CyberGhost / Perfect Privacy compared
Same criteria, same rules. You see where they diverge.
No winner on this page. vpn-matrix.com assigns no points and makes no recommendations.
Differences (98)
Criteria where the values diverge.
| CyberGhost | Perfect Privacy | |
|---|---|---|
| Legal company name | CyberGhost S.R.L.confirmed | CyberDock IT Solutions GmbHconfirmed |
| Trademark holder, if different | CyberGhost S.A. (marketing brand CyberGhost VPN)provider claim | CyberDock IT Solutions GmbH / Perfect Privacy brandprovider claim |
| Year founded | 2011confirmed | 2008provider claim |
| Headquarters (country) | ROconfirmed | DEconfirmed |
| Other relevant jurisdictions | Rumänien (Betreibergesellschaft CyberGhost S.R.L.), Vereinigtes Königreich (Sitz der Konzernmutter Kape Technologies), Zypern (im rumänischen Register eingetragener Gesellschafter)confirmed | DE (Hamburg HRB 152750)confirmed |
| Intelligence alliance of the home country | noneprovider claim | 14 Eyesconfirmed |
| Parent group / holding | Kape Technologies PLCconfirmed | CyberDock IT Solutions GmbH (Hamburg)provider claim |
| Beneficial owners publicly known | fully knownconfirmed | partly knownprovider claim |
| Ownership structure | private equityprovider claim | owners undisclosedprovider claim |
| Leadership team publicly named | noprovider claim | yesprovider claim |
| Sister VPN brands in the group | ExpressVPN, Private Internet Accessconfirmed | none documentedprovider claim |
| Group owns VPN review and comparison sites | vpnMentor und Wizcase über die im März 2021 übernommene Webseleneseconfirmed | none documentedprovider claim |
| Typical commission rate | Anbieterangabe: bis zu 100 Prozent Provision, Abwicklung über ein HasOffers-Kontoprovider claim | Affiliate program exists; commission terms on affiliate page (fetch timeout — program linked from site)provider claim |
| YouTube and influencer sponsoring | occasionalprovider claim | unknownprovider claim |
| Acquisition history / former name | März 2017 Übernahme durch Kape Technologies; Mai 2023 Rückzug von Kape von der Londoner AIM nach dem Übernahmeangebot der Unikmind Holdings Limitedconfirmed | Originally Switzerland-based (from 2008); later operated by CyberDock IT Solutions GmbH in Hamburg, Germany; technical entity claimed as Webinvest International SA (Panama)provider claim |
| Operating status | activeconfirmed | discontinuedconfirmed |
| Discontinuation date | ? | 01/30/2026provider claim |
| Core statement of the logging policy | Anbieterangabe: 'we are NOT storing connection logs, meaning that we DON'T have any logs tied to your IP address, connection timestamp or session duration.'provider claim | No user traffic logs; no IP addresses, access times/duration, or per-user bandwidth stored; account holds login, expiry, emailconfirmed |
| Recording of transferred data volume | not recordedprovider claim | aggregate onlyconfirmed |
| Enforcement of the device limit | Multiple devices supported; exact simultaneous cap not on features fetchprovider claim | Unlimited simultaneous connections (vendor claim; mirrored in reviews)provider claim |
| Minimum account data required | Laut Datenschutzerklärung werden bei der Registrierung Name, E-Mail-Adresse und Anschrift erhoben; die Browser-Erweiterungen für Chrome und Firefox lassen sich ohne Konto und ohne E-Mail-Adresse nutzenprovider claim | username/password, account expiry, emailconfirmed |
| Telemetry in the apps | opt inprovider claim | noneprovider claim |
| Trackers and SDKs in the Android app | Not enumerated on fetched product pages (privacy policy URL returned 404 in this session)provider claim | None — vendor claimed in-house development without third parties (Wayback home)provider claim |
| Trackers in the iOS app | Not enumerated on fetched product pages (privacy policy URL returned 404 in this session)provider claim | No iOS app (CyberInsider con); N/A for first-party iOS SDKsprovider claim |
| Trackers and cookies on the website | Die Datenschutzerklärung nennt Google Analytics, Mouseflow, AppsFlyer, VWO und Iterable als eingesetzte Analyse- und Marketingdiensteprovider claim | Google Analytics with anonymizeIp; advertising cookies disclosedprovider claim |
| Data shared with third parties | Laut Datenschutzerklärung: Cleverbridge, Stripe, PayPal, Braintree, Paddle, BitPay und Amazon Pay (Zahlung), Zendesk (Support), Google Analytics, Mouseflow, AppsFlyer, VWO und Iterable (Analyse und Marketing) sowie verbundene Unternehmen der Kape Technologies PLCprovider claim | Payment processors (Paymentwall, PayPal, Stripe, Bitcoin processors); Google Analytics on website with anonymized IPprovider claim |
