Core capabilityEncrypted tunnelDocument modern encrypted VPN protocols. 4 points maximumAsk for a demonstrationDemonstrate encrypted tunnel with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported4 / 4 pts WireGuard/OpenVPN and strong encryption are documented. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityKill switchBlock traffic if the VPN tunnel fails. 4 points maximumAsk for a demonstrationDemonstrate kill switch with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported4 / 4 pts Kill switch/always-on options are documented. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkDNS leak protectionPrevent DNS requests escaping the protected connection. 6 points maximumAsk for a demonstrationDemonstrate dns leak protection with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported6 / 6 pts DNS leak protection is documented. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkMulti-hop routingRoute through multiple VPN locations with documented conditions. 6 points maximumAsk for a demonstrationDemonstrate multi-hop routing with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported6 / 6 pts Secure Core routing is included in Plus. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityDesktop applicationsOffer native apps for major desktop platforms. 3.2 points maximumAsk for a demonstrationDemonstrate desktop applications with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported3.2 / 3.2 pts Windows, macOS and Linux clients are offered. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityMobile applicationsOffer apps for both iOS and Android. 3.2 points maximumAsk for a demonstrationDemonstrate mobile applications with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported3.2 / 3.2 pts Both major mobile platforms are supported. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkSplit tunnellingRoute selected apps or destinations outside the VPN, with platform limits stated. 4.8 points maximumAsk for a demonstrationDemonstrate split tunnelling with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported4.8 / 4.8 pts Split tunnelling is documented with platform-specific options. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkRestricted-network modeProvide a documented obfuscation or censorship-resistant connection method. 4.8 points maximumAsk for a demonstrationDemonstrate restricted-network mode with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported4.8 / 4.8 pts Stealth and alternative routing are documented. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityPublished logging policyExplain which connection or activity data is retained. 3.2 points maximumAsk for a demonstrationDemonstrate published logging policy with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported3.2 / 3.2 pts A no-logs policy is published. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityPublished external auditLink a named external audit or report rather than an unsupported badge. 3.2 points maximumAsk for a demonstrationDemonstrate published external audit with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Limited1.6 / 3.2 pts External audits are referenced; this review did not inspect a full audit report. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkAuditable application sourcePublish application source for the major client platforms. 4.8 points maximumAsk for a demonstrationDemonstrate auditable application source with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported4.8 / 4.8 pts Application source is published. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkLocation selectionChoose the country or server location on the compared paid plan. 4.8 points maximumAsk for a demonstrationDemonstrate location selection with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported4.8 / 4.8 pts Plus enables broad server-location selection. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityMalicious-site blockingBlock known malicious destinations. 3.2 points maximumAsk for a demonstrationDemonstrate malicious-site blocking with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported3.2 / 3.2 pts NetShield blocks malicious domains in Plus. Official documentation Β· Oct 20, 2026Source β |
|---|
Core capabilityMultiple concurrent devicesDocument the allowed number of simultaneous connections. 3.2 points maximumAsk for a demonstrationDemonstrate multiple concurrent devices with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Supported3.2 / 3.2 pts Plus allows 10 simultaneous devices. Official documentation Β· Oct 20, 2026Source β |
|---|
Depth checkMalware download scanningInspect downloaded files, with OS restrictions stated. 4.8 points maximumAsk for a demonstrationDemonstrate malware download scanning with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Not verified0β4.8 / 4.8 pts Download file scanning is not established by the VPN sources. Not verified Β· Oct 20, 2026Source β |
|---|
Depth checkDedicated IP optionOffer a dedicated address and disclose the extra plan or charge. 4.8 points maximumAsk for a demonstrationDemonstrate dedicated ip option with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Not verified0β4.8 / 4.8 pts Dedicated IP was not established for consumer Plus. Not verified Β· Oct 20, 2026Source β |
