HMA (HideMyAss)

135 of 158 criteria sourced · 15 % unsourcedProvider websiteView in the matrixJSON export

vpn-matrix.com earns nothing from this entry. The link to the provider website is a source, not a recommendation.

Who owns this

Parent company

Gen Digital

Brands in the same group

Further brands according to the source: Norton VPN, Avast SecureLine, AVG Secure VPN, Avira Phantom VPN

This group also owns review and comparison sites

none documented

If the same group tests its own service, that review is not independent. That is noted here as ownership only.

Audits and incidents

Sourced facts with dates only, no judgements. Ongoing proceedings are marked as such.

Tested in court or by authorities

trust.court_tested

Im Rahmen der FBI-Ermittlungen gegen die Hackergruppe LulzSec gab der britische Anbieter HideMyAss nach eigener Aussage auf eine gerichtliche Anordnung ('court order') hin die Heim-IP-Adresse des unter dem Nutzernamen 'recursion' registrierten Kunden Cody Kretsinger heraus, der im Verdacht stand, am Angriff auf Sony Pictures beteiligt gewesen zu sein. HideMyAss erklärte dazu öffentlich, man kooperiere mit Strafverfolgungsbehörden bei Vorliegen einer Gerichtsanordnung und alle VPN-Anbieter würden Nutzerdaten protokollieren. Presseberichte nannten den Vorfall zugleich als Beispiel dafür, dass beworbene 'No-Log'-Politiken eng auszulegen sind.confirmed

Acquisition history / former name

company.acquisition_history

Acquired by AVG/Avast; now Gen Digitalprovider claim

Documented misleading advertising claims

company.misleading_claims

none_knownprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

User base migrated to

company.user_base_migrated_to

noneprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Marketing claims contradicting the provider's own terms

site.claims_vs_reality

Die englischsprachige US-Preis-, Feature-, Server- und Business-Preisseite nennen übereinstimmend '100+ locations' und '3400+ servers'. Die Downloads-Seite (en-us/downloads) und die deutsche Preisseite (de-de/pricing) derselben Website nennen dagegen gleichzeitig '1100+ servers', '290+ locations' und teils '210+ countries'. Beide Zahlenpaare sind aktuell auf der Live-Website abrufbar und widersprechen sich direkt.provider claim

All criteria

Empty cells mean we lack the source.

Company and ownership

20/21 sourced

Legal company name

company.legal_name

Avast Software s.r.o. (controller for HMA)provider claim

Trademark holder, if different

company.brand_owner

Gen Digital / HMAprovider claim

Year founded

company.founded

2005provider claim

Headquarters (country)

company.hq_country

CZprovider claim

Other relevant jurisdictions

company.jurisdictions

Czech Republic (Avast Software s.r.o.); Gen Digital Groupprovider claim

Intelligence alliance of the home country

company.eyes_alliance

noneconfirmed

Parent group / holding

company.parent

Gen Digital Inc.confirmed

Beneficial owners publicly known

company.ubo_public

not knownprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Ownership structure

company.ownership_type

publicly listedconfirmed

Leadership team publicly named

company.team_public

yesprovider claim

Verifiable postal address for legal service

company.address_verifiable

yesprovider claim

Sister VPN brands in the group

company.sister_vpn_brands

Norton VPN, Avast SecureLine, AVG Secure VPN, Avira Phantom VPNprovider claim

Group owns VPN review and comparison sites

company.owns_review_sites

none documentedprovider claim

Runs an affiliate programme

company.affiliate_program

yesprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Typical commission rate

company.affiliate_commission

Refer a Friend program (not classic %-affiliate)provider claim

YouTube and influencer sponsoring

company.influencer_sponsoring

extensiveprovider claim

Documented misleading advertising claims

company.misleading_claims

none_knownprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Acquisition history / former name

company.acquisition_history

Acquired by AVG/Avast; now Gen Digitalprovider claim

Operating status

company.status

activeconfirmed

Discontinuation date

company.discontinued_date

We have no source for this criterion.

