Where the security score comes from
Eight channels, each asking one question of the published record and reading a named set of fields to answer it. They multiply rather than add — the factor beside a channel is what is left after the pressure it found, and open a channel to see every field it read, as it is stored. How the model works
Security fields
67 55 of them feed a channel
Established
19 47 left unknown, 1 not applicable
Completeness
28% the share the model could weigh
Citations
29 across 15 documents
Every value carries what it rests on, and the model weighs the four levels differently. Weight, then how many citations on this record sit at that level:
B weighs 0.85 · 27 hereD weighs 0.35 · 2 here
The weights are methodology.json’s own; a claim seen in the artefact itself counts for more than the same claim reported second-hand. The date at the end of a row is the day that value was last read.
A channel does not price every field it reads. The ones it did are marked along their edge and carry what they added; everything else was read and cost nothing. Only a channel that composes field by field can mark a field at all — the rest price themselves by the parameters printed above their rows.
Still open on this record.
Independent audit. No independent security or no-logs audit could be found on the provider's own site, its privacy policy, or terms of service; the fastest way to close this is a published, dated engagement report naming an auditor and its scope.
Entity and jurisdiction. The Terms of Service name MOPUBI LIMITED, Hong Kong, as the operating entity and billing party, while the same document's choice-of-law clause and the Privacy Policy's jurisdiction section both claim the business is registered in Seychelles; nothing on the site reconciles which entity actually holds user data or answers a legal request.
the rest of what is open — 148 more words
Protocol list. The server-locations page states PandaVPN uses the OpenVPN protocol, with no mention of WireGuard or any other transport; without a dedicated protocol page or app documentation confirming the full transport list, U07 is left unknown rather than guessed from one page's description.
Session retention. Marketing copy claims a strict no-logs, anonymity-first posture, but the formal Privacy Policy never states what happens to the source IP or connection timestamp during an active session, only that browsing history, DNS queries and traffic content are not stored; the two documents are not detailed enough, together, to place a value on C01 with confidence.
Transparency reporting. No transparency report, warrant canary, or documented history of legal requests is published anywhere on the site or in the sitemap; the P-block rests on an explicit but unverifiable absence, established by a full search, rather than any positive record of resisting a demand.
On the record as a whole.
The provider operates under two names that are never reconciled on its own pages: MOPUBI LIMITED (Hong Kong, per the Terms of Service's 'Business Entity and Billing' section, and the © notice on every page) and a claim in the Privacy Policy that 'PandaVPN registered its business in Seychelles', which the Terms of Service's own choice-of-law clause repeats ('governed by ... the laws of Seychelles'). Neither document explains the relationship between the two.
Self-reported user counts also disagree across the provider's own pages: the homepage claims '100,000,000+ Users Worldwide' while the server-locations page says 'tens of millions of people' -- both comfortably clear the mass-scale threshold, but the two figures are not the same claim.
the rest of what is open — 118 more words
The 'yearly' plan advertised at $59.99 is actually a 24-month term (a 12-month plan plus a 12-month bonus, '12 + 12 Months Free'); the page states it 'autorenews at $59.99 annually' after that first 24-month period, so the effective first-term price is roughly half the eventual annual rate.
Google Play's and Apple's own app-store listings for this product disagree with each other on tracking (Play: 'No data shared with third parties', only 'Personal info' collected; Apple's App Privacy label: 'Data Used to Track You: Identifiers, Usage Data') -- store citations are restricted by this catalogue's sourcing rules to X12 and U01 only, so this tension is recorded there and not read into C07a or C12, which stay unknown.
IgnoranceHow much of this did nobody establish?5 fields read · 4 left unknown · 60.0 points of pressure×0.400
Priced from what is missing: 0.28 of the weighted record is established, on a slope of 0.9 under a cap of 0.6, with a posture of 0.0 relieved by 0.4.
Record completenessS08_completeness
28%
derived from the record itself
Warrant canary disciplinealso read by disclosureP07_warrant_canary
unknown
nothing published · recorded as
Computed
×0.065 of a clean record completeness 28%
Where the drop comes from: Ignorance. It is the channel this record's risk is concentrated in — on its own it takes a clean record to ×0.400, and its bar above is filled to that.
Exposure is recorded as medium and the integrity status as unexamined.
Against the rest of the register, this record sits furthest above on Jurisdiction — ×0.894 where the register averages ×0.680 — and furthest below on Ignorance, ×0.400 against ×0.662.
Every row above is one field of the published record, and every one of them can be challenged: every row carries Report, or raise something about the record as a whole. A correction with a source behind it is made the same day, and if it moves the score it moves the rank.
