo router for per-device split tunneling). Builds are also listed for Volla OS, Freifon, Ubuntu Touch, LineageOS and GrapheneOS. Only the Linux command-line client is described as open source (WireGuard-based, on GitHub); no other app is stated to be open source. 10 simultaneous connections on Premium, 1 on the free plan. No Smart DNS product is listed.", "verifiedAt": "2026-10-31", "sourceUrl": "https://hide.me/en/software" }, "support": { "liveChat": "24/7", "email": true, "knowledgeBase": true, "measuredResponseHours": null, "verifiedAt": "2026-10-31", "sourceUrl": "https://hide.me/en/help/" }, "commercial": { "affiliateProgram": true, "notes": "Affiliate program at hide.me/en/affiliates ('flexible commissions from 30%'); separate Business and Reseller programs. hide.me is accredited under the VPN Trust Initiative (re-accredited through 2026 per the blog). Help page: 24/7 support via live chat, tickets, email and a community forum." }, "sourceUrls": { "pricing": "https://hide.me/en/pricing", "servers": "https://hide.me/en/network", "features": "https://hide.me/en/features", "privacyPolicy": "https://hide.me/en/privacy", "refund": "https://hide.me/en/help/money-back-guarantee-refund-policy/", "audits": "https://hide.me/en/about", "blog": "https://hide.me/en/blog/" }, "score": { "total": 7.6, "rank": 7, "coverage": 80, "dimensions": { "privacy": { "score": 7.6, "inputs": { "eyesAlliance": "none", "newestNoLogsAudit": "2024-06-06", "auditAgeMonths": 28, "ramOnly": null, "noLogsClaim": true, "anonymousPayment": true, "incidentPenalty": 0 } }, "security": { "score": 8.1, "inputs": { "protocols": "wireguard, openvpn, ikev2, proprietary", "killSwitchDesktop": true, "killSwitchMobile": true, "obfuscation": true, "multiHop": true, "postQuantum": false, "ownDns": true, "ipv6": "supported", "newestTechnicalAudit": null } }, "speed": { "score": null, "inputs": { "labData": null } }, "streaming": { "score": 4.5, "inputs": { "servicesTestedWorking": 0, "servicesClaimed": 6, "smartDns": false } }, "apps": { "score": 8.4, "inputs": { "platforms": 9, "simultaneousDevices": 10, "routerSupport": true, "browserExtensions": 3, "openSourceClients": "partial", "splitTunnelingPlatforms": 3 } }, "price": { "score": 8.5, "inputs": { "lowestEffectiveMonthly": 2.33, "monthlyPlanPrice": 11.99, "moneyBackDays": 30, "freeTier": true, "renewalPolicy": "same", "renewalRatio": 1, "paymentMethods": 21 } }, "support": { "score": 10, "inputs": { "liveChat": "24/7", "email": true, "knowledgeBase": true, "measuredResponseHours": null } }, "transparency": { "score": 6.5, "inputs": { "transparencyReport": true, "warrantCanary": false, "openSourceClients": "partial", "audits": 2 } } } } }, { "slug": "ipvanish", "name": "IPVanish", "identity": { "website": "https://www.ipvanish.com/", "owner": "Ziff Davis, Inc.", "parentCompany": "Ziff Davis", "hqCountry": "US", "hqCity": "New York", "jurisdiction": "US", "eyesAlliance": "5", "founded": 2012, "note": "IPVanish describes itself as 'a U.S.-based VPN owned by Ziff Davis' (no-log policy page) and its site footer reads 'IPVanish, a Ziff Davis company'; the privacy policy names Ziff Davis, Inc. and gives 360 Park Avenue South, 17th Floor, New York, NY 10010 as the contact address (also the legal notice address in the Terms of Service), with J2 Global Ireland Limited as EU representative. Founding year 2012 comes from IPVanish's own Q4 2012 press release (linked from ipvanish.com/press/news/), which refers to 'the short 10 months since its inception'; no ipvanish.com page states a founding date.", "verifiedAt": "2026-10-31", "sourceUrl": "https://www.ipvanish.com/privacy-policy/" }, "pricing": { "currency": "USD", "plans": [ { "id": "ipvanish-essential-24m", "name": "Essential 2-Year", "tier": "Essential", "termMonths": 24, "monthly": 2.19, "total": 52.56, "renewalTotal": 99.99, "renewalMonths": 12, "promoLabel": "Save 85%", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ipvanish.com/pricing/" }, { "id": "ipvanish-complete-24m", "name": "Complete 2-Year", "tier": "Complete", "termMonths": 24, "monthly": 2.79, "total": 66.96, "renewalTotal": 109.99, "renewalMonths": 12, "promoLabel": "Save 82%", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ipvanish.com/pricing/" }, { "id": "ipvanish-advanced-24m", "name": "Advanced 2-Year", "tier": "Advanced", "termMonths": 24, "monthly": 3.29, "total": 78.96, "renewalTotal": 129.99, "renewalMonths": 12, "promoLabel": "Save 81%", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ipvanish.com/pricing/" }, { "id": "ipvanish-essential-12m", "name": "Essential Yearly", "tier": "Essential", "termMonths": 12, "monthly": 3.89, "total": 46.68, "renewalTotal": 99.99, "renewalMonths": null, "promoLabel": "Save 74%", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ipvanish.com/pricing/" }, { "id": "ipvanish-complete-12m", "name": "Complete Yearly", "tier": "Complete", "termMonths": 12, "monthly": 4.79, "total": 57.48, "renewalTotal": 109.99, "renewalMonths": null, "promoLabel": "Save 70%", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ipvanish.com/pricing/" }, { "id": "ipvanish-advanced-12m", "name": "Advanced Yearly", "tier": "Advanced", "termMonths": 12, "monthly": 5.39, "total": 64.68, "renewalTotal": 129.99, "renewalMonths": null, "promoLabel": "Save 70%", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ipvanish.com/pricing/" }, { "id": "ipvanish-essential-1m", "name": "Essential Monthly", "tier": "Essential", "termMonths": 1, "monthly": 14.99, "total": 14.99, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ipvanish.com/pricing/" }, { "id": "ipvanish-complete-1m", "name": "Complete Monthly", "tier": "Complete", "termMonths": 1, "monthly": 15.99, "total": 15.99, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ipvanish.com/pricing/" }, { "id": "ipvanish-advanced-1m", "name": "Advanced Monthly", "tier": "Advanced", "termMonths": 1, "monthly": 17.99, "total": 17.99, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ipvanish.com/pricing/" } ], "moneyBackDays": 30, "freeTier": { "available": false }, "paymentMethods": [ "credit card (Visa, Mastercard, American Express, Discover, UnionPay, Diners Club)", "PayPal", "Google Pay", "Apple Pay", "Amazon Pay" ], "anonymousPayment": false, "summary": "IPVanish has three tiers: Essential, Complete and Advanced. You pay the first term up front, for example $52.56 for the first 2 years of Essential. Yearly and 2-year plans then renew every year at $99.99 for Essential, $109.99 for Complete or $129.99 for Advanced. IPVanish's renewal-price page lists different renewal prices for Complete and does not explain why. Monthly plans renew at the same price. The 30-day money-back guarantee covers yearly and 2-year plans only.", "note": "Three tiers: Essential (VPN, Threat Protection, 24/7 live chat, 3 GB eSIM data, unlimited devices, no-logs), Complete (adds next-gen antivirus and phone support) and Advanced (adds 1 TB Livedrive cloud storage, Secure Browser and a bonus 2 GB eSIM data). Introductory totals are billed up front for the first term (e.g. '$52.56 for the first 2 years'); the pricing page FAQ states that Yearly and 2-Year plans then renew at $99.99/year (Essential), $109.99/year (Complete) or $129.99/year (Advanced), with 2-Year plans switching to a yearly cycle. The separate renewal-price page agrees for Essential and Advanced but lists Complete renewing at $57.48/year (yearly) and $66.96/year (biennial), a discrepancy IPVanish does not explain. Monthly plans renew monthly at the same price. 'Save X%' badges compare the intro total with the monthly price times the term. The 30-day money-back guarantee covers yearly and 2-year plans only; monthly plans are excluded. Prices exclude tax; no free tier or trial; no cash or cryptocurrency payment.", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ipvanish.com/pricing/" }, "network": { "servers": 3650, "countries": 112, "cities": 150, "ownedServers": "unknown", "ramOnly": false, "virtualLocations": null, "note": "Servers page headline: '56,000+ IP ADDRESSES • 3,650+ SERVERS • 150+ VPN LOCATIONS'. The page states no country count, so 112 is the number of distinct countries and territories (e.g. Hong Kong, Puerto Rico, Jersey) in its 152-entry location list on 2026-11-01. The list is unchanged since 2026-10-31, when our count of 111 missed the entry written 'Bosnia- Sarajevo'. Infrastructure is 'a combination of HDD and RAM-only' servers, with a stated goal of 100% RAM-only by 2027 (no-log policy page). Server ownership and whether any locations are virtual are not stated.", "verifiedAt": "2026-11-02", "sourceUrl": "https://www.ipvanish.com/servers/" }, "security": { "protocols": [ "wireguard", "openvpn", "ikev2" ], "encryption": "AES-256 on OpenVPN and IKEv2. ChaCha20-Poly1305 on WireGuard.", "killSwitch": { "desktop": true, "mobile": true }, "splitTunneling": [ "windows", "macos", "android", "ios", "fire-tv" ], "obfuscation": true, "multiHop": true, "dedicatedIp": true, "portForwarding": false, "postQuantum": null, "adBlocker": true, "dns": { "ownResolvers": true, "leakProtection": true, "ipv6": "blocked" }, "note": "Protocols: WireGuard, OpenVPN (UDP/TCP) and IKEv2; PPTP, L2TP and IPSec are no longer supported. System-level kill switch in the Windows, macOS, Android and iOS apps plus a separate TV Kill Switch companion app for Fire TV and Android TV (Linux not mentioned). Split tunneling by app on Windows, Mac, Android, iOS, Fire TV and Apple Vision Pro; by domain on Windows, macOS, iOS and visionOS. Obfuscation is the OpenVPN 'Scramble' setting (Windows, macOS, Android, Fire TV). Double Hop VPN routes through two servers. Dedicated IP launched on 29 October 2026 as a paid add-on (price not stated) in New York, London, Paris, Frankfurt and Tokyo. Threat Protection (DNS-level ad, tracker and malicious-site blocking) is included on all plans; Threat Protection Pro antivirus is in Complete and Advanced. Private DNS runs on IPVanish's own servers; the apps block IPv6 (Android, iOS, macOS with WireGuard/IKEv2) or force IPv6 over IPv4 (Windows toggle, macOS OpenVPN setting) to prevent leaks. Port forwarding is not offered on any page loaded. No post-quantum cryptography claim was found (the 2024 quantum-computing blog post is an explainer). SOCKS5 proxy included with all plans.", "verifiedAt": "2026-10-31", "sourceUrl": "https://www.ipvanish.com/vpn-features/" }, "privacy": { "loggingPolicy": { "summary": "States it does not collect, monitor or log browsing activity, traffic, connection details, IP addresses, connection timestamps or DNS queries, and that the aggregated anonymous performance data it collects excludes these; retains the account email and billing data, with payment data held by processors for at least seven years. Optional on-device diagnostic connection logs are off by default and are only seen by IPVanish if the user sends them to support. Privacy policy last updated 18 February 2025.", "noLogsClaim": true, "sourceUrl": "https://www.ipvanish.com/privacy-policy/" }, "audits": [ { "auditor": "Leviathan Security Group", "date": "2022-04-04", "scope": [ "no-logs" ], "url": "https://www.ipvanish.com/blog/ipvanish-no-logs-vpn-audit-2022/", "summary": "No-traffic-logs audit (staff interviews, configuration and documentation review, server deployment procedures, test traffic) confirmed compliance with the privacy policy; announced 4 April 2022 (the Trust Center lists it as April 2022). Report available to customers in the account portal." }, { "auditor": "Schellman Compliance, LLC", "date": "2025-02-21", "scope": [ "no-logs" ], "url": "https://www.ipvanish.com/blog/no-log-vpn-audit/", "summary": "Second no-logs audit, completed 21 February 2025 and announced 10 April 2025: server configurations, real-time abuse-detection data (processed in memory only) and change management were reviewed; 'no logs were retained by IPVanish'. Report available to customers in the account portal." } ], "warrantCanary": false, "transparencyReport": { "available": true, "url": "https://www.ipvanish.com/trust/" }, "incidents": [ { "date": "2016-06-21", "summary": "Under previous owner Highwinds, IPVanish answered a US Department of Homeland Security summons by handing over a subscriber's name, email address, real IP address and VPN connection timestamps despite advertising a no-logs policy, as court documents reported by TorrentFreak in 2018 showed; StackPath, which bought IPVanish in 2017, said no logs or logging systems existed at acquisition.", "severity": "high", "sourceUrl": "https://torrentfreak.com/ipvanish-no-logging-vpn-led-homeland-security-to-comcast-user-180505/" } ], "verifiedAt": "2026-10-31" }, "streaming": [ { "service": "netflix", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed under \"Access Netflix, Hulu, ESPN+ & more\" on the streaming page. The page promises privacy and less throttling while streaming, not guaranteed access." }, { "service": "hbo-max", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed as \"Max, formerly known as HBO Max\" on the streaming page. No unblocking guarantee." }, { "service": "hulu", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the streaming page. No unblocking guarantee." }, { "service": "bbc-iplayer", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the streaming page. No unblocking guarantee." }, { "service": "espn-plus", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the streaming page as \"safer access ESPN+\". No unblocking guarantee." }, { "service": "prime-video", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the streaming page. No unblocking guarantee." }, { "service": "peacock", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the streaming page. No unblocking guarantee." }, { "service": "paramount-plus", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the streaming page. No unblocking guarantee." } ], "apps": { "platforms": [ "windows", "macos", "linux", "ios", "android", "android-tv", "fire-tv", "apple-tv" ], "simultaneousDevices": "unlimited", "routerSupport": true, "browserExtensions": [], "smartDns": false, "openSourceClients": "none", "note": "Setup pages cover Windows, Mac, Linux, Chrome OS, Android, iOS, Apple Vision Pro, Apple TV, Fire TV, Android TV devices (NVIDIA Shield, onn 4K, Chromecast, Nokia Streaming Box) and routers (manual configuration). 