Windscribe — ulasan kaamanan dening HushFleet

Asal-usuling biji kaamanan

Wolung kanal, saben kanal ngajokake siji pitakonan marang cathetan sing diumumake lan maca sakumpulan kolom kanggo mangsuli. Kanal-kanal iku dikaliake, ora dijumlahake — faktor ing jejere kanal nuduhake apa sing isih kari sawise tekanan sing ditemokake; bukak kanal kanggo ndeleng saben kolom sing diwaca, kaya carane kasimpen. Carane model kerja

Kolom kaamanan

67 55 ing antarane mlebu kanal

Kabukti

54 10 kari ora dingerteni, 3 ora ditrapake

Kalengkapan

84% bagean sing bisa ditimbang model

Sumber

73 ing 23 dokumen

Saben nilai nggawa dhasare dhewe-dhewe, lan model nimbang papat jenjang kanthi cara sing beda. Bobot, banjur pira sumber ing cathetan iki sing ana ing jenjang kuwi:

A bobot 1,00 · 13 ing keneB bobot 0,85 · 51 ing keneC bobot 0,70 · 9 ing kene

Bobot-bobote dijupuk saka methodology.json dhewe; klaim sing dideleng ing dokumen asline luwih dietung tinimbang klaim sing padha nanging dilaporake liwat tangan kapindho. Tanggal ing pungkasan baris yaiku dina nalika nilai kasebut pungkasan diwaca.

Kanal ora ngetung kabeh kolom sing diwaca. Sing dietung ditandhani ing pinggire lan nuduhake apa sing ditambahake; liyane mung diwaca lan ora mengaruhi apa-apa. Mung kanal sing disusun kolom siji-siji sing bisa nandhani kolom — liyane ngetung awake dhewe miturut parameter sing kacithak ing ndhuwur barise.

Isih kabukak ing cathetan iki.

Apa sing ditemokake pentest. Biji kaamanan adhedhasar laporan Packetlabs Juni 2024 lan maca laporan kasebut menyang arah negatif. Tes penetrasi kasebut nemokake layanan IKEv2 nyimpen IP asal pangguna sing nyambung bebarengan karo wektu wiwitan lan pungkasan sesi, ing memori volatil lan uga ing disk, sarta log microservice sing nggawa kredensial OpenVPN, kunci WireGuard sing wis dienggo bareng, lan jeneng pangguna IKEv2.

Retest, lan cathetan ing jerone. Retest telung minggu sabanjure verifikasi yen kabeh wis diremediasi — nanging kesimpulan laporan kasebut dhewe nyatakake yen iki "does not cover every discovery noted within the finding", lan ngubungake bagean saka temuan kasebut karo konfigurasi sing ora bener dipasang ing node tes.

liyane sing isih kabukak — 194 tembung maneh

Napa panyimpenan diwenehi rega adhedhasar temuan. Mula, panyimpenan diwenehi rega adhedhasar apa sing dibuktekake auditor bisa diakses, dudu adhedhasar apa sing dinyatakake kabijakan, lan kanal integritas nggawa sela antarane loro-lorone. Wacanen iki minangka temuan umur rong taun ing siji node, dudu minangka pangukuran saiki: cakupane mung ca-023.windscribe.com, lan penugasan anyar sing nyakup luwih akeh fleet sing bakal ngrampungake perkara iki.

Dhaptar sing ora tau diwaca. Dhaptar negara sing ditawakake ora tau diwaca, mula biji negara kagunan lan irisan mandat ora bisa diitung — Windscribe ngumumake bedane fisik/virtual, sing ndadekake C09b bisa dijawab ing kene sanalika dhaptar kasebut wis diwaca. Skala pangguna uga durung kabukti, mula tataran paparan isih adhedhasar bukti sing luwih sithik tinimbang sakmesthine.

Sumber sing saiki dirujuk telung prastawa kasebut. AIN.UA isih ngemot server Ukraina sing disita tanggal 24 Juni 2021, lan blog Windscribe dhewe ngemot kasus Yunani sing ditolak tanggal 11 April 2025. Penyitaan Walanda lan kolom penyitaan kasebut saiki ngrujuk kaca no-logs duweke Windscribe dhewe, dudu pers sing dibayar afiliasi sing pisanan nglaporake: cathetan perusahaan babagan penyitaane dhewe iku sumber utama, dudu cathetane wong liya babagan siji penyitaan. Prastawa Ukraina diwenehi tanggal adhedhasar penyitaan kasebut dhewe, dudu tulisan sing nglaporake.

