Disconnect was assessed by the HushFleet team and placed in the No data band, with a security score of 9/100; too little is published to place its usability score. The security ranking does not place it: too little is published to place it — 28% of the substantive fields are established, and the score is a floor, not a placement. Commercial VPN, with no company jurisdiction on the published record.
Not ranked — most of what would place this provider is not established. no_data is a statement about the research, not about the provider. It is assigned when almost nothing was established, or when — with under half the substantive fields established — our own ignorance is the largest single risk and the score sits below weak. Such a provider has not been examined and failed; it has not been examined. The second condition carries that ceiling because past half the record the sentence would be false however the channels fall out: enough was established for the number to be about the provider.
7 fields sit on this record without entering the score, and the contract says so in the field itself: scored: false. They are here because a reader asking who owns this company, or who signed the audit, is asking something the record answers — and because a value that never touches the arithmetic should be visibly outside it rather than quietly mixed in.
Alternatives
No data
Paying monthly
— no monthly plan
Paying yearly
— no yearly plan
Coverage
Not published no country list published
Free tier
Not published no statement found
Security
Usability
| Service class | Commercial VPN — security leads |
|---|---|
| Security score | 9 of 100 · No data |
| Usability score | 43 of 100 · state no_data · 17% established · 17.6% of the weight read |
| Legal entity | Disconnect, Inc. |
| Jurisdiction | unknown |
| Ultimate owner | Founders Casey Oppenheim and Brian Kennish; no acquisition or outside investor disclosed |
| Exposure | High · dominant channel: ignorance |
| Retention | Nothing that links traffic to a person |
| Latest audit | unknown · unknown · unknown · unknown |
| Countries with exits | not published |
| Protocols | unknown |
| Works under active censorship | unknown |
| Weakest protocol still offered | unknown |
| Own DNS inside the tunnel | Yes, on the provider's word |
| Platforms | Browser extensioniOSAndroidmacOS |
| Simultaneous devices | 3 |
| Kill switch | unknown |
| Split tunnelling | unknown |
| Signing up | unknown |
| Free tier | unknown |
| P2P allowed | unknown |
| Major streaming services reachable | unknown |
| Price, monthly | not published |
| Price, yearly | not published |
| Offered countries that sit under a logging mandateC09_mandate_countries | unknown |
|---|---|
| Country of the ultimate beneficial ownerM11_owner_jurisdiction | unknown |
| Owner group cluster keyM15_owner_group | independent |
| Date the current owner took controlM16_control_since | unknown |
| Role of this brand inside the groupM17_brand_role | principal |
| Infrastructure shared with cluster siblingsM18_shared_infrastructure | separate |
| Total published auditsV10_audit_count | unknown |
Coverage147countries
Paying monthly$9.99monthly
Paying yearly$53.88yearly total
Free tierYeslimited free plan
Devices10at once
Security
Usability
Coverage50countries
Paying monthly$5.69monthly
Paying yearly$69.60yearly total
Free tierNopaid plans only
Devices5at once
Security
Usability
Coverage41countries
Paying monthly$6.00monthly
Paying yearly$60.00yearly total
Free tierNopaid plans only
Devices5at once
Security
Usability
Eight channels, each asking one question of the published record and reading a named set of fields to answer it. They multiply rather than add — the factor beside a channel is what is left after the pressure it found, and open a channel to see every field it read, as it is stored. How the model works
Security fields
67 55 of them feed a channel
Established
17 50 left unknown, 0 not applicable
Completeness
28% the share the model could weigh
Citations
21 across 7 documents
Every value carries what it rests on, and the model weighs the four levels differently. Weight, then how many citations on this record sit at that level:
A weighs 1.00 · 2 hereB weighs 0.85 · 19 here
The weights are methodology.json’s own; a claim seen in the artefact itself counts for more than the same claim reported second-hand. The date at the end of a row is the day that value was last read.
A channel does not price every field it reads. The ones it did are marked along their edge and carry what they added; everything else was read and cost nothing. Only a channel that composes field by field can mark a field at all — the rest price themselves by the parameters printed above their rows.
Still open on this record.
No published pricing. Disconnect does not publish a pricing page on its own domain (/pricing, /premium, /get all 404); the $9.99/mo, $59.99/yr SmartVPN subscription is stated only on the App Store listing, a source this catalogue restricts to U01/X12, so U04/U04b/U05 stand unknown rather than resting on a store summary.
Architecture does not fit the schema's exit model. The provider's own product page describes the VPN as "a Virtual Private Network (VPN) configuration that powers our protection" with no mention of server locations or IP masking, and the App Store description states the technology "only encrypts the traffic that actually needs encryption -- HTTP and DNS. HTTPS traffic passes through normally," unlike "a typical VPN [that] reroutes everything through a remote server."
Consequence for the fields. No exit-country list, no IP-masking claim and no protocol name appear anywhere on the provider's own domain, so C00_architecture, C14_traffic_modification, U02_server_countries and U07_protocols are all unknown rather than assumed from a conventional VPN's shape.