'Unlimited Devices' on every plan. No browser extensions or Smart DNS are listed on the pages loaded; client source code is not published.", "verifiedAt": "2026-10-31", "sourceUrl": "https://www.ipvanish.com/vpn-setup/" }, "support": { "liveChat": "24/7", "email": true, "knowledgeBase": true, "measuredResponseHours": null, "verifiedAt": "2026-10-31", "sourceUrl": "https://www.ipvanish.com/pricing/" }, "commercial": { "affiliateProgram": true, "notes": "Affiliate program run with Affiliate Groove (CPA commissions, monthly PayPal/ACH payouts). Live 24/7 chat on all plans; phone support on Complete and Advanced; help center at support.ipvanish.com (returned HTTP 403 to our fetch on 2026-10-31)." }, "sourceUrls": { "pricing": "https://www.ipvanish.com/pricing/", "servers": "https://www.ipvanish.com/servers/", "features": "https://www.ipvanish.com/vpn-features/", "privacyPolicy": "https://www.ipvanish.com/privacy-policy/", "refund": "https://www.ipvanish.com/money-back-guarantee/", "audits": "https://www.ipvanish.com/trust/" }, "score": { "total": 6.4, "rank": 9, "coverage": 80, "dimensions": { "privacy": { "score": 4.7, "inputs": { "eyesAlliance": "5", "newestNoLogsAudit": "2025-02-21", "auditAgeMonths": 20, "ramOnly": false, "noLogsClaim": true, "anonymousPayment": false, "incidentPenalty": 0 } }, "security": { "score": 8.3, "inputs": { "protocols": "wireguard, openvpn, ikev2", "killSwitchDesktop": true, "killSwitchMobile": true, "obfuscation": true, "multiHop": true, "postQuantum": null, "ownDns": true, "ipv6": "blocked", "newestTechnicalAudit": null } }, "speed": { "score": null, "inputs": { "labData": null } }, "streaming": { "score": 6, "inputs": { "servicesTestedWorking": 0, "servicesClaimed": 8, "smartDns": false } }, "apps": { "score": 6.7, "inputs": { "platforms": 8, "simultaneousDevices": "unlimited", "routerSupport": true, "browserExtensions": 0, "openSourceClients": "none", "splitTunnelingPlatforms": 5 } }, "price": { "score": 6.5, "inputs": { "lowestEffectiveMonthly": 2.19, "monthlyPlanPrice": 14.99, "moneyBackDays": 30, "freeTier": false, "renewalPolicy": "stated", "renewalRatio": 1.9, "paymentMethods": 5 } }, "support": { "score": 10, "inputs": { "liveChat": "24/7", "email": true, "knowledgeBase": true, "measuredResponseHours": null } }, "transparency": { "score": 5, "inputs": { "transparencyReport": true, "warrantCanary": false, "openSourceClients": "none", "audits": 2 } } } } }, { "slug": "ivpn", "name": "IVPN", "tagline": "Gibraltar-based, open-source, Cure53-audited VPN that runs no affiliate program", "identity": { "website": "https://www.ivpn.net/", "owner": "IVPN Limited", "parentCompany": null, "hqCountry": "GI", "hqCity": "Gibraltar", "jurisdiction": "GI", "eyesAlliance": "none", "founded": 2009, "note": "Operated by IVPN Limited, registered in Gibraltar (site footer, ToS last updated 2021-01-21, privacy policy). The operating company was renamed from Privatus Limited to IVPN Limited on 2023-08-10 (blog); ownership, registration number and registered address were unchanged. The team page states founder and CEO Nick Pestell is 100% owner of IVPN Limited and that IVPN has operated since 2009. No parent company is stated.", "verifiedAt": "2026-10-31", "sourceUrl": "https://www.ivpn.net/en/team/" }, "pricing": { "currency": "USD", "plans": [ { "id": "standard-1month", "name": "IVPN Standard, 1 month", "tier": "Standard", "termMonths": 1, "monthly": 6, "total": 6, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ivpn.net/en/pricing/" }, { "id": "standard-1year", "name": "IVPN Standard, 1 year", "tier": "Standard", "termMonths": 12, "monthly": 5, "total": 60, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ivpn.net/en/pricing/" }, { "id": "plus-1month", "name": "IVPN Plus, 1 month", "tier": "Plus", "termMonths": 1, "monthly": 8, "total": 8, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ivpn.net/en/pricing/" }, { "id": "plus-1year", "name": "IVPN Plus, 1 year", "tier": "Plus", "termMonths": 12, "monthly": 6.67, "total": 80, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ivpn.net/en/pricing/" }, { "id": "pro-suite-1month", "name": "IVPN Pro Suite, 1 month", "tier": "Pro Suite", "termMonths": 1, "monthly": 10, "total": 10, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ivpn.net/en/pricing/" }, { "id": "pro-suite-1year", "name": "IVPN Pro Suite, 1 year", "tier": "Pro Suite", "termMonths": 12, "monthly": 8.33, "total": 100, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ivpn.net/en/pricing/" } ], "moneyBackDays": 30, "freeTier": { "available": false, "limits": "No free tier or free trial. You can test IVPN with a paid 1-week plan: $2 for Standard, $3 for Plus or $4 for Pro Suite. There is also a 30-day money-back guarantee." }, "paymentMethods": [ "Bitcoin (own BTCPay server)", "Monero (self-hosted node)", "PayPal", "Credit/debit cards (no American Express or prepaid cards)", "In-app purchase on iOS (Android temporarily unavailable)", "Voucher cards and codes", "Cash" ], "anonymousPayment": true, "summary": "IVPN has three tiers. Standard costs $6 a month or $60 a year and covers 5 devices. Plus costs $8 a month or $80 a year. Pro Suite costs $10 a month or $100 a year and covers 10 devices. There are also 1-week plans from $2. IVPN states no separate renewal price. You can get a full refund within 30 days, once per account. Cash, voucher and IVPN Light purchases cannot be refunded.", "note": "The pricing page renders prices client-side; values were read from the page's own script bundle (app.m8I1Y5pD.js) and match the 2026-05-08 plan-changes post: Standard $2/week, $6/month, $60/year; Plus $3/$8/$80; Pro Suite $4/$10/$100. Since May 2026 the tiers are Standard (5 devices, multi-hop included), Plus (adds Mailx and modDNS) and Pro Suite (10 devices, adds Portmaster Pro); the former Pro tier became Pro Suite at the same price. The 1-week plans are shown on the page but omitted here because the schema requires whole months. 2- and 3-year prices exist in the bundle (Standard $100/$140, Plus $140/$180, Pro Suite $160/$220) but are filtered out of the displayed page. No separate renewal price is stated. Refund policy: full refund within 30 days of payment, once per account, no prorated refunds; cash, voucher and IVPN Light purchases are non-refundable; App Store purchases follow Apple's process.", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.ivpn.net/en/pricing/" }, "network": { "servers": 89, "countries": 42, "cities": 59, "ownedServers": "none", "ramOnly": false, "virtualLocations": false, "note": "Counts from the live server list (api.ivpn.net/v5/servers/stats, linked from the status page): 89 active gateways in 59 cities and 42 countries on 2026-10-31, each gateway being one bare-metal server. Status page: every gateway is dedicated physical hardware rented from a datacenter partner (18 hosting providers are named per gateway), 'not a virtualised instance and not a virtual location'; a small number of pilot gateways run RAM-only (diskless) and network-wide rollout is an ongoing project, so ramOnly is recorded as false. All gateways offer WireGuard and OpenVPN; multi-hop and SOCKS5 endpoints are listed per gateway.", "verifiedAt": "2026-11-02", "sourceUrl": "https://www.ivpn.net/en/status/" }, "security": { "protocols": [ "wireguard", "openvpn", "ikev2" ], "encryption": "AES-256-GCM by default on OpenVPN 2.4 and later, with ChaCha20-Poly1305 as an option on 2.5 and later. ChaCha20-Poly1305 on WireGuard. AES-256 on IPSec/IKEv2.", "killSwitch": { "desktop": true, "mobile": false }, "splitTunneling": [ "windows", "macos", "linux", "android" ], "obfuscation": true, "multiHop": true, "dedicatedIp": false, "portForwarding": false, "postQuantum": true, "adBlocker": true, "dns": { "ownResolvers": true, "leakProtection": true, "ipv6": "supported" }, "note": "Protocols: apps use WireGuard and OpenVPN (the iOS app also IPSec/IKEv2); IKEv2 is otherwise manual setup only; PPTP and L2TP/IPSec are not offered. Kill switch: the IVPN Firewall (WFP on Windows, pf on macOS, iptables on Linux, always-on and boot-time options) on Windows, macOS, Linux and iOS up to iOS 15 (help center); no kill switch is stated for current iOS or Android, so mobile is recorded as false. Split Tunnel: Windows, Linux (not the Snap build), Android and, since app 3.16.1 (2026-10-20), macOS. Obfuscation: V2Ray on all platforms (since 2025-11-28) and obfs4 on desktop. Post-quantum: quantum-resistant WireGuard connections in all apps, using pre-shared keys exchanged with Kyber-1024 and Classic-McEliece-348864 KEMs; not available for manual configurations, and IVPN notes the connection still relies on classical primitives. IPv6: an IPv6 address is provided over IPv4 on WireGuard, connecting over IPv6 is under development, IPv6 DNS is not available, and the firewall blocks IPv6 leaks. Port forwarding is not available; no dedicated or static IPs (shared IPs for privacy). DNS: internal non-logging resolvers on every gateway with AntiTracker and AntiTracker Plus blocklists, custom DNS with DoH/DoT, plus a public recursive resolver. Multi-hop is included in all tiers since May 2026.", "verifiedAt": "2026-10-31", "sourceUrl": "https://www.ivpn.net/en/apps-windows/" }, "privacy": { "loggingPolicy": { "summary": "Privacy policy: no logging of VPN activity (no traffic, connection timestamp or duration, DNS, bandwidth or customer IP logs); only the number of active simultaneous connections is tracked and deleted when the session ends; accounts are random IDs with no email or name requested; payment records are kept for accounting without a link to the account ID after the account is deleted (90 days); crash reports are anonymised; website analytics (self-hosted Matomo) truncate visitor IPs.", "noLogsClaim": true, "sourceUrl": "https://www.ivpn.net/en/privacy/" }, "audits": [ { "auditor": "Cure53", "date": "2019-03-21", "scope": [ "no-logs" ], "url": "https://www.ivpn.net/blog/ivpn-no-logging-claim-verified-by-independent-audit/", "summary": "No-logging claims audit, March 2019 (3 auditors, 7 days) covering VPN gateways and authentication servers; all privacy statements verified; one low-impact DNS caching issue, mitigated. Report: cure53.de/audit-report_ivpn.pdf. IVPN states it will not commission further no-logs audits." }, { "auditor": "Cure53", "date": "2020-01-23", "scope": [ "infrastructure" ], "url": "https://www.ivpn.net/blog/independent-security-audit-concluded/", "summary": "Infrastructure audit, Nov-Dec 2019 (6 auditors, 21 man-days): public VPN infrastructure, internal backend servers and web servers; 9 issues (3 high, 2 medium, 3 low, 1 info), all resolved. Report: cure53.de/summary-report_ivpn_2019.pdf." }, { "auditor": "Cure53", "date": "2021-03-12", "scope": [ "apps" ], "url": "https://www.ivpn.net/blog/ivpn-apps-security-audit-concluded/", "summary": "Apps audit for all platforms, Feb-Mar 2021 (18 person-days): 4 vulnerabilities (2 critical, 2 medium) in the then-unreleased desktop app, fixed before release; 10 miscellaneous issues. Report: cure53.de/pentest-report_IVPN.pdf." }, { "auditor": "Cure53", "date": "2022-04-06", "scope": [ "apps" ], "url": "https://www.ivpn.net/blog/ivpn-apps-security-audit-2022-concluded/", "summary": "Apps audit, Feb-Mar 2022 (13 days): 8 vulnerabilities (1 high, 6 medium, 1 info) and 12 miscellaneous issues; the remaining daemon-authentication issue was mitigated in desktop app 3.8.7. Report: cure53.de/pentest-report_IVPN_2022.pdf." }, { "auditor": "Cure53", "date": "2023-03-15", "scope": [ "infrastructure" ], "url": "https://www.ivpn.net/blog/ivpn-infrastructure-audit-concluded/", "summary": "Audit of the upgraded VPN gateway infrastructure, February 2023 (6 days): 3 vulnerabilities and 5 miscellaneous issues (1 medium, 6 low, 1 info), all remediated. Report: cure53.de/pentest-report_IVPN_2023.pdf." }, { "auditor": "Cure53", "date": "2024-04-11", "scope": [ "infrastructure" ], "url": "https://www.ivpn.net/blog/ivpn-sixth-security-audit-concluded/", "summary": "Sixth annual audit, March 2024 (8 days): customer web UI, backend components, API endpoints and web servers; 2 low-severity vulnerabilities and 2 info-level issues, remediated. Report: cure53.de/pentest-report_IVPN_2024.pdf." }, { "auditor": "Cure53", "date": "2025-07-14", "scope": [ "infrastructure" ], "url": "https://www.ivpn.net/blog/mailx-beta-audited-open-source-email-aliasing/", "summary": "Seventh annual audit, May 2025: the Mailx email-aliasing service (8 days; 6 vulnerabilities: 1 critical, 3 high, 1 medium, 1 low, all fixed before beta; report ivpn.net/resources/IVP-07-report.pdf) and the modDNS DNS-filtering service (6 days, 4 testers; 1 medium, 1 low, 1 info, fixed; report ivpn.net/resources/IVP-08-report.pdf, announced 2026-03-18). An eighth Cure53 audit covering the cryptography and privacy model of the token services was scheduled for July 2026; no results were published as of 2026-10-31." } ], "warrantCanary": true, "transparencyReport": { "available": true, "url": "https://www.ivpn.net/en/transparency-report/" }, "incidents": [ { "date": "2026-08-07", "summary": "An attacker exploited a BTCPay Server vulnerability on IVPN's self-hosted Bitcoin payment server, extracted its Lightning node credentials and stole 0.6168 BTC of IVPN's operating funds; IVPN reported on 2026-08-11 that no customer data or customer funds were accessed and that the VPN infrastructure was not involved.", "severity": "low", "sourceUrl": "https://www.ivpn.net/blog/security-incident-bitcoin-payment-server/" } ], "verifiedAt": "2026-10-31" }, "streaming": [], "apps": { "platforms": [ "windows", "macos", "linux", "ios", "android", "router" ], "simultaneousDevices": 10, "routerSupport": true, "browserExtensions": [], "smartDns": false, "openSourceClients": "all", "note": "All apps are open source (apps page: 'Open-source VPN apps for every device'; GitHub ivpn/desktop-app, ivpn/ios-app, ivpn/android-app). Device limit is 5 on Standard and Plus and 10 on Pro Suite (help center); 10 is the maximum offered. No TV apps: the help center says the app is not compatible with Fire OS or Nvidia Shield (use OpenVPN for Android or a router) and no Apple TV app exists. Routers: pfSense, OPNsense, Asus-wrt, OpenWRT, DD-WRT and Tomato guides with OpenVPN/WireGuard config generators; Synology NAS guide. Streaming: IVPN makes no guarantee about access to streaming services (help center), so no streaming claims are recorded. Warrant canary signed monthly (latest 2026-10-06).", "verifiedAt": "2026-10-31", "sourceUrl": "https://www.ivpn.net/en/apps/" }, "support": { "liveChat": "none", "email": true, "knowledgeBase": true, "measuredResponseHours": null, "verifiedAt": "2026-10-31", "sourceUrl": "https://www.ivpn.net/contactus/" }, "commercial": { "affiliateProgram": false, "notes": "IVPN closed its affiliate program in 2016 (blog 'Why we closed our affiliate program', 2016-09-23; the help center confirms it remains closed) and says it did so in protest at paid reviews and misleading 'best VPN' recommendations. Support is email-only; the contact page says replies normally arrive within a few hours and in rare cases up to 24 hours." }, "sourceUrls": { "pricing": "https://www.ivpn.net/en/pricing/", "servers": "https://www.ivpn.net/en/status/", "features": "https://www.ivpn.net/en/apps/", "privacyPolicy": "https://www.ivpn.net/en/privacy/", "refund": "https://www.ivpn.net/en/refunds/", "audits": "https://www.ivpn.net/en/blog/tags/audit/", "blog": "https://www.ivpn.net/en/blog/" }, "score": { "total": 6.1, "rank": 10, "coverage": 80, "dimensions": { "privacy": { "score": 5.9, "inputs": { "eyesAlliance": "none", "newestNoLogsAudit": "2019-03-21", "auditAgeMonths": 91, "ramOnly": false, "noLogsClaim": true, "anonymousPayment": true, "incidentPenalty": 0 } }, "security": { "score": 9, "inputs": { "protocols": "wireguard, openvpn, ikev2", "killSwitchDesktop": true, "killSwitchMobile": false, "obfuscation": true, "multiHop": true, "postQuantum": true, "ownDns": true, "ipv6": "supported", "newestTechnicalAudit": "2025-07-14" } }, "speed": { "score": null, "inputs": { "labData": null } }, "streaming": { "score": 0, "inputs": { "servicesTestedWorking": 0, "servicesClaimed": 0, "smartDns": false } }, "apps": { "score": 6.9, "inputs": { "platforms": 6, "simultaneousDevices": 10, "routerSupport": true, "browserExtensions": 0, "openSourceClients": "all", "splitTunnelingPlatforms": 4 } }, "price": { "score": 7.5, "inputs": { "lowestEffectiveMonthly": 5, "monthlyPlanPrice": 6, "moneyBackDays": 30, "freeTier": false, "renewalPolicy": "same", "renewalRatio": 1, "paymentMethods": 7 } }, "support": { "score": 2, "inputs": { "liveChat": "none", "email": true, "knowledgeBase": true, "measuredResponseHours": null } }, "transparency": { "score": 10, "inputs": { "transparencyReport": true, "warrantCanary": true, "openSourceClients": "all", "audits": 7 } } } } }, { "slug": "mullvad", "name": "Mullvad VPN", "tagline": "Privacy is for the people", "identity": { "website": "https://mullvad.net/", "owner": "Mullvad VPN AB", "parentCompany": null, "hqCountry": "SE", "hqCity": "Gothenburg", "jurisdiction": "SE", "eyesAlliance": "14", "founded": 2009, "note": "Mullvad VPN AB (reg. no. 559238-4001, PO Box 53049, 400 14 Gothenburg) is wholly owned by its parent Amagicom AB, which is itself owned by co-founders Fredrik Strömberg and Daniel Berntsson; treated as independent. The about page states no founding date; the VPN service launched in March 2009, used here as the founding year.", "verifiedAt": "2026-10-31", "sourceUrl": "https://mullvad.net/en/about" }, "pricing": { "currency": "USD", "plans": [ { "id": "mullvad-1m", "name": "1 month", "termMonths": 1, "monthly": 5.63, "total": 5.63, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://mullvad.net/en/pricing" }, { "id": "mullvad-12m", "name": "1 year", "termMonths": 12, "monthly": 5.63, "total": 67.56, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://mullvad.net/en/pricing" } ], "moneyBackDays": 14, "freeTier": { "available": false }, "paymentMethods": [ "cash (by post)", "Bitcoin", "Bitcoin Cash", "Monero", "bank wire", "credit card", "PayPal", "Swish", "EPS transfer", "Bancontact", "iDEAL / Wero", "Przelewy24" ], "anonymousPayment": true, "summary": "Mullvad charges a flat €5 a month, about $5.63, VAT included. Longer terms cost the same per month: a year is €60, about $67.56. There are no discounts and no sales. Paying with cryptocurrency takes 10% off. The 14-day money-back guarantee does not cover cash or cryptocurrency payments. There is no free tier or trial.", "note": "Mullvad charges a flat €5 per month (VAT included) for every duration it sells (1 month, 1 year, 1 decade), with no discount for longer terms and no sales, so renewal fields are null. USD figures use the equivalence the pricing page itself displayed on 2026-11-05 ('€5 is equivalent to $5.63'; it showed $5.60 on 2026-10-31 and 2026-11-01, $5.59 on 2026-11-02 and $5.63 on 2026-11-04): 1 month = €5 ≈ $5.63; 12 months = €60 ≈ $67.56; a 10-year purchase (€600 ≈ $675.60) is also offered. Cryptocurrency payments are discounted 10%. The 14-day money-back guarantee excludes cash and cryptocurrency payments; App Store and voucher refunds are handled by Apple or the reseller. No free tier or trial.", "verifiedAt": "2026-11-05", "sourceUrl": "https://mullvad.net/en/pricing" }, "network": { "servers": 566, "countries": 50, "cities": 91, "ownedServers": "partial", "ramOnly": true, "virtualLocations": false, "note": "Counts from the live server page on 2026-10-31 (566 servers listed, 535 online at the time; 50 countries, 91 cities, 14 hosting providers). Mullvad states that all VPN servers run from RAM with no persistent storage, that every server is either owned by Mullvad or a rented dedicated server not shared with anyone else, and that it uses no virtual servers or virtual locations (help/server-list). Server types are WireGuard and Bridge only; OpenVPN servers were removed on 15 January 2026.", "verifiedAt": "2026-11-02", "sourceUrl": "https://mullvad.net/en/servers" }, "security": { "protocols": [ "wireguard" ], "encryption": "WireGuard with ChaCha20-Poly1305, Curve25519 and BLAKE2s. An optional quantum-resistant pre-shared key uses Classic McEliece 460896 and ML-KEM-1024.", "killSwitch": { "desktop": true, "mobile": true }, "splitTunneling": [ "windows", "linux", "macos", "android" ], "obfuscation": true, "multiHop": true, "dedicatedIp": false, "portForwarding": false, "postQuantum": true, "adBlocker": true, "dns": { "ownResolvers": true, "leakProtection": true, "ipv6": "supported" }, "note": "OpenVPN was removed from the app (desktop 2025.14) and from all servers on 15 January 2026; WireGuard is the only protocol. The app's kill switch is built in, enabled by default and cannot be disabled (FAQ). Split tunneling: Windows, Linux, macOS and Android, not iOS. Obfuscation: UDP-over-TCP, Shadowsocks and QUIC (QUIC on desktop from 2025.9, Android/iOS to follow). Multihop and quantum-resistant tunnels are selectable in the app's WireGuard settings (quantum-resistant tunnels on all supported platforms); DAITA (defense against AI-guided traffic analysis) is also offered. DNS content blockers (ads, trackers, malware, adult content, gambling, social media) are built into the app; Mullvad's public DoH/DoT service is scheduled to be discontinued on 2 November 2026. Port forwarding was disabled on 29 May 2023; no dedicated IPs. IPv6 can be enabled in Advanced settings (FAQ). Sources: mullvad.net/en/vpn, help/faq, help/split-tunneling-with-the-mullvad-app, help/multihop-wireguard, help/quantum-resistant-tunnels-with-wireguard, help/dns-over-https-and-dns-over-tls, help/why-wireguard, blog/introducing-quic-obfuscation-for-wireguard, blog/removing-openvpn-from-the-mullvad-vpn-app.", "verifiedAt": "2026-10-31", "sourceUrl": "https://mullvad.net/en/vpn" }, "privacy": { "loggingPolicy": { "summary": "Policy is to never store activity logs or metadata: no logging of traffic, DNS requests, connections or timestamps, IP addresses or bandwidth; the only account activity checked is the number of simultaneous connections, in memory only. Accounts are numbered and need no email. Retained data is limited to payment records (transaction IDs deleted after 20 days; accounting records kept seven years by law) and support emails (erased after 70 days). Privacy policy last updated 10 July 2025. Mullvad publishes no warrant canary or transparency report (none found on mullvad.net on 2026-10-31).", "noLogsClaim": true, "sourceUrl": "https://mullvad.net/en/help/no-logging-data-policy" }, "audits": [ { "auditor": "Cure53 and Assured", "date": "2018-09-24", "scope": [ "apps" ], "url": "https://mullvad.net/en/blog/read-results-security-audit-mullvad-app", "summary": "External audit of the Mullvad VPN app v2018.2 (eight testers, 18 days): seven issues, no traffic leaks found. Date is the publication date of the results." }, { "auditor": "Cure53", "date": "2020-06-25", "scope": [ "apps" ], "url": "https://mullvad.net/en/blog/results-available-audit-mullvad-app", "summary": "May–June 2020 audit of all five platform versions (desktop 2020.4, Android 2020.5-beta1, iOS 2020.3): seven items, nothing dangerous or critical. Date is the publication date." }, { "auditor": "Cure53", "date": "2021-01-20", "scope": [ "infrastructure" ], "url": "https://mullvad.net/en/blog/no-pii-or-privacy-leaks-found-cure53s-infrastructure-audit", "summary": "First infrastructure audit, completed December 2020; no PII or privacy leaks found. Date is the publication date." }, { "auditor": "Assured AB", "date": "2022-06-22", "scope": [ "infrastructure", "no-logs" ], "url": "https://mullvad.net/en/blog/vpn-server-audit-found-no-information-leakage-or-logging-of-customer-data", "summary": "VPN server audit (two WireGuard and one OpenVPN server, with SSH access) concluded May 2022; found no information leakage or logging of customer data. Date is the publication date." }, { "auditor": "Assured AB", "date": "2022-09-14", "scope": [ "infrastructure" ], "url": "https://mullvad.net/en/blog/authoritative-dns-server-audit-completed-by-assured-ab", "summary": "Audit of Mullvad's self-hosted authoritative DNS servers. Date is the publication date." }, { "auditor": "Atredis Partners", "date": "2022-10-21", "scope": [ "apps" ], "url": "https://mullvad.net/en/blog/security-audit-report-for-our-app-available", "summary": "Penetration test and source code audit of the app on Windows, Linux, macOS, Android and iOS; nothing of high or critical severity. Date is the publication date." }, { "auditor": "Assured AB", "date": "2023-02-17", "scope": [ "infrastructure" ], "url": "https://mullvad.net/en/blog/security-audit-of-account-and-payment-services", "summary": "Audit of the account and payment services, tested 7–29 November 2022. Date is the publication date." }, { "auditor": "Radically Open Security", "date": "2023-08-09", "scope": [ "infrastructure" ], "url": "https://mullvad.net/en/blog/infrastructure-audit-completed-by-radically-open-security", "summary": "Third VPN infrastructure audit. Date is the publication date." }, { "auditor": "Cure53", "date": "2024-06-27", "scope": [ "infrastructure" ], "url": "https://mullvad.net/en/blog/fourth-infrastructure-audit-completed-by-cure53", "summary": "Fourth infrastructure audit (one OpenVPN and one WireGuard staging server plus the Ansible deployment code), tested 3–14 June 2024: one low and one medium issue, no vulnerabilities affecting the core product. Date is the publication date." }, { "auditor": "X41 D-Sec", "date": "2024-12-11", "scope": [ "apps" ], "url": "https://mullvad.net/en/blog/the-report-for-the-2024-security-audit-of-the-app-is-now-available", "summary": "Penetration test and source code audit of the app on all platforms, 23 October–28 November 2024 (30 person-days): six findings (three high, two medium, one low), none critical; app rated as having a high security level. Date is the publication date." }, { "auditor": "NCC Group", "date": "2025-03-27", "scope": [ "apps" ], "url": "https://mullvad.net/en/blog/successful-security-assessment-of-our-android-app", "summary": "MASA security assessment of the Android app (version 2024.9). Date is the publication date." }, { "auditor": "Assured", "date": "2025-10-23", "scope": [ "infrastructure" ], "url": "https://mullvad.net/en/blog/independent-security-audit-of-our-web-app-completed-by-assured", "summary": "Security audit of the mullvad.net web app; all low issues fixed. Date is the publication date." }, { "auditor": "X41 D-Sec", "date": "2026-01-21", "scope": [ "infrastructure" ], "url": "https://mullvad.net/en/blog/new-security-audit-of-account-and-payment-services", "summary": "White-box source code audit of the payment and account API and supporting backend services. Date is the publication date." }, { "auditor": "Assured", "date": "2026-03-06", "scope": [ "protocol" ], "url": "https://mullvad.net/en/blog/a-security-audit-of-gotatun-is-now-available", "summary": "Audit of GotaTun, Mullvad's Rust WireGuard implementation used in the Android app. Date is the publication date." }, { "auditor": "Leviathan Security Group", "date": "2026-06-01", "scope": [ "apps" ], "url": "https://mullvad.net/en/blog/2026-security-assessment-of-our-android-app", "summary": "Second MASA security assessment of the Android app. Date is the publication date." } ], "warrantCanary": false, "transparencyReport": { "available": false }, "incidents": [ { "date": "2023-04-18", "summary": "Officers from the Swedish Police National Operations Department searched Mullvad's Gothenburg office under a warrant intending to seize computers holding customer data, and left without taking anything because no such data existed.", "severity": "low", "sourceUrl": "https://mullvad.net/en/blog/mullvad-vpn-was-subject-to-a-search-warrant-customer-data-not-compromised" } ], "verifiedAt": "2026-10-31" }, "streaming": [], "apps": { "platforms": [ "windows", "macos", "linux", "ios", "android" ], "simultaneousDevices": 5, "routerSupport": true, "browserExtensions": [ "firefox" ], "smartDns": false, "openSourceClients": "all", "note": "Apps for Windows (latest 2026.5), macOS, Linux, iOS and Android; no Android TV or router app, but WireGuard configuration files are provided for any device that supports them and help guides cover OpenWrt, pfSense, Asus Merlin and DD-WRT routers. The Mullvad Browser Extension is listed for Firefox 91.1.0+ only and is a leak-check and SOCKS5 proxy helper, not a VPN. No Smart DNS. All app source code is published at github.com/mullvad/mullvadvpn-app; the Android app has reproducible builds.", "verifiedAt": "2026-10-31", "sourceUrl": "https://mullvad.net/en/download/vpn" }, "support": { "liveChat": "none", "email": true, "knowledgeBase": true, "measuredResponseHours": null, "verifiedAt": "2026-10-31", "sourceUrl": "https://mullvad.net/en/help" }, "commercial": { "affiliateProgram": false, "notes": "No affiliate program. Support is by email (support@mullvadvpn.net, PGP key and onion service offered) plus a help center; no live chat or phone. The pricing page states Mullvad never holds sales or holiday discounts; resellers may use different price models." }, "sourceUrls": { "pricing": "https://mullvad.net/en/pricing", "servers": "https://mullvad.net/en/servers", "features": "https://mullvad.net/en/vpn", "privacyPolicy": "https://mullvad.net/en/help/privacy-policy", "refund": "https://mullvad.net/en/help/refunds", "audits": "https://mullvad.net/en/blog/tag/audits" }, "score": { "total": 5.6, "rank": 12, "coverage": 80, "dimensions": { "privacy": { "score": 6.5, "inputs": { "eyesAlliance": "14", "newestNoLogsAudit": "2022-06-22", "auditAgeMonths": 52, "ramOnly": true, "noLogsClaim": true, "anonymousPayment": true, "incidentPenalty": 0 } }, "security": { "score": 9, "inputs": { "protocols": "wireguard", "killSwitchDesktop": true, "killSwitchMobile": true, "obfuscation": true, "multiHop": true, "postQuantum": true, "ownDns": true, "ipv6": "supported", "newestTechnicalAudit": "2026-06-01" } }, "speed": { "score": null, "inputs": { "labData": null } }, "streaming": { "score": 0, "inputs": { "servicesTestedWorking": 0, "servicesClaimed": 0, "smartDns": false } }, "apps": { "score": 5.8, "inputs": { "platforms": 5, "simultaneousDevices": 5, "routerSupport": true, "browserExtensions": 1, "openSourceClients": "all", "splitTunnelingPlatforms": 4 } }, "price": { "score": 5.5, "inputs": { "lowestEffectiveMonthly": 5.63, "monthlyPlanPrice": 5.63, "moneyBackDays": 14, "freeTier": false, "renewalPolicy": "same", "renewalRatio": 1, "paymentMethods": 12 } }, "support": { "score": 2, "inputs": { "liveChat": "none", "email": true, "knowledgeBase": true, "measuredResponseHours": null } }, "transparency": { "score": 5, "inputs": { "transparencyReport": false, "warrantCanary": false, "openSourceClients": "all", "audits": 15 } } } } }, { "slug": "nordvpn", "name": "NordVPN", "tagline": "Panama-based VPN with NordLynx, RAM-only servers and six no-logs assurance engagements", "identity": { "website": "https://nordvpn.com/", "owner": "nordvpn S.A.", "parentCompany": "Nord Security", "hqCountry": "PA", "jurisdiction": "PA", "eyesAlliance": "none", "founded": 2012, "note": "Help center: 'NordVPN is owned and operated by nordvpn S.A.' and was created in 2012 by Tom Okman and Eimantas Sabaliauskas; the article 'Where is NordVPN based' states NordVPN operates under the jurisdiction of Panama and that parent company Nord Security is based in the Netherlands. HQ city not stated on loaded pages.", "verifiedAt": "2026-10-31", "sourceUrl": "https://support.nordvpn.com/hc/en-us/articles/20911146148113-The-founders-and-owners-of-NordVPN" }, "pricing": { "currency": "USD", "plans": [ { "id": "basic-2y", "name": "Basic 2-year", "tier": "Basic", "termMonths": 27, "monthly": 3.49, "total": 94.23, "renewalTotal": 139.08, "renewalMonths": 12, "extraMonths": 3, "promoLabel": "+3 extra months", "verifiedAt": "2026-11-05", "sourceUrl": "https://nordvpn.com/pricing/" }, { "id": "complete-2y", "name": "Complete 2-year", "tier": "Complete", "termMonths": 27, "monthly": 3.99, "total": 107.73, "renewalTotal": 219.48, "renewalMonths": 12, "extraMonths": 3, "promoLabel": "+3 extra months", "verifiedAt": "2026-11-05", "sourceUrl": "https://nordvpn.com/pricing/" }, { "id": "prime-2y", "name": "Prime 2-year", "tier": "Prime", "termMonths": 27, "monthly": 6.99, "total": 188.73, "renewalTotal": 296.28, "renewalMonths": 12, "extraMonths": 3, "promoLabel": "+3 extra months", "verifiedAt": "2026-11-05", "sourceUrl": "https://nordvpn.com/pricing/" }, { "id": "basic-1y", "name": "Basic 1-year", "tier": "Basic", "termMonths": 15, "monthly": 4.99, "total": 74.85, "renewalTotal": 139.08, "renewalMonths": 12, "renewalPolicy": "stated", "extraMonths": 3, "promoLabel": "+3 extra months", "verifiedAt": "2026-11-05", "sourceUrl": "https://nordvpn.com/pricing/" }, { "id": "complete-1y", "name": "Complete 1-year", "tier": "Complete", "termMonths": 15, "monthly": 5.99, "total": 89.85, "renewalTotal": 219.48, "renewalMonths": 12, "renewalPolicy": "stated", "extraMonths": 3, "promoLabel": "+3 extra months", "verifiedAt": "2026-11-05", "sourceUrl": "https://nordvpn.com/pricing/" }, { "id": "prime-1y", "name": "Prime 1-year", "tier": "Prime", "termMonths": 15, "monthly": 8.99, "total": 134.85, "renewalTotal": 296.28, "renewalMonths": 12, "renewalPolicy": "stated", "extraMonths": 3, "promoLabel": "+3 extra months", "verifiedAt": "2026-11-05", "sourceUrl": "https://nordvpn.com/pricing/" }, { "id": "basic-1m", "name": "Basic monthly", "tier": "Basic", "termMonths": 1, "monthly": 14.99, "total": 14.99, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://nordvpn.com/pricing/" }, { "id": "complete-1m", "name": "Complete monthly", "tier": "Complete", "termMonths": 1, "monthly": 19.99, "total": 19.99, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://nordvpn.com/pricing/" }, { "id": "prime-1m", "name": "Prime monthly", "tier": "Prime", "termMonths": 1, "monthly": 29.99, "total": 29.99, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://nordvpn.com/pricing/" } ], "moneyBackDays": 30, "freeTier": { "available": false, "limits": "No free tier. New users in some countries get a 7-day free trial on 1-year and 2-year Prime plans, and there is a 3-day trial through Google Play. The trial needs a credit card or PayPal." }, "paymentMethods": [ "credit/debit cards (Visa, Mastercard, American Express, Discover, Maestro)", "PayPal", "Google Pay", "Apple Pay", "UnionPay", "GrabPay", "cryptocurrency (Bitcoin, Ethereum, Litecoin, stablecoins)", "Sofort / Klarna", "iDEAL", "Twint", "bank transfer", "in-app purchase (Apple App Store, Google Play, Amazon Appstore)", "prepaid NordVPN card bought with cash in selected retail stores" ], "anonymousPayment": true, "summary": "NordVPN sells three tiers: Basic, Complete and Prime. The 1-year and 2-year plans currently include 3 extra months, so you pay up front for 15 or 27 months. After the first term, both renew every year: Basic at $139.08, Complete at $219.48 and Prime at $296.28. Monthly plans are billed every month. Sales tax may apply. The 30-day money-back guarantee covers your first purchase only.", "note": "Pricing page loaded 2026-10-31 during a Black Friday promotion ('Get 78% off + 3 extra months'). Tiers shown: Basic, Complete, Prime (no 'Plus' tier displayed). 