Ing cathetan sakabehe.

Telung panjaluk kapisah ing telung yurisdiksi, ora ana siji wae sing ngasilake data, lan kabeh ana tanggal. Iki cathetan sing dadi dhasar kanggo menehi rega rute praktik: bobote ngluwihi audit, sing awujud pentest, dudu penugasan no-logs.

U08 iku desktop_only ing kaca fitur duweke Windscribe dhewe: Firewall kasedhiya ing aplikasi Windows, Mac lan Linux, lan ing Android lan iOS kaca kasebut ngarahake pangguna menyang Always-On VPN duweke sistem operasi dhewe. Iki fitur platform, dudu fitur panyedhiya, lan kuwi bedane sing diitung kolom kasebut.

U12b sebagian adhedhasar dhasar sing padha — kaca marketing njanjeni pambukakan blokir, nanging artikel dhukungan nyatakake yen perusahaan ora bisa njamin kabeh layanan streaming bakal bisa digunakake lan artikel kapindho ngubungake Netflix sing mung nuduhake Originals karo deteksi VPN dhewe dening Netflix.

PanyimpenanApa ana cathetan sing nyambungake lalu lintas karo wong, lan sapa sing mriksa?13 kolom diwaca · 1 isih ora dingerteni · 75,0 poin tekanan×0,250

Disusun, ora dijumlahake: prior 0.55 ing cabang stated, digeser dening apa sing dikandhakake dokumen (0.2215) lan dening apa sing ditindakake ing praktik (0.85), kanthi kapercayan 0.9497 saka audit lan 0.5652 saka carane panyedhiya melu, ngelawan tingkat keseriusan 0.75 kanggo apa sing bener-bener disimpen.

Panyimpenan sing bisa disambungake karo wong kaya sing diakoniwigatiC01_linkable_retention

connection_timestamps

Bwindscribe.com28 Agt 2026

Lapor bab masalah ing C01_linkable_retention

Pengenal piranti permanen sing dicekel panyedhiyaC12_device_identifier

app_scoped_id

Bplay.google.com15 Agt 2026

Lapor bab masalah ing C12_device_identifier

Paling ora siji audit independenwigatiV01_audit_exists

yes_verified

Adrive.google.com28 Agt 2026

Lapor

Dietung

×0,113 saka cathetan sing resik kalengkapan 84%

Asale mudhun: Panyimpenan. Iki kanal sing dadi puser risiko cathetan iki — dhewekan bisa nyurung cathetan sing resik nganti ×0,250, lan bar ing dhuwur wis diisi nganti tataran kuwi.

Eksposur kacathet minangka medium lan status integritas minangka caught_lying.

Dibandhingake karo liyane ing daftar, cathetan iki manggon paling dhuwur ing Kabodhoan — ×0,896 dene rata-rata daftar ×0,662 — lan paling endhek ing Panyimpenan, ×0,250 nglawan ×0,432.

Biji sing diumumake

Saben baris ing dhuwur iku siji kolom cathetan sing diumumake, lan saben-saben bisa diprotes: saben baris nggawa Lapor, utawa jlentrehake bab cathetan sakabehe. Pambenaran sing nduweni sumber ditindakake ing dina sing padha, lan yen ngowahi biji, uga ngowahi peringkat.