| Retention periods stated in the policy | Unbestimmt. Die Datenschutzerklärung nennt keine Frist, sondern Aufbewahrung 'as long as needed to provide the Service and to comply with our legal obligations, resolve disputes and enforce our agreements'provider claim | VPN: no connection data retained; account credentials/email/expiry retained for billing/supportprovider claim |
| Independent no-logs audit | yesconfirmed | noprovider claim |
| No-logs audit details | Deloitte Audit S.R.L. (Rumänien), Prüfungen 2022, 2024 und 2025 nach ISAE 3000 (Revised); Prüfumfang laut Anbieter das VPN-Servernetz, Konfigurations- und Change-Management, Incident Response sowie das Token-System für dedizierte IP-Adressenprovider claim | No-logs policy described as involuntarily tested via police server seizures (notably 2016 Golem/heise reporting); vendor claimed regular internal/external audits on Wayback homepageprovider claim |
| Audit report published | full reportconfirmed | not publishedprovider claim |
| App and client audits | Deloitte no-logs audit 2025provider claim | Vendor claimed regular internal/external audits on Wayback homepage; no named app-audit firm/report URL foundprovider claim |
| Infrastructure and server audits | Deloitte infrastructure audit 2025provider claim | No public infra audit report found; involuntary 2016 seizure treated as practical no-logs test in secondary sourcesprovider claim |
| Tested in court or by authorities | No public court case testing CyberGhost no-logsprovider claim | 2016 Netherlands server seizure reported; no customer data recovered (vendor/community narrative on archived pages and reviews)provider claim |
| Transparency report | regularprovider claim | noneprovider claim |
| Warrant canary | noneprovider claim | staleprovider claim |
| Security incidents and data leaks | Windows-Client: Rechteausweitung CVE-2023-30237 durch Command Injection im RPC-Dienst, am 03.01.2023 von Pen Test Partners gemeldet und mit Version 8.3.10.10015 am 24.02.2023 behoben. Linux-Client: am 01.12.2022 gemeldete fehlende Zertifikatsprüfung, Command Injection und lokale Rechteausweitung, teilweise behoben mit Version 1.4.0 am 24.12.2022 und vollständig mit 1.4.1 am 22.02.2023confirmed | Police seizures of VPN hardware/servers reported (heise 2010; Golem 2016); operator framed seizures as validating no-logs (no user data found)confirmed |
| Bug bounty programme | Bug-Bounty-Programm über YesWeHack, Prämien bis 1.250 US-Dollar; im Umfang unter anderem unbefugter Zugriff auf VPN-Server, Remote Code Execution und Schwachstellen, die Nutzerdaten offenlegenprovider claim | Perfect Privacy responsible disclosureprovider claim |
| Handling of reported vulnerabilities | Kape/CyberGhost security advisoriesprovider claim | ? |
| Open source clients | noneprovider claim | someprovider claim |
| Listings by independent bodies | Marketing cites press; Vulnerability Disclosure Program linked in footerprovider claim | Historically recommended in privacy community reviews; CyberInsider and SafetyDetectives reviewed it; recommendations withdrawn after Jan 2026 shutdownprovider claim |
| WireGuard | yesprovider claim | noprovider claim |
| Proprietary protocol | noneprovider claim | Stealth VPN (DPI obfuscation wrapping VPN to look like HTTPS)provider claim |
| Legacy protocols still offered | none advertised; OpenVPN, WireGuard, IKEv2 offeredprovider claim | SSH2 tunnelprovider claim |
| Default data cipher | Anbieterangabe: AES-256 bei OpenVPN und IKEv2, ChaCha20-Poly1305 bei WireGuardprovider claim | AES-256 (OpenVPN)provider claim |
| Key exchange and authentication | OpenVPN / WireGuard / IKEv2 handshakes depending on selected protocolprovider claim | OpenVPN / IPsec industry standards (details not fully specified on feature pages)provider claim |
| IPv6 handling | disabledprovider claim | routed through tunnelprovider claim |
| WebRTC protection or guidance | noprovider claim | yesprovider claim |
| Obfuscation methods | Not clearly documented as a named obfuscation feature on fetched features/home pages (OpenVPN/WireGuard/IKEv2 advertised)provider claim | Stealth VPN (HTTPS-like masking against DPI)provider claim |
| Permanent lockdown | yesprovider claim | noprovider claim |
| Split tunneling | Anbieterangabe: in der Windows-App über die Funktion 'Exceptions' für einzelne Websites, die Übersichtsseite nennt zusätzlich das Ausklammern einzelner Anwendungenprovider claim | yes (app split-tunneling per SafetyDetectives review of the service)provider claim |
