Where the security score comes from
Eight channels, each asking one question of the published record and reading a named set of fields to answer it. They multiply rather than add — the factor beside a channel is what is left after the pressure it found, and open a channel to see every field it read, as it is stored. How the model works
Security fields
67 55 of them feed a channel
Established
25 41 left unknown, 1 not applicable
Completeness
38% the share the model could weigh
Citations
33 across 14 documents
Every value carries what it rests on, and the model weighs the four levels differently. Weight, then how many citations on this record sit at that level:
B weighs 0.85 · 33 here
The weights are methodology.json’s own; a claim seen in the artefact itself counts for more than the same claim reported second-hand. The date at the end of a row is the day that value was last read.
A channel does not price every field it reads. The ones it did are marked along their edge and carry what they added; everything else was read and cost nothing. Only a channel that composes field by field can mark a field at all — the rest price themselves by the parameters printed above their rows.
Still open on this record.
No independent audit. Astrill's own site, blog and wiki carry no mention of a no-logs audit, pentest report or auditor engagement, and its bug-bounty program explicitly excludes the client apps. V01-V15 stay unknown rather than "no" because the search covered the provider's own channels, not every possible venue.
Server fleet: physical vs virtual is undocumented. The 54 countries read off the network page are not marked physical or virtual anywhere on it, so C09b (hosting inside the four mandate countries the fleet touches - RU, IN, TR, VN) cannot be answered, and the page's own claim of 58 countries could not be fully reconciled against the visible list.
the rest of what is open — 88 more words
Ownership beyond the operating entity is unstated. Veloxee Corp. (Liechtenstein) is named as the contracting party in the terms of service, but no document names a beneficial owner, a parent, or other holdings, so M09-M11 and the owner-group cluster fields stay unknown rather than "independent" by evidence.
Censorship-circumvention claims have no primary measurement. Astrill markets StealthVPN and OpenWeb for restrictive networks, but every China-specific test result found traces to affiliate ranking sites, which are forbidden as a source here; U06 stays unknown rather than resting on that evidence.
On the record as a whole.
Astrill runs an affiliate/referral program (astrill.com/affiliates), but its payout tier is not stated on the page, so X10 is left unknown rather than guessed.
The App Store listing declares zero data collection while the Play Store listing declares email, phone number and purchase history for account and fraud-prevention purposes; the two disagree with each other more than either disagrees with the privacy policy, which is read here as the store-definition gap the audit instruction anticipates rather than as a documented lie.
Crypto payment (Bitcoin confirmed on the FAQ, Monero shown only in footer icons) is recorded as crypto_processor rather than crypto_direct because no page names the processor or wallet mechanism.
IgnoranceHow much of this did nobody establish?5 fields read · 4 left unknown · 55.8 points of pressure×0.442
Priced from what is missing: 0.38 of the weighted record is established, on a slope of 0.9 under a cap of 0.6, with a posture of 0.0 relieved by 0.4.
Record completenessS08_completeness
38%
derived from the record itself
Warrant canary disciplinealso read by disclosureP07_warrant_canary
unknown
nothing published · recorded as
Computed
×0.095 of a clean record completeness 38%
Where the drop comes from: Ignorance. It is the channel this record's risk is concentrated in — on its own it takes a clean record to ×0.442, and its bar above is filled to that.
Exposure is recorded as medium and the integrity status as unexamined.
Against the rest of the register, this record sits furthest above on Integrity — ×0.902 where the register averages ×0.658 — and furthest below on Ignorance, ×0.442 against ×0.662.
Every row above is one field of the published record, and every one of them can be challenged: every row carries Report, or raise something about the record as a whole. A correction with a source behind it is made the same day, and if it moves the score it moves the rank.
