Insufficient
OVPN
Paying monthly
$12.00 per month
Paying yearly
$59.88 billed once a year
Coverage
20 countries with an exit
Free tier
No paid plans only
Security
Usability
OVPN was assessed by the HushFleet team and placed in the Insufficient band, with a security score of 24/100 and a usability score of 62/100. In the overall security ranking of VPN providers it ranks 8 of 68. Commercial VPN, company jurisdiction United States.
7 fields sit on this record without entering the score, and the contract says so in the field itself: scored: false. They are here because a reader asking who owns this company, or who signed the audit, is asking something the record answers — and because a value that never touches the arithmetic should be visibly outside it rather than quietly mixed in.
Every country the provider offers an exit location in, counted from its own server page: 20. There are no per-country server counts here and no fleet total anywhere on the site — the contract carries neither, and a number nobody can source is worse than an absent one. The 0 countries marked mandate impose data retention; that mark comes from the methodology’s own country table, not from the provider.
Alternatives
Insufficient
Paying monthly
$12.00 per month
Paying yearly
$59.88 billed once a year
Coverage
20 countries with an exit
Free tier
No paid plans only
Security
Usability
| Service class | Commercial VPN — security leads |
|---|---|
| Security score | 24 of 100 · Insufficient |
| Usability score | 62 of 100 · state known · 100% established · 100.0% of the weight read |
| Legal entity | OVPN Inc. |
| Jurisdiction | United States |
| Ultimate owner | Pango |
| Exposure | Medium · dominant channel: retention |
| Retention | Nothing that links traffic to a person |
| Latest audit | unknown · unknown · unknown · unknown |
| Countries with exits | 20 |
| Protocols | OpenVPNWireGuardAn obfuscated protocol |
| Works under active censorship | Claimed to work |
| Weakest protocol still offered | not applicable |
| Own DNS inside the tunnel | Yes, on the provider's word |
| Platforms | WindowsmacOSLinuxAndroidiOSRouters |
| Simultaneous devices | 4 |
| Kill switch | On desktop only |
| Split tunnelling | Available |
| Signing up | No account needed |
| Free tier | No free tier |
| P2P allowed | Allowed |
| Major streaming services reachable | Reachable |
| Price, monthly | $12.00 per month |
| Price, yearly | $59.88 a year at renewal, billed once |
| Offered countries that sit under a logging mandateC09_mandate_countries | |
|---|---|
| Country of the ultimate beneficial ownerM11_owner_jurisdiction | US |
| Owner group cluster keyM15_owner_group | pango |
| Date the current owner took controlM16_control_since | 2023-05-08 |
| Role of this brand inside the groupM17_brand_role | acquired_brand |
| Infrastructure shared with cluster siblingsM18_shared_infrastructure | separate |
| Total published auditsV10_audit_count | unknown |
13 Sep 20261 changes
Security scoresecurity.score
25 changed to 24
Coverage147countries
Paying monthly$9.99monthly
Paying yearly$53.88yearly total
Free tierYeslimited free plan
Devices10at once
Security
Usability
Coverage50countries
Paying monthly$5.69monthly
Paying yearly$69.60yearly total
Free tierNopaid plans only
Devices5at once
Security
Usability
Coverage41countries
Paying monthly$6.00monthly
Paying yearly$60.00yearly total
Free tierNopaid plans only
Devices5at once
Security
Usability
Eight channels, each asking one question of the published record and reading a named set of fields to answer it. They multiply rather than add — the factor beside a channel is what is left after the pressure it found, and open a channel to see every field it read, as it is stored. How the model works
Security fields
67 55 of them feed a channel
Established
42 22 left unknown, 3 not applicable
Completeness
70% the share the model could weigh
Citations
65 across 32 documents
Every value carries what it rests on, and the model weighs the four levels differently. Weight, then how many citations on this record sit at that level:
A weighs 1.00 · 1 hereB weighs 0.85 · 62 hereC weighs 0.70 · 2 here
The weights are methodology.json’s own; a claim seen in the artefact itself counts for more than the same claim reported second-hand. The date at the end of a row is the day that value was last read.
A channel does not price every field it reads. The ones it did are marked along their edge and carry what they added; everything else was read and cost nothing. Only a channel that composes field by field can mark a field at all — the rest price themselves by the parameters printed above their rows.
Still open on this record.
No independent audit. No third-party security, infrastructure or no-logs audit of OVPN's own systems was found on its site, in press or in help documentation; the closest adversarial test of its no-logs claim is the 2020 Swedish court proceeding, which is not an audit and does not speak to the current WireGuard/OpenVPN stack in detail.
Owner-group history predates OVPN's acquisition. The adverse finding behind this record's inclusion (X04) is a 2017 complaint against AnchorFree, Pango's corporate predecessor, over Hotspot Shield's ad-network data sharing — six years before Pango acquired OVPN. It was never adjudicated by the FTC, and OVPN's own infrastructure and policies are separately documented in this record.