User base migrated to

company.user_base_migrated_to

noneprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Logging and data collection

16/16 sourced

Core statement of the logging policy

logging.policy_summary

No Logging Policy: does not send originating IP, DNS queries while connected, browsing history, or transferred data to servers; collects aggregate MB transferred for planning/abuse prevention, retained 18 months.provider claim

Activity and traffic logs

logging.activity_logs

noneprovider claim

Connection logs

logging.connection_logs

aggregated onlyprovider claim

Storage of the real IP address

logging.source_ip_stored

not storedprovider claim

Storage of the assigned VPN IP

logging.assigned_ip_stored

not storedprovider claim

Precision of stored timestamps

logging.timestamps_stored

coarse (date only)provider claim

Recording of transferred data volume

logging.bandwidth_logged

aggregate onlyprovider claim

Enforcement of the device limit

logging.concurrent_conn_enforcement

5 devices (10 with Family Plan)provider claim

Minimum account data required

logging.account_data_minimum

Account/personal data as needed for product, marketing, legal obligationsprovider claim

Telemetry in the apps

logging.app_telemetry

opt inprovider claim

Trackers and SDKs in the Android app

logging.thirdparty_sdks_android

Google Play analyticsprovider claim

Trackers in the iOS app

logging.thirdparty_sdks_ios

Google Firebase Analytics, Google Fabric Crashlytics; dieselbe Diskrepanz zwischen 'Appsflyer' (No-Log-Policy-Seite) und 'Singular' (Datenschutzerklärung) wie bei Android.provider claim

Trackers and cookies on the website

logging.website_trackers

Ensighten Tag-Management (Skriptpfad 'nexus.ensighten.com/symantec/hma/', Altlast des früheren Symantec/NortonLifeLock-Markennamens), Google Tag Manager, Akamai mPulse/Boomerang zur Performance-Messung sowie Visual Website Optimizer (VWO) für A/B-Tests.provider claim

Data shared with third parties

logging.data_shared_with

Gen Digital group per privacy policyprovider claim

Retention periods stated in the policy

logging.retention_period

Server service data (data transfer sums) stored 18 months rollingprovider claim

EU representative named under GDPR

logging.gdpr_representative

yesprovider claim

Evidence, audits and track record

7/17 sourced

Independent no-logs audit

trust.nolog_audit

noprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026
  • Privacy
    Vendor documentretrieved 08/04/2026

No-logs audit details

trust.nolog_audit_details

We have no source for this criterion.

Audit report published

trust.audit_report_public

We have no source for this criterion.

App and client audits

trust.app_audits

We have no source for this criterion.

Infrastructure and server audits

trust.infra_audit

We have no source for this criterion.

Audit frequency

trust.audit_cadence

We have no source for this criterion.

Tested in court or by authorities

trust.court_tested

Im Rahmen der FBI-Ermittlungen gegen die Hackergruppe LulzSec gab der britische Anbieter HideMyAss nach eigener Aussage auf eine gerichtliche Anordnung ('court order') hin die Heim-IP-Adresse des unter dem Nutzernamen 'recursion' registrierten Kunden Cody Kretsinger heraus, der im Verdacht stand, am Angriff auf Sony Pictures beteiligt gewesen zu sein. HideMyAss erklärte dazu öffentlich, man kooperiere mit Strafverfolgungsbehörden bei Vorliegen einer Gerichtsanordnung und alle VPN-Anbieter würden Nutzerdaten protokollieren. Presseberichte nannten den Vorfall zugleich als Beispiel dafür, dass beworbene 'No-Log'-Politiken eng auszulegen sind.confirmed

Transparency report

trust.transparency_report

We have no source for this criterion.

Warrant canary

trust.warrant_canary

We have no source for this criterion.

Security incidents and data leaks

trust.breach_history

We have no source for this criterion.

Bug bounty programme

trust.bug_bounty

none published on fetched HMA pagesprovider claim

Handling of reported vulnerabilities

trust.cve_handling

Not documented on fetched HMA pagesprovider claim

Open source clients

trust.opensource_clients

noneprovider claim

Open source server side

trust.opensource_server

noprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Reproducible builds

trust.reproducible_builds

We have no source for this criterion.

Available on F-Droid

trust.fdroid_available

noprovider claim

Listings by independent bodies

trust.independent_recommendations

We have no source for this criterion.

