VPN review

Proton VPN review

ProtonVPN is operated by Proton AG and based in Switzerland. The register records 7 independent audits (0 with a linked report), 0 incidents and no verified prices.

Published Facts checked By VPNInfobase editorial

Compiled from the vendor's own pages, auditors' reports and named news outlets, checked .

Verified facts

Checked 28 Sept 2026ActiveFrom the vendor's own pages, auditors' reports and named news outlets. Not our measurements.
Owner
Proton AG sourceUltimate owner: Proton Foundation (non-profit; primary shareholder of Proton AG) source
Jurisdiction
Switzerland (Geneva) source
Logging policy
Vendor states it keeps no logs of online activity and stores no metadata (no visited pages, session lengths or IP monitoring); verified by Securitum audits. sourceThis is the vendor's claim, paraphrased. An audit below is what tests it.
Independent audits
  • Securitum2026No-logs audit (fifth consecutive annual) vendor page (report not linked)
  • Securitum2025No-logs audit vendor page (report not linked)
  • Securitum2024No-logs audit vendor page (report not linked)
  • Securitum2023No-logs audit vendor page (report not linked)
  • Securitum2022No-logs audit vendor page (report not linked)
  • SecuritumunspecifiedSecurity audit of all Proton apps vendor page (report not linked)
  • Ruben Santamarta (independent researcher)2025-12App security audits (article updated 1 Dec 2025) vendor page (report not linked)
Incidents
None found in the sources checked. This is not an exhaustive search.
Transparency report
Published source
Open-source apps
All first-party clientsVendor states all Proton VPN apps are open source; GitHub repos for Android, iOS, macOS, Windows, browser extension linked. source
RAM-only servers
Not verified from a primary source
Refund window
30 days from initial purchase; once per user, direct purchases only source
Price per month
Proton VPN price per month by billed term, in the vendor's own currency
Billed termPer monthCharged up frontNote
1 monthnot verifiednot verifiedNot retrieved: Proton pricing is JS-rendered (placeholders in static HTML). Proton Free tier exists (listed on pricing page as 'Proton Free') source
billing period not verifiednot verifiednot verifiedNot retrieved: Proton pricing is JS-rendered (placeholders in static HTML). Proton Free tier exists (listed on pricing page as 'Proton Free') source
billing period not verifiednot verifiednot verifiedNot retrieved: Proton pricing is JS-rendered (placeholders in static HTML). Proton Free tier exists (listed on pricing page as 'Proton Free') source
Per-month figures are the vendor's displayed monthly equivalent for the whole billed term, so terms of different length are not like for like. No currency conversion.
Not verified
  • plans: all prices null (JS-rendered; Proton API refused); Free tier confirmed exists
  • ramOnlyServers: not stated on pages reviewed
  • audits: report URLs not captured; Securitum apps audit date unspecified
  • incidents: none checked exhaustively

To check current terms, go to ProtonVPN's own site.

Visit protonvpn.com

Proton VPN is run by a Swiss company whose primary shareholder is a non-profit foundation, has had five annual no-logs audits from the same firm, and says every app is open source. The one thing we could not read is its price: the pricing page is built in the browser.

Ownership and jurisdiction

Proton’s about page says its services are operated by Proton AG, “a Swiss corporation whose primary shareholder is the non-profit Proton Foundation based in Geneva”, and that it has no venture capital investors. That is a vendor statement, not a filing, and “primary shareholder” does not tell you the size of the holding. Proton’s terms say Swiss law governs for users outside the US. The ownership table shows the alternatives: Kape-owned, founder-owned, or a merger with unstated terms.

Two kinds of audit, kept apart

Proton’s no-logs audit page says Securitum has audited Proton VPN for five consecutive years (2022 to 2026, latest reported June 2026), publishes the full reports, and that the 2026 report found no evidence in the examined infrastructure of logged browsing activity, DNS queries, destinations, traffic contents or user-identifiable connection metadata. Those are the no-logs audits. The register did not capture the report links, so open them from Proton’s page.

App security is a separate matter. Proton’s open-source post, updated 1 December 2025, links audits of its client apps by an independent security researcher it contracted. A no-logs audit does not test apps, and an app test does not test logging: the audit tracker sorts every provider this way.

Open source, as stated

The same post says the Android, iOS and iPadOS, macOS, Windows and browser-extension apps are open source, and “all Proton apps that are out of beta” are. That is a stronger statement than the register holds for most providers (the register records four providers stating it: Proton VPN, PIA, IVPN and Windscribe). Open code lets outsiders read the client; it says nothing about the servers.

Price: not read

Proton’s pricing page loads its prices after the page opens, so a static read shows only placeholders. The register therefore holds no Proton price, and we do not quote one. The support and plan pages we opened carry no VPN price either; press articles quote figures, which we do not repeat because we could not read them on a Proton page. It does list a free tier. Refund terms in Proton’s terms are 30 days from first purchase, once per user, on direct purchases only. Compare the providers we could read on the renewal price table.

Who it fits, going by the register fields

  • Pick it if you want an owner that is not a VPN group or an individual, audits with public reports, open-source apps and a free tier to try first.
  • Look at others if you need a price you can check in advance (this page cannot give one), or a flat, anonymous-payment model, which Mullvad states.

For a three-way privacy comparison, see Proton VPN vs Mullvad vs IVPN. This is our reading of vendor pages, not a measured result.

Alternatives

  • Mullvad: flat EUR 5 a month, founder-owned
  • NordVPN: PwC and Deloitte assurance reports
  • Surfshark: public technical reports, private no-logs reports

Sources

Update log

  1. Body rewritten. Ownership wording, five annual Securitum audits, open-source scope and the price gap re-read against Proton's own pages; the separate app-audit entry kept apart from the no-logs audits. Price left unquoted after a further check of Proton's support, deals and terms pages (no readable VPN price); ownership, audit and refund wording re-verified.
  2. Page rebuilt on the VPN audit register; facts re-checked against the vendor's own pages and auditors' reports on this date.