| Multihop | not availableprovider claim | freely combinableprovider claim |
| Port forwarding | not availableprovider claim | availableprovider claim |
| Surcharge for a dedicated IP | €4.00provider claim | €0.00provider claim |
| SOCKS5 proxy | noprovider claim | yesprovider claim |
| HTTP proxy | noprovider claim | yesprovider claim |
| Smart DNS | yesprovider claim | noprovider claim |
| Ad and tracker filtering in DNS | fixed listprovider claim | configurableprovider claim |
| Custom DNS servers allowed | noprovider claim | yesprovider claim |
| Local network access toggle | noprovider claim | yesprovider claim |
| Traffic analysis defence | Content Blocker (ads/trackers/malware domains); protocols OpenVPN/WireGuard/IKEv2provider claim | Stealth VPN Technology / NeuroRouting historically offeredprovider claim |
| IPv6 inside the tunnel | noprovider claim | yesprovider claim |
| Number of servers | 9,800 Serverprovider claim | 55 Serverprovider claim |
| Number of countries | 100 Laenderprovider claim | 23 Laenderprovider claim |
| Number of cities | 125 Staedteprovider claim | 35 Staedteprovider claim |
| Virtual locations | labelledprovider claim | no virtual locationsprovider claim |
| Hardware ownership | mixedprovider claim | colocationprovider claim |
| P2P and file sharing | dedicated locationsprovider claim | entire networkprovider claim |
| Public status page | noprovider claim | yesprovider claim |
| Known upstream hosting providers | Not individually named on fetched features/home pages; Kape-operated networkprovider claim | 100% dedicated bare-metal / root servers (no cloud VPS); operators not individually named on fetched pagesprovider claim |
| Linux command line | native appprovider claim | manual config onlyprovider claim |
| Android TV app | native appprovider claim | not availableprovider claim |
| Apple TV app | native appprovider claim | not availableprovider claim |
| Fire TV app | native appprovider claim | not availableprovider claim |
| Browser extension | own extensionprovider claim | not availableprovider claim |
| Type of browser extension | standalone browser proxyprovider claim | no extensionprovider claim |
| Router support | OpenVPN-Konfigurationsdateien für DD-WRT, Tomato, OpenWrt sowie AsusWRT und AsusWRT-Merlinprovider claim | VPN Routers documentation linked in footerprovider claim |
| Command line documented | noprovider claim | yesprovider claim |
| Simultaneous devices | 7provider claim | unlimited / personal multi-device use allowed; no sharing credentialsprovider claim |
| Cash by mail | noprovider claim | yesprovider claim |
| Retail gift cards | noprovider claim | yesprovider claim |
| Monthly price | €11.99provider claim | €12.99provider claim |
| Effective price on the longest term | €2.19provider claim | €8.95provider claim |
| Price change at renewal | moderate increaseprovider claim | same priceprovider claim |
| Free tier and its limits | Kostenlose Browser-Erweiterungen für Chrome und Firefox ohne Konto und ohne E-Mail-Adresse, beschränkt auf Server in den USA, Deutschland, den Niederlanden und Rumänien und nur für den Verkehr des Browsersprovider claim | noneprovider claim |
| Money-back window | 45 Tageprovider claim | 7 Tageprovider claim |
| P2P policy in the terms of service | dedicated locationsprovider claim | entire networkprovider claim |
| Streaming unblocking officially advertised | yesprovider claim | noprovider claim |
| Netflix regions reported | Anbieterangabe von eigens ausgewiesenen Netflix-Servern für Argentinien, Australien, Belgien, Brasilien, Kanada, die Schweiz, Tschechien, Deutschland, Dänemark, Spanien, Frankreich, Israel, Indien, Italien, Japan, Südkorea, Mexiko, die Niederlande, Norwegen, Neuseeland, Polen, Rumänien, Schweden, Singapur, Thailand, die Türkei, das Vereinigte Königreich, die USA und Südafrika (29 Länder).provider claim | Poor / largely incompatible with Netflix and Disney+ per CyberInsider testing notesprovider claim |
| Other streaming services | Vom Anbieter genannt: Netflix, Amazon Prime Video, Disney+, HBO Max, BBC iPlayer, Sling TV, YouTube TV, Paramount+ und Tubiprovider claim | CyberInsider: does not work well with streaming sites such as Netflix and Disney Plusprovider claim |
| Speed measurement references | Keine unabhängigen Geschwindigkeitsmessungen auf den offiziellen Seiten verlinkt. Belegt werden nur die Hardware-Kapazität ('10-Gbps servers') und Marketingformulierungen wie 'ultra-fast speeds'; konkrete Mbit/s- oder Ping-Werte aus eigenen oder Drittanbieter-Tests werden nicht genannt.provider claim | VPNmentor maß im eigenen Test von einem UK-Standort aus per IKEv2 einen durchschnittlichen Geschwindigkeitsverlust von 35 Prozent bei nahegelegenen Servern und 55 Prozent bei entfernten Servern, auf einzelnen Servern über 90 Prozent.confirmed |