Corporate structure split across two entities. OVPN's current Terms of Service and Privacy Notice name OVPN Inc. (Redwood City, California) as the contracting party, while OVPN's own help center names OVPN Integritet AB (Sweden, org. no. 556999-4469) as the operator. Both are described as under the same ultimate owner, Pango; which entity holds the infrastructure and legal responsibility for a given user was not resolved further.
Composed rather than added: a prior of 0.55 on the none branch, moved by what the paper says (0.0) and by what the practice shows (0.425), at credence 0.425 from the audit and 0.2975 from how the provider engaged, against a severity of 0.03 for what is actually retained.
Retention linkable to a person as declaredmaterialC01_linkable_retention
none_linkable
Bovpn.com13 Sep 2026
Report a problem with C01_linkable_retentionPersistent device identifier the provider holdsC12_device_identifier
none
Bplay.google.comBapps.apple.comBsupport.ovpn.com13 Sep 2026
Report a problem with C12_device_identifierAt least one independent auditmaterialV01_audit_exists
Computed
×0.239 of a clean record completeness 70%
Where the drop comes from: Retention. It is the channel this record's risk is concentrated in — on its own it takes a clean record to ×0.671, and its bar above is filled to that.
Exposure is recorded as medium and the integrity status as clean.
This record sits above the register's average on all 8 channels. The narrowest margin is Integrity, ×0.677 against ×0.658.
Published score
24Every row above is one field of the published record, and every one of them can be challenged: every row carries Report, or raise something about the record as a whole. A correction with a source behind it is made the same day, and if it moves the score it moves the rank.
unknown
nothing published · recorded as asserted
How the report is publishedV02_report_publication
unknown
nothing published · recorded as asserted
Subject of the latest auditV03_audit_subject
unknown
nothing published · recorded as asserted
Server fleet coverageV04_scope_servers
unknown
nothing published · recorded as asserted
Auditor categoryV06_firm_category
unknown
nothing published · recorded as asserted
Assurance standardV07_audit_standard
unknown
nothing published · recorded as asserted
Date of latest reportmaterialV08_audit_date_latest
unknown
nothing published · recorded as asserted
Audit cadenceV09_audit_regularity
unknown
nothing published · recorded as asserted
What the report states is retainedV11_audit_findings
unknown
nothing published · recorded as asserted
Strength of the assurance opinionV15_assurance_strength
unknown
nothing published · recorded as asserted
Chronology of documented enforcement eventsP12_case_history
2020-09-10court_order→nothing_produced
Bovpn.com10 Sep 2020
Report a problem with P12_case_historyWhat this channel priced on this record:Absolute claims 0.04Cluster contagion 0.06Owner group history 0.25
User base scale (mass >=10M, mid >=1M, niche <1M)also read by silenceM08_user_scale
unknown
nothing published · recorded as asserted
Other businesses of the owner groupM10_owner_other_business
app_portfolio
Cen.wikipedia.org13 Sep 2026
Report a problem with M10_owner_other_businessTransparency reportalso read by ignorance, silenceP05_transparency_report
fresh_with_numbers
Bovpn.com2026-08
Report a problem with P05_transparency_reportReported numbers plausible for this scalealso read by ignoranceP06_report_plausibility
unknown
nothing published · recorded as asserted
Documented gap between claim and behaviourX01_documented_lie
none
Bovpn.com10 Sep 2020
Report a problem with X01_documented_lieMarketing versus audit findingsX02_claim_gap
none
Bovpn.com10 Sep 2020
Report a problem with X02_claim_gapOwnership structure transparencyX03_owner_transparency
clear
Bovpn.comBsupport.ovpn.com13 Sep 2026
Report a problem with X03_owner_transparencyAdverse events on the owner group recordX04_owner_group_history
adware_malware_history
Acdt.org7 Aug 2017
Report a problem with X04_owner_group_historyHow the service is paid forX05_monetisation_model
paid_only
Bovpn.com13 Sep 2026
Report a problem with X05_monetisation_modelClaims of 100% anonymity or military-grade cryptoX06_absolute_claims
yes
Bsupport.ovpn.com13 Sep 2026
Report a problem with X06_absolute_claimsAggressive lifetime subscriptionsX07_lifetime_push
no
Bovpn.com13 Sep 2026
Report a problem with X07_lifetime_pushCoverage exists only on affiliate sitesX08_affiliate_only_reviews
no
Ccyberinsider.com13 Sep 2026
Report a problem with X08_affiliate_only_reviewsSecurity incident and how it was disclosedalso read by ignoranceX09_incident_handling
none_known
Bovpn.com13 Sep 2026
Report a problem with X09_incident_handlingAffiliate programme and payout tierX10_affiliate_program
standard
Bovpn.com13 Sep 2026
Report a problem with X10_affiliate_programOwner-run review media discloses the tieX11_review_media_disclosure
not applicable
nothing published · recorded as asserted
App store data declaration against the provider's own policyX12_store_data_declaration
matches_policy
Bplay.google.comBapps.apple.comBovpn.com13 Sep 2026
Report a problem with X12_store_data_declarationPriced from what is missing: 0.7 of the weighted record is established, on a slope of 0.9 under a cap of 0.6, with a posture of 0.4 relieved by 0.4.