Protocols and cryptography

17/17 sourced

WireGuard

crypto.wireguard

noprovider claim

OpenVPN over UDP

crypto.openvpn_udp

yesprovider claim

OpenVPN over TCP

crypto.openvpn_tcp

yesprovider claim

IKEv2/IPsec

crypto.ikev2

yesprovider claim

Proprietary protocol

crypto.proprietary_protocol

noprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Legacy protocols still offered

crypto.legacy_protocols

noneprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Default data cipher

crypto.data_cipher_default

AES-256-GCMprovider claim

Weakest accepted cipher

crypto.data_cipher_weakest

OpenVPN (only protocol named on features)provider claim

Key exchange and authentication

crypto.handshake

RSA-4096provider claim

Perfect forward secrecy

crypto.pfs

yesprovider claim

Post-quantum key exchange

crypto.post_quantum

not availableprovider claim

Own DNS resolvers

crypto.own_dns

yesprovider claim

DNS leak protection

crypto.dns_leak_protection

yesprovider claim

IPv6 handling

crypto.ipv6_handling

disabledprovider claim

WebRTC protection or guidance

crypto.webrtc_guidance

yesprovider claim

Obfuscation methods

crypto.obfuscation

noprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Usability behind the Great Firewall

crypto.works_in_china

does not workprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Features

20/20 sourced

Kill switch

features.killswitch

per applicationprovider claim

Permanent lockdown

features.killswitch_permanent

noprovider claim

Split tunneling

features.split_tunneling

Per-app split tunnelingprovider claim

Multihop

features.multihop

not availableprovider claim

Tor integration (Onion over VPN)

features.tor_integration

noprovider claim

Port forwarding

features.port_forwarding

not availableprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Surcharge for a dedicated IP

features.dedicated_ip

€0.00provider claim

SOCKS5 proxy

features.socks5

noprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

HTTP proxy

features.http_proxy

noprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Smart DNS

features.smart_dns

noprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Ad and tracker filtering in DNS

features.adblock_dns

not availableprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Malware and phishing filter

features.malware_filter

noprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Custom DNS servers allowed

features.custom_dns_allowed

yesprovider claim

Local network access toggle

features.lan_access_toggle

noprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Auto connect rules

features.autoconnect_rules

noprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Private device network (mesh)

features.mesh_private_net

noprovider claim

GPS location override (Android)

features.gps_spoofing

noprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Traffic analysis defence

features.traffic_analysis_defense

Not marketed on fetched HMA pagesprovider claim

IPv6 inside the tunnel

features.ipv6_tunnel

noprovider claim

Obfuscation without configuration

features.stealth_default

noprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Servers and network

8/12 sourced

Number of servers

network.server_count

3,400 Serverprovider claim

Number of countries

network.country_count

65 Laenderprovider claim

Number of cities

network.city_count

100 Staedteprovider claim

Virtual locations

network.virtual_locations

We have no source for this criterion.

RAM-only servers (diskless)

network.ram_only

We have no source for this criterion.

Hardware ownership

network.ownership

We have no source for this criterion.

Own AS (autonomous system)

network.own_asn

noprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

10 Gbps ports

network.10g_servers

We have no source for this criterion.

P2P and file sharing

network.p2p_servers

dedicated locationsprovider claim

Public server list

network.server_list_public

yesprovider claim

Public status page

network.status_page

noprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Known upstream hosting providers

network.hosting_providers

Not disclosed on fetched HMA pagesprovider claim

Apps and platforms

16/16 sourced

Windows app

apps.windows

native appprovider claim

macOS app

apps.macos

native appprovider claim

Linux app with GUI

apps.linux_gui

not availableprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Linux command line

apps.linux_cli

not availableprovider claim

Android app

apps.android

native appprovider claim

iOS app

apps.ios

native appprovider claim

Android TV app

apps.androidtv

native appprovider claim

Apple TV app

apps.appletv

not availableprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Fire TV app

apps.firetv

native appprovider claim

Browser extension

apps.browser_ext

not availableprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Type of browser extension

apps.browser_ext_type

no extensionprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Router support

apps.router_support

noprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Native build for Apple Silicon

apps.macos_arm_native

yesprovider claim

Command line documented

apps.cli_documented

noprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Simultaneous devices

apps.simultaneous_devices

5provider claim

Usable without an account

apps.no_account_needed

noprovider claim

Account, pricing and payment

16/17 sourced

Data required at signup

pricing.signup_email_required

any email addressprovider claim

Account model

pricing.account_model

email as loginprovider claim

Cash by mail

pricing.cash_by_mail

noprovider claim

Monero

pricing.monero

noprovider claim

Bitcoin

pricing.bitcoin

noprovider claim

Lightning

pricing.lightning

noprovider claim

Retail gift cards

pricing.retail_giftcards

noprovider claim

PayPal

pricing.paypal

yesprovider claim

Credit and debit card

pricing.credit_card

yesprovider claim

SEPA payment

pricing.sepa

We have no source for this criterion.

