VPN Research Program
Lead analyst: Sarah Chen ·How we evaluate consumer VPNs: the evidence we collect, the rubric we score against, and the cadence at which we re-test.
Research program 10 products tracked Quarterly cycle
What this program covers
The VPN research program scores 10 consumer VPN services that dominate reader demand. We prioritize privacy architecture, jurisdiction, and leak behavior over marketing claims. This page documents how scores are produced so readers can audit our conclusions.
Scoring rubric
Each product receives scores across five weighted dimensions. Weights reflect what matters most to readers making a VPN purchase decision.
| Dimension | Weight | What we measure |
|---|---|---|
| Privacy & Trust | 30% | Jurisdiction, corporate ownership disclosure, no-logs policy specificity, independent audit history, handling of government requests, RAM-only servers, and warrant canary status. |
| Security | 25% | Protocol support (WireGuard, OpenVPN, IKEv2), encryption standards, kill switch reliability under test, DNS/IPv6/WebRTC leak behavior, and post-quantum readiness where applicable. |
| Speed & Reliability | 20% | Throughput on nearby and long-haul servers, latency impact, session stability during extended use, and mobile-to-Wi-Fi handoff behavior. |
| Features & Unblocking | 15% | Streaming reliability across major platforms, P2P policy, split tunneling, multi-hop, obfuscation, device limit, and OS coverage. |
| Value & Transparency | 10% | Introductory vs renewal pricing, refund window enforcement, cancellation flow friction, and clarity of sign-up disclosures. |
Evidence we collect
- Primary vendor documents — privacy policy, terms of service, transparency report, security whitepaper, and most recent pricing page. Captured with a retrieval date.
- Independent audits — no-logs assertion audits, infrastructure audits, and app security audits published by recognized firms.
- Leak and performance tests — DNS, IPv6, and WebRTC leak checks; throughput measurements at identical times of day against a control; kill switch behavior under forced network drops.
- Support reality check — timed support response tests via chat and email, plus cancellation flow walkthroughs to confirm refund accessibility.
- Regulatory and legal context — jurisdiction signals, known court orders, data-request practices, and any public enforcement actions.
Products in this program
See the current ranked comparison →
Update cadence
Full quarterly re-evaluation of all 10 products. Out-of-cycle updates are triggered by: a confirmed security incident, a newly published audit, a material pricing change, a jurisdictional change at the parent company, or a verified reader report.
How this category scores changed recently
- Added a post-quantum protocol readiness signal under Security following wider deployment in 2026.
- Shifted the Features weight slightly toward streaming reliability after multiple platforms tightened their VPN detection this year.
- Expanded the jurisdiction column on comparison pages to disclose ultimate parent and headquarters country.