Kelas layanan	VPN komersial — kaamanan utama
Biji kaamanan	11 saka 100 · Ora disaranake
Biji kagunan	68 saka 100 · kahanan dingerteni · 83% kabukti · 82,4% bobot sing diwaca
Entitas hukum	Windscribe Limited, Toronto, Ontario, Canada
Yurisdiksi	Kanada
Pamilik pungkasan	Founder-owned: Yegor Sak (CEO), Alex Paguis (CTO), Mark Ulicki (CIO); self-funded, no outside investors
Eksposur	Sedheng · kanal dominan: panyimpenan
Panyimpenan	Wektu sambungan
Audit paling anyar	Packetlabs (June 2024 retest, one production node); Leviathan Security Group (desktop 2021, mobile 2022) · 26 Jun 2024 · Bola-bali, tanpa interval tetep · Ya, lan laporane diwaca
Negara kanthi lokasi metu	ora diumumake
Protokol	WireGuard OpenVPN IKEv2 Protokol sing disamarke
Mlaku ing sangisore sensor aktif	Diakoni bisa digunakake
Protokol paling lemah sing isih ditawakake	ora ditrapake
DNS dhewe ing njero tunnel	Ya, adhedhasar tembung panyedhiya
Platform	Android Apple TV Ekstensi browser Fire TV iOS Linux macOS Router Windows
Piranti bebarengan	ora dingerteni
Kill switch	Mung ing desktop
Split tunnelling	Kasedhiya
Ndaftar	Ora perlu akun
Paket gratis	Tataran gratis kanthi watesan
P2P diijinake	Diijini ing sawetara server
Layanan streaming utama bisa diakses	Sawetara layanan bisa diakses
Rega, saben sasi	$9.00 saben sasi
Rega, saben taun	$69.00 saben taun nalika dianyari, ditagih sepisan

Negara sing ditawakake lan ana ing sangisore mandat panyimpenanC09_mandate_countries	ora dingerteni
Negara pamilik manfaat pungkasanM11_owner_jurisdiction	CA
Kunci kluster klompok pamilikM15_owner_group	Mandiri
Tanggal pamilik saiki njupuk kontrolM16_control_since	ora ditrapake
Peran merek iki ing njero klompokM17_brand_role	principal
Infrastruktur sing dienggo bareng karo anggota klusterM18_shared_infrastructure	separate
Total audit sing diumumakeV10_audit_count	3

13 Sep 20261 owahan

Alesan panyedhiya iki ana ing katalogM14_inclusion_basis

hand_picked diganti dadi adverse_record

12 Sep 20264 owahan

Platform sing nduweni klienU01_platforms

android, browser-extension, ios, linux, macos, windows diganti dadi android, apple-tv, browser-extension, fire-tv, ios, linux, macos, routers, windows

Biji kagunanusability.score

65 diganti dadi 68

Kronologi prastawa penegakan sing didokumentasikakeP12_case_history

{"date":"2021-06","kind":"seizure","outcome":"nothing_produced","source_url":"https://en.ain.ua/2021/07/28/ukrainian-authorities-seize-windscribe-vpn-servers/"}, {"date":"2025-04","kind":"court_order","outcome":"nothing_produced","source_url":"https://windscribe.com/blog/windscribe-greek-court-case/"}, {"date":"2026-02","kind":"seizure","outcome":"nothing_produced","source_url":"https://www.tomshardware.com/software/vpn/dutch-authorities-allegedly-seize-vpn-server-without-a-warrant-company-claims-that-law-enforcement-will-return-it-after-analyzing-the-device-fully"} diganti dadi {"date":"2021-06","kind":"seizure","outcome":"nothing_produced","source_url":"https://en.ain.ua/2021/07/28/ukrainian-authorities-seize-windscribe-vpn-servers/"}, {"date":"2025-04","kind":"court_order","outcome":"nothing_produced","source_url":"https://windscribe.com/blog/windscribe-greek-court-case/"}, {"date":"2026-02","kind":"seizure","outcome":"nothing_produced","source_url":"https://windscribe.com/features/no-identifying-logs"}