No incorporation country established. The privacy policy, terms of use and about page all refer to the company only as "Disconnect," with no registered address or state of incorporation; the terms name California/Santa Clara County only as the dispute venue, which is not the same fact as incorporation. The legal name, "Disconnect, Inc.," comes from the copyright line in its open-source browser-extension repository. M06_jurisdiction_company is unknown, which also leaves the derived C10/C11/P11 fields unset.
No audit or transparency report found. The press page lists browser-vendor partnerships and press awards but nothing about a security audit, and no transparency report, warrant canary or affiliate-programme page could be located on the domain (/transparency, /affiliates both 404). All V0x fields and P05/P07/X10 stand unknown.
On the record as a whole.
Disconnect's public-facing product is a tracker-blocking browser extension and mobile app (free) plus a paid tier, Privacy Pro / "PrivacyPro SmartVPN & Firewall", sold only as an iOS/iPadOS/macOS in-app purchase.
Its FAQ describes a legacy "Secure Wireless" product with servers in the US, UK and Japan that no longer appears on the current site; the live VPN offering ("SmartVPN") is described by the provider itself as a partial-traffic tool that encrypts only HTTP and DNS and leaves HTTPS untouched, rather than a conventional full-tunnel, IP-masking VPN.
M12_service_class is set to commercial_vpn because the product carries its own subscription price (confirmed on the App Store listing, at $9.99/mo or $59.99/yr), even though that price could not be sourced from the provider's own domain under this catalogue's citation rules.
Priced from what is missing: 0.28 of the weighted record is established, on a slope of 0.9 under a cap of 0.6, with a posture of 0.0 relieved by 0.4.
Record completenessS08_completeness
28%
derived from the record itself
Response to a national logging mandatealso read by jurisdictionP04_mandate_response
unknown
nothing published · recorded as asserted
Transparency reportalso read by silence, integrityP05_transparency_report
unknown
nothing published · recorded as asserted
Reported numbers plausible for this scalealso read by integrityP06_report_plausibility
unknown
nothing published · recorded as asserted
Warrant canary disciplinealso read by disclosureP07_warrant_canary
unknown
nothing published · recorded as
Computed
×0.091 of a clean record completeness 28%
Where the drop comes from: Ignorance. It is the channel this record's risk is concentrated in — on its own it takes a clean record to ×0.400, and its bar above is filled to that.
Exposure is recorded as high and the integrity status as unexamined.
Against the rest of the register, this record sits furthest above on Integrity — ×0.940 where the register averages ×0.658 — and furthest below on Ignorance, ×0.400 against ×0.662.
Published score
9Every row above is one field of the published record, and every one of them can be challenged: every row carries Report, or raise something about the record as a whole. A correction with a source behind it is made the same day, and if it moves the score it moves the rank.
assertedSecurity incident and how it was disclosedalso read by integrityX09_incident_handling
unknown
nothing published · recorded as asserted
Composed rather than added: a prior of 0.55 on the none branch, moved by what the paper says (0.0) and by what the practice shows (0.0), at credence 0.0 from the audit and 0.2975 from how the provider engaged, against a severity of 0.03 for what is actually retained.
Retention linkable to a person as declaredmaterialC01_linkable_retention
none_linkable
Bdisconnect.me13 Sep 2026
Report a problem with C01_linkable_retentionPersistent device identifier the provider holdsC12_device_identifier
unknown
nothing published · recorded as asserted
At least one independent auditmaterialV01_audit_exists
unknown
nothing published · recorded as asserted
How the report is publishedV02_report_publication
unknown
nothing published · recorded as asserted
Subject of the latest auditV03_audit_subject
unknown
nothing published · recorded as asserted
Server fleet coverageV04_scope_servers
unknown
nothing published · recorded as asserted
Auditor categoryV06_firm_category
unknown
nothing published · recorded as asserted
Assurance standardV07_audit_standard
unknown
nothing published · recorded as asserted
Date of latest reportmaterialV08_audit_date_latest
unknown
nothing published · recorded as asserted
Audit cadenceV09_audit_regularity
unknown
nothing published · recorded as asserted
What the report states is retainedV11_audit_findings
unknown
nothing published · recorded as asserted
Strength of the assurance opinionV15_assurance_strength
unknown
nothing published · recorded as asserted
Chronology of documented enforcement eventsP12_case_history
unknown
nothing published · recorded as asserted
15 years in operation at 0.015 a year under a cap of 0.3, weighted 1.2: the rule fired.
Year the service launchedM07_launch_year
2011
Bdisconnect.me2011-01
Report a problem with M07_launch_yearUser base scale (mass >=10M, mid >=1M, niche <1M)also read by integrityM08_user_scale
mass
Bdisconnect.me13 Sep 2026
Report a problem with M08_user_scaleServer seizure by law enforcementalso read by disclosureP01_seizure_event
unknown
nothing published · recorded as asserted
Court record of compelled productionalso read by disclosureP03_court_record
unknown
nothing published · recorded as asserted
Transparency reportalso read by ignorance, integrityP05_transparency_report
unknown
nothing published · recorded as asserted
A capped sum — the one channel that adds: 0.142 of a possible 0.28, from the fields marked below.