Record completenessS08_completeness
70%
derived from the record itself
Response to a national logging mandatealso read by jurisdictionP04_mandate_response
unknown
nothing published · recorded as asserted
Transparency reportalso read by integrity, silenceP05_transparency_report
fresh_with_numbers
Bovpn.com2026-08
Report a problem with P05_transparency_reportReported numbers plausible for this scalealso read by integrityP06_report_plausibility
unknown
nothing published · recorded as asserted
Warrant canary disciplinealso read by disclosureP07_warrant_canary
unknown
nothing published · recorded as asserted
Security incident and how it was disclosedalso read by integrityX09_incident_handling
none_known
Bovpn.com13 Sep 2026
Report a problem with X09_incident_handlingWhere the company sits 0.03, where its owner sits 0.03, the exits it offers 0.0, the gag-order regime 0.2 — one circumstance, priced once rather than compounded.
Hosting in the mandate countries it offersC09b_mandate_hosting
not applicable
Bovpn.com13 Sep 2026
Report a problem with C09b_mandate_hostingIncorporation country mandates retentionC10_company_under_mandate
unknown
nothing published · recorded as asserted
Beneficial owner sits under a retention regimeC11_owner_under_mandate
unknown
nothing published · recorded as asserted
Response to a national logging mandatealso read by ignoranceP04_mandate_response
unknown
nothing published · recorded as asserted
Secret-order regime in the incorporation countryP11_gag_order_regime
nsl_equivalent
Beff.org13 Sep 2026
Report a problem with P11_gag_order_regimeA capped sum — the one channel that adds: 0.104 of a possible 0.28, from the fields marked below.
RAM-only diskless serversC02_ram_only
yes_declared+0.015
Bovpn.com13 Sep 2026
Report a problem with C02_ram_onlyIP allocation modelC03_ip_sharing
dedicated_option+0.010
Bsupport.ovpn.com13 Sep 2026
Report a problem with C03_ip_sharingSignup without emailC04_signup_no_email
yes_declared+0.005
Bsupport.ovpn.com13 Sep 2026
Report a problem with C04_signup_no_emailAnonymous payment optionsC05_payment_anonymous
crypto_processor+0.010
Bsupport.ovpn.com13 Sep 2026
Report a problem with C05_payment_anonymousOwn DNS inside the tunnelC06_own_dns_in_tunnel
yes_declared+0.005
Bovpn.com13 Sep 2026
Report a problem with C06_own_dns_in_tunnelWorst third-party SDK category in the appC07a_app_sdk
crash+0.010
Bapps.apple.com13 Sep 2026
Report a problem with C07a_app_sdkWorst third-party tracker category on the siteC07b_site_trackers
analytics+0.010
Bovpn.com13 Sep 2026
Report a problem with C07b_site_trackersWho owns the hardwareC08_servers_ownership
owned
Bovpn.com13 Sep 2026
Report a problem with C08_servers_ownershipWeakest protocol still offeredC13_weakest_protocol
not applicable
Bovpn.comBsupport.ovpn.com13 Sep 2026
Report a problem with C13_weakest_protocolClient source code publishedV12_client_open_source
unknown+0.018
nothing published · recorded as asserted
Reproducible buildsV13_reproducible_builds
unknown+0.014
nothing published · recorded as asserted
Separate client or infrastructure pentestV14_pentest_exists
unknown+0.007
nothing published · recorded as asserted
What this channel priced on this record:Price 0.05
Who operates the exitC00_architecture
provider_operated+0.000
Bovpn.com13 Sep 2026
Report a problem with C00_architectureWhat the exit does to passing trafficC14_traffic_modification
unknown+0.050
nothing published · recorded as asserted
Server seizure by law enforcementalso read by silenceP01_seizure_event
none_known
Bovpn.com13 Sep 2026
Report a problem with P01_seizure_eventActual disclosure historyP02_disclosure_history
none_known
Court record of compelled productionalso read by silenceP03_court_record
unable_to_produce
Bovpn.com10 Sep 2020
Report a problem with P03_court_recordWarrant canary disciplinealso read by ignoranceP07_warrant_canary
unknown
nothing published · recorded as asserted
Requests received in periodP08_requests_received
0
Bovpn.com2026-08
Report a problem with P08_requests_receivedRequests where data was providedP09_data_provided
0
Bovpn.com2026-08
Report a problem with P09_data_provided12 years in operation at 0.015 a year under a cap of 0.3, weighted 1.0: the rule did not fire.
User base scale (mass >=10M, mid >=1M, niche <1M)also read by integrityM08_user_scale
unknown
nothing published · recorded as asserted
Server seizure by law enforcementalso read by disclosureP01_seizure_event
none_known
Bovpn.com13 Sep 2026
Report a problem with P01_seizure_eventCourt record of compelled productionalso read by disclosureP03_court_record
unable_to_produce
Bovpn.com10 Sep 2020
Report a problem with P03_court_recordTransparency reportalso read by integrity, ignoranceP05_transparency_report
fresh_with_numbers
Bovpn.com2026-08
Report a problem with P05_transparency_report