Biji kaamanansecurity.score

12 diganti dadi 11

30 Agt 20261 owahan

Protokol paling lemah sing isih ditawakakeC13_weakest_protocol

wireguard diganti dadi ora ana ing cathetan

29 Agt 20264 owahan

Protokol paling lemah sing isih ditawakakeC13_weakest_protocol

ora ana ing cathetan diganti dadi wireguard

Protokol paling cepet sing ditawakakeU07_modern_protocol

wireguard diganti dadi ora ana ing cathetan

Protokol sing ditawakakeU07_protocols

ora ana ing cathetan diganti dadi wireguard

Rega rencana saben taun USD, mangsa pisanan kaya sing ditagihU04b_price_yearly

ora ana ing cathetan diganti dadi 5.75

27 owahan sadurunge

29 Agt 20267 owahan

Rega rencana saben taun USD, mangsa pisanan kaya sing ditagihU04b_price_yearly

5.75 diganti dadi 69

Protokol paling lemah sing isih ditawakakeC13_weakest_protocol

wireguard diganti dadi ora ana ing cathetan

Protokol sing ditawakakeU07_protocols

wireguard diganti dadi ora ana ing cathetan

Biji kagunanusability.score

65 diganti dadi 61

Protokol paling lemah sing isih ditawakakeC13_weakest_protocol

ora ana ing cathetan diganti dadi wireguard

Protokol sing ditawakakeU07_protocols

ora ana ing cathetan diganti dadi wireguard, openvpn, ikev2, obfuscated

Biji kagunanusability.score

61 diganti dadi 65

28 Agt 20269 owahan

27 Agt 202611 owahan

Panyimpenan sing bisa disambungake karo wong kaya sing diakoniC01_linkable_retention

aggregates_only diganti dadi source_ip

Server mung RAM tanpa diskC02_ram_only

yes_declared diganti dadi partial

Kronologi prastawa penegakan sing didokumentasikakeP12_case_history

{"date":"2021-07","kind":"seizure","outcome":"nothing_produced","source_url":"https://windscribe.com/features/no-identifying-logs"}, {"date":"2025-04","kind":"court_order","outcome":"nothing_produced","source_url":"https://windscribe.com/features/no-identifying-logs"}, {"date":"2026-02","kind":"seizure","outcome":"nothing_produced","source_url":"https://windscribe.com/features/no-identifying-logs"} diganti dadi {"date":"2021-07","kind":"seizure","outcome":"nothing_produced","source_url":"https://windscribe.com/features/no-identifying-logs"}, {"date":"2025-04","kind":"court_order","outcome":"nothing_produced","source_url":"https://windscribe.com/blog/windscribe-greek-court-case/"}, {"date":"2026-02","kind":"seizure","outcome":"nothing_produced","source_url":"https://windscribe.com/features/no-identifying-logs"}

Cakupan armada serverV04_scope_servers

ora ana ing cathetan diganti dadi sample

Jeneng auditorV05_audit_firm

Packetlabs (FreshScribe server stack, June 2024); Leviathan Security (earlier engagements) diganti dadi Packetlabs (June 2024 retest, one production node); Leviathan Security Group (desktop 2021, mobile 2022)

Tanggal laporan paling anyarV08_audit_date_latest

2024-06-01 diganti dadi 2024-06-26

Sing diandharake laporan isih disimpenV11_audit_findings

not_stated diganti dadi source_ip

Marketing mungsuh temuan auditX02_claim_gap

none diganti dadi policy_contradicts_audit

Biji kaamanansecurity.score

59 diganti dadi 14

Putusan kaamanansecurity.verdict

acceptable diganti dadi not_recommended

Kronologi prastawa penegakan sing didokumentasikakeP12_case_history

{"date":"2021-07","kind":"seizure","outcome":"nothing_produced","source_url":"https://windscribe.com/features/no-identifying-logs"}, {"date":"2025-04","kind":"court_order","outcome":"nothing_produced","source_url":"https://windscribe.com/blog/windscribe-greek-court-case/"}, {"date":"2026-02","kind":"seizure","outcome":"nothing_produced","source_url":"https://windscribe.com/features/no-identifying-logs"} diganti dadi {"date":"2021-06","kind":"seizure","outcome":"nothing_produced","source_url":"https://en.ain.ua/2021/07/28/ukrainian-authorities-seize-windscribe-vpn-servers/"}, {"date":"2025-04","kind":"court_order","outcome":"nothing_produced","source_url":"https://windscribe.com/blog/windscribe-greek-court-case/"}, {"date":"2026-02","kind":"seizure","outcome":"nothing_produced","source_url":"https://www.tomshardware.com/software/vpn/dutch-authorities-allegedly-seize-vpn-server-without-a-warrant-company-claims-that-law-enforcement-will-return-it-after-analyzing-the-device-fully"}

Spesifikasi

Digawa, ora tau diitung

Dibandhingake karo

Apa sing owah

Yen iki dudu sing pas

Windscribe

Asal-usuling biji kaamanan

Proton VPN

Mullvad VPN

IVPN