Insufficient

hide.me

Name: hide.me
Price: 54.99 USD

Commercial VPNMalaysiaRank 5 of 68

Paying monthly

$11.99 per month

Paying yearly

$54.99 billed once a year

Coverage

57 countries with an exit

Free tier

Yes limited free plan

28 out of 100

Security

81 out of 100

Usability

Visit site

Offered countries that sit under a logging mandateC09_mandate_countries

United Arab Emirates Turkey Vietnam

Country of the ultimate beneficial ownerM11_owner_jurisdiction

unknown

Owner group cluster keyM15_owner_group

independent

Date the current owner took controlM16_control_since

2012

Role of this brand inside the groupM17_brand_role

principal

Infrastructure shared with cluster siblingsM18_shared_infrastructure

separate

Total published auditsV10_audit_count

Service class

Commercial VPN — security leads

Security score

28 of 100 · Insufficient

Usability score

81 of 100 · state known · 75% established · 73.5% of the weight read

Legal entity

eVenture Ltd. (eVenture Limited), registered in Malaysia under registration number LL09685

Jurisdiction

Malaysia

Ultimate owner

unknown

Exposure

High · dominant channel: retention

Retention

Session metadata

Latest audit

Securitum (Pawel Rozanski, Maciej Szymczak) · 7 Jun 2024 · One-off · unknown

Countries with exits

Protocols

WireGuard IKEv2 SSTP OpenVPN A vendor protocol with published source

Works under active censorship

unknown

Weakest protocol still offered

SSTP

Own DNS inside the tunnel

Yes, checked by someone independent

Platforms

Windows macOS Linux iOS Android Apple TV Android TV Fire TV Browser extension Routers

Simultaneous devices

Kill switch

On every platform

Split tunnelling

Available

Signing up

An email address only

Free tier

A free tier with limits

P2P allowed

unknown

Major streaming services reachable

unknown

Price, monthly

$11.99 per month

Price, yearly

$54.99 a year at renewal, billed once

Where the security score comes from

Eight channels, each asking one question of the published record and reading a named set of fields to answer it. They multiply rather than add — the factor beside a channel is what is left after the pressure it found, and open a channel to see every field it read, as it is stored. How the model works

Security fields

67 55 of them feed a channel

Established

50 16 left unknown, 1 not applicable

Completeness

77% the share the model could weigh

Citations

71 across 18 documents

Every value carries what it rests on, and the model weighs the four levels differently. Weight, then how many citations on this record sit at that level:

A weighs 1.00 · 19 hereB weighs 0.85 · 52 here

The weights are methodology.json’s own; a claim seen in the artefact itself counts for more than the same claim reported second-hand. The date at the end of a row is the day that value was last read.

A channel does not price every field it reads. The ones it did are marked along their edge and carry what they added; everything else was read and cost nothing. Only a channel that composes field by field can mark a field at all — the rest price themselves by the parameters printed above their rows.

Still open on this record.

Ultimate beneficial owner. eVenture Ltd. is named and registered (Malaysia, LL09685) with a street address, but no individual owner or parent structure is disclosed anywhere in the provider's own documents; M09, M11 and the owner-jurisdiction channel stay unknown.

Seizure and court-record history. The transparency report states law-enforcement requests received nothing to hand over every year since 2013, which supports P02_disclosure_history, but no single dated seizure or court order is documented with its own record, so P01_seizure_event and P03_court_record stay unknown rather than the favourable none_known/unable_to_produce a P12 event would earn.

the rest of what is open — 113 more words

Mandate-country hosting. hide.me offers exit locations in three countries this catalogue's mandate table flags (AE, TR, VN); none of the three country pages state whether the hardware there is physical or virtual, so C09b_mandate_hosting is unknown.

Circumvention and streaming claims. The pricing page advertises undifferentiated "Streaming Support" and the site offers no measured circumvention evidence, so U06_censorship_circumvention, U12a_p2p_allowed and U12b_streaming_works stay unknown rather than resting on marketing copy.

Audit history before 2024. The provider's own pages assert an audit "back in 2015" and describe audits as routine, but only the 2024 Securitum PDF could be located and opened; V09_audit_regularity and V10_audit_count are scored on the one document actually read, not the claimed series.

On the record as a whole.

Pricing has no plain 12-month tier; the closest analogue to an annual plan is a 13-month term (12 months plus 1 bonus month) billed 54.99 USD, recorded in U04b with this note per the schema's first-term rule. A 26-month term (24+2 bonus months) also exists at 69.99 USD but is not the annual plan the field asks for. C05_payment_anonymous also lists Visa/Mastercard/Amex/PayPal on the same page; only the Coinpayments crypto option is anonymous-adjacent.

C07b_site_trackers is a self-hosted/proxied Plausible-style analytics script served from hide.me's own domain (data-api https://hide.me/api/event) rather than a third-party domain; coded as analytics since it is still a distinct analytics product, not a first-party log.

U07_protocols refresh (2026-09-14) found SoftEther added to the protocol list alongside WireGuard, IKEv2, SSTP and OpenVPN; SoftEther is third-party open-source software (not hide.me's own protocol) with a published, reviewable implementation, so it is coded vendor_open rather than proprietary.

RetentionDoes a record exist that links traffic to a person, and who checked?13 fields read · 1 not applicable · 51.8 points of pressure×0.482

Composed rather than added: a prior of 0.55 on the stated branch, moved by what the paper says (0.3191) and by what the practice shows (0.0), at credence 0.3191 from the audit and 0.855 from how the provider engaged, against a severity of 0.45 for what is actually retained.

Retention linkable to a person as declaredmaterialC01_linkable_retention

session_metadata

Bhide.me10 Jan 2023

Report a problem with C01_linkable_retention

Persistent device identifier the provider holdsC12_device_identifier

none

Bplay.google.com Bapps.apple.com13 Sep 2026

Report a problem with C12_device_identifier

At least one independent auditmaterialV01_audit_exists

yes_verified

Computed

×0.280 of a clean record completeness 77%

Where the drop comes from: Retention. It is the channel this record's risk is concentrated in — on its own it takes a clean record to ×0.482, and its bar above is filled to that.

Exposure is recorded as high and the integrity status as clean.

This record sits above the register's average on all 8 channels. The narrowest margin is Disclosure, ×1.000 against ×0.970.

Published score

Every row above is one field of the published record, and every one of them can be challenged: every row carries Report, or raise something about the record as a whole. A correction with a source behind it is made the same day, and if it moves the score it moves the rank.

Specification

Carried, never scored

Countries with an exit

Compared with

What changed

If this one is not right

hide.me

Proton VPN

Mullvad VPN

IVPN

Where the security score comes from