2-year and 1-year intro terms include 3 extra months (27 and 15 months billed up front). Renewal amounts are printed for both the 1-year and 2-year plans ('Renews at $X/year', the same yearly amount per tier). The 2026-10-31 record had missed the 1-year amounts although that day's page printed them. Monthly plans say 'Billed every month'. The offer terms add that subscriptions renew at the 'then-applicable renewal price' and that renewal prices may change. 'Sales tax may apply.' Refund policy (help center): 30-day money-back guarantee on the initial purchase only; App Store purchases refunded by Apple.", "verifiedAt": "2026-11-05", "sourceUrl": "https://nordvpn.com/pricing/" }, "network": { "servers": 7229, "countries": 150, "cities": 225, "ownedServers": "partial", "ramOnly": true, "virtualLocations": true, "note": "Servers page (nordvpn.com/servers/, served as /servers/plan-site/ on 2026-11-05): '7,229 ultra-fast servers covering 150 countries' and 'VPN servers in 225 locations' (cities = locations); it said 7,242 until 2026-11-02. On 2026-10-31 NordVPN's public API (api.nordvpn.com/v1/servers/countries) listed 7,236 servers in 150 countries and 225 cities. Trust Center: all server data is stored in RAM modules; 'a big chunk' of servers is owned and managed in-house (colocated) alongside partner-hosted servers; all servers on 10 Gbps. Servers page lists a 'Virtual' server type for locations where physical infrastructure is limited.", "verifiedAt": "2026-11-05", "sourceUrl": "https://nordvpn.com/servers/" }, "security": { "protocols": [ "wireguard", "openvpn", "ikev2", "proprietary" ], "proprietaryProtocol": "NordWhisper (and NordLynx, a WireGuard-based implementation)", "encryption": "AES-256-GCM with a 4096-bit DH key on OpenVPN. NordLynx uses WireGuard cryptography, with optional post-quantum key exchange.", "killSwitch": { "desktop": true, "mobile": true }, "splitTunneling": [ "windows", "android", "android-tv" ], "obfuscation": true, "multiHop": true, "dedicatedIp": true, "portForwarding": false, "postQuantum": true, "adBlocker": true, "dns": { "ownResolvers": true, "leakProtection": true, "ipv6": "unknown" }, "note": "Help center: protocols are NordLynx (WireGuard-based, default in most apps), OpenVPN UDP/TCP, IKEv2/IPsec and NordWhisper (for restrictive networks; obfuscated servers now run on it). Kill switch: Windows (Internet and App kill switch), Linux, Android 8+ system-wide; macOS and iOS use 'VPN bypass prevention' (App Store builds) or an App Kill Switch (macOS direct download); not available on Fire TV Stick. Split tunneling on Windows, Android and Android TV (browser extensions offer domain-level 'Exclude from VPN'; Linux offers an allowlist). Double VPN, Onion Over VPN, obfuscated servers, Meshnet. Post-quantum encryption is an opt-in toggle that works only with NordLynx (all apps since 2025). Threat Protection Pro / Next-gen antivirus blocks ads, trackers, malware and malicious sites. Port forwarding only via the separate Dedicated Server add-on, not on standard servers. NordVPN DNS resolvers 103.86.96.100 / 103.86.99.100 used automatically by apps. IPv6: help center states 'we do not support IPv6 yet'; no loaded page states whether apps block IPv6 traffic. Obfuscated servers moved from OpenVPN to NordWhisper (iOS 9.8 release note 2026-07-01; Linux 6.0.0 release note 2026-10-22, which removed the 'nordvpn set obfuscate' command); support article 46609126551697 states that manual OpenVPN connections cannot reach obfuscated servers; the NordWhisper blog (updated 2026-08-21) says NordWhisper is incompatible with Dedicated IP and Onion Over VPN.", "verifiedAt": "2026-10-31", "sourceUrl": "https://support.nordvpn.com/hc/en-us/articles/19482810153745-Which-NordVPN-protocol-should-I-choose" }, "privacy": { "loggingPolicy": { "summary": "NordVPN states it does not log any user activity online and keeps only encrypted login credentials (email for password recovery, username to establish connections) plus the transaction/order ID for refunds; the account is not linked to VPN activity, and under its no-logs policy it says it could not provide relevant information in response to a valid court order. It operates under Panamanian jurisdiction with no mandatory data-retention law. The full privacy policy at my.nordaccount.com renders only with JavaScript and could not be read.", "noLogsClaim": true, "sourceUrl": "https://support.nordvpn.com/hc/en-us/articles/19744151372945-What-information-does-NordVPN-store" }, "audits": [ { "auditor": "Deloitte Audit Lithuania", "date": "2025-12-12", "scope": [ "no-logs" ], "url": "https://nordvpn.com/blog/nordvpn-no-logs-assurance-engagement-2025/", "summary": "Sixth no-logs assurance engagement (ISAE 3000 Revised), performed 10 Nov-12 Dec 2025; report issued 2025-12-12; announced 2026-02-03. Report available only to logged-in users." }, { "auditor": "Deloitte Audit Lithuania", "date": "2024-12-20", "scope": [ "no-logs" ], "url": "https://nordvpn.com/blog/nordvpn-no-logs-audit-2024/", "summary": "Fifth no-logs assurance engagement, access period 18 Nov-20 Dec 2024 (date = end of engagement; report date not stated); announced 2025-02-11. Covered standard, Double VPN, Onion Over VPN, obfuscated and P2P servers." }, { "auditor": "Deloitte Audit Lithuania", "date": "2023-12-13", "scope": [ "no-logs" ], "url": "https://nordvpn.com/blog/nordvpn-no-logs-audit-2023/", "summary": "Fourth no-logs assurance engagement, access 30 Nov-7 Dec 2023; assurance report published 2023-12-13." }, { "auditor": "Deloitte", "date": "2022-12-10", "scope": [ "no-logs" ], "url": "https://nordvpn.com/blog/nordvpn-no-logs-audit-2022/", "summary": "Third no-logs assurance engagement, performed 21 Nov-10 Dec 2022 (date = end of engagement); announced 2023-01-10." }, { "auditor": "PricewaterhouseCoopers AG Switzerland", "date": "2020-05-28", "scope": [ "no-logs" ], "url": "https://nordvpn.com/blog/nordvpn-audit/", "summary": "Second (limited assurance) no-logs engagement, 20-28 May 2020, report issued 2020-05-28; scope expanded to obfuscated, Double VPN and P2P servers." }, { "auditor": "PricewaterhouseCoopers AG Switzerland", "date": "2018-01-01", "scope": [ "no-logs" ], "url": "https://nordvpn.com/blog/nordvpn-audit/", "summary": "First industry no-logs assurance engagement, completed in late 2018; only the year is stated on the loaded pages, so 1 January 2018 is used as a placeholder date." }, { "auditor": "Cure53", "date": "2025-12-10", "scope": [ "apps", "infrastructure" ], "url": "https://nordvpn.com/blog/cure53-latest-security-assessment/", "summary": "2025 assessment of Android, iOS, Windows, macOS and Linux apps, Chrome/Edge/Firefox extensions, NordAccount and the VPN server environment; no critical findings, high-severity items fixed and verified. Date = announcement date (testing took place during 2025)." }, { "auditor": "Cure53", "date": "2024-06-01", "scope": [ "apps" ], "url": "https://nordvpn.com/blog/cure53-app-security-assessment/", "summary": "Penetration test and source-code review of the mobile and desktop apps and browser extensions; began June 2024 (first of month used) and ran 55 working days; announced 2025-03-04." }, { "auditor": "Cure53", "date": "2022-10-01", "scope": [ "apps", "infrastructure" ], "url": "https://nordvpn.com/blog/cure53-security-assesment/", "summary": "Desktop apps (Windows, Linux, macOS) tested July-August 2022 and servers/infrastructure (incl. NordLynx server-side code, APIs, NordAccount) September-October 2022; first day of the final month used; announced 2023-02-28." }, { "auditor": "VerSprite", "date": "2019-10-09", "scope": [ "apps" ], "url": "https://nordvpn.com/blog/nordvpn-completes-app-security-audit/", "summary": "Security audit of the Android, iOS, Windows and Mac apps; no critical vulnerabilities; date = announcement date." } ], "warrantCanary": false, "transparencyReport": { "available": true, "url": "https://nordvpn.com/trust/" }, "incidents": [ { "date": "2018-03-01", "summary": "A rented server in a third-party datacenter in Finland was accessed without authorization in March 2018 through an insecure remote-management account the provider had added; an expired TLS key was taken, NordVPN said no activity logs existed on the server, and the incident was disclosed on 2019-10-21.", "severity": "medium", "sourceUrl": "https://nordvpn.com/blog/official-response-datacenter-breach/" }, { "date": "2024-10-01", "summary": "In October 2024 NordVPN received a binding warrant from the Panamanian prosecutor's office in a criminal investigation and was legally obliged to provide the requested user data in its possession; its transparency report records one order that resulted in disclosure of user information.", "severity": "medium", "sourceUrl": "https://nordvpn.com/blog/nordvpn-introduces-transparency-reports/" } ], "verifiedAt": "2026-10-31" }, "streaming": [ { "service": "netflix", "status": "claimed", "checkedAt": "2026-10-31", "note": "The help center lists \"Netflix Originals\" as supported by SmartDNS, NordVPN's DNS feature for smart TVs. The VPN streaming page makes no claim per service and says Netflix may limit VPN connections." }, { "service": "prime-video", "region": "US", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed as \"Amazon Prime (US region)\" in the SmartDNS help article." }, { "service": "disney-plus", "region": "US", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed as \"Disney Plus (US region)\" in the SmartDNS help article." }, { "service": "hbo-max", "region": "US", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed as \"MAX (US region)\" in the SmartDNS help article." }, { "service": "paramount-plus", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in the SmartDNS help article." }, { "service": "peacock", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed as \"Peacock TV\" in the SmartDNS help article." } ], "apps": { "platforms": [ "windows", "macos", "linux", "ios", "android", "android-tv", "fire-tv", "apple-tv", "router" ], "simultaneousDevices": 10, "routerSupport": true, "browserExtensions": [ "chrome", "firefox", "edge" ], "smartDns": true, "openSourceClients": "partial", "note": "Help center lists apps for Windows, macOS, Linux (CLI and GUI), iOS, Android, Android TV and Apple TV, plus Chrome/Firefox/Edge extensions; a Fire TV app is in the Amazon Appstore (not on 1st/2nd-gen Fire TV Sticks); routers via manual setup (DD-WRT, OpenWRT NordVPN Lite). SmartDNS included with SmartPlay. The Linux CLI and GUI are open source (github.com/NordSecurity/nordvpn-linux); other apps are closed source. China: the help center states that the Android app (article 38297934721809) and the iOS app (article 38297825243665) are 'fully blocked in China' and documents a manual IKEv2/IPsec connection as the workaround; no date is shown on either article (read 2026-10-31).", "verifiedAt": "2026-10-31", "sourceUrl": "https://support.nordvpn.com/hc/en-us/articles/19559429814545-What-features-does-NordVPN-have" }, "support": { "liveChat": "24/7", "email": true, "knowledgeBase": true, "measuredResponseHours": null, "verifiedAt": "2026-10-31", "sourceUrl": "https://nordvpn.com/features/" }, "commercial": { "affiliateProgram": true, "notes": "nordvpn.com returned HTTP 403 to the WebFetch tool; its pages were loaded with a plain curl request (HTTP 200) on 2026-10-31. The privacy policy at my.nordaccount.com requires JavaScript, so logging facts come from help-center articles. The former warrant-canary page (/security-efforts/) now redirects to the homepage; NordVPN announced in October 2024 that it is phasing the canary out in favour of quarterly transparency reports published in its Trust Center." }, "sourceUrls": { "pricing": "https://nordvpn.com/pricing/", "servers": "https://nordvpn.com/servers/", "features": "https://nordvpn.com/features/", "privacyPolicy": "https://my.nordaccount.com/legal/privacy-policy/", "refund": "https://support.nordvpn.com/hc/en-us/articles/19476991311121-What-is-your-refund-policy", "audits": "https://nordvpn.com/trust/", "blog": "https://nordvpn.com/blog/" }, "score": { "total": 8.1, "rank": 3, "coverage": 80, "dimensions": { "privacy": { "score": 8.8, "inputs": { "eyesAlliance": "none", "newestNoLogsAudit": "2025-12-12", "auditAgeMonths": 10, "ramOnly": true, "noLogsClaim": true, "anonymousPayment": true, "incidentPenalty": 1 } }, "security": { "score": 9.5, "inputs": { "protocols": "wireguard, openvpn, ikev2, proprietary", "killSwitchDesktop": true, "killSwitchMobile": true, "obfuscation": true, "multiHop": true, "postQuantum": true, "ownDns": true, "ipv6": "unknown", "newestTechnicalAudit": "2025-12-10" } }, "speed": { "score": null, "inputs": { "labData": null } }, "streaming": { "score": 5.5, "inputs": { "servicesTestedWorking": 0, "servicesClaimed": 6, "smartDns": true } }, "apps": { "score": 8.4, "inputs": { "platforms": 9, "simultaneousDevices": 10, "routerSupport": true, "browserExtensions": 3, "openSourceClients": "partial", "splitTunnelingPlatforms": 3 } }, "price": { "score": 6.5, "inputs": { "lowestEffectiveMonthly": 3.49, "monthlyPlanPrice": 14.99, "moneyBackDays": 30, "freeTier": false, "renewalPolicy": "stated", "renewalRatio": 1.48, "paymentMethods": 13 } }, "support": { "score": 10, "inputs": { "liveChat": "24/7", "email": true, "knowledgeBase": true, "measuredResponseHours": null } }, "transparency": { "score": 6.5, "inputs": { "transparencyReport": true, "warrantCanary": false, "openSourceClients": "partial", "audits": 10 } } } } }, { "slug": "privadovpn", "name": "PrivadoVPN", "tagline": "Free 10 GB/month tier and low-cost premium plans, operated from Iceland since May 2026", "identity": { "website": "https://privadovpn.com/", "owner": "Privado Networks ehf", "parentCompany": null, "hqCountry": "IS", "hqCity": "Garðabær", "jurisdiction": "IS", "eyesAlliance": "none", "founded": 2019, "note": "Terms of Service and privacy policy (both last updated 2026-05-01) name Privado Networks ehf, a private limited company under Icelandic law with registered office at Suðurhraun 10, Garðabær, as service provider and data controller, governed by Icelandic law. Subscriptions bought before 2026-05-01 were provided by Privado Networks AG (Grafenauweg 8, Zug, Switzerland), which, together with Privado Networks LLC (Wilmington, Delaware), now acts only as a payment processor. Marketing pages (pricing, premium network) still call PrivadoVPN Switzerland-based. Service launched April 2019 (about page). No parent company is stated.", "verifiedAt": "2026-10-31", "sourceUrl": "https://privadovpn.com/terms-of-service/" }, "pricing": { "currency": "USD", "plans": [ { "id": "monthly", "name": "1 Month Plan", "termMonths": 1, "monthly": 10.99, "total": 10.99, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://privadovpn.com/pricing/" }, { "id": "12-month-plus-3", "name": "12 Month Plan (+3 free months)", "termMonths": 15, "monthly": 1.33, "total": 19.95, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "unknown", "extraMonths": 3, "promoLabel": "Save 88%", "verifiedAt": "2026-11-05", "sourceUrl": "https://privadovpn.com/pricing/" }, { "id": "24-month-plus-3", "name": "24 Month Plan (+3 free months)", "termMonths": 27, "monthly": 1.11, "total": 29.97, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "unknown", "extraMonths": 3, "promoLabel": "Save 90%", "verifiedAt": "2026-11-05", "sourceUrl": "https://privadovpn.com/pricing/" } ], "moneyBackDays": 30, "freeTier": { "available": true, "limits": "10 GB of data every 30 days, on unlimited devices. A limited set of locations: 41 servers in 13 cities in 10 countries. After the 10 GB you can still use free emergency servers. Streaming works. No SOCKS5 proxy, and Linux is not supported on free accounts. You need to verify your email." }, "paymentMethods": [ "Visa", "Mastercard", "American Express", "Discover", "Diners Club International", "JCB", "UnionPay", "PayPal", "iDEAL", "SEPA", "Apple App Store", "Google Play" ], "anonymousPayment": false, "summary": "The pricing page shows only the price per month, not the total you pay. We worked out each total as the monthly price times the number of months, including the 3 free months. Check the real total at checkout. PrivadoVPN does not state the renewal price. The money-back guarantee covers 12- and 24-month plans bought directly, once per user. Monthly plans and renewals are not covered. PrivadoVPN does not accept cryptocurrency.", "note": "The pricing page shows only the per-month price, the '+3 FREE' bonus months and the 'Save 88%/90%' labels; the billed total is not displayed and the checkout (signup.privadovpn.com) is a JavaScript app that could not be read, so each total is derived as the displayed monthly price multiplied