Monthly price

pricing.monthly_price

€11.99provider claim

Effective price on the longest term

pricing.effective_price_longest

€2.99provider claim
  • HMA VPN
    Vendor documentretrieved 08/04/2026

Price change at renewal

pricing.renewal_price_hike

very large increaseprovider claim

Flat pricing without permanent discounts

pricing.flat_pricing

noprovider claim

Free tier and its limits

pricing.free_tier

Kein dauerhaft kostenloser Tarif; stattdessen ein 7-tägiger kostenloser Test, bei dem laut Preisseite '$0 at checkout' fällig werden und das Abo danach automatisch in ein bezahltes Abonnement übergeht.provider claim

Money-back window

pricing.moneyback_days

30 Tageprovider claim
  • HMA VPN
    Vendor documentretrieved 08/04/2026

Cancellation path

pricing.cancellation_ease

cancel in accountprovider claim

Usage and performance

7/10 sourced

P2P policy in the terms of service

usage.p2p_policy

dedicated locationsprovider claim

Streaming unblocking officially advertised

usage.streaming_officially

yesprovider claim

Netflix regions reported

usage.netflix_regions_reported

Laut Anbieter Netflix-Zugriff 'from ultra-fast servers in 190 countries'; siehe company.misleading_claims zum Widerspruch mit der eigenen Länderzahl von nur 65+.provider claim

Other streaming services

usage.other_streaming_services

BBC iPlayer, Amazon Prime Video, ESPN, Sling TV, Fox Sports, BT Sport; zusätzlich beworben für Live-Sport wie englische Premier League, MotoGP, Bundesliga und ICC-Cricket-Übertragungen.provider claim

Bandwidth cap

usage.bandwidth_cap

We have no source for this criterion.

Data cap

usage.data_cap

noneprovider claim

Speed measurement references

usage.speed_references

We have no source for this criterion.

Latency and gaming suitability

usage.latency_gaming

We have no source for this criterion.

SMTP and port 25 handling

usage.smtp_policy

Not documented on fetched HMA pagesprovider claim

Official support in restrictive countries

usage.restrictive_countries_support

Die EULA weist ausdrücklich darauf hin, dass mehrere Länder VPN-Nutzung einschränken oder technisch zu verhindern versuchen und dass 'Vendor's VPN Solutions (including the HMA VPN)' deshalb länderspezifischen, veränderlichen Beschränkungen unterliegen.provider claim

Support and documentation

4/7 sourced

24/7 live chat

support.livechat_247

yesprovider claim

Email or ticket support

support.email

yesprovider claim

Telephone support

support.phone

We have no source for this criterion.

German-language support

support.german_language

We have no source for this criterion.

Documentation assessment

support.docs_quality

workableprovider claim

Self-hosted chat widget

support.selfhosted_chat

We have no source for this criterion.

Self-service account deletion

support.account_deletion_easy

yesprovider claim

Provider website hygiene

4/5 sourced

SSL Labs grade of the website

site.ssl_grade

Bconfirmed

Tracker load of the website

site.cookie_privacy_impact

Im Quelltext der Startseite eingebundene Drittanbieter-Skripte: Ensighten-Tag-Management (Pfad 'symantec/hma', Altlast des früheren Symantec/NortonLifeLock-Namens), Google Tag Manager sowie Akamai mPulse/Boomerang zur Performance-Messung; die Preisseite bindet zusätzlich Visual Website Optimizer (VWO) für A/B-Tests ein.provider claim

URL of the warrant canary

site.canary_page

We have no source for this criterion.

Length and readability of the legal documents

site.tos_readability

moderateprovider claim
  • HMA
    Vendor documentretrieved 08/04/2026

Marketing claims contradicting the provider's own terms

site.claims_vs_reality

Die englischsprachige US-Preis-, Feature-, Server- und Business-Preisseite nennen übereinstimmend '100+ locations' und '3400+ servers'. Die Downloads-Seite (en-us/downloads) und die deutsche Preisseite (de-de/pricing) derselben Website nennen dagegen gleichzeitig '1100+ servers', '290+ locations' und teils '210+ countries'. Beide Zahlenpaare sind aktuell auf der Live-Website abrufbar und widersprechen sich direkt.provider claim

Something wrong here?

If a value is wrong or outdated, report it with evidence. Every change is reviewed and then appears publicly in the changelog.