| Latency and gaming suitability | Die App zeigt laut Anbieter Ping, Entfernung und Serverauslastung je Standort an, damit Spieler eine latenzarme Verbindung wählen können; die Gaming-Seite wirbt zusätzlich mit 'Reduce Ping When Gaming Online'. Konkrete Millisekundenwerte oder unabhängige Messungen werden nicht genannt.provider claim | Die getesteten Erfahrungen widersprechen sich deutlich. Comparitech fand beim Spieletest über nahe Server 'no dropped connections, no lagging, or freeze-ups'. Cloudwards maß dagegen im Schnitt über 1000 Prozent höhere Latenz und beschrieb League of Legends über einen US-Server als kaum spielbar ('each input took forever to load'). VPNmentor erlebte auf einem Schweizer Server mit 65 ms Ping zufälliges Einfrieren des Charakters und stufte Server in Singapur und Schweden als unspielbar ein. CyberInsider maß unabhängig davon reine Downloadraten von 117 bis 141 MBit/s auf nahen und 131 MBit/s auf US-Servern, ohne eigenen Spieletest, und wies auf spürbar schlechtere Werte bei aktiviertem Multi-Hop hin.disputed |
| SMTP and port 25 handling | Not documented on fetched CyberGhost pagesprovider claim | Not documented on fetched Wayback/review pagesprovider claim |
| Official support in restrictive countries | Markets bypassing restrictions / streaming access; no China-specific official claim extracted from fetched pagesprovider claim | Die FAQ widmet China, Iran und der Türkei einen eigenen Abschnitt und empfiehlt dort Stealth VPN sowie kaskadierte Verbindungen über einen erreichbaren regionalen Server.provider claim |
| 24/7 live chat | yesprovider claim | noprovider claim |
| Tracker load of the website | Marketing site uses cookies; privacy policy covers trackingprovider claim | Privacy policy covered website cookies historicallyprovider claim |
| URL of the warrant canary | none foundprovider claim | Historical warrant canary page (service discontinued)provider claim |
| Length and readability of the legal documents | Standard corporate legal/privacy pagesprovider claim | Technical privacy-focused documentation historicallyprovider claim |
| Marketing claims contradicting the provider's own terms | Aggressive promo pricing ($2.19/mo intro) paired with multi-year billing; Dedicated IP marketed as add-onprovider claim | Discontinued service — historical claims onlyprovider claim |
All sourced criteria (158)
| CyberGhost | Perfect Privacy | |
|---|---|---|
| Legal company name | CyberGhost S.R.L.confirmed | CyberDock IT Solutions GmbHconfirmed |
| Trademark holder, if different | CyberGhost S.A. (marketing brand CyberGhost VPN)provider claim | CyberDock IT Solutions GmbH / Perfect Privacy brandprovider claim |
| Year founded | 2011confirmed | 2008provider claim |
| Headquarters (country) | ROconfirmed | DEconfirmed |
| Other relevant jurisdictions | Rumänien (Betreibergesellschaft CyberGhost S.R.L.), Vereinigtes Königreich (Sitz der Konzernmutter Kape Technologies), Zypern (im rumänischen Register eingetragener Gesellschafter)confirmed | DE (Hamburg HRB 152750)confirmed |
| Intelligence alliance of the home country | noneprovider claim | 14 Eyesconfirmed |
| Parent group / holding | Kape Technologies PLCconfirmed | CyberDock IT Solutions GmbH (Hamburg)provider claim |
| Beneficial owners publicly known | fully knownconfirmed | partly knownprovider claim |
| Ownership structure | private equityprovider claim | owners undisclosedprovider claim |
| Leadership team publicly named | noprovider claim | yesprovider claim |
| Verifiable postal address for legal service | yesconfirmed | yesprovider claim |
| Sister VPN brands in the group | ExpressVPN, Private Internet Accessconfirmed | none documentedprovider claim |
| Group owns VPN review and comparison sites | vpnMentor und Wizcase über die im März 2021 übernommene Webseleneseconfirmed | none documentedprovider claim |
| Runs an affiliate programme | yesprovider claim | yesprovider claim |
| Typical commission rate | Anbieterangabe: bis zu 100 Prozent Provision, Abwicklung über ein HasOffers-Kontoprovider claim | Affiliate program exists; commission terms on affiliate page (fetch timeout — program linked from site)provider claim |
| YouTube and influencer sponsoring | occasionalprovider claim | unknownprovider claim |
| Documented misleading advertising claims | none_knownprovider claim | none_knownprovider claim |
