Transparency
Fourteen criteria, and their real status
‘Best VPN’ is not a slogan we will use. It is a set of measurable criteria. Until a criterion has been measured, and audited by a third party where security is concerned, it remains shown as ‘not proven’.
| Criterion | Target measure | Status |
|---|---|---|
| C1Zero leaks | No DNS, IPv4, IPv6 or WebRTC packet outside the tunnel, including during a reconnection, a network change, a sleep or a crash. | Not proven |
| C2Reliable kill switch | No traffic outside the tunnel between the connection command and the establishment of the tunnel, nor after a crash. | Not proven |
| C3No logs | No activity data, no connection timestamp, no source IP address kept on the server side. | Not proven |
| C4No identity | Account = random number, with no e-mail address or telephone number; anonymous payment possible. | Not proven |
| C5Performance | Connection in under one second on a healthy network; speed also measured at peak times, raw results published. | Not proven |
| C6Resistance to blocking | Successful connection behind a firewall that only lets TCP port 443 through. | Not proven |
| C7Post-quantum resistance | Hybrid X25519 + ML-KEM exchange for the pre-shared key, reviewed by an external expert. | Not proven |
| C8Non-persistent servers | Relays started from a signed image, in memory, with no writable disk. | Not proven |
| C9Verifiable builds | Applications reproducible identically from the published code; fingerprints and signatures verified. | Not proven |
| C10Transparency | External audits published in full, disclosure programme, transparency report. | Not proven |
| C11Accessibility and languages | RGAA / WCAG 2.2 AA conformance of the site and applications; 14 languages. | Not proven |
| C12Sobriety | 0 cookies on the site, 0 trackers in the applications, telemetry disabled by default. | Not proven |
| C13Self-check | Built-in ‘Check my protection’ test, with a result that can be understood in under 10 seconds. | Not proven |
| C14Honesty of the free tier | Limits published and shown in the application; changes announced at least 30 days in advance. | Not proven |
External audits
External audits
External audit reports will be published here in full, including their unfavourable findings.
Transparency report
Once the service is open, we will regularly publish the number of requests received from authorities and the response given. As we do not keep activity data, we will not be able to provide what we do not have.