Core capabilityEncrypted tunnelDocument modern encrypted VPN protocols. 4 points maximumAsk for a demonstrationDemonstrate encrypted tunnel with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported4 / 4 pts Modern encrypted VPN protocols are documented. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityKill switchBlock traffic if the VPN tunnel fails. 4 points maximumAsk for a demonstrationDemonstrate kill switch with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported4 / 4 pts A kill switch is documented. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkDNS leak protectionPrevent DNS requests escaping the protected connection. 6 points maximumAsk for a demonstrationDemonstrate dns leak protection with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported6 / 6 pts DNS leak protection is documented. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkMulti-hop routingRoute through multiple VPN locations with documented conditions. 6 points maximumAsk for a demonstrationDemonstrate multi-hop routing with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported6 / 6 pts Double VPN routing is available on supported apps. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityDesktop applicationsOffer native apps for major desktop platforms. 3.2 points maximumAsk for a demonstrationDemonstrate desktop applications with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported3.2 / 3.2 pts Desktop applications are offered. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityMobile applicationsOffer apps for both iOS and Android. 3.2 points maximumAsk for a demonstrationDemonstrate mobile applications with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported3.2 / 3.2 pts iOS and Android applications are offered. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkSplit tunnellingRoute selected apps or destinations outside the VPN, with platform limits stated. 4.8 points maximumAsk for a demonstrationDemonstrate split tunnelling with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Limited2.4 / 4.8 pts Split tunnelling is platform-dependent; confirm support on the intended OS. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkRestricted-network modeProvide a documented obfuscation or censorship-resistant connection method. 4.8 points maximumAsk for a demonstrationDemonstrate restricted-network mode with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported4.8 / 4.8 pts Obfuscated server options are documented. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityPublished logging policyExplain which connection or activity data is retained. 3.2 points maximumAsk for a demonstrationDemonstrate published logging policy with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported3.2 / 3.2 pts A published no-logs policy is linked. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityPublished external auditLink a named external audit or report rather than an unsupported badge. 3.2 points maximumAsk for a demonstrationDemonstrate published external audit with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Not verified0β3.2 / 3.2 pts The named audit report was not reviewed in this evidence set. Not verified Β· Oct 20, 2026Source β |
|---|
Depth checkAuditable application sourcePublish application source for the major client platforms. 4.8 points maximumAsk for a demonstrationDemonstrate auditable application source with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Not verified0β4.8 / 4.8 pts Open source across all major client platforms is not established. Not verified Β· Oct 20, 2026Source β |
|---|
Depth checkLocation selectionChoose the country or server location on the compared paid plan. 4.8 points maximumAsk for a demonstrationDemonstrate location selection with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported4.8 / 4.8 pts Paid plans allow server-location choice. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityMalicious-site blockingBlock known malicious destinations. 3.2 points maximumAsk for a demonstrationDemonstrate malicious-site blocking with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported3.2 / 3.2 pts Basic includes DNS-based malicious-site blocking. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityMultiple concurrent devicesDocument the allowed number of simultaneous connections. 3.2 points maximumAsk for a demonstrationDemonstrate multiple concurrent devices with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported3.2 / 3.2 pts The plan table specifies 10 concurrent devices. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkMalware download scanningInspect downloaded files, with OS restrictions stated. 4.8 points maximumAsk for a demonstrationDemonstrate malware download scanning with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported4.8 / 4.8 pts Complete includes desktop download scanning. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkDedicated IP optionOffer a dedicated address and disclose the extra plan or charge. 4.8 points maximumAsk for a demonstrationDemonstrate dedicated ip option with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported4.8 / 4.8 pts Complete Max lists dedicated IP; verify local availability. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityDocumented AI threat detectionDocument an actual machine-learning threat detection capability. 2.4 points maximumAsk for a demonstrationDemonstrate documented ai threat detection with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Not verified0β2.4 / 2.4 pts Automated detection alone does not establish a specific AI method. Not verified Β· Oct 20, 2026Source β |
|---|
Core capabilityAI incident explanationExplain a detected incident using contextual AI output. 2.4 points maximumAsk for a demonstrationDemonstrate ai incident explanation with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Not verified0β2.4 / 2.4 pts AI incident explanations were not documented. Not verified Β· Oct 20, 2026Source β |
|---|
Depth checkAI-specific controlsDocument controls or limitations specifically for AI threat processing. 3.6 points maximumAsk for a demonstrationDemonstrate ai-specific controls with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Not verified0β3.6 / 3.6 pts AI-specific controls were not established. Not verified Β· Oct 20, 2026Source β |
|---|
Depth checkAI decision traceExpose a reviewable explanation or audit record of AI security decisions. 3.6 points maximumAsk for a demonstrationDemonstrate ai decision trace with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Not verified0β3.6 / 3.6 pts An AI decision audit trail was not established. Not verified Β· Oct 20, 2026Source β |
|---|
Depth checkExport a WireGuard configuration for another clientDemonstrate: Export a WireGuard configuration for another client. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. 2.5 points maximumAsk for a demonstrationDemonstrate: Export a WireGuard configuration for another client. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkConfigure inbound port forwardingDemonstrate: Configure inbound port forwarding. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. 2.5 points maximumAsk for a demonstrationDemonstrate: Configure inbound port forwarding. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkChoose a custom DNS resolverDemonstrate: Choose a custom DNS resolver. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. 2.5 points maximumAsk for a demonstrationDemonstrate: Choose a custom DNS resolver. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkApply automatic connection rules per networkDemonstrate: Apply automatic connection rules per network. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. 2.5 points maximumAsk for a demonstrationDemonstrate: Apply automatic connection rules per network. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkControl local-network access while connectedDemonstrate: Control local-network access while connected. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. 2.5 points maximumAsk for a demonstrationDemonstrate: Control local-network access while connected. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkCarry IPv6 traffic through the VPN tunnelDemonstrate: Carry IPv6 traffic through the VPN tunnel. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. 2.5 points maximumAsk for a demonstrationDemonstrate: Carry IPv6 traffic through the VPN tunnel. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkRevoke a lost device's active VPN sessionDemonstrate: Revoke a lost device's active VPN session. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. 2.5 points maximumAsk for a demonstrationDemonstrate: Revoke a lost device's active VPN session. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkDeploy VPN protection on a supported routerDemonstrate: Deploy VPN protection on a supported router. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. 2.5 points maximumAsk for a demonstrationDemonstrate: Deploy VPN protection on a supported router. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|