| Acquisition history / former name | März 2017 Übernahme durch Kape Technologies; Mai 2023 Rückzug von Kape von der Londoner AIM nach dem Übernahmeangebot der Unikmind Holdings Limitedconfirmed | Originally Switzerland-based (from 2008); later operated by CyberDock IT Solutions GmbH in Hamburg, Germany; technical entity claimed as Webinvest International SA (Panama)provider claim |
| Operating status | activeconfirmed | discontinuedconfirmed |
| Discontinuation date | ? | 01/30/2026provider claim |
| User base migrated to | noneprovider claim | noneprovider claim |
| Core statement of the logging policy | Anbieterangabe: 'we are NOT storing connection logs, meaning that we DON'T have any logs tied to your IP address, connection timestamp or session duration.'provider claim | No user traffic logs; no IP addresses, access times/duration, or per-user bandwidth stored; account holds login, expiry, emailconfirmed |
| Activity and traffic logs | noneprovider claim | noneconfirmed |
| Connection logs | noneprovider claim | noneconfirmed |
| Storage of the real IP address | not storedprovider claim | not storedconfirmed |
| Storage of the assigned VPN IP | not storedprovider claim | not storedprovider claim |
| Precision of stored timestamps | noneprovider claim | noneconfirmed |
| Recording of transferred data volume | not recordedprovider claim | aggregate onlyconfirmed |
| Enforcement of the device limit | Multiple devices supported; exact simultaneous cap not on features fetchprovider claim | Unlimited simultaneous connections (vendor claim; mirrored in reviews)provider claim |
| Minimum account data required | Laut Datenschutzerklärung werden bei der Registrierung Name, E-Mail-Adresse und Anschrift erhoben; die Browser-Erweiterungen für Chrome und Firefox lassen sich ohne Konto und ohne E-Mail-Adresse nutzenprovider claim | username/password, account expiry, emailconfirmed |
| Telemetry in the apps | opt inprovider claim | noneprovider claim |
| Trackers and SDKs in the Android app | Not enumerated on fetched product pages (privacy policy URL returned 404 in this session)provider claim | None — vendor claimed in-house development without third parties (Wayback home)provider claim |
| Trackers in the iOS app | Not enumerated on fetched product pages (privacy policy URL returned 404 in this session)provider claim | No iOS app (CyberInsider con); N/A for first-party iOS SDKsprovider claim |
| Trackers and cookies on the website | Die Datenschutzerklärung nennt Google Analytics, Mouseflow, AppsFlyer, VWO und Iterable als eingesetzte Analyse- und Marketingdiensteprovider claim | Google Analytics with anonymizeIp; advertising cookies disclosedprovider claim |
| Data shared with third parties | Laut Datenschutzerklärung: Cleverbridge, Stripe, PayPal, Braintree, Paddle, BitPay und Amazon Pay (Zahlung), Zendesk (Support), Google Analytics, Mouseflow, AppsFlyer, VWO und Iterable (Analyse und Marketing) sowie verbundene Unternehmen der Kape Technologies PLCprovider claim | Payment processors (Paymentwall, PayPal, Stripe, Bitcoin processors); Google Analytics on website with anonymized IPprovider claim |
| Retention periods stated in the policy | Unbestimmt. Die Datenschutzerklärung nennt keine Frist, sondern Aufbewahrung 'as long as needed to provide the Service and to comply with our legal obligations, resolve disputes and enforce our agreements'provider claim | VPN: no connection data retained; account credentials/email/expiry retained for billing/supportprovider claim |
| EU representative named under GDPR | yesprovider claim | yesprovider claim |
| Independent no-logs audit | yesconfirmed | noprovider claim |
| No-logs audit details | Deloitte Audit S.R.L. (Rumänien), Prüfungen 2022, 2024 und 2025 nach ISAE 3000 (Revised); Prüfumfang laut Anbieter das VPN-Servernetz, Konfigurations- und Change-Management, Incident Response sowie das Token-System für dedizierte IP-Adressenprovider claim | No-logs policy described as involuntarily tested via police server seizures (notably 2016 Golem/heise reporting); vendor claimed regular internal/external audits on Wayback homepageprovider claim |
| Audit report published | full reportconfirmed | not publishedprovider claim |
| App and client audits | Deloitte no-logs audit 2025provider claim | Vendor claimed regular internal/external audits on Wayback homepage; no named app-audit firm/report URL foundprovider claim |
| Infrastructure and server audits | Deloitte infrastructure audit 2025provider claim | No public infra audit report found; involuntary 2016 seizure treated as practical no-logs test in secondary sourcesprovider claim |