by the term and must be confirmed at checkout. Renewal price and term are not stated (ToS: renews for the same billing period at the then-current price). Pricing-page checkout links carry 'bf26' coupon codes. Antivirus add-on $1.99/mo. Money-back guarantee: shown on the 12- and 24-month cards but not the monthly card; ToS section 5.2 limits it to annual plans bought directly, once per user, paid by card, direct debit or PayPal, and excludes monthly plans, renewals and App Store/Google Play purchases. Payment methods are the logos shown in the pricing-page footer plus in-app purchases named in the ToS; no cryptocurrency. Re-checked 2026-10-31: the pricing page still prints only per-month prices ('1.33 /mo', '1.11 /mo', '10.99 /mo', 'Save 88 %', 'Save 90 %', '+ 3 FREE'), no billed totals and no renewal amounts, so the totals remain derived (per-month price x months including the 3 free months) and the longer plans carry renewalPolicy 'unknown'.", "verifiedAt": "2026-11-05", "sourceUrl": "https://privadovpn.com/pricing/" }, "network": { "servers": 233, "countries": 49, "cities": 66, "ownedServers": "unknown", "ramOnly": null, "virtualLocations": null, "note": "Counts from check.privadovpn.com/servers/, the endpoint the official site uses to fill its 'servers in N countries / N cities' figures (2026-10-31: 233 servers, 49 countries, 66 cities; free tier 41 servers in 10 countries and 13 cities). The streaming page lists the same 49 countries. Server ownership, RAM-only operation and virtual locations are not stated; the about page only says the team runs infrastructure 'peered with major regional ISPs'.", "verifiedAt": "2026-11-02", "sourceUrl": "https://check.privadovpn.com/servers/" }, "security": { "protocols": [ "wireguard", "openvpn", "ikev2" ], "encryption": "AES-256. PrivadoVPN does not say which cipher modes or handshake it uses.", "killSwitch": { "desktop": true, "mobile": true }, "splitTunneling": [ "android", "fire-tv", "ios" ], "obfuscation": false, "multiHop": true, "dedicatedIp": false, "portForwarding": false, "postQuantum": null, "adBlocker": true, "dns": { "ownResolvers": true, "leakProtection": true, "ipv6": "unknown" }, "note": "Kill switch: Windows app (system-wide or per-app), Android app (with Always-on VPN) and iOS app (added in 3.9.0, 2025-05-02) per help center; the kill-switch page says it is in 'any of our easy-to-use apps'. Split tunneling launched February 2022 (about page): confirmed for Fire TV (2.7.0/2.8.0 changelogs, exclude mode), Android (3.9.0 changelog) and iOS (iOS app version log, 3.9.0 on 2025-05-02: 'Introducing Split Tunneling, which lets users better control their network traffic by selecting websites and IP addresses to bypass VPN servers'; https://blog.privadovpn.com/privadovpn-ios-app-version-log/); not confirmed for Windows or macOS. Multi-hop: SmartRoute is the multi-hop feature, not a split-tunneling or Smart DNS feature. The help center (2026-05-20) describes it as a two-hop route with an automatic entry server and a user-chosen exit server, and iOS 4.1.0 (2026-11-04) brought it to iOS: 'routing your data through multiple VPN servers', with a choice of web or all traffic and of the exit location. Ad blocker: Control Tower (ads, trackers, malware, parental controls) is included with Premium. DNS: Control Tower filtering and Smart DNS run on Privado-operated DNS servers (help center, privacy policy); IP Leak Protection is claimed for DNS, IPv4 and IPv6, but whether IPv6 is tunneled or blocked is not stated. No obfuscation, dedicated IP, port forwarding or post-quantum feature is mentioned on any official page. SOCKS5 proxy included with Premium.", "verifiedAt": "2026-11-05", "sourceUrl": "https://privadovpn.com/features/" }, "privacy": { "loggingPolicy": { "summary": "Privacy policy (last updated 2026-05-01, controller Privado Networks ehf, Iceland): no logging of browsing history, traffic destination, data content, VPN session IP logs or DNS queries; account-level data-volume counters are kept to enforce plan limits and for capacity planning; account data is deleted within 30 days of a deletion request and payment records are kept 7 years after the fiscal year; the ToS states the no-logging commitments apply equally to free and paid users.", "noLogsClaim": true, "sourceUrl": "https://privadovpn.com/privacy-policy/" }, "audits": [], "warrantCanary": false, "transparencyReport": { "available": false }, "incidents": [], "verifiedAt": "2026-10-31" }, "streaming": [ { "service": "netflix", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the official streaming page." }, { "service": "hulu", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the official streaming page." }, { "service": "disney-plus", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the official streaming page." }, { "service": "bbc-iplayer", "status": "claimed", "checkedAt": "2026-10-31", "note": "The streaming page lists \"BBC\". It also names BBC Sounds separately." }, { "service": "prime-video", "status": "claimed", "checkedAt": "2026-10-31", "note": "The streaming page lists \"Amazon\" under video." }, { "service": "hbo-max", "status": "claimed", "checkedAt": "2026-10-31", "note": "The streaming page lists \"MAX (HBO)\"." }, { "service": "peacock", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the official streaming page." }, { "service": "paramount-plus", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the official streaming page." }, { "service": "crunchyroll", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the official streaming page." }, { "service": "dazn", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed under sports on the official streaming page." }, { "service": "espn-plus", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed under sports on the official streaming page." } ], "apps": { "platforms": [ "windows", "macos", "ios", "android", "android-tv", "fire-tv", "apple-tv", "router" ], "simultaneousDevices": 10, "routerSupport": true, "browserExtensions": [ "chrome", "firefox", "edge" ], "smartDns": true, "openSourceClients": "none", "note": "Apps for Windows, macOS, iOS, Android, Fire TV, Android TV and tvOS (Apple TV) plus Chrome, Edge, Firefox and Brave extensions. Linux has no app: Premium users get manual OpenVPN, WireGuard and IKEv2 setup guides (help center). Routers via manual OpenVPN setup guides (Asus, AsusWRT-Merlin, DD-WRT, pfSense). Smart DNS: 'Control Tower Smart DNS' with manual setup guides. 10 simultaneous connections on Premium, 1 on the free plan (help center). No app is described as open source. YouTube TV is not among the services listed on the streaming page.", "verifiedAt": "2026-10-31", "sourceUrl": "https://privadovpn.com/features/" }, "support": { "liveChat": "none", "email": true, "knowledgeBase": true, "measuredResponseHours": null, "verifiedAt": "2026-10-31", "sourceUrl": "https://privadovpn.com/24-7-customer-support/" }, "commercial": { "affiliateProgram": true, "notes": "Affiliate program at affiliates.privadovpn.com (linked from the footer and contact page). Support: official pages promise help 'any time, day or night, 365 days a year' through the help-center contact form and support@privadovpn.com; a HappyFox live-chat button exists on support.privadovpn.com but is hidden by default and no page states chat availability or hours, so liveChat is recorded as none." }, "sourceUrls": { "pricing": "https://privadovpn.com/pricing/", "servers": "https://privadovpn.com/what-is-a-vpn/servers/", "features": "https://privadovpn.com/features/", "privacyPolicy": "https://privadovpn.com/privacy-policy/", "refund": "https://privadovpn.com/features/vpn-money-back-guarantee/", "blog": "https://blog.privadovpn.com/" }, "score": { "total": 5.7, "rank": 11, "coverage": 80, "dimensions": { "privacy": { "score": 4.1, "inputs": { "eyesAlliance": "none", "newestNoLogsAudit": null, "auditAgeMonths": null, "ramOnly": null, "noLogsClaim": true, "anonymousPayment": false, "incidentPenalty": 0 } }, "security": { "score": 6.4, "inputs": { "protocols": "wireguard, openvpn, ikev2", "killSwitchDesktop": true, "killSwitchMobile": true, "obfuscation": false, "multiHop": true, "postQuantum": null, "ownDns": true, "ipv6": "unknown", "newestTechnicalAudit": null } }, "speed": { "score": null, "inputs": { "labData": null } }, "streaming": { "score": 9.3, "inputs": { "servicesTestedWorking": 0, "servicesClaimed": 11, "smartDns": true } }, "apps": { "score": 7.2, "inputs": { "platforms": 8, "simultaneousDevices": 10, "routerSupport": true, "browserExtensions": 3, "openSourceClients": "none", "splitTunnelingPlatforms": 3 } }, "price": { "score": 8.5, "inputs": { "lowestEffectiveMonthly": 1.11, "monthlyPlanPrice": 10.99, "moneyBackDays": 30, "freeTier": true, "renewalPolicy": "unknown", "renewalRatio": null, "paymentMethods": 12 } }, "support": { "score": 2, "inputs": { "liveChat": "none", "email": true, "knowledgeBase": true, "measuredResponseHours": null } }, "transparency": { "score": 0, "inputs": { "transparencyReport": false, "warrantCanary": false, "openSourceClients": "none", "audits": 0 } } } } }, { "slug": "private-internet-access", "name": "Private Internet Access", "tagline": "US-based, Kape-owned VPN with open-source apps, unlimited devices and audited no-logs", "identity": { "website": "https://www.privateinternetaccess.com/", "owner": "Private Internet Access, Inc.", "parentCompany": "Kape Technologies", "hqCountry": "US", "hqCity": "Denver", "jurisdiction": "US", "eyesAlliance": "5", "founded": 2010, "note": "Legal name 'PIA Private Internet Access, Inc.', 2590 Welton St, Suite 200, Denver, CO 80205; terms are governed by Colorado law. The privacy policy refers to Kape Technologies and PIA's blog describes joining Kape (https://www.privateinternetaccess.com/blog/the-continually-evolving-fight-for-freedom/). PIA states it has been in business since its first release in 2010 (https://www.privateinternetaccess.com/blog/private-internet-access-pia-vpn-service-forges-first-oem-partnership-with-purism-to-offer-hardware-and-software-bundles-with-powerful-privacy-protection/).", "verifiedAt": "2026-10-31", "sourceUrl": "https://www.privateinternetaccess.com/about-us" }, "pricing": { "currency": "USD", "plans": [ { "id": "1m", "name": "1 Month", "tier": "PIA VPN", "termMonths": 1, "monthly": 11.95, "total": 11.95, "renewalTotal": 11.95, "renewalMonths": 1, "verifiedAt": "2026-11-05", "sourceUrl": "https://www.privateinternetaccess.com/buy-vpn-online" }, { "id": "12m", "name": "1 Year", "tier": "PIA VPN", "termMonths": 12, "monthly": 3.99, "total": 47.88, "renewalTotal": 47.88, "renewalMonths": 12, "verifiedAt": "2026-11-05", "sourceUrl": "https://www.privateinternetaccess.com/buy-vpn-online" }, { "id": "3y-plus-3m", "name": "3 Years + 4 Months Extra", "tier": "PIA VPN", "termMonths": 40, "monthly": 2.03, "total": 81.2, "renewalTotal": 81.2, "renewalMonths": 36, "extraMonths": 4, "promoLabel": "Save 83%", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.privateinternetaccess.com/buy-vpn-online" } ], "moneyBackDays": 30, "freeTier": { "available": false, "limits": "No free tier. First-time mobile subscribers can try PIA free for 7 days without paying up front, according to PIA's trial page. Other buyers rely on the 30-day money-back guarantee." }, "paymentMethods": [ "Credit card (Visa, Mastercard, American Express, Discover)", "PayPal", "Apple Pay", "Google Pay", "Amazon Pay (selected locations)", "Gift cards and prepaid Visa/Mastercard (one-time purchases)", "iDEAL and Qiwi via Paymentwall (one-time purchases)" ], "anonymousPayment": true, "summary": "PIA has one VPN plan. The 3-year plan includes 4 extra months and costs $81.20 up front, about $2.03 a month. It renews at $81.20 every 3 years. The 1-year plan costs $47.88 and renews at the same price. New subscribers get a 30-day money-back guarantee. Purchases through an app store, a gift card or a third-party deal can only be refunded by whoever took the payment. PIA does not accept cryptocurrency.", "note": "Single VPN tier. Buy page (2026-11-05): an 'Early Access Sale: Black Friday savings start now' campaign ('Early Access Offer: Save up to 83%', label 'EARLY ACCESS: 83% Off', no coupon) replaced the 'Halloween Price Slash' between 2026-11-02 and 2026-11-04. The 3-year plan shows $2.03/mo for '3 Years + 4 Months EXTRA' and 'Autorenews at $81.20 every 3 years'; the first-term total is printed on PIA's alternate buy page as '$81.20 per three years' (https://files.privateinternetaccess.com/pages/buy-vpn/; 40 x $2.03). On 2026-11-02 the plan was '3 Years + 3 Months EXTRA', $79 up front and renewing at $79. Plan id 3y-plus-3m kept so the price history stays continuous. The 1-year plan is '$47.88 first year and then autorenews annually at $47.88'. 30-day money-back guarantee for new subscribers; app-store, gift-card and third-party-deal purchases can only be refunded by the payment processor, and a repeat purchase within three months of a refund is not refundable (https://www.privateinternetaccess.com/terms-of-service). Dedicated IP and antivirus add-ons are offered at checkout without prices on the page. Payment methods per https://helpdesk.privateinternetaccess.com/hc/en-us/articles/46701550179995-What-Payment-Methods-Do-You-Accept, which lists no cryptocurrency option; gift cards and prepaid cards allow a non-recurring purchase without a linked account.", "verifiedAt": "2026-11-05", "sourceUrl": "https://www.privateinternetaccess.com/buy-vpn-online" }, "network": { "servers": null, "countries": 113, "cities": 180, "ownedServers": "unknown", "ramOnly": true, "virtualLocations": true, "note": "PIA publishes no server count. The server page states 180 locations in 113 countries (including all 50 US states) on a 10-Gbps network with RAM-only servers that wipe data on every scheduled reboot, and virtual server locations for some countries (e.g. the India location uses hardware in Singapore). Server ownership is not stated.", "verifiedAt": "2026-11-02", "sourceUrl": "https://www.privateinternetaccess.com/vpn-server" }, "security": { "protocols": [ "wireguard", "openvpn" ], "encryption": "OpenVPN uses AES-128-GCM by default, with AES-256 as an option and an RSA-4096 handshake. WireGuard uses ChaCha20 with Curve25519.", "killSwitch": { "desktop": true, "mobile": true }, "splitTunneling": [ "windows", "macos", "linux", "android" ], "obfuscation": true, "multiHop": true, "dedicatedIp": true, "portForwarding": true, "postQuantum": null, "adBlocker": true, "dns": { "ownResolvers": true, "leakProtection": true, "ipv6": "blocked" }, "note": "Advanced Kill Switch on desktop; the iOS and Android apps include a kill switch (https://www.privateinternetaccess.com/download/ios-vpn, https://www.privateinternetaccess.com/download/android-vpn-app). Split tunneling on Windows, macOS, Linux and Android, not iOS (https://www.privateinternetaccess.com/vpn-features/split-tunneling). Obfuscation adds an SSL layer so traffic looks like regular web traffic; Multi-Hop (Double VPN) routes through an additional proxy; port forwarding on selected servers; DNS filtering (MACE) blocks ad, tracker and malware domains on supported apps. PIA DNS is the default resolver (https://helpdesk.privateinternetaccess.com/hc/en-us/articles/46777172450331-Windows-Changing-DNS-Servers-in-the-PIA-App); IPv6 traffic is blocked while connected (https://helpdesk.privateinternetaccess.com/hc/en-us/articles/46777101512987-Why-Do-You-Block-IPv6). Encryption per https://www.privateinternetaccess.com/vpn-features/vpn-encryption, which still mentions IPsec for iOS, while the iOS download page lists WireGuard and OpenVPN only. Post-quantum encryption is not documented.", "verifiedAt": "2026-10-31", "sourceUrl": "https://www.privateinternetaccess.com/vpn-features" }, "privacy": { "loggingPolicy": { "summary": "The privacy policy states PIA collects and retains zero user logs: no browsing history, connected content, user IPs, connection timestamps, bandwidth logs or DNS queries (policy dated 3 November 2025).", "noLogsClaim": true, "sourceUrl": "https://www.privateinternetaccess.com/privacy-policy" }, "audits": [ { "auditor": "Deloitte Audit Romania", "date": "2022-06-30", "scope": [ "no-logs", "infrastructure" ], "url": "https://www.privateinternetaccess.com/blog/privacy-audit/", "summary": "ISAE 3000 (Revised) review of the server network and management systems; Deloitte found server configurations aligned with the no-logs policy as of 30 June 2022 (announced 30 August 2022)." }, { "auditor": "Deloitte Audit Romania", "date": "2024-04-25", "scope": [ "no-logs", "infrastructure" ], "url": "https://www.privateinternetaccess.com/blog/security-audit-2024/", "summary": "Second ISAE 3000 (Revised) review covering the server network, incident management and the dedicated-IP token system. Date is the announcement's publication date; the report is available in the PIA account." }, { "auditor": "Deloitte Audit Romania", "date": "2025-12-08", "scope": [ "no-logs", "infrastructure" ], "url": "https://www.privateinternetaccess.com/blog/security-audit-2025/", "summary": "Third ISAE 3000 (Revised) review of VPN configuration, operational processes and the dedicated-IP token system. Date is the announcement's publication date; report at https://www.privateinternetaccess.com/deloitte-privacy-policy/." } ], "warrantCanary": false, "transparencyReport": { "available": true, "url": "https://www.privateinternetaccess.com/transparency-report" }, "incidents": [ { "date": "2016-03-12", "summary": "An FBI subpoena in a Florida bomb-threat case (US v. Preston McWaters) sought PIA user logs; PIA could only state that the IP addresses belonged to its US East Coast cluster, having no activity logs.", "severity": "low", "sourceUrl": "https://torrentfreak.com/vpn-providers-no-logging-claims-tested-in-fbi-case-160312/" }, { "date": "2016-07-01", "summary": "Russian authorities seized several PIA servers in July 2016 without notice or due process; PIA, citing its no-logs policy and encrypted servers, removed all of its servers from Russia (month stated, day is a placeholder).", "severity": "medium", "sourceUrl": "https://www.privateinternetaccess.com/blog/russia-vpn-ban-doesnt-forbid-personal-business-use-vpns/" }, { "date": "2018-06-06", "summary": "In the San Jose federal trial of Ross Colby for hacking Embarcadero Media, PIA's general counsel testified that the company keeps no activity logs and could not link the defendant to the PIA IP addresses used.", "severity": "low", "sourceUrl": "https://torrentfreak.com/private-internet-access-no-logging-claims-proven-true-again-in-court-180606/" } ], "verifiedAt": "2026-10-31" }, "streaming": [ { "service": "netflix", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on PIA's streaming page. Streaming-optimized servers in some locations." }, { "service": "hulu", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on PIA's streaming page" }, { "service": "disney-plus", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on PIA's streaming page" }, { "service": "bbc-iplayer", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on PIA's streaming page" }, { "service": "prime-video", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on PIA's streaming page" }, { "service": "hbo-max", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on PIA's streaming page" } ], "apps": { "platforms": [ "windows", "macos", "linux", "ios", "android", "android-tv", "apple-tv", "fire-tv", "smart-tv", "router" ], "simultaneousDevices": "unlimited", "routerSupport": true, "browserExtensions": [ "chrome", "firefox", "edge" ], "smartDns": true, "openSourceClients": "all", "note": "Download page lists Windows, macOS, Linux, Android, iOS/iPadOS, extensions for Chrome, Edge and Firefox, Android TV, Apple TV (tvOS), Smart TV, consoles and routers; the Fire TV app is in the Amazon Appstore (https://www.privateinternetaccess.com/smart-tvs/amazon-fire-stick-vpn). Smart DNS is offered for smart TVs and consoles but PIA's help centre says it is no longer compatible with streaming services (https://helpdesk.privateinternetaccess.com/hc/en-us/articles/52858448795035-How-to-Set-Up-Smart-DNS). Unlimited simultaneous connections. All apps and clients are open source at https://github.com/pia-foss (https://www.privateinternetaccess.com/vpn-features/open-source-vpn).", "verifiedAt": "2026-10-31", "sourceUrl": "https://www.privateinternetaccess.com/download" }, "support": { "liveChat": "24/7", "email": true, "knowledgeBase": true, "measuredResponseHours": null, "verifiedAt": "2026-10-31", "sourceUrl": "https://www.privateinternetaccess.com/vpn-features" }, "commercial": { "affiliateProgram": true, "notes": "Affiliate programme at https://www.privateinternetaccess.com/affiliates. Support: 24/7 live chat and email per the features page; tickets and a help centre at helpdesk.privateinternetaccess.com (https://www.privateinternetaccess.com/contact-us). PIA states it does not publish a warrant canary (https://www.privateinternetaccess.com/blog/why-pia-doesnt-fly-a-warrant-canary-its-solving-the-wrong-problem/)." }, "sourceUrls": { "pricing": "https://www.privateinternetaccess.com/buy-vpn-online", "servers": "https://www.privateinternetaccess.com/vpn-server", "features": "https://www.privateinternetaccess.com/vpn-features", "privacyPolicy": "https://www.privateinternetaccess.com/privacy-policy", "refund": "https://www.privateinternetaccess.com/terms-of-service", "audits": "https://www.privateinternetaccess.com/blog/security-audit-2025/", "blog": "https://www.privateinternetaccess.com/blog/" }, "score": { "total": 8.1, "rank": 4, "coverage": 80, "dimensions": { "privacy": { "score": 7.6, "inputs": { "eyesAlliance": "5", "newestNoLogsAudit": "2025-12-08", "auditAgeMonths": 10, "ramOnly": true, "noLogsClaim": true, "anonymousPayment": true, "incidentPenalty": 0 } }, "security": { "score": 9.3, "inputs": { "protocols": "wireguard, openvpn", "killSwitchDesktop": true, "killSwitchMobile": true, "obfuscation": true, "multiHop": true, "postQuantum": null, "ownDns": true, "ipv6": "blocked", "newestTechnicalAudit": "2025-12-08" } }, "speed": { "score": null, "inputs": { "labData": null } }, "streaming": { "score": 5.5, "inputs": { "servicesTestedWorking": 0, "servicesClaimed": 6, "smartDns": true } }, "apps": { "score": 10, "inputs": { "platforms": 10, "simultaneousDevices": "unlimited", "routerSupport": true, "browserExtensions": 3, "openSourceClients": "all", "splitTunnelingPlatforms": 4 } }, "price": { "score": 7.5, "inputs": { "lowestEffectiveMonthly": 2.03, "monthlyPlanPrice": 11.95, "moneyBackDays": 30, "freeTier": false, "renewalPolicy": "stated", "renewalRatio": 1, "paymentMethods": 7 } }, "support": { "score": 10, "inputs": { "liveChat": "24/7", "email": true, "knowledgeBase": true, "measuredResponseHours": null } }, "transparency": { "score": 8, "inputs": { "transparencyReport": true, "warrantCanary": false, "openSourceClients": "all", "audits": 3 } } } } }, { "slug": "proton-vpn", "name": "Proton VPN", "tagline": "Swiss VPN from Proton AG with open-source apps, annual no-logs audits and a free tier", "identity": { "website": "https://protonvpn.com/", "owner": "Proton AG", "parentCompany": null, "hqCountry": "CH", "hqCity": "Geneva", "jurisdiction": "CH", "eyesAlliance": "none", "founded": 2017, "note": "Proton AG (Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva) is a Swiss corporation primarily owned by the non-profit Proton Foundation; it has no parent company and no venture-capital investors. Proton AG was founded in 2014; Proton VPN launched publicly on 20 June 2017 (https://protonvpn.com/blog/free-vpn-service-launch).", "verifiedAt": "2026-10-31", "sourceUrl": "https://protonvpn.com/about" }, "pricing": { "currency": "USD", "plans": [ { "id": "vpn-plus-1m", "name": "VPN Plus, 1 month", "tier": "VPN Plus", "termMonths": 1, "monthly": 9.99, "total": 9.99, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://protonvpn.com/pricing" }, { "id": "vpn-plus-12m", "name": "VPN Plus, 1 year", "tier": "VPN Plus", "termMonths": 12, "monthly": 4.49, "total": 53.88, "renewalTotal": 83.88, "renewalMonths": 12, "promoLabel": "55% off", "verifiedAt": "2026-11-05", "sourceUrl": "https://protonvpn.com/pricing" }, { "id": "vpn-plus-24m", "name": "VPN Plus, 2 years", "tier": "VPN Plus", "termMonths": 24, "monthly": 3.49, "total": 83.76, "renewalTotal": 83.88, "renewalMonths": 12, "promoLabel": "65% off", "verifiedAt": "2026-11-05", "sourceUrl": "https://protonvpn.com/pricing" }, { "id": "unlimited-1m", "name": "Proton Unlimited, 1 month", "tier": "Proton Unlimited", "termMonths": 1, "monthly": 12.99, "total": 12.99, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://protonvpn.com/pricing" }, { "id": "unlimited-12m", "name": "Proton Unlimited, 1 year", "tier": "Proton Unlimited", "termMonths": 12, "monthly": 9.99, "total": 119.88, "renewalTotal": 119.88, "renewalMonths": 12, "verifiedAt": "2026-11-05", "sourceUrl": "https://protonvpn.com/pricing" }, { "id": "unlimited-24m", "name": "Proton Unlimited, 2 years", "tier": "Proton Unlimited", "termMonths": 24, "monthly": 7.99, "total": 191.76, "renewalTotal": 119.88, "renewalMonths": 12, "promoLabel": "38% off", "verifiedAt": "2026-11-05", "sourceUrl": "https://protonvpn.com/pricing" } ], "moneyBackDays": 30, "freeTier": { "available": true, "limits": "No card needed. 1 device and servers in 10 countries: the Netherlands, Japan, Romania, Poland, Norway, Switzerland, Singapore, Mexico, Canada and the United States. Proton picks the server. Medium speed. Streaming support is for paid plans only. No P2P, NetShield, Secure Core or split tunneling." }, "paymentMethods": [ "Visa", "Mastercard", "American Express", "PayPal", "Proton credits (bought with cash, bank transfer or Bitcoin)", "Apple App Store / Google Play in-app purchase" ], "anonymousPayment": true, "summary": "VPN Plus costs $4.49 a month on the 1-year plan and $3.49 a month on the 2-year plan. These are introductory prices. The 2-year plan renews at $83.88 every 12 months. Proton Unlimited on the 2-year plan renews at $119.88 every 12 months. There is a 30-day money-back guarantee. Bank transfers and cash cannot be refunded, and Apple handles refunds for App Store purchases.", "note": "The pricing page renders the 2-year term by default; 1-month and 1-year prices come from the plan data embedded in the same page (duration toggle: 1 month / 1 year / 2 years). The VPN Plus 1-year ($4.49/mo) and 2-year ($3.49/mo) prices are introductory: the embedded data lists regular prices of $83.88 per year and $119.76 per 2 years, and the page states the 2-year plan renews at $83.88 every 12 months. Proton Unlimited 2-year renews at $119.88 every 12 months. 30-day money-back guarantee; bank-transfer and cash payments cannot be refunded; App Store purchases are refunded by Apple (https://protonvpn.com/support/cancel-vpn-subscription).", "verifiedAt": "2026-11-05", "sourceUrl": "https://protonvpn.com/pricing" }, "network": { "servers": 21882, "countries": 149, "cities": 197, "ownedServers": "partial", "ramOnly": false, "virtualLocations": true, "note": "Live counters on the servers page at load time (2026-11-05): 21,882 servers, 149 countries, 197 locations (incl. 125 Secure Core and 18,944 Plus servers; it showed 21,722 servers until 2026-11-04); marketing copy says 20,000+ servers in 140+ countries. Proton owns, installs and operates its Secure Core servers (Switzerland, Iceland, Sweden) (https://protonvpn.com/features/secure-core); ownership of the other servers is not stated. No RAM-only servers by design: all servers use LUKS full-disk encryption (https://protonvpn.com/blog/ram-only-servers). Smart Routing provides virtual locations for 100+ countries (https://protonvpn.com/support/how-smart-routing-works).", "verifiedAt": "2026-11-05", "sourceUrl": "https://protonvpn.com/vpn-servers" }, "security": { "protocols": [ "wireguard", "openvpn", "ikev2", "proprietary" ], "proprietaryProtocol": "Stealth (WireGuard tunnelled over TLS, for obfuscation)", "encryption": "AES-256 or ChaCha20, with a 4096-bit RSA key exchange, HMAC-SHA384 and perfect forward secrecy.", "killSwitch": { "desktop": true, "mobile": true }, "splitTunneling": [ "windows", "macos", "linux", "android", "android-tv" ], "obfuscation": true, "multiHop": true, "dedicatedIp": false, "portForwarding": true, "postQuantum": false, "adBlocker": true, "dns": { "ownResolvers": true, "leakProtection": true, "ipv6": "supported" }, "note": "Kill switch on Windows, macOS, Linux, iOS/iPadOS and Android (https://protonvpn.com/support/what-is-kill-switch). Split tunneling on Windows, macOS (experimental, app exclusion only), Linux GUI, Android, Android TV and the browser extension; IKEv2 is offered in the Apple apps (https://protonvpn.com/support/protonvpn-split-tunneling). Secure Core = multi-hop through Proton-owned servers; NetShield = DNS-based ad/tracker/malware blocker. Dedicated servers with static IPs exist only on Proton VPN Professional and Proton Workspace business plans (https://proton.me/support/dedicated-server-locations). Proton runs its own DNS servers with leak protection in all apps (https://protonvpn.com/support/dns-leaks-privacy). IPv6 is routed through the VPN on Windows, Linux, Android and the extension and disabled (leak-protected) on macOS and iOS; about 80% of servers support IPv6 (https://protonvpn.com/support/prevent-ipv6-vpn-leaks). Post-quantum encryption is listed as future work on Proton VPN's 2026 roadmap (https://protonvpn.com/blog/2026-spring-summer-roadmap).", "verifiedAt": "2026-10-31", "sourceUrl": "https://protonvpn.com/features" }, "privacy": { "loggingPolicy": { "summary": "Proton VPN states it is a no-logs service: it does not log users' traffic or the content of communications and keeps no VPN session data; the free service is covered by the same policy (policy dated 30 July 2025).", "noLogsClaim": true, "sourceUrl": "https://protonvpn.com/privacy-policy" }, "audits": [ { "auditor": "Securitum", "date": "2022-04-22", "scope": [ "no-logs", "infrastructure" ], "url": "https://protonvpn.com/blog/no-logs-audit", "summary": "First annual no-logs audit of Proton VPN's server infrastructure. Date is the publication date of Proton's announcement; the audit month is not stated." }, { "auditor": "Securitum", "date": "2023-01-01", "scope": [ "no-logs", "infrastructure" ], "url": "https://protonvpn.com/blog/no-logs-audit", "summary": "Second annual no-logs audit (on-site review of VPN and server configuration, procedures and staff interviews). Only the year 2023 is stated, so 1 January is a placeholder." }, { "auditor": "Securitum", "date": "2024-01-01", "scope": [ "no-logs", "infrastructure" ], "url": "https://protonvpn.com/blog/no-logs-audit", "summary": "Third annual no-logs audit. Only the year 2024 is stated, so 1 January is a placeholder." }, { "auditor": "Securitum", "date": "2025-01-01", "scope": [ "no-logs", "infrastructure" ], "url": "https://protonvpn.com/blog/no-logs-audit", "summary": "Fourth annual no-logs audit. Only the year 2025 is stated, so 1 January is a placeholder." }, { "auditor": "Securitum", "date": "2026-06-16", "scope": [ "no-logs", "infrastructure" ], "url": "https://protonvpn.com/blog/no-logs-audit", "summary": "Fifth annual no-logs audit: Securitum found no evidence that the examined server infrastructure logs browsing activity, DNS queries, destination services or user-identifiable connection metadata. Date is the 'last update' shown on Proton's announcement; the audit month is not stated." } ], "warrantCanary": false, "transparencyReport": { "available": true, "url": "https://proton.me/legal/transparency" }, "incidents": [ { "date": "2019-01-01", "summary": "A Swiss court approved a request for Proton VPN user data in January 2019; Proton reported it could not comply because it holds no customer IP information (month stated, day is a placeholder).", "severity": "low", "sourceUrl": "https://proton.me/legal/transparency" }, { "date": "2021-09-06", "summary": "Following a binding Swiss legal order in a French criminal case, Proton was required to collect and disclose the IP address of a climate activist's Proton Mail account; Proton said its encryption was not bypassed and that Proton VPN, unlike email, cannot be compelled to log user data.", "severity": "medium", "sourceUrl": "https://proton.me/blog/climate-activist-arrest" }, { "date": "2024-05-08", "summary": "Court documents showed Proton gave Spanish police, via Swiss authorities, the recovery email address of a Proton Mail account; Apple's records for that address then identified a Catalan activist.", "severity": "medium", "sourceUrl": "https://techcrunch.com/2024/05/08/encrypted-services-apple-proton-and-wire-helped-spanish-police-identify-activist/" } ], "verifiedAt": "2026-10-31" }, "streaming": [ { "service": "netflix", "region": "US, UK, CA, AU, JP, DE, FR, ES, IT, NL, KR and 15 more", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in Proton's streaming guide. Paid plans only." }, { "service": "prime-video", "region": "US, UK, CA, AU, DE, FR, ES, IT, JP, IN and 12 more", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in Proton's streaming guide. Paid plans