|---|
Core capabilityDocumented AI threat detectionDocument an actual machine-learning threat detection capability. 2.4 points maximumAsk for a demonstrationDemonstrate documented ai threat detection with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Not verified0β2.4 / 2.4 pts A specific AI detector is not documented. Not verified Β· Oct 20, 2026Source β |
|---|
Core capabilityAI incident explanationExplain a detected incident using contextual AI output. 2.4 points maximumAsk for a demonstrationDemonstrate ai incident explanation with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Not verified0β2.4 / 2.4 pts An AI incident assistant is not documented. Not verified Β· Oct 20, 2026Source β |
|---|
Depth checkAI-specific controlsDocument controls or limitations specifically for AI threat processing. 3.6 points maximumAsk for a demonstrationDemonstrate ai-specific controls with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Not verified0β3.6 / 3.6 pts AI-specific controls are not documented. Not verified Β· Oct 20, 2026Source β |
|---|
Depth checkAI decision traceExpose a reviewable explanation or audit record of AI security decisions. 3.6 points maximumAsk for a demonstrationDemonstrate ai decision trace with our own account and explain limits, permissions and the required plan. A scenario to run with the supplier; not a completed product test. | Not verified0β3.6 / 3.6 pts An AI decision trail is not documented. Not verified Β· Oct 20, 2026Source β |
|---|
Depth checkExport a WireGuard configuration for another clientDemonstrate: Export a WireGuard configuration for another client. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. 2.5 points maximumAsk for a demonstrationDemonstrate: Export a WireGuard configuration for another client. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test. | Supported2.5 / 2.5 pts WireGuard configurations can be downloaded. WireGuard configuration generation; supported client/router setup is separate. Global capability evidence; local plan availability and interface language are not inferred. Official documentation Β· Oct 21, 2026Source β |
|---|
Depth checkConfigure inbound port forwardingDemonstrate: Configure inbound port forwarding. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. 2.5 points maximumAsk for a demonstrationDemonstrate: Configure inbound port forwarding. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test. | Supported2.5 / 2.5 pts Supported paid-plan clients offer port forwarding. Paid plans; supported Windows, macOS and Linux GUI applications and P2P servers. Global capability evidence; local plan availability and interface language are not inferred. Official documentation Β· Oct 21, 2026Source β |
|---|
Depth checkChoose a custom DNS resolverDemonstrate: Choose a custom DNS resolver. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. 2.5 points maximumAsk for a demonstrationDemonstrate: Choose a custom DNS resolver. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test. | Supported2.5 / 2.5 pts The Windows application supports custom DNS. Windows application capability; other operating systems and plan entitlements not established here. Global capability evidence; local plan availability and interface language are not inferred. Official documentation Β· Oct 21, 2026Source β |
|---|
Depth checkApply automatic connection rules per networkDemonstrate: Apply automatic connection rules per network. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. 2.5 points maximumAsk for a demonstrationDemonstrate: Apply automatic connection rules per network. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkControl local-network access while connectedDemonstrate: Control local-network access while connected. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. 2.5 points maximumAsk for a demonstrationDemonstrate: Control local-network access while connected. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkCarry IPv6 traffic through the VPN tunnelDemonstrate: Carry IPv6 traffic through the VPN tunnel. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. 2.5 points maximumAsk for a demonstrationDemonstrate: Carry IPv6 traffic through the VPN tunnel. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkRevoke a lost device's active VPN sessionDemonstrate: Revoke a lost device's active VPN session. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. 2.5 points maximumAsk for a demonstrationDemonstrate: Revoke a lost device's active VPN session. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|
Depth checkDeploy VPN protection on a supported routerDemonstrate: Deploy VPN protection on a supported router. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. 2.5 points maximumAsk for a demonstrationDemonstrate: Deploy VPN protection on a supported router. State the plan, limits and behaviour on failure. Test on a controlled network and document reconnection behaviour. A scenario to run with the supplier; not a completed product test. | Not verified0β2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified Β· Oct 21, 2026Source β |
|---|