| Audit frequency | irregularprovider claim | irregularprovider claim |
| Tested in court or by authorities | No public court case testing CyberGhost no-logsprovider claim | 2016 Netherlands server seizure reported; no customer data recovered (vendor/community narrative on archived pages and reviews)provider claim |
| Transparency report | regularprovider claim | noneprovider claim |
| Warrant canary | noneprovider claim | staleprovider claim |
| Security incidents and data leaks | Windows-Client: Rechteausweitung CVE-2023-30237 durch Command Injection im RPC-Dienst, am 03.01.2023 von Pen Test Partners gemeldet und mit Version 8.3.10.10015 am 24.02.2023 behoben. Linux-Client: am 01.12.2022 gemeldete fehlende Zertifikatsprüfung, Command Injection und lokale Rechteausweitung, teilweise behoben mit Version 1.4.0 am 24.12.2022 und vollständig mit 1.4.1 am 22.02.2023confirmed | Police seizures of VPN hardware/servers reported (heise 2010; Golem 2016); operator framed seizures as validating no-logs (no user data found)confirmed |
| Bug bounty programme | Bug-Bounty-Programm über YesWeHack, Prämien bis 1.250 US-Dollar; im Umfang unter anderem unbefugter Zugriff auf VPN-Server, Remote Code Execution und Schwachstellen, die Nutzerdaten offenlegenprovider claim | Perfect Privacy responsible disclosureprovider claim |
| Handling of reported vulnerabilities | Kape/CyberGhost security advisoriesprovider claim | ? |
| Open source clients | noneprovider claim | someprovider claim |
| Open source server side | noprovider claim | noprovider claim |
| Reproducible builds | noprovider claim | noprovider claim |
| Available on F-Droid | noprovider claim | noprovider claim |
| Listings by independent bodies | Marketing cites press; Vulnerability Disclosure Program linked in footerprovider claim | Historically recommended in privacy community reviews; CyberInsider and SafetyDetectives reviewed it; recommendations withdrawn after Jan 2026 shutdownprovider claim |
| WireGuard | yesprovider claim | noprovider claim |
| OpenVPN over UDP | yesprovider claim | yesprovider claim |
| OpenVPN over TCP | yesprovider claim | yesprovider claim |
| IKEv2/IPsec | yesprovider claim | yesprovider claim |
| Proprietary protocol | noneprovider claim | Stealth VPN (DPI obfuscation wrapping VPN to look like HTTPS)provider claim |
| Legacy protocols still offered | none advertised; OpenVPN, WireGuard, IKEv2 offeredprovider claim | SSH2 tunnelprovider claim |
| Default data cipher | Anbieterangabe: AES-256 bei OpenVPN und IKEv2, ChaCha20-Poly1305 bei WireGuardprovider claim | AES-256 (OpenVPN)provider claim |
| Weakest accepted cipher | AES-256provider claim | AES-256provider claim |
| Key exchange and authentication | OpenVPN / WireGuard / IKEv2 handshakes depending on selected protocolprovider claim | OpenVPN / IPsec industry standards (details not fully specified on feature pages)provider claim |
| Perfect forward secrecy | yesprovider claim | yesprovider claim |
| Post-quantum key exchange | not availableprovider claim | not availableprovider claim |
| Own DNS resolvers | yesprovider claim | yesprovider claim |
| DNS leak protection | yesprovider claim | yesprovider claim |
| IPv6 handling | disabledprovider claim | routed through tunnelprovider claim |
| WebRTC protection or guidance | noprovider claim | yesprovider claim |
| Obfuscation methods | Not clearly documented as a named obfuscation feature on fetched features/home pages (OpenVPN/WireGuard/IKEv2 advertised)provider claim | Stealth VPN (HTTPS-like masking against DPI)provider claim |
| Usability behind the Great Firewall | unclearprovider claim | unclearprovider claim |
| Kill switch | system-wideprovider claim | system-wideprovider claim |
| Permanent lockdown | yesprovider claim | noprovider claim |
| Split tunneling | Anbieterangabe: in der Windows-App über die Funktion 'Exceptions' für einzelne Websites, die Übersichtsseite nennt zusätzlich das Ausklammern einzelner Anwendungenprovider claim | yes (app split-tunneling per SafetyDetectives review of the service)provider claim |
| Multihop | not availableprovider claim | freely combinableprovider claim |
| Tor integration (Onion over VPN) | noprovider claim | noprovider claim |
| Port forwarding | not availableprovider claim | availableprovider claim |
| Surcharge for a dedicated IP | €4.00provider claim | €0.00provider claim |
| SOCKS5 proxy | noprovider claim | yesprovider claim |
| HTTP proxy | noprovider claim | yesprovider claim |
| Smart DNS | yesprovider claim | noprovider claim |
