CyberGhost is a Romanian company whose privacy policy names Kape Technologies as its ultimate holding company. It has had three no-logs audits from Deloitte Audit Romania, the latest with a downloadable report, and its long deal is cheap on paper but averages about 2.90 a month (USD or EUR, same numerals) once renewal is counted. No incident is on the register.
Ownership and jurisdiction
CyberGhost’s privacy policy says it is CyberGhost S.R.L., registered in Romania with offices in Bucharest, and lists “our ultimate holding company, KAPE TECHNOLOGIES PLC” among the group companies data may be shared with. No individual owner is named on the vendor’s pages, and we do not repeat the register’s Wikipedia-only entry. ExpressVPN’s policy also names Kape as its ultimate holding company, and PIA’s policy refers to Kape (see the ownership table). Romania is where the operating company sits; the parent’s location is a separate question these pages do not answer.
The audits: one firm, one kind, three times
CyberGhost’s third audit page, updated 24 February 2026, says Deloitte Audit Romania examined it under ISAE 3000 (Revised) across 2025. The scope named is the VPN server configuration and change management, incident response, the token-based dedicated IP system and the safeguards against activity logging, and the page says the full report can be downloaded. Earlier audits were in 2022 and 2024; the register holds no report link for them. All three are assurance on the no-logs claim. The register records no separate app or infrastructure penetration test for CyberGhost, which does not mean none exists. The audit tracker shows the same Deloitte Romania scope on PIA.
Price: read the last column
Read on 29 September, the pricing page carried two price lists. In euros (the page says “all amounts shown are in Euros”): 26 months for EUR 56.94 (EUR 2.19 a month), six months for EUR 41.94, one month EUR 11.99. In US dollars: the same 26-month and six-month numerals (USD 56.94 and USD 41.94) but USD 12.99 for one month. Confirm which currency you are shown at checkout. The register notes the long deal renews annually at the same total. By the method on the renewal price table, the 26-month plan averages about 2.90 a month over 36 months (in either currency), not 2.19. Refunds are 45 days on the six-month and 26-month plans and 14 days on the monthly plan.
Who it fits, going by the register fields
- Pick it if you want a low long-term cost, a 45-day window and a Deloitte assurance report you can download.
- Look at others if you want a published individual owner, reports for every audit year, or open-source clients (none recorded). Mullvad and Proton VPN differ on each.
Against another budget VPN, see Surfshark vs CyberGhost. This is our reading of vendor pages, not a measured result.
Alternatives
- Private Internet Access: same Deloitte scope, US-based
- Surfshark: public technical reports, private no-logs reports
- ExpressVPN: same named parent, more audits