RAM-only diskless serversC02_ram_only
unknown+0.018
nothing published · recorded as asserted
IP allocation modelC03_ip_sharing
unknown+0.012
nothing published · recorded as asserted
Signup without emailC04_signup_no_email
yes_declared+0.005
Bdisconnect.me13 Sep 2026
Report a problem with C04_signup_no_emailAnonymous payment optionsC05_payment_anonymous
+0.025
Bdisconnect.me13 Sep 2026
Report a problem with C05_payment_anonymousOwn DNS inside the tunnelC06_own_dns_in_tunnel
yes_declared+0.005
Bdisconnect.me13 Sep 2026
Report a problem with C06_own_dns_in_tunnelWorst third-party SDK category in the appC07a_app_sdk
unknown+0.018
nothing published · recorded as asserted
Worst third-party tracker category on the siteC07b_site_trackers
unknown+0.009
nothing published · recorded as asserted
Who owns the hardwareC08_servers_ownership
unknown+0.009
nothing published · recorded as asserted
Weakest protocol still offeredC13_weakest_protocol
unknown
nothing published · recorded as asserted
Client source code publishedV12_client_open_source
partial+0.020
Agithub.com13 Sep 2026
Report a problem with V12_client_open_sourceReproducible buildsV13_reproducible_builds
unknown+0.014
nothing published · recorded as asserted
Separate client or infrastructure pentestV14_pentest_exists
unknown+0.007
nothing published · recorded as asserted
Where the company sits 0.03, where its owner sits 0.03, the exits it offers 0.05, the gag-order regime 0.05 — one circumstance, priced once rather than compounded.
Hosting in the mandate countries it offersC09b_mandate_hosting
unknown
nothing published · recorded as asserted
Incorporation country mandates retentionC10_company_under_mandate
unknown
nothing published · recorded as asserted
Beneficial owner sits under a retention regimeC11_owner_under_mandate
unknown
nothing published · recorded as asserted
Response to a national logging mandatealso read by ignoranceP04_mandate_response
unknown
nothing published · recorded as asserted
Secret-order regime in the incorporation countryP11_gag_order_regime
unknown
nothing published · recorded as asserted
What this channel priced on this record:Owner transparency 0.06
User base scale (mass >=10M, mid >=1M, niche <1M)also read by silenceM08_user_scale
mass
Bdisconnect.me13 Sep 2026
Report a problem with M08_user_scaleOther businesses of the owner groupM10_owner_other_business
unknown
nothing published · recorded as asserted
Transparency reportalso read by ignorance, silenceP05_transparency_report
unknown
nothing published · recorded as asserted
Reported numbers plausible for this scalealso read by ignoranceP06_report_plausibility
unknown
nothing published · recorded as asserted
Documented gap between claim and behaviourX01_documented_lie
unknown
nothing published · recorded as asserted
Marketing versus audit findingsX02_claim_gap
unknown
nothing published · recorded as asserted
Ownership structure transparencyX03_owner_transparency
partial
Bdisconnect.me13 Sep 2026
Report a problem with X03_owner_transparencyAdverse events on the owner group recordX04_owner_group_history
unknown
nothing published · recorded as asserted
How the service is paid forX05_monetisation_model
freemium_funded
Bdisconnect.meBdisconnect.me13 Sep 2026
Report a problem with X05_monetisation_modelClaims of 100% anonymity or military-grade cryptoX06_absolute_claims
unknown
nothing published · recorded as asserted
Aggressive lifetime subscriptionsX07_lifetime_push
unknown
nothing published · recorded as asserted
Coverage exists only on affiliate sitesX08_affiliate_only_reviews
unknown
nothing published · recorded as asserted
Security incident and how it was disclosedalso read by ignoranceX09_incident_handling
unknown
nothing published · recorded as asserted
Affiliate programme and payout tierX10_affiliate_program
unknown
nothing published · recorded as asserted
Owner-run review media discloses the tieX11_review_media_disclosure
unknown
nothing published · recorded as asserted
App store data declaration against the provider's own policyX12_store_data_declaration
matches_policy
Bapps.apple.comBdisconnect.me13 Sep 2026
Report a problem with X12_store_data_declarationContagion from the owner groupS18_cluster_contagion
0.0
no owner group on this record, so nothing to carry
What this channel priced on this record:Price 0.05
Who operates the exitC00_architecture
unknown+0.050
nothing published · recorded as asserted
What the exit does to passing trafficC14_traffic_modification
unknown+0.050
nothing published · recorded as asserted
Server seizure by law enforcementalso read by silenceP01_seizure_event
unknown
nothing published · recorded as asserted
Actual disclosure historyP02_disclosure_history
none_known
Bdisconnect.me13 Sep 2026
Report a problem with P02_disclosure_historyCourt record of compelled productionalso read by silenceP03_court_record
unknown
nothing published · recorded as asserted
Warrant canary disciplinealso read by ignoranceP07_warrant_canary
unknown
nothing published · recorded as asserted
Requests received in periodP08_requests_received
unknown
nothing published · recorded as asserted
Requests where data was providedP09_data_provided
unknown
nothing published · recorded as asserted