only." }, { "service": "disney-plus", "region": "US, UK, CA, AU, DE, FR, ES, IT, JP, IN and 12 more", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in Proton's streaming guide. Paid plans only." }, { "service": "bbc-iplayer", "region": "UK", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in Proton's streaming guide. Paid plans only." }, { "service": "hulu", "region": "US", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in Proton's streaming guide. Paid plans only." }, { "service": "hbo-max", "region": "US and 20 other countries", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed as \"Max and HBO Max\" in Proton's streaming guide. Paid plans only." }, { "service": "peacock", "region": "US", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in Proton's streaming guide. Paid plans only." }, { "service": "paramount-plus", "region": "US, UK, CA, AU, DE, FR, IT, CH and 8 more", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in Proton's streaming guide. Paid plans only." }, { "service": "crunchyroll", "region": "US", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in Proton's streaming guide. Paid plans only." }, { "service": "youtube-tv", "region": "US", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in Proton's streaming guide. Paid plans only." }, { "service": "dazn", "region": "CA, DE, IT, CH, UK, FR, NO, ES", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in Proton's streaming guide. Paid plans only." }, { "service": "espn-plus", "region": "US", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed in Proton's streaming guide. Paid plans only." } ], "apps": { "platforms": [ "windows", "macos", "linux", "ios", "android", "android-tv", "apple-tv", "fire-tv", "router" ], "simultaneousDevices": 10, "routerSupport": true, "browserExtensions": [ "chrome", "firefox", "edge" ], "smartDns": false, "openSourceClients": "all", "note": "Download page lists Windows, macOS, Linux, Chromebook, Android, iPhone/iPad, Chrome and Firefox extensions, Android TV, Apple TV and Fire TV (Firestick). The Chrome extension also runs on Chromium browsers such as Edge, Brave and Opera (https://protonvpn.com/support/browser-extensions). Router setup via OpenVPN/WireGuard configs for OpenWrt, AsusWRT, pfSense, OPNsense, MikroTik and others (https://protonvpn.com/support/installing-protonvpn-on-a-router). No Smart DNS service is offered. Paid plans allow 10 simultaneous connections (free: 1). All apps are open source (https://protonvpn.com/blog/open-source).", "verifiedAt": "2026-10-31", "sourceUrl": "https://protonvpn.com/download" }, "support": { "liveChat": "24/7", "email": true, "knowledgeBase": true, "measuredResponseHours": null, "verifiedAt": "2026-10-31", "sourceUrl": "https://protonvpn.com/support/live-chat-support" }, "commercial": { "affiliateProgram": true, "notes": "Proton partner programme with an affiliate track (https://proton.me/partners): up to 100% commission on new referrals plus recurring revenue on renewals. Live chat is for paid plans only and starts with an AI assistant before hand-off to a human; free users get ticket support (https://proton.me/support/contact-product)." }, "sourceUrls": { "pricing": "https://protonvpn.com/pricing", "servers": "https://protonvpn.com/vpn-servers", "features": "https://protonvpn.com/features", "privacyPolicy": "https://protonvpn.com/privacy-policy", "refund": "https://protonvpn.com/support/cancel-vpn-subscription", "audits": "https://protonvpn.com/blog/no-logs-audit", "changelog": "https://protonvpn.com/support/release-notes-windows", "blog": "https://protonvpn.com/blog" }, "score": { "total": 8.4, "rank": 2, "coverage": 80, "dimensions": { "privacy": { "score": 7.1, "inputs": { "eyesAlliance": "none", "newestNoLogsAudit": "2026-06-16", "auditAgeMonths": 4, "ramOnly": false, "noLogsClaim": true, "anonymousPayment": true, "incidentPenalty": 1 } }, "security": { "score": 9, "inputs": { "protocols": "wireguard, openvpn, ikev2, proprietary", "killSwitchDesktop": true, "killSwitchMobile": true, "obfuscation": true, "multiHop": true, "postQuantum": false, "ownDns": true, "ipv6": "supported", "newestTechnicalAudit": "2026-06-16" } }, "speed": { "score": null, "inputs": { "labData": null } }, "streaming": { "score": 9, "inputs": { "servicesTestedWorking": 0, "servicesClaimed": 12, "smartDns": false } }, "apps": { "score": 9.1, "inputs": { "platforms": 9, "simultaneousDevices": 10, "routerSupport": true, "browserExtensions": 3, "openSourceClients": "all", "splitTunnelingPlatforms": 5 } }, "price": { "score": 8.5, "inputs": { "lowestEffectiveMonthly": 3.49, "monthlyPlanPrice": 9.99, "moneyBackDays": 30, "freeTier": true, "renewalPolicy": "stated", "renewalRatio": 1, "paymentMethods": 6 } }, "support": { "score": 10, "inputs": { "liveChat": "24/7", "email": true, "knowledgeBase": true, "measuredResponseHours": null } }, "transparency": { "score": 8, "inputs": { "transparencyReport": true, "warrantCanary": false, "openSourceClients": "all", "audits": 5 } } } } }, { "slug": "surfshark", "name": "Surfshark", "tagline": "Netherlands-based VPN with unlimited devices and a Deloitte-assured no-logs policy", "identity": { "website": "https://surfshark.com/", "owner": "Surfshark B.V.", "parentCompany": "Nord Security", "hqCountry": "NL", "hqCity": "Amsterdam", "jurisdiction": "NL", "eyesAlliance": "9", "founded": 2018, "note": "About page: Surfshark B.V., KvK 81967985, Kabelweg 57, 1014BA Amsterdam; timeline says the journey began with the VPN launch in 2018 (used as founding year); FAQ states Surfshark and Nord Security merged under one holding company in 2022 while continuing to operate independently (merger blog post updated 2022-02-01).", "verifiedAt": "2026-10-31", "sourceUrl": "https://surfshark.com/about-us" }, "pricing": { "currency": "USD", "plans": [ { "id": "starter-2y", "name": "Surfshark Starter 24-month", "tier": "Starter", "termMonths": 27, "monthly": 2.49, "total": 67.23, "renewalTotal": null, "renewalMonths": 12, "renewalPolicy": "unknown", "extraMonths": 3, "promoLabel": "+3 extra months", "verifiedAt": "2026-11-05", "sourceUrl": "https://surfshark.com/pricing" }, { "id": "one-2y", "name": "Surfshark One 24-month", "tier": "One", "termMonths": 27, "monthly": 2.49, "total": 67.23, "renewalTotal": null, "renewalMonths": 12, "renewalPolicy": "unknown", "extraMonths": 3, "promoLabel": "Black Friday: +3 months", "verifiedAt": "2026-11-05", "sourceUrl": "https://surfshark.com/pricing" }, { "id": "one-plus-2y", "name": "Surfshark One+ 24-month", "tier": "One+", "termMonths": 27, "monthly": 3.99, "total": 107.73, "renewalTotal": null, "renewalMonths": 12, "renewalPolicy": "unknown", "extraMonths": 3, "promoLabel": "+3 extra months", "verifiedAt": "2026-11-05", "sourceUrl": "https://surfshark.com/pricing" }, { "id": "starter-1y", "name": "Surfshark Starter 12-month", "tier": "Starter", "termMonths": 15, "monthly": 2.99, "total": 44.85, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "unknown", "extraMonths": 3, "promoLabel": "+3 extra months", "verifiedAt": "2026-11-05", "sourceUrl": "https://surfshark.com/pricing" }, { "id": "starter-1m", "name": "Surfshark Starter monthly", "tier": "Starter", "termMonths": 1, "monthly": 18.95, "total": 18.95, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://surfshark.com/pricing" } ], "moneyBackDays": 30, "freeTier": { "available": false, "limits": "No free tier. New users get a 7-day free trial on 12- and 24-month plans, on up to 3 devices. You need a card, PayPal or Apple Pay, and the trial turns into a paid plan." }, "paymentMethods": [ "credit/debit cards", "PayPal", "Google Pay", "Apple Pay", "cryptocurrency (not available on phones or tablets)", "other regional methods shown at checkout", "in-app purchase (Apple App Store, Google Play, Amazon Appstore)" ], "anonymousPayment": true, "summary": "Surfshark sells three tiers: Starter, One and One+. On the 2-year plans, Starter and One cost $67.23 for the first 27 months, which includes 3 extra months. One+ costs $107.73. The 1-year Starter plan costs $44.85 for 15 months, with 3 extra months included. Starter costs $18.95 month to month. Surfshark does not state the renewal price. After the first term, 2-year plans renew every year. The monthly plan renews at the same price. The 30-day refund covers your first purchase only. VAT may apply.", "note": "Pricing page (2026-11-05): the server-rendered HTML shows only 24-month plans. Starter and One both cost $67.23 for the first 27 months (+3 EXTRA months; Starter 'Save 87%', One 'Save 88%'), One+ is $107.73; the 'Black Friday deal' badge sits on the One card only (on 2026-10-31 it was on Starter and One). The 12-month and 1-month prices render client-side; they are read from the page's embedded plan data (__NEXT_DATA__), whose fields reproduce every printed 24-month figure exactly: Starter ('vpn') 12 months + 3 bonus = 15 months for $44.85 ($2.99/mo), monthly $18.95; One $44.85 and $19.95; One+ $104.85 and $22.85. That data also holds recurring prices ($79, $99, $119 a year) that the page never prints, so they are not recorded. Renewal amount is not stated ('Upon renewal, you will be charged the applicable renewal price'); the FAQ says the 2-year plan is billed once and then annually. Until 2026-11-05 the 12-month and monthly Starter prices came from Surfshark's official blog post 'Surfshark VPN plans explained' dated 2026-09-22, which states prices are accurate as of 2026-07-30; that post also listed One at $3.59/mo (12-month) and $18.95 (monthly) and One+ at $7.49/mo (12-month) and $21.85 (monthly). VAT may apply. Refunds: 30 days, initial purchase only, one per service; prepaid/gift-card payments, Alternative ID and anonymous Dedicated IP are non-refundable; crypto refunds are paid in the same cryptocurrency. Plans longer than a month therefore carry renewalPolicy 'unknown' and earn half the renewal points; the monthly plan renews at the same price.", "verifiedAt": "2026-11-05", "sourceUrl": "https://surfshark.com/pricing" }, "network": { "servers": 4500, "countries": 100, "cities": 130, "ownedServers": "unknown", "ramOnly": true, "virtualLocations": true, "note": "Servers page: '4500+ servers', '100 countries', '130+ locations' (recorded as cities), '100% RAM-only servers', 10 Gbps ports, dedicated IP in 20 locations. Virtual locations are confirmed by the support FAQ and the June 2022 blog post announcing virtual Indian locations physically hosted in Singapore, the Netherlands and London. Server ownership is not stated.", "verifiedAt": "2026-11-02", "sourceUrl": "https://surfshark.com/servers" }, "security": { "protocols": [ "wireguard", "openvpn", "ikev2", "proprietary" ], "proprietaryProtocol": "Dausos", "encryption": "AES-256-GCM on OpenVPN and IKEv2, ChaCha20 on WireGuard and AEGIS-256X2 on Dausos. WireGuard and Dausos use post-quantum protection by default.", "killSwitch": { "desktop": true, "mobile": true }, "splitTunneling": [ "windows", "macos", "android", "ios" ], "obfuscation": true, "multiHop": true, "dedicatedIp": true, "portForwarding": false, "postQuantum": true, "adBlocker": true, "dns": { "ownResolvers": true, "leakProtection": true, "ipv6": "blocked" }, "note": "Kill Switch on Windows, macOS, Linux, Android and iOS with soft/strict modes. Bypasser split tunneling on Windows, macOS, Android and iOS. On Windows the Bypass VPN mode takes apps, websites and IP addresses while the Route via VPN mode takes apps only (help center article 360017349293, updated 2026-09-11); macOS takes apps and websites; Android takes apps and websites and adds a Reverse Bypasser mode; iOS takes websites only. Dausos (AEGIS-256X2, post-quantum) was available only in the macOS app at verification. Obfuscated servers, NoBorders mode, Dynamic MultiHop, Rotating IP, Everlink, CleanWeb ad/tracker blocking, dedicated IP add-on. Port forwarding is not supported (blog, 2026-09-09). 'Private DNS on every server' (server pages) and DNS addresses that adapt to the connected server (help center). IPv6: the security page states DNS, IPv6 and WebRTC leaks are blocked and the Windows app lists IPv6 leak protection, but the help center says Surfshark does not support IPv6 and recommends disabling it on the device.", "verifiedAt": "2026-10-31", "sourceUrl": "https://surfshark.com/features/vpn-security" }, "privacy": { "loggingPolicy": { "summary": "Surfshark B.V. (Netherlands) states it does not collect visited IP addresses, browsing history, session information, connection timestamps, used bandwidth or network traffic; it keeps account data (email, encrypted password, registration date), billing data (partial card number, expiry, payer country) and aggregated performance and diagnostic data; connection details held temporarily on the VPN server are deleted within 15 minutes after the session ends. Privacy policy last updated 2026-10-12.", "noLogsClaim": true, "sourceUrl": "https://surfshark.com/privacy" }, "audits": [ { "auditor": "Deloitte", "date": "2025-06-16", "scope": [ "no-logs" ], "url": "https://surfshark.com/blog/deloitte-nologs-policy-verified-again", "summary": "Second Deloitte no-logs assurance report (ISAE 3000) covering standard, static and multiport servers, configuration and deployment processes; announced 2025-06-16. Report available to users in their account." }, { "auditor": "Deloitte", "date": "2023-01-25", "scope": [ "no-logs" ], "url": "https://surfshark.com/blog/deloitte-audit-nologs", "summary": "First Deloitte no-logs assurance report covering server/VPN configuration, deployment process, APIs and SDN; blog post dated 2023-01-25 (used as date)." }, { "auditor": "Cure53", "date": "2026-03-30", "scope": [ "protocol" ], "url": "https://surfshark.com/media/NOR-29-summary.pdf", "summary": "White-box penetration test and source-code audit of the Dausos protocol architecture and cryptography, February-March 2026; management summary dated 30 March 2026; no critical or high findings within the protocol itself." }, { "auditor": "SecuRing", "date": "2025-12-01", "scope": [ "infrastructure" ], "url": "https://surfshark.com/blog/surfshark-securing-infrastructure-audit", "summary": "External penetration test of the network infrastructure; Trust Center dates it to December 2025 (first of month used; report file dated 2025-12-17); announced 2026-01-23; no critical vulnerabilities." }, { "auditor": "SecuRing", "date": "2025-06-09", "scope": [ "apps" ], "url": "https://surfshark.com/media/attestation_letter_20250609-sig.pdf", "summary": "Attestation letter dated 9 June 2025 for a black/gray-box penetration test (24 Feb-3 Apr 2025) of Windows, macOS, Linux, Android and iOS apps, Chrome/Firefox/Edge extensions and web apps." }, { "auditor": "Cure53", "date": "2021-04-01", "scope": [ "infrastructure" ], "url": "https://surfshark.com/wp-content/uploads/2021/05/SRF-02-summary.pdf", "summary": "Configuration audit and security assessment of Surfshark servers, VPN configuration and related infrastructure, tested in March 2021; management summary dated April 2021 (first of month used)." }, { "auditor": "Cure53", "date": "2018-11-12", "scope": [ "apps" ], "url": "https://cure53.de/pentest-report_surfshark.pdf", "summary": "Penetration test and code audit of the Chrome and Firefox browser extensions, November 2018; report dated 12 November 2018; two low-impact findings." } ], "warrantCanary": false, "transparencyReport": { "available": true, "url": "https://surfshark.com/transparency-report" }, "incidents": [], "verifiedAt": "2026-10-31" }, "streaming": [ { "service": "netflix", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the official \"VPN for streaming\" page among major platforms. Surfshark notes that results may vary and platform terms apply." }, { "service": "prime-video", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the official \"VPN for streaming\" page." }, { "service": "disney-plus", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the official \"VPN for streaming\" page." }, { "service": "bbc-iplayer", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the official \"VPN for streaming\" page." }, { "service": "hbo-max", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the official \"VPN for streaming\" page." }, { "service": "hulu", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the official \"VPN for streaming\" page." }, { "service": "crunchyroll", "status": "claimed", "checkedAt": "2026-10-31", "note": "Listed on the official \"VPN for streaming\" page." } ], "apps": { "platforms": [ "windows", "macos", "linux", "ios", "android", "android-tv", "fire-tv", "apple-tv", "router" ], "simultaneousDevices": "unlimited", "routerSupport": true, "browserExtensions": [ "chrome", "firefox", "edge" ], "smartDns": false, "openSourceClients": "none", "note": "Native apps for Windows, macOS, Linux, Android, iOS, Fire TV (incl. Vega OS), Android TV/Google TV and Apple TV (tvOS 17+); Samsung Tizen and LG webOS have no native app (router setup instead); routers via manual setup. SmartDNS was discontinued from 2026-02-02 (help-center notice). No official page states that any app is open source.", "verifiedAt": "2026-10-31", "sourceUrl": "https://surfshark.com/download" }, "support": { "liveChat": "24/7", "email": true, "knowledgeBase": true, "measuredResponseHours": null, "verifiedAt": "2026-10-31", "sourceUrl": "https://surfshark.com/features" }, "commercial": { "affiliateProgram": true, "notes": "Transparency report (quarterly) states Surfshark is transitioning away from its warrant canary; July-September 2026: 23 government inquiries, 0 warrants, 0 NSLs, 0 gag orders. Trust Center also lists MASA certification for the Android app and an AV-Test score for Surfshark Antivirus." }, "sourceUrls": { "pricing": "https://surfshark.com/pricing", "servers": "https://surfshark.com/servers", "features": "https://surfshark.com/features", "privacyPolicy": "https://surfshark.com/privacy", "refund": "https://support.surfshark.com/hc/en-us/articles/360003103653-What-is-Surfshark-s-refund-policy", "audits": "https://surfshark.com/trust-center", "blog": "https://surfshark.com/blog" }, "score": { "total": 7.9, "rank": 6, "coverage": 80, "dimensions": { "privacy": { "score": 8.2, "inputs": { "eyesAlliance": "9", "newestNoLogsAudit": "2025-06-16", "auditAgeMonths": 16, "ramOnly": true, "noLogsClaim": true, "anonymousPayment": true, "incidentPenalty": 0 } }, "security": { "score": 10, "inputs": { "protocols": "wireguard, openvpn, ikev2, proprietary", "killSwitchDesktop": true, "killSwitchMobile": true, "obfuscation": true, "multiHop": true, "postQuantum": true, "ownDns": true, "ipv6": "blocked", "newestTechnicalAudit": "2026-03-30" } }, "speed": { "score": null, "inputs": { "labData": null } }, "streaming": { "score": 5.3, "inputs": { "servicesTestedWorking": 0, "servicesClaimed": 7, "smartDns": false } }, "apps": { "score": 8.1, "inputs": { "platforms": 9, "simultaneousDevices": "unlimited", "routerSupport": true, "browserExtensions": 3, "openSourceClients": "none", "splitTunnelingPlatforms": 4 } }, "price": { "score": 7, "inputs": { "lowestEffectiveMonthly": 2.49, "monthlyPlanPrice": 18.95, "moneyBackDays": 30, "freeTier": false, "renewalPolicy": "unknown", "renewalRatio": null, "paymentMethods": 7 } }, "support": { "score": 10, "inputs": { "liveChat": "24/7", "email": true, "knowledgeBase": true, "measuredResponseHours": null } }, "transparency": { "score": 5, "inputs": { "transparencyReport": true, "warrantCanary": false, "openSourceClients": "none", "audits": 7 } } } } }, { "slug": "windscribe", "name": "Windscribe", "tagline": "The Best VPN on Earth.", "identity": { "website": "https://windscribe.com/", "owner": "Windscribe Limited", "parentCompany": null, "hqCountry": "CA", "hqCity": "Toronto", "jurisdiction": "CA", "eyesAlliance": "5", "founded": 2016, "note": "Independent, bootstrapped and founder-led (founders Yegor Sak, Alex Paguis and Mark Ulicki) with no outside investors, per windscribe.com/llm-info (updated September 2025). Windscribe Limited is registered in the province of Ontario; the Terms of Use (updated 5 August 2026) give 555 Richmond St West, Toronto, ON M5V 3B1 and Ontario governing law.", "verifiedAt": "2026-10-31", "sourceUrl": "https://windscribe.com/llm-info" }, "pricing": { "currency": "USD", "plans": [ { "id": "windscribe-pro-1m", "name": "Pro Monthly", "tier": "Pro", "termMonths": 1, "monthly": 9, "total": 9, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://windscribe.com/upgrade" }, { "id": "windscribe-pro-12m", "name": "Pro Yearly", "tier": "Pro", "termMonths": 12, "monthly": 5.75, "total": 69, "renewalTotal": null, "renewalMonths": null, "renewalPolicy": "same", "verifiedAt": "2026-11-05", "sourceUrl": "https://windscribe.com/upgrade" } ], "moneyBackDays": 7, "freeTier": { "available": true, "limits": "10 GB a month if you confirm your email and stay subscribed to Windscribe's promo emails, one or two a month. Otherwise 2 GB. Servers in 10 countries from a shared free pool. No throttling and unlimited devices. A one-time post about Windscribe on X raises the allowance to 15 GB a month, and each referral adds 1 GB." }, "paymentMethods": [ "credit card", "PayPal", "cryptocurrency", "local payments", "cash" ], "anonymousPayment": true, "summary": "Windscribe Pro costs $9 a month, or $69 a year, which works out at $5.75 a month. Both renew at the same price. Build a Plan costs $1 per location per month, with a $3 minimum and up to 7 locations. Each location adds 10 GB a month. Static IPs cost extra: $24 a year for a datacenter IP or $96 for a residential one. You can get a refund within 7 days of your first purchase if you used less than 10 GB.", "note": "Pro: $9.00 billed monthly or $69 billed every 12 months ($5.75/month); both renew automatically at the same price, with no introductory discount or promotion shown on 2026-10-31. Build a Plan: $1.00 per location per month ($3 minimum, up to 7 locations), each location adding 10 GB to the monthly allowance; llm-info also describes an optional unlimited-data add-on. Static IPs are sold annually as an extra ($24/year datacenter, $96/year residential). Refunds: within 7 days of the initial purchase (the Terms of Use say 7 business days) and under 10 GB of use; renewals are not refundable.", "verifiedAt": "2026-11-05", "sourceUrl": "https://windscribe.com/upgrade" }, "network": { "servers": null, "countries": 69, "cities": 135, "ownedServers": "unknown", "ramOnly": true, "virtualLocations": true, "note": "Windscribe publishes no server count (knowledge base, 17 October 2025: the number fluctuates; 'hundreds of servers' and thousands of IPs). Country and city figures are from the features index and homepage (69+ countries, 135+ cities) and the knowledge base (69 countries, 10 of them free); the server-list page instead says 'over 85 countries' and '190+ locations', which Windscribe does not reconcile. Servers are described as bare-metal dedicated machines, all RAM-only (diskless), physically located where listed except three self-declared virtual locations (Fake Antarctica, Fake India, Fake Russia); ownership versus rental is not stated.", "verifiedAt": "2026-11-02", "sourceUrl": "https://windscribe.com/features" }, "security": { "protocols": [ "wireguard", "openvpn", "ikev2" ], "encryption": "AES-256-GCM on OpenVPN and IKEv2. OpenVPN uses SHA512 authentication and an RSA-4096 handshake, and IKEv2 uses ECP384 or ECP521. WireGuard uses ChaCha20-Poly1305 with Curve25519. Every protocol has perfect forward secrecy.", "killSwitch": { "desktop": true, "mobile": true }, "splitTunneling": [ "windows", "macos", "linux", "android" ], "obfuscation": true, "multiHop": true, "dedicatedIp": false, "portForwarding": true, "postQuantum": true, "adBlocker": true, "dns": { "ownResolvers": true, "leakProtection": true, "ipv6": "supported" }, "note": "The kill switch is the always-on Firewall in the Windows, macOS and Linux apps (fails closed); on Android and iOS Windscribe points to the OS 'Always On VPN' setting, which it says has the same effect, rather than an in-app firewall. Obfuscation via the Stealth (OpenVPN wrapped in TLS) and WStunnel (OpenVPN in WebSocket frames on port 443) protocols. Double Hop requires the desktop app plus the browser extension. Static IPs ($24/year datacenter, $96/year residential, each shared by a handful of users) are offered, but Windscribe explicitly does not sell dedicated IPs for privacy reasons; port forwarding (up to 10 ports per device) requires a static IP, and llm-info also lists ephemeral port forwarding. Post-quantum: hybrid X25519MLKEM768 handshakes on WireGuard. R.O.B.E.R.T. is a server-side DNS blocker for ads, trackers, malware and other categories (free plan: malware and ads lists only). IPv6 is routed through the tunnel automatically. Sources: features index, features/strongest-encryption, features/firewall, features/split-tunneling, features/double-hop, features/static-ips, staticips, features/robert, knowledge-base/does-windscribe-offer-dedicated-ips.", "verifiedAt": "2026-10-31", "sourceUrl": "https://windscribe.com/features" }, "privacy": { "loggingPolicy": { "summary": "Stores the total bytes transferred in the last 30 days and the date (not time) of last activity, plus activated app versions; states it keeps no record of VPN sessions, source IP, assigned VPN IP, connection timestamps, DNS queries or sites visited, and that the time of connection is held only in server memory and discarded on disconnect. Marketed as 'no identifying logs'. Privacy policy updated 30 July 2024.", "noLogsClaim": true, "sourceUrl": "https://windscribe.com/privacy" }, "audits": [ { "auditor": "Leviathan Security Group", "date": "2021-09-01", "scope": [ "apps" ], "url": "https://windscribe.com/knowledge-base/articles/has-windscribe-been-audited", "summary": "Desktop application code audit, September 2021 (day not stated; first of the month used); all raised issues addressed. Report on the Desktop-App GitHub wiki." }, { "auditor": "Leviathan Security Group", "date": "2022-03-01", "scope": [ "apps" ], "url": "https://windscribe.com/knowledge-base/articles/has-windscribe-been-audited", "summary": "Android and iOS app audit, March 2022 (day not stated; first of the month used); all issues found were addressed. Report in the Android-App GitHub repository." }, { "auditor": "Packetlabs", "date": "2024-06-01", "scope": [ "infrastructure" ], "url": "https://windscribe.com/knowledge-base/articles/has-windscribe-been-audited", "summary": "Audit of the FreshScribe server stack (VPN infrastructure), June 2024 (day not stated; first of the month used), 'with a very positive outcome'. No separate audit of the no-logs policy has been published." } ], "warrantCanary": true, "transparencyReport": { "available": true, "url": "https://windscribe.com/transparency" }, "incidents": [ { "date": "2021-06-24", "summary": "Two Windscribe OpenVPN servers in Ukraine were seized by local authorities; their unencrypted disks held an OpenVPN server certificate and private key, which Windscribe disclosed on 7 July 2021 before replacing its certificate authority and moving all servers to RAM-only operation.", "severity": "medium", "sourceUrl": "https://windscribe.com/blog/openvpn-security-improvements-and-changes-7b04ea49222/" }, { "date": "2025-04-11", "summary": "A Greek court dismissed criminal charges brought against founder Yegor Sak over activity traced to a Windscribe server in Finland, a case that began with a June 2023 Canadian Department of Justice letter; Windscribe says it had no user data to hand over.", "severity": "low", "sourceUrl": "https://windscribe.com/blog/windscribe-greek-court-case/" }, { "date": "2026-02-05", "summary": "Windscribe disclosed on X that Dutch authorities had seized one of its Netherlands VPN servers without a warrant; the company says the RAM-only machine held a stock Ubuntu install and no logs or user data.", "severity": "low", "sourceUrl": "https://windscribe.com/features/no-identifying-logs" } ], "verifiedAt": "2026-10-31" }, "streaming": [ { "service": "netflix", "region": "US", "status": "claimed", "checkedAt": "2026-10-31", "note": "Streaming page: \"Want to watch Netflix U.S. while sipping coffee in Paris? No problem.\" Netflix page: \"Yes, Netflix can be accessed with a VPN.\"" }, { "service": "hulu", "region": "US", "status": "claimed", "checkedAt": "2026-10-31", "note": "\"Windscribe's U.S. VPN servers allow you to stream Hulu from anywhere.\" New York and Miami servers are recommended." }, { "service": "bbc-iplayer", "region": "UK", "status": "claimed", "checkedAt": "2026-10-31", "note": "\"Yes, BBC iPlayer works with a VPN.\" London and Manchester servers are recommended." }, { "service": "disney-plus", "region": "US", "status": "claimed", "checkedAt": "2026-10-31", "note": "\"Windscribe unlocks the Disney+ U.S. library.\" The UK library is also mentioned." }, { "service": "prime-video", "status": "claimed", "checkedAt": "2026-10-31", "note": "A hedged claim: \"Prime Video can work with a VPN, but not every VPN is consistent.\" U.S. servers are said to offer the largest library." }, { "service": "hbo-max", "region": "US", "status": "claimed", "checkedAt": "2026-10-31", "note": "\"Windscribe consistently works with HBO Max thanks to our dedicated U.S. servers.\"" }, { "service": "dazn", "status": "claimed", "checkedAt": "2026-10-31", "note": "\"Yes, DAZN works with most VPNs,\" with the UK, Germany, Japan and Canada libraries named. But \"consistent access can't be guaranteed.\"" }, { "service": "espn-plus", "region": "US", "status": "claimed", "checkedAt": "2026-10-31", "note": "The ESPN page claims ESPN streaming from a U.S. server. For ESPN+ it says only that \"a VPN can help you access it from abroad\" and that you need a US payment method." }, { "service": "peacock", "status": "claimed", "checkedAt": "2026-10-31", "note": "Named only in lists of unblockable platforms on the Hulu and Disney+ pages. No dedicated claim." }, { "service": "paramount-plus", "status": "claimed", "checkedAt": "2026-10-31", "note": "Named only in a list on the Prime Video page. No dedicated claim." } ], "apps": { "platforms": [ "windows", "macos", "linux", "ios", "android", "android-tv", "fire-tv", "apple-tv" ], "simultaneousDevices": "unlimited", "routerSupport": true, "browserExtensions": [ "chrome", "firefox", "edge" ], "smartDns": false, "openSourceClients": "partial", "note": "The download page lists Windows, macOS, Linux, Android, iPhone, Chrome, Firefox, MS Edge, Fire TV, Apple TV, Huawei, routers (knowledge-base setup guide) and an F-Droid build; Android TV is listed on llm-info. Unlimited simultaneous connections, including on the free plan. No Smart DNS product is offered (Windscribe's 'Flexible DNS' is a DNS-settings feature). Desktop and mobile client source code is published at github.com/Windscribe.", "verifiedAt": "2026-10-31", "sourceUrl": "https://windscribe.com/download" }, "support": { "liveChat": "none", "email": true, "knowledgeBase": true, "measuredResponseHours": null, "verifiedAt": "2026-10-31", "sourceUrl": "https://windscribe.com/knowledge-base/articles/how-long-will-it-take-for-support-to-reply-back" }, "commercial": { "affiliateProgram": true, "notes": "Affiliate program available. Support is a 24/7 chatbot (Garry) that escalates to tickets with a stated 24-hour reply target and priority for paid users; no human live chat. Windscribe's founders also run Control D (DNS filtering)." }, "sourceUrls": { "pricing": "https://windscribe.com/upgrade", "servers": "https://windscribe.com/vpn-servers", "features": "https://windscribe.com/features", "privacyPolicy": "https://windscribe.com/privacy", "refund": "https://windscribe.com/knowledge-base/articles/what-is-the-refund-policy-for-windscribe-plans", "audits": "https://windscribe.com/knowledge-base/articles/has-windscribe-been-audited" }, "score": { "total": 6.5, "rank": 8, "coverage": 80, "dimensions": { "privacy": { "score": 4.1, "inputs": { "eyesAlliance": "5", "newestNoLogsAudit": null, "auditAgeMonths": null, "ramOnly": true, "noLogsClaim": true, "anonymousPayment": true, "incidentPenalty": 0 } }, "security": { "score": 10, "inputs": { "protocols": "wireguard, openvpn, ikev2", "killSwitchDesktop": true, "killSwitchMobile": true, "obfuscation": true, "multiHop": true, "postQuantum": true, "ownDns": true, "ipv6": "supported", "newestTechnicalAudit": "2024-06-01" } }, "speed": { "score": null, "inputs": { "labData": null } }, "streaming": { "score": 7.5, "inputs": { "servicesTestedWorking": 0, "servicesClaimed": 10, "smartDns": false } }, "apps": { "score": 8.5, "inputs": { "platforms": 8, "simultaneousDevices": "unlimited", "routerSupport": true, "browserExtensions": 3, "openSourceClients": "partial", "splitTunnelingPlatforms": 4 } }, "price": { "score": 5.5, "inputs": { "lowestEffectiveMonthly": 5.75, "monthlyPlanPrice": 9, "moneyBackDays": 7, "freeTier": true, "renewalPolicy": "same", "renewalRatio": 1, "paymentMethods": 5 } }, "support": { "score": 2, "inputs": { "liveChat": "none", "email": true, "knowledgeBase": true, "measuredResponseHours": null } }, "transparency": { "score": 8.5, "inputs": { "transparencyReport": true, "warrantCanary": true, "openSourceClients": "partial", "audits": 3 } } } } } ] }