| Ad and tracker filtering in DNS | fixed listprovider claim | configurableprovider claim |
| Malware and phishing filter | yesprovider claim | yesprovider claim |
| Custom DNS servers allowed | noprovider claim | yesprovider claim |
| Local network access toggle | noprovider claim | yesprovider claim |
| Auto connect rules | yesprovider claim | yesprovider claim |
| Private device network (mesh) | noprovider claim | noprovider claim |
| GPS location override (Android) | noprovider claim | noprovider claim |
| Traffic analysis defence | Content Blocker (ads/trackers/malware domains); protocols OpenVPN/WireGuard/IKEv2provider claim | Stealth VPN Technology / NeuroRouting historically offeredprovider claim |
| IPv6 inside the tunnel | noprovider claim | yesprovider claim |
| Obfuscation without configuration | noprovider claim | noprovider claim |
| Number of servers | 9,800 Serverprovider claim | 55 Serverprovider claim |
| Number of countries | 100 Laenderprovider claim | 23 Laenderprovider claim |
| Number of cities | 125 Staedteprovider claim | 35 Staedteprovider claim |
| Virtual locations | labelledprovider claim | no virtual locationsprovider claim |
| RAM-only servers (diskless) | entire networkprovider claim | entire networkprovider claim |
| Hardware ownership | mixedprovider claim | colocationprovider claim |
| Own AS (autonomous system) | noprovider claim | noprovider claim |
| 10 Gbps ports | some serversprovider claim | some serversprovider claim |
| P2P and file sharing | dedicated locationsprovider claim | entire networkprovider claim |
| Public server list | yesprovider claim | yesprovider claim |
| Public status page | noprovider claim | yesprovider claim |
| Known upstream hosting providers | Not individually named on fetched features/home pages; Kape-operated networkprovider claim | 100% dedicated bare-metal / root servers (no cloud VPS); operators not individually named on fetched pagesprovider claim |
| Windows app | native appprovider claim | native appprovider claim |
| macOS app | native appprovider claim | native appprovider claim |
| Linux app with GUI | native appprovider claim | native appprovider claim |
| Linux command line | native appprovider claim | manual config onlyprovider claim |
| Android app | native appprovider claim | native appprovider claim |
| iOS app | native appprovider claim | native appprovider claim |
| Android TV app | native appprovider claim | not availableprovider claim |
| Apple TV app | native appprovider claim | not availableprovider claim |
| Fire TV app | native appprovider claim | not availableprovider claim |
| Browser extension | own extensionprovider claim | not availableprovider claim |
| Type of browser extension | standalone browser proxyprovider claim | no extensionprovider claim |
| Router support | OpenVPN-Konfigurationsdateien für DD-WRT, Tomato, OpenWrt sowie AsusWRT und AsusWRT-Merlinprovider claim | VPN Routers documentation linked in footerprovider claim |
| Native build for Apple Silicon | yesprovider claim | yesprovider claim |
| Command line documented | noprovider claim | yesprovider claim |
| Simultaneous devices | 7provider claim | unlimited / personal multi-device use allowed; no sharing credentialsprovider claim |
| Usable without an account | noprovider claim | noprovider claim |
| Data required at signup | any email addressprovider claim | any email addressprovider claim |
| Account model | email as loginprovider claim | email as loginprovider claim |
| Cash by mail | noprovider claim | yesprovider claim |
| Monero | noprovider claim | noprovider claim |
| Bitcoin | yesprovider claim | yesprovider claim |
| Lightning | noprovider claim | noprovider claim |
| Retail gift cards | noprovider claim | yesprovider claim |
| PayPal | yesprovider claim | yesprovider claim |
| Credit and debit card | yesprovider claim | yesprovider claim |
| SEPA payment | yesprovider claim | yesprovider claim |
| Monthly price | €11.99provider claim | €12.99provider claim |
| Effective price on the longest term | €2.19provider claim | €8.95provider claim |
| Price change at renewal | moderate increaseprovider claim | same priceprovider claim |
| Flat pricing without permanent discounts | noprovider claim | noprovider claim |
| Free tier and its limits | Kostenlose Browser-Erweiterungen für Chrome und Firefox ohne Konto und ohne E-Mail-Adresse, beschränkt auf Server in den USA, Deutschland, den Niederlanden und Rumänien und nur für den Verkehr des Browsersprovider claim | noneprovider claim |
| Money-back window | 45 Tageprovider claim | 7 Tageprovider claim |
