Servers in country

VPNs with servers in Russia

The law in Russia puts a VPN provider with servers in the country under obligations to the state — keeping records about its users, registering, or giving the authorities access. On record here: Yarovaya package, SORM interception, VPN registry.

Some of the providers listed here say they removed their physical servers and serve the country from hardware elsewhere; each row carries the provider’s own answer. Which companies are registered in Russia is a different question, with a page of its own.

18 providersOrdered by securityUpdated 14 September 20262 companies registered here

The HushFleet teamRegister of 26 September 2026

Providers with exit locations in a country — a fact about a network, kept deliberately apart from where the company is registered. Only providers whose country list has a source appear: a provider that publishes nothing simply does not show up, which is a criterion already in the data rather than an editorial one.

An exit here is under a retention mandate. Yarovaya package, SORM interception, VPN registry. From the contract's country table — the same field that marks a country on a record's own list.

Using a VPN is not itself an offence in Russia, but the state blocks VPN services that will not serve its blocklist, and an exit standing here stands under the Yarovaya package's retention rules and SORM interception.

The Yarovaya package of 2016 (Federal Laws 374-FZ and 375-FZ) obliges telecom operators to store the content of calls and messages for six months and the records of who talked to whom, when and from where for three years, with the storage duties in force since 2018. Operators must also install SORM equipment, which gives the security services access to the line.

What the law requires of a provider standing here

Law 276-FZ, in force since November 2017, is aimed at VPNs themselves: on Roskomnadzor's demand a service must connect to the state registry of banned resources, the FGIS, within 30 days and block what it lists, or be blocked itself.

What is restricted

Roskomnadzor orders blocks under the Law on Information (149-FZ), and since 2019 every access provider must carry state-controlled filtering equipment. Facebook and Instagram were blocked in March 2022; in February 2026 WhatsApp was removed from the national domain system while Telegram was progressively restricted.

VPNs are a target in their own right: Roskomnadzor reported 469 VPN services blocked in February 2026, and advertising a means of getting round a block has been banned since March 2024, with fines since September 2025.

Whether posting can be prosecuted

Yes, and at scale. Criminal Code article 207.3, “fakes” about the armed forces, carries up to 15 years, and article 280.3 punishes “discrediting” them. Since 1 September 2025, article 13.53 of the Code of Administrative Offences fines 3,000–5,000 roubles for deliberately searching for material on the federal list of extremist materials; the first case was opened that November.

Officials said using a VPN is not in itself an offence under it. The exposure is the account and what was published or sought, not the network.

What it means for the rows below

An exit in Russia is an exit under the Yarovaya package and SORM: the line it stands on is one the operator must record and open to the security services, whatever the provider says it keeps. Eighteen of the 77 records publish an exit here.

The register marks the mandate on a record's own country list, and the order of the rows is the security score — reach is a usability fact, not a recommendation.

Russia

Ranked by security

Only a provider that publishes a country list appears here at all — 41 of the 77 on file. The other 27 are not missing research: they publish no list, and U02_server_countries is unknown for them rather than filled from the number their marketing claims.

A provider that says “100+ countries” and enumerates none gets no page on any of them, and the count printed on its own record is the length of the list, never the claim. With 41 providers behind 180 countries, the long tail of these pages carries one or two rows.

Each of the eighteen providers with an exit here names this country under a mandate in its own record (C09_mandate_countries).

Acceptable
1
Insufficient
2
Not recommended
3
Not recommended
4
Not recommended
5
Not recommended
6
Not recommended
7
Not recommended
8
Not recommended
9
Not recommended
10
Not recommended
11
Not recommended
12
Not recommended
13
Not recommended
14
Not recommended
15
Not recommended
16
Not recommended
17
Not recommended
18

Proton VPN

Commercial VPNSwitzerlandPulled its servers out rather than comply

Coverage147countries

Paying monthly$9.99monthly

Paying yearly$53.88yearly total

Free tierYeslimited free plan

Devices10at once

70 out of 100

Security

78 out of 100

Usability

VPNs with servers in Russia

Ranked by security

The other 179 countries