Not recommended

VPN Unlimited

Commercial VPNUnited StatesRank 57 of 68

Paying monthly

$9.99 per month

Paying yearly

$59.99 billed once a year

Coverage

Not published no country list published

Free tier

No paid trial only

2 out of 100

Security

60 out of 100

Usability

Visit site

Service class

Commercial VPN — security leads

Security score

2 of 100 · Not recommended

Usability score

60 of 100 · state known · 83% established · 82.4% of the weight read

Legal entity

KeepSolid Inc.

Jurisdiction

United States

Ultimate owner

Vasyl Ivanov and Oleg Bocharnikov (co-founders)

Exposure

High · dominant channel: jurisdiction

Retention

Nothing that links traffic to a person

Latest audit

unknown · unknown · unknown · unknown

Countries with exits

not published

Protocols

WireGuard OpenVPN IKEv2 L2TP IPsec An obfuscated protocol

Works under active censorship

Claimed to work

Weakest protocol still offered

L2TP

Own DNS inside the tunnel

Yes, on the provider's word

Platforms

Windows macOS Linux iOS Android Apple TV Fire TV Browser extension Routers

Simultaneous devices

Kill switch

On some platforms

Split tunnelling

Available

Signing up

An email address only

Free tier

A trial only

P2P allowed

Allowed on some servers

Major streaming services reachable

unknown

Price, monthly

$9.99 per month

Price, yearly

$59.99 a year at renewal, billed once

Offered countries that sit under a logging mandateC09_mandate_countries

unknown

Country of the ultimate beneficial ownerM11_owner_jurisdiction

unknown

Owner group cluster keyM15_owner_group

independent

Date the current owner took controlM16_control_since

2013-11

Role of this brand inside the groupM17_brand_role

principal

Infrastructure shared with cluster siblingsM18_shared_infrastructure

separate

Total published auditsV10_audit_count

unknown

Where the security score comes from

Eight channels, each asking one question of the published record and reading a named set of fields to answer it. They multiply rather than add — the factor beside a channel is what is left after the pressure it found, and open a channel to see every field it read, as it is stored. How the model works

Security fields

67 55 of them feed a channel

Established

34 32 left unknown, 1 not applicable

Completeness

53% the share the model could weigh

Citations

47 across 23 documents

Every value carries what it rests on, and the model weighs the four levels differently. Weight, then how many citations on this record sit at that level:

B weighs 0.85 · 46 hereC weighs 0.70 · 1 here

The weights are methodology.json’s own; a claim seen in the artefact itself counts for more than the same claim reported second-hand. The date at the end of a row is the day that value was last read.

A channel does not price every field it reads. The ones it did are marked along their edge and carry what they added; everything else was read and cost nothing. Only a channel that composes field by field can mark a field at all — the rest price themselves by the parameters printed above their rows.

Still open on this record.

Independent verification. No third-party no-logs audit, pentest, or open-source client release could be found on KeepSolid's own site, its blog, or its help center; the zero-log claim in the privacy policy rests entirely on the provider's own word. The whole VERIFY block is unfilled for lack of a primary document, not because one was checked and found absent.

Server footprint. The provider states "3000+ servers across 80+ locations" but publishes no enumerable country list outside its client apps; a dropdown on the locations page and country-specific landing pages hint at the fleet without stating it, so U02_server_countries and everything derived from it stay open.

Architecture and ownership depth. Who operates the exit hardware, whether it is RAM-only, whether IPs are shared, and where the ultimate beneficial owners personally sit are all undocumented; only the incorporation address (New York) and two named founders are established.

On the record as a whole.

KeepSolid settled a 2022 US copyright lawsuit (E.D. Va.) by agreeing to block BitTorrent traffic and named torrent sites on its US servers only; this is a civil traffic-blocking commitment, not a law-enforcement data disclosure, so it is reflected in U12a_p2p_allowed=partial (P2P now confined to three non-US servers) rather than in the P-block.

U07_protocols codes KeepSolid Wise as obfuscated: the provider's own page describes it as built on OpenVPN/TLS specifically to disguise VPN traffic as HTTPS, the same category as Windscribe Stealth, not a primary vendor transport. A help-center article states split tunneling is Android-only while a 2024-04-29 blog post confirms a Windows-specific Split Tunnel mode; both are cited, and the field reads the union.

C07a_app_sdk and X12_store_data_declaration both trace to the same Google Play Data Safety entry, which declares "Installed apps" (App Activity) and crash/diagnostics collection that the privacy policy never mentions anywhere; the Apple App Store privacy label lists only an account-linked User ID and diagnostics, no such gap on that side.

JurisdictionCan someone compel what exists, without the provider getting a say?5 fields read · 3 left unknown · 70.5 points of pressure×0.295

Where the company sits 0.6, where its owner sits 0.03, the exits it offers 0.05, the gag-order regime 0.2.

Hosting in the mandate countries it offersC09b_mandate_hosting

unknown

nothing published · recorded as asserted

Report a problem with C09b_mandate_hosting

Incorporation country mandates retentionC10_company_under_mandate

yes

Bkeepsolid.com14 Sep 2026

Report a problem with C10_company_under_mandate

Beneficial owner sits under a retention regimeC11_owner_under_mandate

unknown

nothing published · recorded as asserted

Report a problem with C11_owner_under_mandate

Response to a national logging mandatealso read by ignoranceP04_mandate_response

unknown

nothing published · recorded as asserted

Report a problem with P04_mandate_response

Computed

×0.022 of a clean record completeness 53%

Where the drop comes from: Jurisdiction. It is the channel this record's risk is concentrated in — on its own it takes a clean record to ×0.295, and its bar above is filled to that.

Exposure is recorded as high and the integrity status as unexamined.

Against the rest of the register, this record sits furthest above on Architecture — ×0.950 where the register averages ×0.900 — and furthest below on Jurisdiction, ×0.295 against ×0.680.

Published score

Every row above is one field of the published record, and every one of them can be challenged: every row carries Report, or raise something about the record as a whole. A correction with a source behind it is made the same day, and if it moves the score it moves the rank.

Specification

Carried, never scored

If this one is not right

VPN Unlimited

Proton VPN

Mullvad VPN

IVPN

Where the security score comes from