| Cancellation path | cancel in accountprovider claim | cancel in accountprovider claim |
| P2P policy in the terms of service | dedicated locationsprovider claim | entire networkprovider claim |
| Streaming unblocking officially advertised | yesprovider claim | noprovider claim |
| Netflix regions reported | Anbieterangabe von eigens ausgewiesenen Netflix-Servern für Argentinien, Australien, Belgien, Brasilien, Kanada, die Schweiz, Tschechien, Deutschland, Dänemark, Spanien, Frankreich, Israel, Indien, Italien, Japan, Südkorea, Mexiko, die Niederlande, Norwegen, Neuseeland, Polen, Rumänien, Schweden, Singapur, Thailand, die Türkei, das Vereinigte Königreich, die USA und Südafrika (29 Länder).provider claim | Poor / largely incompatible with Netflix and Disney+ per CyberInsider testing notesprovider claim |
| Other streaming services | Vom Anbieter genannt: Netflix, Amazon Prime Video, Disney+, HBO Max, BBC iPlayer, Sling TV, YouTube TV, Paramount+ und Tubiprovider claim | CyberInsider: does not work well with streaming sites such as Netflix and Disney Plusprovider claim |
| Bandwidth cap | no limitprovider claim | no limitprovider claim |
| Data cap | noneprovider claim | noneprovider claim |
| Speed measurement references | Keine unabhängigen Geschwindigkeitsmessungen auf den offiziellen Seiten verlinkt. Belegt werden nur die Hardware-Kapazität ('10-Gbps servers') und Marketingformulierungen wie 'ultra-fast speeds'; konkrete Mbit/s- oder Ping-Werte aus eigenen oder Drittanbieter-Tests werden nicht genannt.provider claim | VPNmentor maß im eigenen Test von einem UK-Standort aus per IKEv2 einen durchschnittlichen Geschwindigkeitsverlust von 35 Prozent bei nahegelegenen Servern und 55 Prozent bei entfernten Servern, auf einzelnen Servern über 90 Prozent.confirmed |
| Latency and gaming suitability | Die App zeigt laut Anbieter Ping, Entfernung und Serverauslastung je Standort an, damit Spieler eine latenzarme Verbindung wählen können; die Gaming-Seite wirbt zusätzlich mit 'Reduce Ping When Gaming Online'. Konkrete Millisekundenwerte oder unabhängige Messungen werden nicht genannt.provider claim | Die getesteten Erfahrungen widersprechen sich deutlich. Comparitech fand beim Spieletest über nahe Server 'no dropped connections, no lagging, or freeze-ups'. Cloudwards maß dagegen im Schnitt über 1000 Prozent höhere Latenz und beschrieb League of Legends über einen US-Server als kaum spielbar ('each input took forever to load'). VPNmentor erlebte auf einem Schweizer Server mit 65 ms Ping zufälliges Einfrieren des Charakters und stufte Server in Singapur und Schweden als unspielbar ein. CyberInsider maß unabhängig davon reine Downloadraten von 117 bis 141 MBit/s auf nahen und 131 MBit/s auf US-Servern, ohne eigenen Spieletest, und wies auf spürbar schlechtere Werte bei aktiviertem Multi-Hop hin.disputed |
| SMTP and port 25 handling | Not documented on fetched CyberGhost pagesprovider claim | Not documented on fetched Wayback/review pagesprovider claim |
| Official support in restrictive countries | Markets bypassing restrictions / streaming access; no China-specific official claim extracted from fetched pagesprovider claim | Die FAQ widmet China, Iran und der Türkei einen eigenen Abschnitt und empfiehlt dort Stealth VPN sowie kaskadierte Verbindungen über einen erreichbaren regionalen Server.provider claim |
| 24/7 live chat | yesprovider claim | noprovider claim |
| Email or ticket support | yesprovider claim | yesconfirmed |
| Telephone support | noprovider claim | noprovider claim |
| German-language support | yesprovider claim | yesprovider claim |
| Documentation assessment | workableprovider claim | workableprovider claim |
| Self-hosted chat widget | noprovider claim | noprovider claim |
| Self-service account deletion | yesprovider claim | yesprovider claim |
| SSL Labs grade of the website | Bconfirmed | Bconfirmed |
| Tracker load of the website | Marketing site uses cookies; privacy policy covers trackingprovider claim | Privacy policy covered website cookies historicallyprovider claim |
| URL of the warrant canary | none foundprovider claim | Historical warrant canary page (service discontinued)provider claim |
| Length and readability of the legal documents | Standard corporate legal/privacy pagesprovider claim | Technical privacy-focused documentation historicallyprovider claim |
| Marketing claims contradicting the provider's own terms | Aggressive promo pricing ($2.19/mo intro) paired with multi-year billing; Dedicated IP marketed as add-onprovider claim | Discontinued service — historical claims onlyprovider claim |